last executing test programs: 42.188506559s ago: executing program 0 (id=1181): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000100)="0f93930b00660f1bfabaf80c66b8826ba98c66efbafc0cedf08257930f66b9a808000066b85173000066ba000000000f30660f3820216766c744240001a0ff756766c7442402f70000006766c744240600000000670f011c24660f38829b0d00baf80c66b8551b2e8266efbafc0cec66b8010000000f01c1", 0x78}], 0x1, 0x26, &(0x7f0000000180)=[@cstype3={0x5, 0x7}], 0x100000000000007b) ppoll(&(0x7f00000000c0)=[{r1, 0x6}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0x2, @sliced={0x40, [0x3, 0xdc0, 0x80, 0x10, 0x2, 0x4, 0xfffe, 0x2005, 0x8, 0x7, 0x0, 0x5, 0x6, 0x8, 0x6, 0x9, 0x0, 0xfd, 0x401, 0x7, 0x9, 0x7, 0xdf1, 0x400, 0x9, 0x0, 0x1, 0x4, 0x7, 0x9, 0xfff, 0x401, 0x8, 0xcc78, 0x101, 0x8000, 0xaa5, 0x7, 0x81, 0x7ff, 0x7ff, 0x0, 0x0, 0x7ffd, 0x8, 0x9, 0x2, 0xd8], 0x4}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r4, 0x80047437, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 34.272792698s ago: executing program 0 (id=1186): syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x2, 0x0, 0x38, 0x67, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x37, [@multicast2, @multicast2]}]}}, "c36d18473850654078311f27cc83ae58f89301fd"}}}}, &(0x7f0000000380)={0x0, 0x4, [0x555, 0xc8e, 0xd9, 0xfda]}) 34.272520595s ago: executing program 0 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800000000000000080009"], 0x44}}, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4d, 0x7f00}) 34.272255528s ago: executing program 0 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffe4a, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) (async) accept4$alg(r8, 0x0, 0x0, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0xfffd, @any, 0x491, 0x1}, 0xe) (async) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) (async) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 34.250605165s ago: executing program 0 (id=1193): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) 34.250417172s ago: executing program 1 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @fixed}, 0x8) listen(r3, 0x50) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x2) (async) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400090006000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400010020010000000100000000000000000000140006000000000001"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400090006000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400010020010000000100000000000000000000140006000000000001"], 0x40}}, 0x0) 34.250338571s ago: executing program 2 (id=1195): rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x101000, 0xc2, 0x4}, 0x18) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8200, 0x8}, 0x18) openat(r1, &(0x7f0000000100)='./file1\x00', 0x200500, 0x64) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x101000, 0xc2, 0x4}, 0x18) (async) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x2) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8200, 0x8}, 0x18) (async) openat(r1, &(0x7f0000000100)='./file1\x00', 0x200500, 0x64) (async) 34.247840939s ago: executing program 2 (id=1197): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) inotify_init() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="1802000000000000000800000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7fffffff, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pK \x00'}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @generic={0x2, 0x0, 0xd, 0xe, 0x937}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ldst={0x0, 0x3, 0x2, 0xa, 0x1, 0x2, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x9, &(0x7f0000000380)=[r6, r7, r8, r9, r10], &(0x7f00000003c0)=[{0x2, 0x2, 0x9}, {0x5, 0x1, 0x9, 0x6}, {0x4, 0x2, 0xa, 0x1}, {0x3, 0x1, 0x7, 0xa}, {0x0, 0x5, 0x3, 0x9}, {0x4, 0x1, 0x0, 0x2}, {0x4, 0x3, 0x2, 0x3}, {0x2, 0x4, 0x1}, {0x4, 0x1, 0xf}], 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) inotify_init() (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="1802000000000000000800000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7fffffff, 0x8}, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pK \x00'}, 0x20) (async) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') (async) preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x18}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @generic={0x2, 0x0, 0xd, 0xe, 0x937}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ldst={0x0, 0x3, 0x2, 0xa, 0x1, 0x2, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc, r1, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x9, &(0x7f0000000380)=[r6, r7, r8, r9, r10], &(0x7f00000003c0)=[{0x2, 0x2, 0x9}, {0x5, 0x1, 0x9, 0x6}, {0x4, 0x2, 0xa, 0x1}, {0x3, 0x1, 0x7, 0xa}, {0x0, 0x5, 0x3, 0x9}, {0x4, 0x1, 0x0, 0x2}, {0x4, 0x3, 0x2, 0x3}, {0x2, 0x4, 0x1}, {0x4, 0x1, 0xf}], 0x10, 0x6, @void, @value}, 0x94) (async) 34.222621644s ago: executing program 1 (id=1198): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000100)=[{'DIGITAL1', @val={' \'', 'Synth Capture'}}, {'DIGITAL1', @void}], 0x37) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltaction={0x24, 0x31, 0x38ac2e76ffe355d7, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22e881, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0xd, &(0x7f0000000140)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x0, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x3}]}}}}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000380)={[{@grpquota}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sched_rr_get_interval(r4, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, 0x0) 34.219524354s ago: executing program 0 (id=1200): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x1ff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x40800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x4a) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000002000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20048004) 