last executing test programs: 7m45.189957349s ago: executing program 32 (id=2262): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 5m45.078993408s ago: executing program 33 (id=9829): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 4m55.996703262s ago: executing program 34 (id=11343): r0 = fanotify_init(0x8, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1802) 4m20.909291841s ago: executing program 35 (id=12033): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) 2m57.705657529s ago: executing program 1 (id=14353): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m57.268969329s ago: executing program 1 (id=14364): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 2m57.251121098s ago: executing program 1 (id=14374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)) 2m56.974034897s ago: executing program 1 (id=14370): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 2m56.856332777s ago: executing program 1 (id=14373): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m56.854335288s ago: executing program 1 (id=14376): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) 2m50.955936929s ago: executing program 2 (id=14508): pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x4, 0x3, 0x5}}, 0xfffffe2b) read$FUSE(r0, &(0x7f0000002b00)={0x2020}, 0x2020) fcntl$setpipe(r1, 0x407, 0xffff) 2m49.996387647s ago: executing program 2 (id=14524): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m49.921482983s ago: executing program 2 (id=14526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 2m49.856510351s ago: executing program 2 (id=14528): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m49.856081738s ago: executing program 2 (id=14529): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m49.586085666s ago: executing program 2 (id=14531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) 2m49.51081624s ago: executing program 36 (id=14531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) 2m40.76464848s ago: executing program 37 (id=14376): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) 2m31.505387107s ago: executing program 5 (id=14819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7f}, &(0x7f0000000100)=0x8) 2m31.424343316s ago: executing program 5 (id=14822): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2m31.366699793s ago: executing program 5 (id=14824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b}) 2m31.362167576s ago: executing program 5 (id=14826): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 2m31.287364735s ago: executing program 5 (id=14828): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m30.901935384s ago: executing program 5 (id=14831): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m30.836611768s ago: executing program 38 (id=14831): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m8.591107331s ago: executing program 3 (id=15256): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='\'', 0x1}], 0x1) 2m8.500930348s ago: executing program 3 (id=15257): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 2m7.604679915s ago: executing program 3 (id=15287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='fuse\x00', &(0x7f00000002c0)='/dev/fuse\x00', 0x0) 2m7.546493078s ago: executing program 3 (id=15290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') 2m7.454387747s ago: executing program 3 (id=15292): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 2m7.203618586s ago: executing program 3 (id=15300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0xfff, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x24, 0xb, 0xff, 0x6, 0xca11, 0xfffb}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 2m7.132855289s ago: executing program 39 (id=15300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0xfff, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x24, 0xb, 0xff, 0x6, 0xca11, 0xfffb}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 2m3.32622184s ago: executing program 9 (id=15326): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 2m3.224291004s ago: executing program 9 (id=15327): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write$binfmt_aout(r1, 0x0, 0xffffffdb) 2m3.224138337s ago: executing program 9 (id=15328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x95}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) 2m3.051769773s ago: executing program 9 (id=15329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m2.958730065s ago: executing program 9 (id=15339): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd8c00fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="331900000300000014001680100001800c0009000180000000000000050021"], 0x3c}}, 0x4000000) 2m2.735045911s ago: executing program 9 (id=15332): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m2.642191383s ago: executing program 40 (id=15332): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 30.790229916s ago: executing program 8 (id=16849): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 30.789036343s ago: executing program 8 (id=16851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x895, 0x0, 0x7}]}) 30.621459639s ago: executing program 8 (id=16855): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="430f01c80f50f20f32b8010000000f01c1d831c42107516687c4620dbc0ac7442400c0000000c7442402ad000000ff2c243642df958000c0fe66b8d7000f00d8", 0x40}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.332289611s ago: executing program 8 (id=16864): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.332090533s ago: executing program 8 (id=16865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x6b, {"f0480fba2f00000f265b0366baf80cb8da74fa8eef66bafc0c66b8853666ef480fc79e050000006783d40fc744240000d0ffffc744240295000000c7442406000000000f011c246766650f0ff79e0f09c42285dc06aa420e225e"}}], 0x6b}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 29.203708772s ago: executing program 8 (id=16872): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x7fff, 0x8}}}}]}, 0x44}}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 29.17121683s ago: executing program 41 (id=16872): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x7fff, 0x8}}}}]}, 0x44}}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 2.042537669s ago: executing program 4 (id=17062): setresgid(0x0, 0xee01, 0xffffffffffffffff) setuid(0xee00) r0 = msgget$private(0x0, 0x383) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0) 1.646202316s ago: executing program 0 (id=17071): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.585848747s ago: executing program 0 (id=17073): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.517114722s ago: executing program 0 (id=17076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0xe}) 1.363419969s ago: executing program 0 (id=17079): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 1.205579745s ago: executing program 0 (id=17080): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7ff}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.107026994s ago: executing program 0 (id=17081): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) read$char_usb(r1, 0x0, 0x0) 1.09007933s ago: executing program 4 (id=17082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) 997.281091ms ago: executing program 4 (id=17083): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 997.017652ms ago: executing program 4 (id=17084): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x18}, 0x40c0) 915.060518ms ago: executing program 4 (id=17085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x2}, @val={0x0, 0x0, 0x40}, @ipv4=@tipc={{0x8, 0x4, 0x0, 0x5, 0x40, 0x64, 0x0, 0xe, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0x8, [{@rand_addr=0x64010102, 0x7}]}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0xaf8, 0x0, 0x3, 0x7, 0x4, 0x3, 0x4, 0x0, 0x2, 0x4e21, 0x4e21}, 0x1, 0x2}}}}}, 0x4e) 832.203817ms ago: executing program 4 (id=17086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 606.235072ms ago: executing program 6 (id=17087): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2) 306.888735ms ago: executing program 6 (id=17090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 296.811097ms ago: executing program 6 (id=17092): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 221.582589ms ago: executing program 7 (id=17094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {0x0, 0x9}, {0x2, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 218.636567ms ago: executing program 7 (id=17095): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x2, r2, 0x80, 0xf, 0x800, 0xffffff01, 0x40}) 194.030133ms ago: executing program 7 (id=17096): r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/88, 0xfffffdf1}], 0x1) 188.990532ms ago: executing program 6 (id=17097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) 106.389563ms ago: executing program 7 (id=17098): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r1}, 0x10) 104.420827ms ago: executing program 7 (id=17099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b90f040000ba000000000f3026660f3881954aa60000c4c28d9ab60e0000000f79e9c744240068000000c744240260884a82ffff442406000000000f0114240f79ea0fc79ce60d000000ea020000007d0046c4c1d1160ec4c2f932c6", 0x5c}], 0x1, 0x20, 0x0, 0xb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="b9004d564bb800100000c4e3ed6e794acf0f300f01c266ba4200b0b5ee0f001366ba38f8ffef66bafc0ceeb9d80900000f320f06ad34b6d0b6d00000c0d741e88fe88f0404e4b8105db8105d01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x62}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 100.475251ms ago: executing program 6 (id=17100): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 144.13µs ago: executing program 6 (id=17101): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x80000000, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x38}}, 0x40000) 0s ago: executing program 7 (id=17102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 0s ago: executing program 7 (id=17104): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0x4, 0x4) kernel console output (not intermixed with test programs): stering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.762692][ T40] audit: type=1400 audit(1208.515:52272): avc: denied { module_request } for pid=17333 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 464.793450][ T40] audit: type=1400 audit(1208.543:52273): avc: denied { search } for pid=18164 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.802310][ T40] audit: type=1400 audit(1208.543:52274): avc: denied { search } for pid=18164 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.811718][ T40] audit: type=1400 audit(1208.543:52275): avc: denied { search } for pid=18164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.833195][T17417] netdevsim netdevsim8 eth25 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.910601][T17333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.995420][T17417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 465.002988][T17417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 465.007487][T17417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 465.018705][T17417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 465.103008][T17333] veth0_vlan: entered promiscuous mode [ 465.112895][T17417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.117414][T17333] veth1_vlan: entered promiscuous mode [ 465.131774][T17417] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.141962][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.144356][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.156488][T17333] veth0_macvtap: entered promiscuous mode [ 465.163503][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.165995][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.171604][T17333] veth1_macvtap: entered promiscuous mode [ 465.203072][T17333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.217038][T17333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.229106][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.232789][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.240473][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.245328][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.310771][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.313641][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.322781][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.344590][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.348593][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.471321][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.477510][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.496256][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.500520][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.505318][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.558597][T18247] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.15349'. [ 465.597901][T18237] lo speed is unknown, defaulting to 1000 [ 465.606820][T18237] xfrm0 speed is unknown, defaulting to 1000 [ 465.617505][T18237] wg1 speed is unknown, defaulting to 1000 [ 465.653590][T17417] veth0_vlan: entered promiscuous mode [ 465.667244][T17417] veth1_vlan: entered promiscuous mode [ 465.696925][T17417] veth0_macvtap: entered promiscuous mode [ 465.705318][T17417] veth1_macvtap: entered promiscuous mode [ 465.720408][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.751365][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.765777][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.775116][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.779667][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.792965][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.923774][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.927222][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.968742][T18237] chnl_net:caif_netlink_parms(): no params data found [ 466.043943][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.046715][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.077889][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.086997][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.090303][T18237] bridge_slave_0: entered allmulticast mode [ 466.094459][T18237] bridge_slave_0: entered promiscuous mode [ 466.103009][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.106128][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.108912][T18237] bridge_slave_1: entered allmulticast mode [ 466.113041][T18237] bridge_slave_1: entered promiscuous mode [ 466.166787][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.184807][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.216523][T18237] team0: Port device team_slave_0 added [ 466.230236][T18237] team0: Port device team_slave_1 added [ 466.270788][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.273773][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.284984][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.292827][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.295754][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.306545][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.348749][T18237] hsr_slave_0: entered promiscuous mode [ 466.352101][T18237] hsr_slave_1: entered promiscuous mode [ 466.355664][T18237] debugfs: 'hsr0' already exists in 'hsr' [ 466.358133][T18237] Cannot create hsr debugfs directory [ 466.551986][T18237] netdevsim netdevsim0 eth24 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.700032][T18237] netdevsim netdevsim0 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.786771][T18237] netdevsim netdevsim0 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.932813][T18237] netdevsim netdevsim0 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.213831][T18237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.223969][T18237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 467.231561][T18237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 467.239822][T18237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.361885][T18634] Invalid ELF header magic: != ELF [ 467.372072][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.390506][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.403522][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.406673][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.415033][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.418165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.580855][ T1025] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 467.662027][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.675067][ T5944] Bluetooth: hci2: command tx timeout [ 467.690040][T18237] veth0_vlan: entered promiscuous mode [ 467.696661][T18237] veth1_vlan: entered promiscuous mode [ 467.722367][T18237] veth0_macvtap: entered promiscuous mode [ 467.730701][T18237] veth1_macvtap: entered promiscuous mode [ 467.751295][ T1025] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 467.755937][ T1025] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 467.769345][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.771522][ T1025] usb 13-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 467.776767][ T1025] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.780235][ T1025] usb 13-1: Product: syz [ 467.782397][ T1025] usb 13-1: Manufacturer: syz [ 467.784445][ T1025] usb 13-1: SerialNumber: syz [ 467.785746][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.789071][ T1025] usb 13-1: config 0 descriptor?? [ 467.793787][ T1025] hub 13-1:0.0: bad descriptor, ignoring hub [ 467.796365][ T1025] hub 13-1:0.0: probe with driver hub failed with error -5 [ 467.802222][ T1025] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input46 [ 467.804846][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.818056][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.825061][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.833464][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.922428][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.926867][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.959093][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.962529][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.718168][T18753] Bluetooth: MGMT ver 1.23 [ 469.204515][T18822] overlayfs: failed to clone upperpath [ 469.342346][T18841] xt_hashlimit: size too large, truncated to 1048576 [ 469.364468][ T40] kauditd_printk_skb: 313 callbacks suppressed [ 469.364479][ T40] audit: type=1400 audit(1212.831:52589): avc: denied { module_request } for pid=18840 comm="syz.4.15412" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 469.374218][ T40] audit: type=1400 audit(1212.831:52590): avc: denied { ioctl } for pid=18842 comm="syz.0.15411" path="socket:[143257]" dev="sockfs" ino=143257 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 469.391566][ T40] audit: type=1400 audit(1212.840:52591): avc: denied { recv } for pid=5900 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 469.400930][ T40] audit: type=1400 audit(1212.859:52592): avc: denied { create } for pid=18847 comm="syz.7.15413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.409213][ T40] audit: type=1400 audit(1212.859:52593): avc: denied { setopt } for pid=18847 comm="syz.7.15413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.416237][ T40] audit: type=1400 audit(1212.859:52594): avc: denied { connect } for pid=18840 comm="syz.4.15412" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.423673][ T40] audit: type=1400 audit(1212.859:52595): avc: denied { bind } for pid=18847 comm="syz.7.15413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.431479][ T40] audit: type=1400 audit(1212.859:52596): avc: denied { name_bind } for pid=18847 comm="syz.7.15413" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 469.440078][ T40] audit: type=1400 audit(1212.859:52597): avc: denied { node_bind } for pid=18847 comm="syz.7.15413" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 469.449578][ T40] audit: type=1400 audit(1212.859:52598): avc: denied { write } for pid=18840 comm="syz.4.15412" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.472972][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.488665][ T1417] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 469.492456][ T1417] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 469.653809][T18878] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 469.874459][T18905] netlink: 3900 bytes leftover after parsing attributes in process `syz.0.15429'. [ 469.892045][T13103] Bluetooth: hci2: command tx timeout [ 470.480774][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 470.610637][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15457'. [ 470.649151][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 470.655040][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 470.661247][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.665855][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.670884][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.675820][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.682444][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.686334][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.915903][ T5944] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 470.925983][ T5944] Bluetooth: hci0: command 0x1407 tx timeout [ 471.234368][T19046] netlink: set zone limit has 4 unknown bytes [ 471.309661][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 471.356699][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15477'. [ 471.360730][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15477'. [ 471.365225][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15477'. [ 471.369040][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15477'. [ 471.467266][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15479'. [ 471.481846][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.485797][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.489842][ T29] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.517823][T19063] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.15480'. [ 471.519898][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 471.528066][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.537063][ T29] usb 9-1: Product: syz [ 471.538300][T19065] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 471.544406][ T29] usb 9-1: Manufacturer: syz [ 471.546479][ T29] usb 9-1: SerialNumber: syz [ 471.555312][ T29] hub 9-1:1.0: bad descriptor, ignoring hub [ 471.557955][ T29] hub 9-1:1.0: probe with driver hub failed with error -5 [ 471.691029][ T5966] usb 13-1: USB disconnect, device number 5 [ 471.760870][ T11] usb 5-1: USB disconnect, device number 8 [ 471.784745][ T29] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 472.119985][ T5944] Bluetooth: hci2: command tx timeout [ 472.487269][T19140] netlink: 11 bytes leftover after parsing attributes in process `syz.0.15492'. [ 472.491560][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15492'. [ 472.497855][T19140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15492'. [ 472.731082][T19032] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 472.923747][T19032] usb 9-1: device firmware changed [ 472.933973][ T5966] usb 9-1: USB disconnect, device number 12 [ 472.940772][ T5966] usblp0: removed [ 473.095261][ T5966] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 473.250973][ T5966] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.254255][ T5966] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.257464][ T5966] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.264446][ T5966] usb 9-1: string descriptor 0 read error: -22 [ 473.266598][ T5966] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 473.269584][ T5966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.276025][ T5966] hub 9-1:1.0: bad descriptor, ignoring hub [ 473.278286][ T5966] hub 9-1:1.0: probe with driver hub failed with error -5 [ 473.502588][ T5966] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 473.537975][ T5966] usb 9-1: USB disconnect, device number 13 [ 473.545165][ T5966] usblp0: removed [ 473.860740][T19243] veth0_to_bridge: entered promiscuous mode [ 473.865341][T19242] veth0_to_bridge: left promiscuous mode [ 474.335786][ T5944] Bluetooth: hci2: command tx timeout [ 474.657530][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15545'. [ 474.716284][ T11] IPVS: starting estimator thread 0... [ 474.727591][T19326] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 474.731302][ T40] kauditd_printk_skb: 282 callbacks suppressed [ 474.731315][ T40] audit: type=1400 audit(1217.859:52881): avc: denied { bind } for pid=19329 comm="syz.4.15549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 474.781101][ T40] audit: type=1400 audit(1217.906:52882): avc: denied { read } for pid=19336 comm="syz.0.15551" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 474.791803][ T40] audit: type=1400 audit(1217.906:52883): avc: denied { open } for pid=19336 comm="syz.0.15551" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 474.810863][T19327] IPVS: using max 29 ests per chain, 69600 per kthread [ 474.822895][T19330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.844310][ T40] audit: type=1400 audit(1217.972:52884): avc: denied { perfmon } for pid=19338 comm="syz.0.15553" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 474.905988][ T40] audit: type=1400 audit(1218.028:52885): avc: denied { name_bind } for pid=19351 comm="syz.0.15555" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 474.917547][ T40] audit: type=1400 audit(1218.028:52886): avc: denied { node_bind } for pid=19351 comm="syz.0.15555" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 474.979458][T19330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.063448][T19357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 475.101492][T19330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.123028][T19361] pim6reg1: entered promiscuous mode [ 475.124946][T19361] pim6reg1: entered allmulticast mode [ 475.177822][T19330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.266520][ T40] audit: type=1400 audit(1218.366:52887): avc: denied { read write } for pid=19371 comm="syz.8.15558" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.283362][ T40] audit: type=1400 audit(1218.366:52888): avc: denied { open } for pid=19371 comm="syz.8.15558" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.336151][ T130] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.356323][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.378911][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.402544][ T168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.406446][ T40] audit: type=1400 audit(1218.497:52889): avc: denied { create } for pid=19382 comm="syz.7.15561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 475.414428][ T40] audit: type=1400 audit(1218.497:52890): avc: denied { ioctl } for pid=19382 comm="syz.7.15561" path="socket:[147465]" dev="sockfs" ino=147465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 475.686181][T19415] lo speed is unknown, defaulting to 1000 [ 475.688726][T19415] xfrm0 speed is unknown, defaulting to 1000 [ 475.691915][T19415] wg1 speed is unknown, defaulting to 1000 [ 475.796932][T18075] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 475.956848][T18075] usb 13-1: Using ep0 maxpacket: 8 [ 475.960310][T18075] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.963591][T18075] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.978517][T18075] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.983544][T18075] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.990562][T18075] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.998415][T18075] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.247327][T18075] usb 13-1: GET_CAPABILITIES returned 0 [ 476.249776][T18075] usbtmc 13-1:16.0: can't read capabilities [ 476.463134][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.467235][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.471082][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.476426][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.480354][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.484174][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.487988][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.495697][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.500171][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.504020][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.508458][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.516090][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.520459][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.524342][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.528290][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.532126][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.545953][T18075] usb 13-1: USB disconnect, device number 6 [ 476.796032][T19511] binder: 19510:19511 ioctl c0306201 200000000040 returned -22 [ 476.969660][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.973767][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.827675][T19566] bond1: option downdelay: invalid value (18446744073709551615) [ 477.831013][T19566] bond1: option downdelay: allowed values 0 - 2147483647 [ 477.838022][T19566] bond1 (unregistering): Released all slaves [ 478.327912][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.331311][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.358770][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.361929][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.365174][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.369234][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.372119][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.374706][T19671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.670860][T19751] fuse: Bad value for 'fd' [ 479.709843][T19756] __nla_validate_parse: 1 callbacks suppressed [ 479.709861][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15651'. [ 479.716733][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15651'. [ 480.078216][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 480.078232][ T40] audit: type=1400 audit(1222.879:53042): avc: denied { write } for pid=19789 comm="syz.7.15665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 480.090378][ T40] audit: type=1400 audit(1222.879:53043): avc: denied { read } for pid=19789 comm="syz.7.15665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 480.218544][ T40] audit: type=1400 audit(1223.010:53044): avc: denied { mounton } for pid=19816 comm="syz.0.15674" path="/55/file0" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.230207][ T40] audit: type=1400 audit(1223.010:53045): avc: denied { unlink } for pid=19816 comm="syz.0.15674" name="#5" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 480.240209][ T40] audit: type=1400 audit(1223.020:53046): avc: denied { mount } for pid=19816 comm="syz.0.15674" name="/" dev="overlay" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 480.252705][ T40] audit: type=1400 audit(1223.048:53047): avc: denied { unmount } for pid=18237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 480.260248][ T40] audit: type=1400 audit(1223.048:53048): avc: denied { allowed } for pid=19818 comm="syz.8.15675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 480.294025][ T40] audit: type=1400 audit(1223.085:53049): avc: denied { ioctl } for pid=19820 comm="syz.0.15676" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 480.306225][ T40] audit: type=1400 audit(1223.095:53050): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=50888 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 480.382394][ T40] audit: type=1400 audit(1223.170:53051): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 480.686266][T19835] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15681'. [ 480.832051][T27991] udevd[27991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 480.839471][T27733] udevd[27733]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 480.860752][T19850] netlink: 212336 bytes leftover after parsing attributes in process `syz.8.15683'. [ 481.215560][T19881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.320037][ T6002] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 481.439666][T19904] lo speed is unknown, defaulting to 1000 [ 481.442746][T19904] xfrm0 speed is unknown, defaulting to 1000 [ 481.447544][T19904] wg1 speed is unknown, defaulting to 1000 [ 481.490932][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.495315][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.500112][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 481.503740][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.508772][ T6002] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.513508][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.520365][ T6002] usb 9-1: config 0 descriptor?? [ 481.523630][T19868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 481.972705][ T6002] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 481.992598][ T6002] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 482.093052][T19981] overlayfs: failed to clone upperpath [ 482.105714][T19983] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15723'. [ 482.214646][T17436] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 482.392763][T17436] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.396500][T17436] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.399554][T17436] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.403370][T17436] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.408313][T17436] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.416185][T17436] usb 13-1: config 0 descriptor?? [ 482.516262][ T5966] net_ratelimit: 66 callbacks suppressed [ 482.516324][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.880628][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.888191][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.891091][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.893933][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.896832][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.899495][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.902213][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.904907][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.907589][T17436] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 482.914355][T17436] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 483.272968][T18075] usb 13-1: USB disconnect, device number 7 [ 483.450602][T17436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.620593][T18075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.654856][T20058] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.15743'. [ 483.971428][T20081] fuse: Bad value for 'fd' [ 484.007984][T20088] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15752'. [ 484.120273][ T29] usb 9-1: USB disconnect, device number 14 [ 484.379494][T20123] Invalid ELF header magic: != ELF [ 484.474773][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.730857][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.120252][T20137] pim6reg1: entered promiscuous mode [ 485.122767][T20137] pim6reg1: entered allmulticast mode [ 485.536321][ T40] kauditd_printk_skb: 170 callbacks suppressed [ 485.536337][ T40] audit: type=1400 audit(1228.001:53222): avc: denied { create } for pid=20157 comm="syz.4.15776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.549548][ T40] audit: type=1400 audit(1228.011:53223): avc: denied { bind } for pid=20157 comm="syz.4.15776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.558317][ T40] audit: type=1400 audit(1228.011:53224): avc: denied { setopt } for pid=20157 comm="syz.4.15776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.568936][ T40] audit: type=1400 audit(1228.011:53225): avc: denied { bind } for pid=20159 comm="syz.7.15784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.577519][ T40] audit: type=1400 audit(1228.011:53226): avc: denied { create } for pid=20159 comm="syz.7.15784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.596993][ T40] audit: type=1400 audit(1228.011:53227): avc: denied { setopt } for pid=20159 comm="syz.7.15784" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.603560][ T40] audit: type=1400 audit(1228.011:53228): avc: denied { connect } for pid=20159 comm="syz.7.15784" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 485.611210][ T40] audit: type=1400 audit(1228.058:53229): avc: denied { watch watch_reads } for pid=20162 comm="syz.4.15777" path="/86" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 485.639329][T20163] bond2: option downdelay: invalid value (18446744073709551615) [ 485.642608][ T40] audit: type=1400 audit(1228.105:53230): avc: denied { shutdown } for pid=20197 comm="syz.0.15779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.647561][T20163] bond2: option downdelay: allowed values 0 - 2147483647 [ 485.650312][ T40] audit: type=1400 audit(1228.114:53231): avc: denied { name_connect } for pid=20197 comm="syz.0.15779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 485.660684][T20163] bond2 (unregistering): Released all slaves [ 485.837893][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.916547][T20253] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 485.924058][T20253] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 486.039340][T20275] mmap: syz.4.15790 (20275): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 486.101861][T20279] fuse: Bad value for 'fd' [ 486.197403][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15797'. [ 486.201436][T20294] netlink: 'syz.4.15797': attribute type 30 has an invalid length. [ 486.204876][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15797'. [ 486.615802][ T1025] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 486.701887][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.798929][ T1025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 486.803543][ T1025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 486.810294][ T1025] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 486.814550][ T1025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.818092][ T1025] usb 9-1: Product: syz [ 486.819914][ T1025] usb 9-1: Manufacturer: syz [ 486.821908][ T1025] usb 9-1: SerialNumber: syz [ 486.826768][ T1025] usb 9-1: config 0 descriptor?? [ 486.831109][ T1025] hub 9-1:0.0: bad descriptor, ignoring hub [ 486.833668][ T1025] hub 9-1:0.0: probe with driver hub failed with error -5 [ 486.841394][ T1025] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input47 [ 486.957351][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.329900][ T11] usb 9-1: USB disconnect, device number 15 [ 487.519819][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.522957][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.895385][T20384] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15825'. [ 488.054575][ T29] net_ratelimit: 1 callbacks suppressed [ 488.054590][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.167038][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15833'. [ 488.170445][T20418] netlink: 'syz.0.15833': attribute type 30 has an invalid length. [ 488.180150][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15833'. [ 488.632418][T20443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.636561][T20443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.637997][T20442] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 488.641159][T20443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.647058][T20443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.650810][T20443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.675396][T20441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.163161][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.438685][T20473] netlink: 348 bytes leftover after parsing attributes in process `syz.7.15854'. [ 489.828867][T20507] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15865'. [ 489.849365][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15866'. [ 489.853150][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15866'. [ 489.857909][T20509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15866'. [ 489.947971][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.965726][T20514] lo speed is unknown, defaulting to 1000 [ 489.969438][T20514] xfrm0 speed is unknown, defaulting to 1000 [ 489.974503][T20514] wg1 speed is unknown, defaulting to 1000 [ 490.271554][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.949092][ T40] kauditd_printk_skb: 148 callbacks suppressed [ 490.949108][ T40] audit: type=1400 audit(1233.077:53380): avc: denied { module_request } for pid=20606 comm="syz.4.15890" kmod="crypto-rfc4543(gcm(aes))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 491.014353][ T40] audit: type=1400 audit(1233.133:53381): avc: denied { unlink } for pid=20610 comm="syz.8.15891" name="#7" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 491.022038][ T40] audit: type=1400 audit(1233.143:53382): avc: denied { mount } for pid=20610 comm="syz.8.15891" name="/" dev="overlay" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 491.030542][ T40] audit: type=1400 audit(1233.152:53383): avc: denied { create } for pid=20606 comm="syz.4.15890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 491.064334][ T40] audit: type=1400 audit(1233.190:53384): avc: denied { unmount } for pid=17417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 491.078392][ T40] audit: type=1400 audit(1233.199:53385): avc: denied { read write } for pid=17333 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.096091][ T40] audit: type=1400 audit(1233.199:53386): avc: denied { open } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.106325][ T40] audit: type=1400 audit(1233.199:53387): avc: denied { ioctl } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.115521][ T40] audit: type=1400 audit(1233.227:53388): avc: denied { allowed } for pid=20617 comm="syz.8.15892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 491.123194][ T40] audit: type=1400 audit(1233.237:53389): avc: denied { create } for pid=20617 comm="syz.8.15892" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 491.886545][T20665] SELinux: failed to load policy [ 491.891822][T20670] fuse: Bad value for 'fd' [ 492.409249][T20728] veth0_to_bridge: entered promiscuous mode [ 492.428620][T20727] veth0_to_bridge: left promiscuous mode [ 492.652045][T20758] input: syz0 as /devices/virtual/input/input48 [ 493.000561][ T34] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 493.182424][ T34] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.186145][ T34] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.189261][ T34] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.194940][ T34] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 493.197811][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.200396][ T34] usb 13-1: Product: syz [ 493.201895][ T34] usb 13-1: Manufacturer: syz [ 493.203495][ T34] usb 13-1: SerialNumber: syz [ 493.208099][ T34] hub 13-1:1.0: bad descriptor, ignoring hub [ 493.209994][ T34] hub 13-1:1.0: probe with driver hub failed with error -5 [ 493.432611][ T34] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 493.562780][T20802] xt_hashlimit: size too large, truncated to 1048576 [ 493.617835][T20806] net_ratelimit: 442 callbacks suppressed [ 493.617847][T20806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.629990][ T5299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.938723][T20844] __nla_validate_parse: 8 callbacks suppressed [ 493.938740][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15964'. [ 494.108756][ T6002] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 494.279219][ T6002] usb 5-1: Using ep0 maxpacket: 32 [ 494.286744][ T6002] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 494.292711][ T6002] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 494.295762][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 494.298672][ T6002] usb 5-1: Product: syz [ 494.300108][ T6002] usb 5-1: Manufacturer: syz [ 494.309252][ T6002] usb 5-1: SerialNumber: syz [ 494.320299][ T6002] usb 5-1: config 0 descriptor?? [ 494.323633][T20824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.396363][T20769] usb 13-1: reset high-speed USB device number 8 using dummy_hcd [ 494.569429][T20769] usb 13-1: device firmware changed [ 494.574949][ T6020] usb 13-1: USB disconnect, device number 8 [ 494.594932][ T6020] usblp0: removed [ 494.595792][ T6002] usb 5-1: USB disconnect, device number 9 [ 494.706045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.708723][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.737612][ T6020] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 494.900780][ T6020] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.904895][ T6020] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.919173][ T6020] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.936250][ T6020] usb 13-1: string descriptor 0 read error: -22 [ 494.939126][ T6020] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.950540][ T6020] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.964719][ T6020] hub 13-1:1.0: bad descriptor, ignoring hub [ 494.971864][ T6020] hub 13-1:1.0: probe with driver hub failed with error -5 [ 495.194887][ T6020] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 495.228777][ T6020] usb 13-1: USB disconnect, device number 9 [ 495.234945][ T6020] usblp0: removed [ 495.572431][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15980'. [ 495.826327][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.276073][T20958] binder: 20957:20958 ioctl c0306201 200000000040 returned -22 [ 496.359325][T20968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.363662][T20968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.370167][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 496.370188][ T40] audit: type=1400 audit(1238.162:53578): avc: denied { create } for pid=20969 comm="syz.4.15996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.370774][T20968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.374722][ T40] audit: type=1400 audit(1238.171:53579): avc: denied { setopt } for pid=20969 comm="syz.4.15996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.381682][T20968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.388312][ T40] audit: type=1400 audit(1238.181:53580): avc: denied { write } for pid=20969 comm="syz.4.15996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.391368][T20968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.395945][ T40] audit: type=1400 audit(1238.181:53581): avc: denied { connect } for pid=20969 comm="syz.4.15996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.415510][ T40] audit: type=1400 audit(1238.209:53582): avc: denied { read } for pid=20972 comm="syz.8.15998" dev="nsfs" ino=4026534578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 496.423634][ T40] audit: type=1400 audit(1238.209:53583): avc: denied { open } for pid=20972 