34.149134214s ago: executing program 3 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r8, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) shutdown(r3, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x60}}, 0x4004) 34.148982934s ago: executing program 1 (id=1202): set_mempolicy(0x6, &(0x7f0000000980)=0x800000000000000, 0x6) 34.148762125s ago: executing program 2 (id=1203): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.261112576s ago: executing program 1 (id=1204): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x200, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x0, 0x1, 0x9, 0x3, 0xc, 0xb9, 0x3, 0x3, 0x5, 0x6}, {0x800, 0x5, 0xf6, 0x5, 0x10, 0x2, 0x1, 0x5, 0xa0, 0x6, 0xb, 0x7f, 0x3}, {0x4, 0x1476, 0x38, 0x6, 0x4, 0xe2, 0x0, 0x50, 0x7, 0x60, 0x3, 0x8, 0x6}], 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x5], 0x0, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) 1.260559165s ago: executing program 2 (id=1205): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000400)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500140600fe80000000000000000000000017e09626"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000200)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000000)={@local}) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000140)="9b5f662b7d5632f86babd0c1c91868ec4a9a41ce69238fa574117b2dffffffffffffff00a918fda25f0d6a20e5cb", 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8", 0x3}], 0x1}}], 0x2, 0x60cd894) 1.259981103s ago: executing program 2 (id=1206): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x400042, 0x181) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0xfde06000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) unshare(0x2040400) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000180), 0xb) copy_file_range(r4, &(0x7f0000000080), r3, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) (async, rerun: 32) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)) (rerun: 32) 1.259884549s ago: executing program 2 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff1043000030001280080001006873720024000280050007000000000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="050006"], 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 1.259654289s ago: executing program 1 (id=1208): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='%\x00', 0x0}, 0x30) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x2, 0x0, 0x38, 0x67, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x37, [@multicast2, @multicast2]}]}}, "c36d18473850654078311f27cc83ae58f89301fd"}}}}, &(0x7f0000000380)={0x0, 0x4, [0x555, 0xc8e, 0xd9, 0xfda]}) 1.259503582s ago: executing program 1 (id=1209): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) 1.252786022s ago: executing program 3 (id=1210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x6d49, 0x8, 0x0, 0xa1, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) 1.240131552s ago: executing program 32 (id=1200): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x1ff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x40800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x4a) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, &(0x7f0000002000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20048004) 1.216382453s ago: executing program 33 (id=1209): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) 1.172199136s ago: executing program 34 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff1043000030001280080001006873720024000280050007000000000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="050006"], 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 439.618837ms ago: executing program 3 (id=1214): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_RUN(r4, 0xae80, 0x0) 266.770974ms ago: executing program 3 (id=1215): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x29, 0x5, 0x0) splice(r4, 0x0, r3, 0x0, 0x20000004, 0x0) tkill(r2, 0x7) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7}, [@IFLA_LINK={0x8, 0x2e}]}, 0x28}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x40, 0x0, [{@private}, {@remote}, {@empty}, {@local}]}}) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$inet6(0xa, 0x2, 0xfffffff1) 48.249051ms ago: executing program 3 (id=1216): r0 = socket(0x1, 0x803, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) sendmsg$802154_dgram(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x2, 0x7}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 0s ago: executing program 3 (id=1217): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) (async) r4 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x1000000]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) (async) read$snapshot(r4, 0x0, 0xffffffbf) (async) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000980)) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000010000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008"], 0x12c}}, 0x4) (async) listen(r0, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendto$packet(r6, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97b024a6ea22baafb445bf8427c8055d00", 0xfffffffffffffea8, 0x20008040, 0x0, 0x0) kernel console output (not intermixed with test programs): ntation/mm/remap_file_pages.rst. [ 61.203834][ T6792] efs: device does not support 512 byte blocks [ 61.205606][ T6792] device does not support 512 byte blocks [ 61.205606][ T6792] [ 61.213999][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.215799][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.218453][ T6791] netlink: 332 bytes leftover after parsing attributes in process `syz.3.205'. [ 61.218865][ T30] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 61.223671][ T30] hid-generic 0000:0000:0000.0003: item