comm="syz.8.15998" path="net:[4026534578]" dev="nsfs" ino=4026534578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 496.447638][ T40] audit: type=1400 audit(1238.209:53584): avc: denied { create } for pid=20972 comm="syz.8.15998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 496.466771][ T40] audit: type=1400 audit(1238.209:53585): avc: denied { bind } for pid=20972 comm="syz.8.15998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 496.476328][ T40] audit: type=1400 audit(1238.218:53586): avc: denied { write } for pid=20972 comm="syz.8.15998" path="socket:[150249]" dev="sockfs" ino=150249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 496.487291][ T40] audit: type=1400 audit(1238.228:53587): avc: denied { shutdown } for pid=20969 comm="syz.4.15996" lport=39566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 496.535577][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16003'. [ 496.837990][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16017'. [ 497.098427][T21037] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.237052][T21037] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.341570][T21037] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.435657][T21037] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.547467][ T168] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.556287][ T168] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.564523][ T168] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.575030][ T168] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.800362][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16035'. [ 498.677799][T21146] netlink: 92 bytes leftover after parsing attributes in process `syz.0.16058'. [ 498.727523][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16059'. [ 498.731259][T21152] netlink: 'syz.7.16059': attribute type 21 has an invalid length. [ 499.048749][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16070'. [ 499.142930][ T29] net_ratelimit: 7 callbacks suppressed [ 499.142949][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.661852][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.151547][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16092'. [ 500.155584][T21233] netlink: 92 bytes leftover after parsing attributes in process `syz.7.16085'. [ 500.259140][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.356982][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.272142][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 502.272159][ T40] audit: type=1400 audit(1243.697:53692): avc: denied { mounton } for pid=21277 comm="syz.7.16095" path="/1213/file0" dev="tmpfs" ino=6233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 502.286890][ T40] audit: type=1400 audit(1243.707:53693): avc: denied { mount } for pid=21277 comm="syz.7.16095" name="/" dev="9p" ino=74973253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 502.310009][ T40] audit: type=1400 audit(1243.744:53694): avc: denied { watch } for pid=21283 comm="syz.4.16096" path="/190/control" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 502.339890][ T40] audit: type=1400 audit(1243.773:53695): avc: denied { create } for pid=21285 comm="syz.0.16104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 502.346305][ T40] audit: type=1400 audit(1243.773:53696): avc: denied { ioctl } for pid=21285 comm="syz.0.16104" path="socket:[150525]" dev="sockfs" ino=150525 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 502.375236][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16097'. [ 502.378489][T21292] netlink: 'syz.4.16097': attribute type 21 has an invalid length. [ 502.434239][ T40] audit: type=1400 audit(1243.857:53697): avc: denied { node_bind } for pid=21298 comm="syz.4.16098" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 502.441743][T21301] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 502.444170][ T40] audit: type=1400 audit(1243.857:53698): avc: denied { create } for pid=21300 comm="syz.7.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 502.455750][ T40] audit: type=1400 audit(1243.857:53699): avc: denied { create } for pid=21300 comm="syz.7.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.463861][ T40] audit: type=1400 audit(1243.857:53700): avc: denied { write } for pid=21300 comm="syz.7.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.475034][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.480686][ T40] audit: type=1400 audit(1243.857:53701): avc: denied { read } for pid=21300 comm="syz.7.16099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.498928][T21307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.502257][T21307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.505012][T21307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.512189][T21307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.061874][ T6002] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 503.221677][ T6002] usb 9-1: Using ep0 maxpacket: 8 [ 503.227806][ T6002] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.240588][ T6002] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.253641][ T6002] usb 9-1: config 0 interface 0 has no altsetting 0 [ 503.256546][ T6002] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 503.260502][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.266309][T21391] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16135'. [ 503.271315][ T6002] usb 9-1: config 0 descriptor?? [ 503.304273][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16134'. [ 503.533245][T21417] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16144'. [ 503.567513][ T5299] IPVS: starting estimator thread 0... [ 503.596488][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16147'. [ 503.636599][ T5944] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 503.658731][T21423] IPVS: using max 45 ests per chain, 108000 per kthread [ 503.721428][ T6002] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 503.726111][ T6002] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 503.729527][ T6002] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 503.732529][ T6002] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 503.735732][ T6002] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 503.739476][ T6002] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 503.933204][ T6002] usb 9-1: USB disconnect, device number 16 [ 504.692655][ T5299] net_ratelimit: 333 callbacks suppressed [ 504.692674][ T5299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.847131][T21522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16173'. [ 504.950638][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.161860][ T5299] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 505.321501][ T5299] usb 5-1: Using ep0 maxpacket: 16 [ 505.326358][ T5299] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.330526][ T5299] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.335214][ T5299] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.340657][ T5299] usb 5-1: config 1 interface 0 has no altsetting 0 [ 505.346437][ T5299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.350184][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.353848][ T5299] usb 5-1: Product: syz [ 505.355576][ T5299] usb 5-1: Manufacturer: syz [ 505.357565][ T5299] usb 5-1: SerialNumber: syz [ 505.513414][ T29] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 505.586082][ T5299] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 505.673282][ T29] usb 13-1: Using ep0 maxpacket: 8 [ 505.676474][ T29] usb 13-1: config 0 has an invalid interface number: 186 but max is 0 [ 505.679280][ T29] usb 13-1: config 0 has no interface number 0 [ 505.681454][ T29] usb 13-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.685675][ T29] usb 13-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 505.689740][ T29] usb 13-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 505.693955][ T29] usb 13-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 505.698303][ T29] usb 13-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.704062][ T29] usb 13-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 505.707728][ T29] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.710662][ T29] usb 13-1: Product: syz [ 505.712169][ T29] usb 13-1: Manufacturer: syz [ 505.713804][ T29] usb 13-1: SerialNumber: syz [ 505.717061][ T29] usb 13-1: config 0 descriptor?? [ 505.790667][ T5299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.863853][T21525] usblp0:failed reading printer status (-32) [ 505.869812][ T9] usb 5-1: USB disconnect, device number 10 [ 505.880283][ T9] usblp0: removed [ 505.937475][ T29] iowarrior 13-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 506.029969][T21588] Bluetooth: MGMT ver 1.23 [ 506.031935][T21588] Bluetooth: hci1: expected 65469 bytes, got 2 bytes [ 506.132967][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.149858][ T29] usb 13-1: USB disconnect, device number 10 [ 506.348960][T21622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.353491][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.360169][T21622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.364359][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.371357][T21622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.374625][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.431854][T21624] netlink: 'syz.7.16197': attribute type 29 has an invalid length. [ 506.435760][T21624] netlink: 'syz.7.16197': attribute type 29 has an invalid length. [ 507.556612][T21673] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 507.591322][T21679] netlink: 384 bytes leftover after parsing attributes in process `syz.0.16218'. [ 507.653280][ T40] kauditd_printk_skb: 153 callbacks suppressed [ 507.653295][ T40] audit: type=1400 audit(1248.754:53855): avc: denied { shutdown } for pid=21683 comm="syz.4.16220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 507.654589][T21681] team0 (unregistering): Port device team_slave_0 removed [ 507.669094][ T40] audit: type=1400 audit(1248.773:53856): avc: denied { getopt } for pid=21683 comm="syz.4.16220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 507.687375][T21681] team0 (unregistering): Port device team_slave_1 removed [ 507.688896][ T40] audit: type=1400 audit(1248.773:53857): avc: denied { name_connect } for pid=21683 comm="syz.4.16220" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 507.697709][ T40] audit: type=1400 audit(1248.792:53858): avc: denied { mount } for pid=21686 comm="syz.7.16221" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 507.698727][T21690] overlayfs: failed to clone lowerpath [ 507.752676][ T40] audit: type=1400 audit(1248.848:53859): avc: denied { create } for pid=21694 comm="syz.7.16223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.769999][ T40] audit: type=1400 audit(1248.858:53860): avc: denied { bind } for pid=21694 comm="syz.7.16223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.782976][ T40] audit: type=1400 audit(1248.858:53861): avc: denied { setopt } for pid=21694 comm="syz.7.16223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.793056][ T40] audit: type=1400 audit(1248.858:53862): avc: denied { accept } for pid=21694 comm="syz.7.16223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.793313][T21697] vcan0: tx address claim with different name [ 507.801538][ T40] audit: type=1400 audit(1248.858:53863): avc: denied { write } for pid=21694 comm="syz.7.16223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 507.801582][ T40] audit: type=1400 audit(1248.876:53864): avc: denied { create } for pid=21696 comm="syz.4.16224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 507.860115][T21707] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 508.079965][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16237'. [ 508.134058][T21738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.137275][T21738] IPv6: NLM_F_CREATE should be set when creating new route [ 508.193989][T21745] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.16243'. [ 508.678990][ T1025] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 508.751888][T21809] netlink: 212328 bytes leftover after parsing attributes in process `syz.8.16263'. [ 508.804529][T21813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16266'. [ 508.841500][T21815] lo speed is unknown, defaulting to 1000 [ 508.845193][T21815] xfrm0 speed is unknown, defaulting to 1000 [ 508.849128][T21815] wg1 speed is unknown, defaulting to 1000 [ 508.851335][ T1025] usb 9-1: Using ep0 maxpacket: 8 [ 508.856964][ T1025] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 508.862882][ T1025] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.866450][ T1025] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.870328][ T1025] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.875273][ T1025] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.880449][ T1025] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.884510][ T1025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.117558][ T1025] usb 9-1: usb_control_msg returned -32 [ 509.119652][ T1025] usbtmc 9-1:16.0: can't read capabilities [ 509.187354][T21870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16274'. [ 510.084895][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16285'. [ 510.090369][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16285'. [ 510.132096][T21907] net_ratelimit: 11 callbacks suppressed [ 510.132114][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.138737][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.142281][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.145734][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.149131][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.152598][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.156042][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.159507][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.163015][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.166452][T21907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.266099][T21917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16290'. [ 510.271085][T21917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16290'. [ 510.603031][T21932] netlink: 'syz.8.16298': attribute type 1 has an invalid length. [ 510.606550][T21932] netlink: 'syz.8.16298': attribute type 1 has an invalid length. [ 511.397357][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 511.559466][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.563321][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.566933][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.572795][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.582595][T21975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 511.589699][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.651684][ T39] usb 9-1: USB disconnect, device number 17 [ 511.806427][ T6020] usb 5-1: USB disconnect, device number 11 [ 512.058832][ T9] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 512.104459][T22058] veth0: entered promiscuous mode [ 512.219087][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 512.222223][ T9] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 512.225190][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.230379][ T9] usb 13-1: config 0 descriptor?? [ 512.235438][ T9] as10x_usb: device has been detected [ 512.238027][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 512.250458][ T9] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 512.279179][ T9] as10x_usb: error during firmware upload part1 [ 512.282522][ T9] Registered device nBox DVB-T Dongle [ 512.469414][T22090] netlink: 'syz.7.16337': attribute type 39 has an invalid length. [ 512.507436][ T6020] usb 13-1: USB disconnect, device number 11 [ 512.511176][T22095] as102_open: can't find device for minor 0 [ 512.520275][ T6020] Unregistered device nBox DVB-T Dongle [ 512.521745][ T6020] as10x_usb: device has been disconnected [ 513.076322][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803778b400: rx timeout, send abort [ 513.082065][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803778b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 513.085207][ T40] kauditd_printk_skb: 183 callbacks suppressed [ 513.085223][ T40] audit: type=1400 audit(1253.849:54048): avc: denied { read } for pid=5318 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 513.099056][ T40] audit: type=1400 audit(1253.849:54049): avc: denied { search } for pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.108090][ T40] audit: type=1400 audit(1253.849:54050): avc: denied { search } for pid=5318 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.117455][ T40] audit: type=1400 audit(1253.849:54051): avc: denied { add_name } for pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.126807][ T40] audit: type=1400 audit(1253.849:54052): avc: denied { create } for pid=5318 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.135454][ T40] audit: type=1400 audit(1253.849:54053): avc: denied { append open } for pid=5318 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.144995][ T40] audit: type=1400 audit(1253.849:54054): avc: denied { getattr } for pid=5318 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 513.154243][ T40] audit: type=1400 audit(1253.868:54055): avc: denied { read write } for pid=17333 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.164332][ T40] audit: type=1400 audit(1253.868:54056): avc: denied { open } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.174304][ T40] audit: type=1400 audit(1253.868:54057): avc: denied { ioctl } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.560880][ T5299] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 513.649896][T22140] syzkaller1: entered promiscuous mode [ 513.651839][T22140] syzkaller1: entered allmulticast mode [ 513.731205][ T5299] usb 9-1: Using ep0 maxpacket: 8 [ 513.734998][ T5299] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.739276][ T5299] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.743552][ T5299] usb 9-1: config 0 interface 0 has no altsetting 0 [ 513.746109][ T5299] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 513.749541][ T5299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.763723][ T5299] usb 9-1: config 0 descriptor?? [ 514.097441][T22171] __nla_validate_parse: 5 callbacks suppressed [ 514.097453][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16361'. [ 514.208631][ T5299] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 514.211825][ T5299] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 514.216082][ T5299] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 514.218895][ T5299] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 514.221744][ T5299] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 514.225163][ T5299] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 514.412626][ T6020] usb 9-1: USB disconnect, device number 18 [ 515.194020][T22230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16375'. [ 515.469347][ T5299] e1000 0000:00:06.0 eth0: Reset adapter [ 515.524096][T22250] input: syz1 as /devices/virtual/input/input49 [ 517.815017][ T5299] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 519.792957][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 519.792974][ T40] audit: type=1400 audit(1261.138:54175): avc: denied { recv } for pid=22290 comm="dhcpcd" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 524.051447][ T40] audit: type=1400 audit(1265.144:54176): avc: denied { egress } for pid=11 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 524.061917][ T40] audit: type=1400 audit(1265.144:54177): avc: denied { sendto } for pid=11 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 525.571428][ T40] audit: type=1400 audit(1266.561:54178): avc: denied { module_request } for pid=22303 comm="syz.0.16388" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 525.585881][ T40] audit: type=1400 audit(1266.561:54179): avc: denied { mount } for pid=22307 comm="syz.7.16391" name="/" dev="ramfs" ino=154316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 525.605703][ T40] audit: type=1400 audit(1266.589:54180): avc: denied { sys_module } for pid=22303 comm="syz.0.16388" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 525.614327][ T40] audit: type=1400 audit(1266.589:54181): avc: denied { create } for pid=22310 comm="syz.8.16390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 525.624595][ T40] audit: type=1400 audit(1266.607:54182): avc: denied { getopt } for pid=22310 comm="syz.8.16390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 525.633700][T22304] bond0: entered allmulticast mode [ 525.633885][ T40] audit: type=1400 audit(1266.607:54183): avc: denied { setopt } for pid=22310 comm="syz.8.16390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 525.636294][T22304] bond_slave_0: entered allmulticast mode [ 525.645174][ T40] audit: type=1400 audit(1266.607:54184): avc: denied { create } for pid=22316 comm="syz.4.16393" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 525.645248][ T40] audit: type=1400 audit(1266.607:54185): avc: denied { ioctl } for pid=22316 comm="syz.4.16393" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=154325 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 525.645290][ T40] audit: type=1400 audit(1266.607:54186): avc: denied { create } for pid=22303 comm="syz.0.16388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.645329][ T40] audit: type=1400 audit(1266.607:54187): avc: denied { ioctl } for pid=22303 comm="syz.0.16388" path="socket:[156509]" dev="sockfs" ino=156509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.689868][T22304] bond_slave_1: entered allmulticast mode [ 525.808033][ T9] libceph: connect (1)[c::]:6789 error -101 [ 525.811257][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.104022][ T830] libceph: connect (1)[c::]:6789 error -101 [ 526.106957][ T830] libceph: mon0 (1)[c::]:6789 connect error [ 526.194845][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16409'. [ 526.359131][T22397] input: syz1 as /devices/virtual/input/input50 [ 526.484625][T22411] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 526.563337][T22420] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 526.652124][ T9] libceph: connect (1)[c::]:6789 error -101 [ 526.654892][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.655546][T22335] ceph: No mds server is up or the cluster is laggy [ 526.793143][T22452] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16427'. [ 527.042347][T22481] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 527.135410][ T5944] Bluetooth: hci0: unknown advertising packet type: 0x6b [ 527.135494][ T5944] Bluetooth: hci0: Malformed LE Event: 0x02 [ 527.229889][T22504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.385277][T22520] can0: slcan on pty20. [ 527.513397][ T39] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 527.534747][T22512] can0 (unregistered): slcan off pty20. [ 527.616905][T22537] input: syz1 as /devices/virtual/input/input51 [ 527.674919][ T39] usb 13-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 20 [ 527.685490][ T39] usb 13-1: config 0 interface 0 has no altsetting 0 [ 527.696763][ T39] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.700727][ T39] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.715063][ T39] usb 13-1: Product: syz [ 527.717554][ T39] usb 13-1: Manufacturer: syz [ 527.719598][ T39] usb 13-1: SerialNumber: syz [ 527.733750][ T39] usb 13-1: config 0 descriptor?? [ 527.741455][T22508] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 527.757235][ T39] usb 13-1: selecting invalid altsetting 0 [ 527.954938][T22597] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.16458'. [ 527.975759][ T39] usb 13-1: USB disconnect, device number 12 [ 528.015976][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16460'. [ 528.634188][T22715] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.844533][T22739] netlink: 'syz.8.16488': attribute type 1 has an invalid length. [ 528.851716][T22739] netlink: 'syz.8.16488': attribute type 2 has an invalid length. [ 529.271581][ T830] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 529.284865][T22788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16504'. [ 529.335575][ T9] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 529.444019][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.448540][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.452515][ T830] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.458205][ T830] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.461988][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.468543][ T830] usb 9-1: config 0 descriptor?? [ 529.518584][ T9] usb 13-1: config 0 has no interfaces? [ 529.525766][ T9] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 529.531564][ T9] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.534277][ T9] usb 13-1: Product: syz [ 529.536073][ T9] usb 13-1: Manufacturer: syz [ 529.543683][ T9] usb 13-1: config 0 descriptor?? [ 529.914783][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.924409][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.926772][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.929800][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.933039][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.936081][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.939162][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.942274][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.945923][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.949300][ T830] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 529.960049][ T830] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 530.011152][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.017346][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.025199][ T830] usb 13-1: USB disconnect, device number 13 [ 530.093686][ T5299] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 530.094266][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 530.096191][ T5299] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 530.191509][ T6020] usb 9-1: USB disconnect, device number 19 [ 530.750809][ T5944] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 530.757275][ T5944] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 530.914518][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 530.914531][ T40] audit: type=1400 audit(1271.580:54566): avc: denied { remove_name } for pid=22937 comm="rm" name="resolv.conf.lapb9.link" dev="tmpfs" ino=18233 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.955636][ T40] audit: type=1400 audit(1271.608:54567): avc: denied { allowed } for pid=22941 comm="syz.7.16535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 530.963319][ T40] audit: type=1400 audit(1271.617:54568): avc: denied { create } for pid=22941 comm="syz.7.16535" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 530.981813][ T40] audit: type=1400 audit(1271.617:54569): avc: denied { read write } for pid=17333 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.992625][ T40] audit: type=1400 audit(1271.617:54570): avc: denied { open } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.008170][ T40] audit: type=1400 audit(1271.617:54571): avc: denied { ioctl } for pid=17333 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.017879][ T40] audit: type=1400 audit(1271.655:54572): avc: denied { read } for pid=22946 comm="syz.4.16537" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 531.025886][ T40] audit: type=1400 audit(1271.655:54573): avc: denied { open } for pid=22946 comm="syz.4.16537" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 531.034474][ T40] audit: type=1400 audit(1271.655:54574): avc: denied { ioctl } for pid=22946 comm="syz.4.16537" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 531.046346][ T40] audit: type=1400 audit(1271.655:54575): avc: denied { block_suspend } for pid=22943 comm="syz.0.16536" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.081746][T22957] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 531.084975][T22957] overlayfs: failed to set uuid (265/file1, err=-13); falling back to uuid=null. [ 531.223689][T22971] lo speed is unknown, defaulting to 1000 [ 531.226639][T22971] xfrm0 speed is unknown, defaulting to 1000 [ 531.229335][T22971] wg1 speed is unknown, defaulting to 1000 [ 531.600939][T23022] tipc: Started in network mode [ 531.602807][T23022] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 531.609546][T23022] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 531.613215][T23022] tipc: Enabled bearer , priority 10 [ 532.394723][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.405917][ T5299] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 532.408601][ T5299] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 532.671739][T18102] tipc: Node number set to 1 [ 532.697431][T23130] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 532.847010][T23146] kvm: user requested TSC rate below hardware speed [ 532.934998][T23155] netlink: 40 bytes leftover after parsing attributes in process `syz.7.16592'. [ 533.000137][T23160] macvlan2: entered promiscuous mode [ 533.163538][T23173] lo speed is unknown, defaulting to 1000 [ 533.166067][T23173] xfrm0 speed is unknown, defaulting to 1000 [ 533.169093][T23173] wg1 speed is unknown, defaulting to 1000 [ 533.965820][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16623'. [ 533.969585][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16623'. [ 533.974316][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16623'. [ 533.978033][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16623'. [ 534.084602][T23270] netlink: 'syz.8.16628': attribute type 12 has an invalid length. [ 534.087193][T23270] netlink: 'syz.8.16628': attribute type 29 has an invalid length. [ 534.089830][T23270] netlink: 148 bytes leftover after parsing attributes in process `syz.8.16628'. [ 534.092727][T23270] netlink: 'syz.8.16628': attribute type 1 has an invalid length. [ 534.095262][T23270] netlink: 'syz.8.16628': attribute type 2 has an invalid length. [ 534.097732][T23270] netlink: 11 bytes leftover after parsing attributes in process `syz.8.16628'. [ 534.361402][T23287] lo speed is unknown, defaulting to 1000 [ 534.364008][T23287] xfrm0 speed is unknown, defaulting to 1000 [ 534.368379][T23287] wg1 speed is unknown, defaulting to 1000 [ 534.458167][T23297] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 534.782388][ T5944] Bluetooth: hci0: command 0x1407 tx timeout [ 534.784691][ T5299] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 534.786862][ T5299] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 534.959190][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.967610][ T1417] net_ratelimit: 139 callbacks suppressed [ 534.967627][ T1417] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 534.974994][ T1417] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 536.287866][ T40] kauditd_printk_skb: 182 callbacks suppressed [ 536.287881][ T40] audit: type=1400 audit(1276.618:54758): avc: denied { write } for pid=23405 comm="syz.4.16661" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.306674][ T40] audit: type=1400 audit(1276.627:54759): avc: denied { read } for pid=23405 comm="syz.4.16661" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 536.362127][ T40] audit: type=1400 audit(1276.693:54760): avc: denied { create } for pid=23409 comm="syz.0.16663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.373769][ T40] audit: type=1400 audit(1276.703:54761): avc: denied { write } for pid=23409 comm="syz.0.16663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.385695][ T40] audit: type=1400 audit(1276.703:54762): avc: denied { read } for pid=23409 comm="syz.0.16663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.403790][ T40] audit: type=1400 audit(1276.721:54763): avc: denied { ioctl } for pid=23409 comm="syz.0.16663" path="socket:[157404]" dev="sockfs" ino=157404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.422506][ T40] audit: type=1400 audit(1276.740:54764): avc: denied { ioctl } for pid=23413 comm="syz.4.16664" path="socket:[158166]" dev="sockfs" ino=158166 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 536.447041][ T40] audit: type=1400 audit(1276.768:54765): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=50888 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 536.469623][ T40] audit: type=1400 audit(1276.787:54766): avc: denied { read } for pid=23417 comm="syz.0.16665" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 536.479263][ T40] audit: type=1400 audit(1276.787:54767): avc: denied { open } for pid=23417 comm="syz.0.16665" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 536.625459][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16669'. [ 537.066361][T23482] netlink: 20 bytes leftover after parsing attributes in process `syz.8.16681'. [ 537.078109][T23478] lo speed is unknown, defaulting to 1000 [ 537.082075][T23478] xfrm0 speed is unknown, defaulting to 1000 [ 537.089658][T23478] wg1 speed is unknown, defaulting to 1000 [ 537.095286][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.098001][ T5299] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 537.100635][ T5299] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 537.736485][ T6020] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 537.887759][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16696'. [ 537.891598][T23569] hsr_slave_0: left promiscuous mode [ 537.894966][T23569] hsr_slave_1: left promiscuous mode [ 537.903009][T23571] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 537.906878][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.911643][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.916526][ T6020] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.921952][ T6020] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.925651][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.941159][ T6020] usb 5-1: config 0 descriptor?? [ 538.170725][T23594] bridge2: entered promiscuous mode [ 538.173719][T23594] bridge2: entered allmulticast mode [ 538.181944][T23594] team0: Port device bridge2 added [ 538.188598][T23594] bridge0: port 3(team0) entered blocking state [ 538.200011][T23594] bridge0: port 3(team0) entered disabled state [ 538.202730][T23594] team0: entered allmulticast mode [ 538.214219][T23594] team_slave_0: entered allmulticast mode [ 538.216363][T23594] team_slave_1: entered allmulticast mode [ 538.220378][T23594] team0: entered promiscuous mode [ 538.222198][T23594] team_slave_0: entered promiscuous mode [ 538.224238][T23594] team_slave_1: entered promiscuous mode [ 538.227223][T23594] bridge0: port 3(team0) entered blocking state [ 538.229743][T23594] bridge0: port 3(team0) entered listening state [ 538.301617][T23614] blktrace: Concurrent blktraces are not allowed on loop14 [ 538.384435][ T6020] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 538.393877][ T6020] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 538.562296][T23647] __nla_validate_parse: 1 callbacks suppressed [ 538.562314][T23647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16720'. [ 538.569792][T23647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16720'. [ 538.659504][ T6020] usb 5-1: USB disconnect, device number 12 [ 539.343237][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16733'. [ 539.481519][T23708] bond0: left allmulticast mode [ 539.483275][T23708] bond_slave_0: left allmulticast mode [ 539.485352][T23708] bond_slave_1: left allmulticast mode [ 539.488957][T23708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.492861][T23708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.820585][T23738] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 539.859091][T23743] fuse: Bad value for 'fd' [ 539.985941][T23760] pim6reg1: entered allmulticast mode [ 540.354684][T23781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16765'. [ 540.394194][T23783] can0: slcan on ttyS3. [ 540.645967][T23807] overlayfs: failed to clone upperpath [ 540.671041][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 540.836253][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 540.840753][ T9] usb 5-1: config 0 has no interfaces? [ 540.845017][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 540.848326][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 540.851196][ T9] usb 5-1: Product: syz [ 540.852531][ T9] usb 5-1: Manufacturer: syz [ 540.854078][ T9] usb 5-1: SerialNumber: syz [ 540.857846][ T9] usb 5-1: config 0 descriptor?? [ 541.079281][ T6020] usb 5-1: USB disconnect, device number 13 [ 541.195563][T23783] can0 (unregistered): slcan off ttyS3. [ 541.789061][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 541.789077][ T40] audit: type=1400 audit(1281.778:55000): avc: denied { name_bind } for pid=23852 comm="syz.0.16778" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 541.806044][ T40] audit: type=1400 audit(1281.788:55001): avc: denied { node_bind } for pid=23852 comm="syz.0.16778" saddr=172.20.20.39 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 541.912647][ T40] audit: type=1400 audit(1281.891:55002): avc: denied { read write } for pid=23860 comm="syz.0.16782" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 541.915270][T23861] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 541.922365][ T40] audit: type=1400 audit(1281.891:55003): avc: denied { open } for pid=23860 comm="syz.0.16782" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 541.945136][ T40] audit: type=1400 audit(1281.900:55004): avc: denied { ioctl } for pid=23860 comm="syz.0.16782" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 541.973532][ T40] audit: type=1400 audit(1281.947:55005): avc: denied { read write } for pid=23864 comm="syz.0.16784" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 541.985608][ T40] audit: type=1400 audit(1281.947:55006): avc: denied { open } for pid=23864 comm="syz.0.16784" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 541.996197][ T40] audit: type=1400 audit(1281.956:55007): avc: denied { ioctl } for pid=23864 comm="syz.0.16784" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 542.009445][ T40] audit: type=1400 audit(1281.985:55008): avc: denied { prog_load } for pid=23866 comm="syz.7.16785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 542.017069][ T40] audit: type=1400 audit(1281.985:55009): avc: denied { map_create } for pid=23866 comm="syz.7.16785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 542.166208][T23881] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.16792'. [ 542.518591][T23909] lo speed is unknown, defaulting to 1000 [ 542.521740][T23909] xfrm0 speed is unknown, defaulting to 1000 [ 542.525288][T23909] wg1 speed is unknown, defaulting to 1000 [ 542.763766][T23938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16807'. [ 543.063287][T23958] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16817'. [ 543.168383][T23976] netlink: 59 bytes leftover after parsing attributes in process `syz.8.16823'. [ 543.386228][ T6003] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 543.543878][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 543.547338][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 543.550834][ T6003] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 543.553866][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.559281][ T6003] usb 5-1: config 0 descriptor?? [ 543.785970][ T6003] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 544.076376][T24003] sock: sock_set_timeout: `syz.8.16832' (pid 24003) tries to set negative timeout [ 544.087245][T24001] netlink: 165 bytes leftover after parsing attributes in process `syz.7.16831'. [ 544.208064][T24010] syzkaller1: entered promiscuous mode [ 544.210446][T24010] syzkaller1: entered allmulticast mode [ 544.271749][ T6003] usb 5-1: USB disconnect, device number 14 [ 545.069611][T24084] kvm: MONITOR instruction emulated as NOP! [ 545.472837][ T6020] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 545.632693][ T6020] usb 9-1: Using ep0 maxpacket: 8 [ 545.637981][ T6020] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 545.641271][ T6020] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.644226][ T6020] usb 9-1: Product: syz [ 545.645705][ T6020] usb 9-1: Manufacturer: syz [ 545.647295][ T6020] usb 9-1: SerialNumber: syz [ 545.650502][ T6020] usb 9-1: config 0 descriptor?? [ 545.870332][ T6020] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 545.875579][ T6020] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 545.880912][ T6020] usb 9-1: USB disconnect, device number 20 [ 546.526578][T13103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.537322][T13103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.545687][T13103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.550494][T13103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.553974][T13103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.567430][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.575648][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.581062][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.587000][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.591151][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 546.622310][T24150] lo speed is unknown, defaulting to 1000 [ 546.625984][T24150] xfrm0 speed is unknown, defaulting to 1000 [ 546.628640][T24150] wg1 speed is unknown, defaulting to 1000 [ 546.678290][T24211] syzkaller1: entered promiscuous mode [ 546.683009][T24211] syzkaller1: entered allmulticast mode [ 546.786134][T18075] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 546.833993][T24150] chnl_net:caif_netlink_parms(): no params data found [ 546.897415][T24150] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.899800][T24150] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.902850][T24150] bridge_slave_0: entered allmulticast mode [ 546.906812][T24150] bridge_slave_0: entered promiscuous mode [ 546.911526][T24150] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.914851][T24150] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.917812][T24150] bridge_slave_1: entered allmulticast mode [ 546.923439][T24150] bridge_slave_1: entered promiscuous mode [ 546.944372][T18075] usb 5-1: Using ep0 maxpacket: 8 [ 546.948260][T18075] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.951622][T18075] usb 5-1: config 0 has no interface number 0 [ 546.954620][T18075] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.959156][T18075] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.962192][T24150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.963736][T18075] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.968496][T24150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.971465][T18075] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.981325][T18075] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.985234][T18075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.991780][T18075] usb 5-1: config 0 descriptor?? [ 546.992901][T24150] team0: Port device team_slave_0 added [ 547.000709][T24150] team0: Port device team_slave_1 added [ 547.013027][T18075] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.026999][T24150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.030592][T24150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.043002][T24150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.049250][T24150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.052722][T24150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.063915][T24150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.104230][T24150] hsr_slave_0: entered promiscuous mode [ 547.107189][T24150] hsr_slave_1: entered promiscuous mode [ 547.110090][T24150] debugfs: 'hsr0' already exists in 'hsr' [ 547.112403][T24150] Cannot create hsr debugfs directory [ 547.114472][ T6003] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 547.249076][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 547.249089][ T40] audit: type=1400 audit(1286.901:55178): avc: denied { search } for pid=24474 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.266156][ T40] audit: type=1400 audit(1286.901:55179): avc: denied { search } for pid=24474 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.267794][ T9] usb 5-1: USB disconnect, device number 15 [ 547.268716][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 547.268861][T24156] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 547.274125][ T6003] usb 9-1: Using ep0 maxpacket: 8 [ 547.276451][ T6003] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 547.283945][T24150] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.287059][ T6003] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 547.291417][ T40] audit: type=1400 audit(1286.901:55180): avc: denied { search } for pid=24474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.292289][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 547.294684][ T6003] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.303576][ T40] audit: type=1400 audit(1286.901:55181): avc: denied { search } for pid=24474 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.308888][ T6003] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.316735][ T40] audit: type=1400 audit(1286.901:55182): avc: denied { read open } for pid=24475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.324518][ T6003] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.329863][ T40] audit: type=1400 audit(1286.901:55183): avc: denied { getattr } for pid=24475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.341722][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.359360][ T40] audit: type=1400 audit(1286.929:55184): avc: denied { add_name } for pid=24474 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.367848][ T40] audit: type=1400 audit(1286.929:55185): avc: denied { create } for pid=24474 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 547.379344][ T40] audit: type=1400 audit(1286.929:55186): avc: denied { write open } for pid=24474 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth13.link" dev="tmpfs" ino=18433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 547.390052][ T40] audit: type=1400 audit(1286.929:55187): avc: denied { append } for pid=24474 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" dev="tmpfs" ino=18433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 547.445300][T24150] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.530738][T24150] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.572443][ T6003] usb 9-1: usb_control_msg returned -32 [ 547.575259][ T6003] usbtmc 9-1:16.0: can't read capabilities [ 547.605751][ T6003] usb 9-1: USB disconnect, device number 21 [ 547.642299][T24150] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.787459][T24150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.792268][T24150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.797020][T24150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.803973][T24150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.881411][T24568] Invalid argument reading file caps for ./file0 [ 547.891825][T24150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.909842][T24150] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.917070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.920086][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.938693][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.941632][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.142752][T24590] netlink: 80 bytes leftover after parsing attributes in process `syz.7.16897'. [ 548.186759][T24150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.454704][T24150] veth0_vlan: entered promiscuous mode [ 548.462824][T24150] veth1_vlan: entered promiscuous mode [ 548.494348][T24150] veth0_macvtap: entered promiscuous mode [ 548.499583][T24150] veth1_macvtap: entered promiscuous mode [ 548.514277][T24150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.520561][T24150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.529780][ T130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.538846][ T130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.542796][ T130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.545624][ T130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.600407][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.603087][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.635018][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.640114][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.712736][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16873'. [ 548.727300][T24656] netlink: 'syz.6.16873': attribute type 30 has an invalid length. [ 548.734358][ T11] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 548.750701][ T1144] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.751312][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16873'. [ 548.754105][ T1144] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.754141][ T1144] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.757944][T24656] netlink: 'syz.6.16873': attribute type 30 has an invalid length. [ 548.770124][T13103] Bluetooth: hci0: command tx timeout [ 548.774738][ T1144] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.904945][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 548.908953][ T11] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 548.912784][ T11] usb 9-1: config 0 has no interface number 0 [ 548.917148][ T11] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.921777][ T11] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 548.929044][ T11] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.933606][ T11] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.956131][ T11] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 548.960600][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.968993][ T11] usb 9-1: config 0 descriptor?? [ 548.975769][ T11] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 549.986701][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16936'. [ 550.183997][ T39] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 550.345695][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.349512][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.353071][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.357491][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.360608][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.369243][ T39] usb 5-1: config 0 descriptor?? [ 550.491145][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16940'. [ 550.496451][T24785] netlink: 'syz.7.16940': attribute type 5 has an invalid length. [ 550.499733][T24785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16940'. [ 550.508352][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16940'. [ 550.512215][T24785] netlink: 'syz.7.16940': attribute type 5 has an invalid length. [ 550.525077][T24785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16940'. [ 550.830210][ T39] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 550.983546][T13103] Bluetooth: hci0: command tx timeout [ 551.032541][ T39] usb 5-1: USB disconnect, device number 16 [ 551.411720][ T39] usb 9-1: USB disconnect, device number 22 [ 551.416921][ T39] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 551.666273][ T6003] e1000 0000:00:06.0 eth0: Reset adapter [ 551.767730][T24857] Bluetooth: MGMT ver 1.23 [ 551.769717][T24857] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 551.827791][T24864] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.16956'. [ 553.200511][T13103] Bluetooth: hci0: command tx timeout [ 553.467773][ T40] kauditd_printk_skb: 269 callbacks suppressed [ 553.467785][ T40] audit: type=1400 audit(1292.736:55457): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 553.478706][ T40] audit: type=1400 audit(1292.736:55458): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 553.968771][ T6003] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 555.417594][T13103] Bluetooth: hci0: command tx timeout [ 555.420427][ T40] audit: type=1400 audit(1294.575:55459): avc: denied { recv } for pid=13103 comm="kworker/u33:1" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 569.112531][ T40] audit: type=1400 audit(1307.410:55460): avc: denied { recv } for pid=5456 comm="syz-executor" saddr=10.0.2.2 src=39558 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 569.126275][ T40] audit: type=1400 audit(1307.410:55461): avc: denied { map_read map_write } for pid=24909 comm="syz.0.16957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.137144][ T40] audit: type=1400 audit(1307.419:55462): avc: denied { create } for pid=24913 comm="syz.6.16959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 569.145354][ T40] audit: type=1400 audit(1307.419:55463): avc: denied { setopt } for pid=24913 comm="syz.6.16959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 569.155361][ T40] audit: type=1400 audit(1307.438:55464): avc: denied { create } for pid=24917 comm="syz.7.16960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 569.183265][ T40] audit: type=1400 audit(1307.438:55465): avc: denied { setopt } for pid=24917 comm="syz.7.16960" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 569.193130][ T40] audit: type=1400 audit(1307.438:55466): avc: denied { connect } for pid=24917 comm="syz.7.16960" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 569.203227][ T40] audit: type=1400 audit(1307.438:55467): avc: denied { write } for pid=24917 comm="syz.7.16960" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 569.213463][ T40] audit: type=1400 audit(1307.466:55468): avc: denied { prog_load } for pid=24919 comm="syz.0.16961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.224265][ T40] audit: type=1400 audit(1307.485:55469): avc: denied { read write } for pid=24925 comm="syz.6.16962" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 569.246166][T24932] netlink: 'syz.7.16964': attribute type 22 has an invalid length. [ 569.249519][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16964'. [ 569.254309][T24932] netlink: 'syz.7.16964': attribute type 22 has an invalid length. [ 569.257000][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16964'. [ 569.498049][ T39] page_pool_release_retry() stalled pool shutdown: id 162, 1 inflight 60 sec [ 569.623101][T24956] kvm: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc1) = 0xf4 [ 569.628856][T24956] kvm: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc2) = 0xdb [ 569.653806][T24956] kvm: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe702135 [ 569.678368][T24956] kvm: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x186) = 0xdb [ 569.681831][T24956] kvm: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x187) = 0x90 [ 569.706628][T24956] kvm_intel: kvm [24955]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x1d9) = 0xea [ 570.303206][T24986] input: syz0 as /devices/virtual/input/input54 [ 570.409718][T24999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16984'. [ 570.427464][ C3] bridge0: port 3(team0) entered learning state [ 570.500157][T24999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16984'. [ 570.710293][T25036] overlay: filesystem on ./bus is read-only [ 570.916413][T25065] netlink: 64 bytes leftover after parsing attributes in process `syz.7.17005'. [ 570.992486][T25075] /dev/nullb0: Can't lookup blockdev [ 571.021914][ T29] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 571.195006][ T29] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.199879][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.204497][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.209080][ T29] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.214364][ T29] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.218025][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.223270][ T29] usb 11-1: config 0 descriptor?? [ 571.224354][ T34] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 571.396415][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.399786][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.402907][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.407631][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.410676][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.415567][ T34] usb 9-1: config 0 descriptor?? [ 571.499211][T25086] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 571.661745][ T29] hid_parser_main: 5 callbacks suppressed [ 571.661758][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.666677][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.669104][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.671431][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.674485][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.677455][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.680063][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.682443][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.685615][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.688344][ T29] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 571.697117][ T29] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 571.875168][ T34] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 571.958085][ T34] usb 11-1: USB disconnect, device number 2 [ 572.082768][ T11] usb 9-1: USB disconnect, device number 23 [ 572.127136][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17024'. [ 572.130362][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17024'. [ 572.134433][T25158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17024'. [ 572.137325][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17024'. [ 572.858927][T25189] netlink: 44 bytes leftover after parsing attributes in process `syz.7.17036'. [ 573.227885][T25223] lo speed is unknown, defaulting to 1000 [ 573.230989][T25223] xfrm0 speed is unknown, defaulting to 1000 [ 573.234457][T25223] wg1 speed is unknown, defaulting to 1000 [ 573.563416][T25274] overlayfs: failed to clone upperpath [ 574.071261][T25315] netlink: 'syz.0.17073': attribute type 21 has an invalid length. [ 574.076300][T25315] netlink: 'syz.0.17073': attribute type 21 has an invalid length. [ 574.144305][T25322] fuse: Bad value for 'fd' [ 574.502145][ T40] kauditd_printk_skb: 179 callbacks suppressed [ 574.502160][ T40] audit: type=1400 audit(1312.467:55649): avc: denied { write } for pid=25339 comm="syz.0.17081" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.784837][ T6002] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 574.802322][ T40] audit: type=1400 audit(1312.748:55650): avc: denied { name_bind } for pid=25356 comm="syz.4.17086" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 574.812007][ T40] audit: type=1400 audit(1312.748:55651): avc: denied { node_bind } for pid=25356 comm="syz.4.17086" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 574.872244][ T40] audit: type=1400 audit(1312.823:55652): avc: denied { ioctl } for pid=25339 comm="syz.0.17081" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.958816][ T40] audit: type=1400 audit(1312.898:55653): avc: denied { recv } for pid=5901 comm="syz-executor" saddr=127.0.0.1 src=50888 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 574.969063][ T6002] usb 5-1: Using ep0 maxpacket: 8 [ 574.973086][ T6002] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 574.975980][ T40] audit: type=1400 audit(1312.908:55654): avc: denied { read write } for pid=25358 comm="syz.6.17087" name="userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.985155][ T6002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 574.986937][ T40] audit: type=1400 audit(1312.908:55655): avc: denied { open } for pid=25358 comm="syz.6.17087" path="/dev/userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.989968][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 575.003108][ T6002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 575.007505][ T6002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 575.011675][ T6002] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.016709][ T6002] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.020583][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.251563][ T6002] usb 5-1: usb_control_msg returned -32 [ 575.254905][ T6002] usbtmc 5-1:16.0: can't read capabilities [ 575.266701][ T40] audit: type=1400 audit(1313.189:55656): avc: denied { create } for pid=25368 comm="syz.7.17089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 575.277657][ T40] audit: type=1400 audit(1313.198:55657): avc: denied { ioctl } for pid=25368 comm="syz.7.17089" path="socket:[166095]" dev="sockfs" ino=166095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 575.314430][ T40] audit: type=1400 audit(1313.227:55658): avc: denied { recv } for pid=5901 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50888 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 575.630196][T25404] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 575.634676][T25404] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 575.639316][T18075] usb 5-1: USB disconnect, device number 17 [ 575.704781][T25423] ================================================================== [ 575.707375][T25423] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 575.710189][T25423] Read of size 8 at addr ffff8880408f7080 by task syz.7.17104/25423 [ 575.714242][T25423] [ 575.715933][T25423] CPU: 2 UID: 0 PID: 25423 Comm: syz.7.17104 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.715952][T25423] Tainted: [L]=SOFTLOCKUP [ 575.715956][T25423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 575.715963][T25423] Call Trace: [ 575.715969][T25423] [ 575.715974][T25423] dump_stack_lvl+0x100/0x190 [ 575.715995][T25423] print_report+0x156/0x4c9 [ 575.716012][T25423] ? __virt_addr_valid+0x81/0x620 [ 575.716028][T25423] ? __phys_addr+0xe8/0x180 [ 575.716044][T25423] ? __list_add_valid_or_report+0x105/0x130 [ 575.716057][T25423] kasan_report+0xdf/0x1e0 [ 575.716075][T25423] ? __list_add_valid_or_report+0x105/0x130 [ 575.716088][T25423] __list_add_valid_or_report+0x105/0x130 [ 575.716101][T25423] clone_mnt+0x633/0x930 [ 575.716118][T25423] copy_tree+0xfc/0xbf0 [ 575.716129][T25423] ? __pfx_down_write+0x10/0x10 [ 575.716157][T25423] copy_mnt_ns+0x2bd/0xc30 [ 575.716170][T25423] ? create_new_namespaces+0x30/0xac0 [ 575.716186][T25423] ? rcu_is_watching+0x12/0xc0 [ 575.716199][T25423] create_new_namespaces+0xd3/0xac0 [ 575.716214][T25423] ? bpf_lsm_capable+0x9/0x10 [ 575.716224][T25423] ? security_capable+0x80/0x260 [ 575.716255][T25423] copy_namespaces+0x468/0x5e0 [ 575.716271][T25423] copy_process+0x3226/0x7a10 [ 575.716288][T25423] ? __pfx_copy_process+0x10/0x10 [ 575.716304][T25423] ? tomoyo_path_number_perm+0x188/0x580 [ 575.716324][T25423] kernel_clone+0xfc/0x9a0 [ 575.716339][T25423] ? __pfx_kernel_clone+0x10/0x10 [ 575.716355][T25423] ? __lock_acquire+0x4a5/0x2630 [ 575.716376][T25423] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 575.716422][T25423] __do_sys_clone+0xd9/0x120 [ 575.716437][T25423] ? __pfx___do_sys_clone+0x10/0x10 [ 575.716452][T25423] ? do_raw_spin_lock+0x128/0x260 [ 575.716467][T25423] ? kcov_ioctl+0x16a/0x720 [ 575.716483][T25423] do_syscall_64+0x106/0xf80 [ 575.716494][T25423] ? clear_bhb_loop+0x40/0x90 [ 575.716507][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.716518][T25423] RIP: 0033:0x7fb3ca79c629 [ 575.716529][T25423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.716540][T25423] RSP: 002b:00007fb3cb6b4fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 575.716552][T25423] RAX: ffffffffffffffda RBX: 00007fb3caa15fa0 RCX: 00007fb3ca79c629 [ 575.716559][T25423] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080 [ 575.716566][T25423] RBP: 00007fb3ca832b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.716574][T25423] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 575.716580][T25423] R13: 00007fb3caa16038 R14: 00007fb3caa15fa0 R15: 00007fffee85e2b8 [ 575.716591][T25423] [ 575.716595][T25423] [ 575.805113][T25423] Allocated by task 22476: [ 575.807011][T25423] kasan_save_stack+0x30/0x50 [ 575.809069][T25423] kasan_save_track+0x14/0x30 [ 575.811037][T25423] __kasan_slab_alloc+0x89/0x90 [ 575.813126][T25423] kmem_cache_alloc_noprof+0x241/0x6e0 [ 575.815411][T25423] alloc_vfsmnt+0x23/0x6a0 [ 575.817297][T25423] clone_mnt+0x4b/0x930 [ 575.819090][T25423] copy_tree+0x329/0xbf0 [ 575.820925][T25423] copy_mnt_ns+0x2bd/0xc30 [ 575.822819][T25423] create_new_namespaces+0xd3/0xac0 [ 575.824700][T25423] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 575.826481][T25423] ksys_unshare+0x455/0xab0 [ 575.828345][T25423] __x64_sys_unshare+0x31/0x40 [ 575.830422][T25423] do_syscall_64+0x106/0xf80 [ 575.832462][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.834967][T25423] [ 575.836003][T25423] Freed by task 15: [ 575.837679][T25423] kasan_save_stack+0x30/0x50 [ 575.839750][T25423] kasan_save_track+0x14/0x30 [ 575.841794][T25423] kasan_save_free_info+0x3b/0x70 [ 575.843665][T25423] __kasan_slab_free+0x5f/0x80 [ 575.845110][T25423] kmem_cache_free+0x124/0x6a0 [ 575.846879][T25423] rcu_core+0x5a2/0x10d0 [ 575.848712][T25423] handle_softirqs+0x1eb/0x9e0 [ 575.850690][T25423] run_ksoftirqd+0x38/0x60 [ 575.852612][T25423] smpboot_thread_fn+0x3d3/0xaa0 [ 575.854765][T25423] kthread+0x370/0x450 [ 575.856535][T25423] ret_from_fork+0x754/0xd80 [ 575.858526][T25423] ret_from_fork_asm+0x1a/0x30 [ 575.860569][T25423] [ 575.861597][T25423] Last potentially related work creation: [ 575.863982][T25423] kasan_save_stack+0x30/0x50 [ 575.866029][T25423] kasan_record_aux_stack+0xa7/0xc0 [ 575.868206][T25423] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 575.870758][T25423] task_work_run+0x150/0x240 [ 575.872714][T25423] do_exit+0x829/0x2aa0 [ 575.874487][T25423] do_group_exit+0xd5/0x2a0 [ 575.876449][T25423] get_signal+0x1ec7/0x21e0 [ 575.878400][T25423] arch_do_signal_or_restart+0x91/0x7a0 [ 575.880765][T25423] exit_to_user_mode_loop+0x86/0x4a0 [ 575.883009][T25423] do_syscall_64+0x67c/0xf80 [ 575.884924][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.886799][T25423] [ 575.887722][T25423] Second to last potentially related work creation: [ 575.890057][T25423] kasan_save_stack+0x30/0x50 [ 575.891661][T25423] kasan_record_aux_stack+0xa7/0xc0 [ 575.893268][T25423] task_work_add+0x28b/0x3b0 [ 575.894678][T25423] mntput_no_expire_slowpath+0x3da/0xb00 [ 575.896532][T25423] mntput_no_expire+0x1fd/0x220 [ 575.898076][T25423] namespace_unlock+0x675/0x920 [ 575.899622][T25423] put_mnt_ns+0x290/0x300 [ 575.901010][T25423] switch_task_namespaces+0x133/0x2c0 [ 575.902713][T25423] do_exit+0x824/0x2aa0 [ 575.904031][T25423] do_group_exit+0xd5/0x2a0 [ 575.905513][T25423] get_signal+0x1ec7/0x21e0 [ 575.906958][T25423] arch_do_signal_or_restart+0x91/0x7a0 [ 575.908712][T25423] exit_to_user_mode_loop+0x86/0x4a0 [ 575.910448][T25423] do_syscall_64+0x67c/0xf80 [ 575.912114][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.913992][T25423] [ 575.914768][T25423] The buggy address belongs to the object at ffff8880408f6fc0 [ 575.914768][T25423] which belongs to the cache mnt_cache of size 352 [ 575.919095][T25423] The buggy address is located 192 bytes inside of [ 575.919095][T25423] freed 352-byte region [ffff8880408f6fc0, ffff8880408f7120) [ 575.923725][T25423] [ 575.924500][T25423] The buggy address belongs to the physical page: [ 575.927019][T25423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880408f6e00 pfn:0x408f6 [ 575.930149][T25423] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.932842][T25423] memcg:ffff888036029401 [ 575.934184][T25423] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 575.937030][T25423] page_type: f5(slab) [ 575.938350][T25423] raw: 00fff00000000240 ffff88801d6ac280 ffffea0000ea2b10 ffffea0000af7e90 [ 575.941050][T25423] raw: ffff8880408f6e00 000000080012000f 00000000f5000000 ffff888036029401 [ 575.943722][T25423] head: 00fff00000000240 ffff88801d6ac280 ffffea0000ea2b10 ffffea0000af7e90 [ 575.946511][T25423] head: ffff8880408f6e00 000000080012000f 00000000f5000000 ffff888036029401 [ 575.949343][T25423] head: 00fff00000000001 ffffea0001023d81 00000000ffffffff 00000000ffffffff [ 575.952064][T25423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 575.954909][T25423] page dumped because: kasan: bad access detected [ 575.957179][T25423] page_owner tracks the page as allocated [ 575.959018][T25423] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5931, tgid 5931 (syz-executor), ts 54285206942, free_ts 54178778142 [ 575.965589][T25423] post_alloc_hook+0x153/0x170 [ 575.967265][T25423] get_page_from_freelist+0x111d/0x3140 [ 575.969166][T25423] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 575.971130][T25423] new_slab+0xa6/0x6d0 [ 575.972437][T25423] refill_objects+0x26b/0x400 [ 575.973953][T25423] __pcs_replace_empty_main+0x19f/0x600 [ 575.975933][T25423] kmem_cache_alloc_noprof+0x480/0x6e0 [ 575.977927][T25423] alloc_vfsmnt+0x23/0x6a0 [ 575.979415][T25423] clone_mnt+0x4b/0x930 [ 575.980992][T25423] copy_tree+0x329/0xbf0 [ 575.982399][T25423] __do_loopback+0x2fc/0x520 [ 575.983871][T25423] path_mount+0x1967/0x23d0 [ 575.985606][T25423] __x64_sys_mount+0x293/0x310 [ 575.987526][T25423] do_syscall_64+0x106/0xf80 [ 575.989078][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.991227][T25423] page last free pid 33 tgid 33 stack trace: [ 575.993473][T25423] __free_frozen_pages+0x7e1/0x10d0 [ 575.995302][T25423] rcu_core+0x5a2/0x10d0 [ 575.996695][T25423] handle_softirqs+0x1eb/0x9e0 [ 575.998245][T25423] run_ksoftirqd+0x38/0x60 [ 575.999894][T25423] smpboot_thread_fn+0x3d3/0xaa0 [ 576.001893][T25423] kthread+0x370/0x450 [ 576.003525][T25423] ret_from_fork+0x754/0xd80 [ 576.005377][T25423] ret_from_fork_asm+0x1a/0x30 [ 576.007199][T25423] [ 576.008152][T25423] Memory state around the buggy address: [ 576.010359][T25423] ffff8880408f6f80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 576.013528][T25423] ffff8880408f7000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.016718][T25423] >ffff8880408f7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.019884][T25423] ^ [ 576.021515][T25423] ffff8880408f7100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 576.024677][T25423] ffff8880408f7180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.027443][T25423] ================================================================== [ 576.042901][T25423] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 576.045264][T25423] CPU: 3 UID: 0 PID: 25423 Comm: syz.7.17104 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.049209][T25423] Tainted: [L]=SOFTLOCKUP [ 576.050920][T25423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.055190][T25423] Call Trace: [ 576.056560][T25423] [ 576.057752][T25423] dump_stack_lvl+0x100/0x190 [ 576.059630][T25423] vpanic+0x552/0x970 [ 576.061261][T25423] ? __pfx_vpanic+0x10/0x10 [ 576.063051][T25423] ? __list_add_valid_or_report+0x105/0x130 [ 576.065404][T25423] panic+0xd1/0xe0 [ 576.066941][T25423] ? __pfx_panic+0x10/0x10 [ 576.068556][T25423] ? __list_add_valid_or_report+0x105/0x130 [ 576.070546][T25423] ? preempt_schedule_common+0x42/0xc0 [ 576.072334][T25423] check_panic_on_warn.cold+0x19/0x34 [ 576.074172][T25423] end_report.part.0+0x3a/0x90 [ 576.075803][T25423] kasan_report.cold+0xe/0x18 [ 576.077543][T25423] ? __list_add_valid_or_report+0x105/0x130 [ 576.079405][T25423] __list_add_valid_or_report+0x105/0x130 [ 576.081677][T25423] clone_mnt+0x633/0x930 [ 576.083242][T25423] copy_tree+0xfc/0xbf0 [ 576.084599][T25423] ? __pfx_down_write+0x10/0x10 [ 576.086180][T25423] copy_mnt_ns+0x2bd/0xc30 [ 576.087621][T25423] ? create_new_namespaces+0x30/0xac0 [ 576.089494][T25423] ? rcu_is_watching+0x12/0xc0 [ 576.091024][T25423] create_new_namespaces+0xd3/0xac0 [ 576.092732][T25423] ? bpf_lsm_capable+0x9/0x10 [ 576.094248][T25423] ? security_capable+0x80/0x260 [ 576.095849][T25423] copy_namespaces+0x468/0x5e0 [ 576.097435][T25423] copy_process+0x3226/0x7a10 [ 576.098977][T25423] ? __pfx_copy_process+0x10/0x10 [ 576.100629][T25423] ? tomoyo_path_number_perm+0x188/0x580 [ 576.102418][T25423] kernel_clone+0xfc/0x9a0 [ 576.104005][T25423] ? __pfx_kernel_clone+0x10/0x10 [ 576.105751][T25423] ? __lock_acquire+0x4a5/0x2630 [ 576.107348][T25423] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 576.108949][T25423] __do_sys_clone+0xd9/0x120 [ 576.110356][T25423] ? __pfx___do_sys_clone+0x10/0x10 [ 576.111894][T25423] ? do_raw_spin_lock+0x128/0x260 [ 576.113879][T25423] ? kcov_ioctl+0x16a/0x720 [ 576.115703][T25423] do_syscall_64+0x106/0xf80 [ 576.117621][T25423] ? clear_bhb_loop+0x40/0x90 [ 576.119583][T25423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.122088][T25423] RIP: 0033:0x7fb3ca79c629 [ 576.124009][T25423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.131845][T25423] RSP: 002b:00007fb3cb6b4fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 576.135175][T25423] RAX: ffffffffffffffda RBX: 00007fb3caa15fa0 RCX: 00007fb3ca79c629 [ 576.138439][T25423] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080 [ 576.141607][T25423] RBP: 00007fb3ca832b39 R08: 0000000000000000 R09: 0000000000000000 [ 576.144514][T25423] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 576.146955][T25423] R13: 00007fb3caa16038 R14: 00007fb3caa15fa0 R15: 00007fffee85e2b8 [ 576.149464][T25423] [ 576.151208][T25423] Kernel Offset: disabled [ 576.152606][T25423] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:52:59 Registers: info registers vcpu 0 CPU#0 RAX=00000000002bcebf RBX=ffffffff8e4975c0 RCX=ffffffff8b8f7c75 RDX=0000000000000000 RSI=ffffffff8de71e08 RDI=ffffffff8c1aefa0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d96410 R15=0000000000000000 RIP=ffffffff8b8f65df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6348000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000002b110000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000afe8 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000002fefce0 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe166f2a56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe166f2a56 00007ffe166f2a5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faff783319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faff78331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faff7833343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faff78331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000007c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000007c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000010 RBX=ffff88802b368540 RCX=0000000000000004 RDX=ffff88802b6b2480 RSI=ffffc9000013d134 RDI=ffff88802b6b2480 RBP=ffff88802b1c0028 RSP=ffffc90003a7f088 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000004 R11=0000000000000060 R12=ffffc9000013d100 R13=ffff88802b36859c R14=ffff88802b368548 R15=0000000000000004 RIP=ffffffff8681e9ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe7d8473300 ffffffff 00c00000 GS =0000 ffff8880d6448000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055eecaee8f40 CR3=000000003709d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=eefe9069b04298b2 a97e6d4343a664ca eefe9069b04298b2 a97e6d4343a664ca eefe9069b04298b2 a97e6d4343a664ca eefe9069b04298b2 a97e6d4343a664ca ZMM18=5371eb0da640ae07 8670006e99a6abc4 5371eb0da640ae07 8670006e99a6abc4 5371eb0da640ae07 8670006e99a6abc4 5371eb0da640ae07 8670006e99a6abc4 ZMM19=7353000000000000 0000000000000004 7353000000000000 0000000000000003 7353000000000000 0000000000000002 7353000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000029 336d732863616d68 01ffffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 feff0805b0030008 0005a80300080005 a003000000000000 0000000068736168 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff ffe3080584034c04 000580030008000a 10004c1000060072 ZMM24=6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 6855ff176855ff17 ZMM25=8510369785103697 8510369785103697 8510369785103697 8510369785103697 8510369785103697 8510369785103697 8510369785103697 8510369785103697 ZMM26=7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 7e01ee797e01ee79 ZMM27=ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ae3165b7ae3165b7 ZMM28=000001c0000001bf 000001be000001bd 000001bc000001bb 000001ba000001b9 000001b8000001b7 000001b6000001b5 000001b4000001b3 000001b2000001b1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c6550000c6550000 c6550000c6550000 c6550000c6550000 c6550000c6550000 c6550000c6550000 c6550000c6550000 c6550000c6550000 c6550000c6550000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8578f5c5 RDI=ffffffff9b49d940 RBP=ffffffff9b49d900 RSP=ffffc90021d27318 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3034303838386652 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff8578f560 RIP=ffffffff8578f5ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb3cb6b56c0 ffffffff 00c00000 GS =0000 ffff8880d6548000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb3ca84e9d3 CR3=000000003cc87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000c02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffee85e7a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffee85e7a6 00007fffee85e7ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ca83319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ca8331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ca833343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ca8331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3ca9eb5f8 00007fb3ca9eb5c8 00007fb3ca9eb600 00007fb3ca9eb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000003 RBX=00000000000506ad RCX=ffffffff8281d86d RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000499f478 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000008 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff82089500 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555590d76500 ffffffff 00c00000 GS =0000 ffff8880d6648000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33aad456b8 CR3=0000000044b63000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 367a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7b7cc446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7b7cc446 00007ffe7b7cc44c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33aa03319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33aa0331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33aa033343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33aa0331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000