fetching failed at offset 4/43 [ 61.225891][ T30] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 61.277077][ T5948] Bluetooth: hci1: command tx timeout [ 61.541267][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 61.597538][ T6826] bond1: entered promiscuous mode [ 61.599117][ T6826] bond1: entered allmulticast mode [ 61.600953][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.637581][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 61.640463][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 61.684248][ T6826] bond1 (unregistering): Released all slaves [ 61.960527][ T6867] bpf: Bad value for 'gid' [ 62.342539][ T6888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.592405][ T6904] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 62.660675][ T6910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6910 comm=syz.1.243 [ 62.664287][ T6908] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 62.797895][ T6916] ALSA: seq fatal error: cannot create timer (-19) [ 62.845504][ T6927] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 63.326984][ T30] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 63.488074][ T30] usb 8-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 63.490622][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.492715][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.495325][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.498387][ T30] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 63.500641][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.506049][ T30] hub 8-1:1.0: bad descriptor, ignoring hub [ 63.508427][ T30] hub 8-1:1.0: probe with driver hub failed with error -5 [ 63.510445][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 63.511774][ T30] cdc_wdm 8-1:1.0: skipping garbage [ 63.514294][ T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 63.515793][ T30] cdc_wdm 8-1:1.0: Unknown control protocol [ 63.662203][ T6938] IPVS: length: 120 != 24 [ 63.843411][ T6953] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 63.874961][ T6960] input: syz1 as /devices/virtual/input/input8 [ 63.917269][ T5948] Bluetooth: hci1: command tx timeout [ 64.003849][ T6975] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.066938][ T69] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 64.125580][ T6985] tipc: Started in network mode [ 64.126872][ T6985] tipc: Node identity 7f000001, cluster identity 4711 [ 64.129117][ T6985] tipc: Enabled bearer , priority 10 [ 64.210207][ T6992] __nla_validate_parse: 4 callbacks suppressed [ 64.210222][ T6992] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.266'. [ 64.215161][ T6992] netlink: zone id is out of range [ 64.216772][ T6992] netlink: zone id is out of range [ 64.218575][ T6992] netlink: get zone limit has 8 unknown bytes [ 64.238565][ T69] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.241322][ T69] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.243715][ T69] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 64.245951][ T69] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.249265][ T69] usb 6-1: config 0 descriptor?? [ 64.251567][ T6000] usb 8-1: USB disconnect, device number 4 [ 64.251726][ T6933] cdc_wdm 8-1:1.0: Error autopm - -16 [ 64.335346][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 64.337678][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 64.339921][ T6995] netlink: 'syz.0.267': attribute type 18 has an invalid length. [ 64.386963][ T6000] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 64.478238][ T5969] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 64.536949][ T6000] usb 8-1: Using ep0 maxpacket: 8 [ 64.539489][ T6000] usb 8-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 64.542042][ T6000] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.544245][ T6000] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.547068][ T6000] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.549557][ T6000] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.551808][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.555643][ T6000] hub 8-1:1.0: bad descriptor, ignoring hub [ 64.557501][ T6000] hub 8-1:1.0: probe with driver hub failed with error -5 [ 64.559606][ T6000] cdc_wdm 8-1:1.0: skipping garbage [ 64.560929][ T6000] cdc_wdm 8-1:1.0: skipping garbage [ 64.562689][ T6000] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 64.564444][ T6000] cdc_wdm 8-1:1.0: Unknown control protocol [ 64.629830][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 64.632858][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 64.635729][ T5969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 64.639083][ T5969] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.647870][ T5969] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 64.650156][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.652585][ T5969] usb 7-1: Product: syz [ 64.654002][ T5969] usb 7-1: Manufacturer: syz [ 64.655604][ T5969] usb 7-1: SerialNumber: syz [ 64.658570][ T6957] process 'syz.1.257' launched './file0' with NULL argv: empty string added [ 64.662651][ T5969] usb 7-1: config 0 descriptor?? [ 64.663570][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 64.663580][ T39] audit: type=1400 audit(1734490708.052:526): avc: denied { execute_no_trans } for pid=6956 comm="syz.1.257" path="/64/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.669141][ T6992] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 64.671867][ T39] audit: type=1400 audit(1734490708.062:527): avc: denied { write } for pid=6956 comm="syz.1.257" name="udp" dev="proc" ino=4026533194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.680744][ T69] usbhid 6-1:0.0: can't add hid device: -71 [ 64.682645][ T69] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 64.682651][ T5969] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 64.688139][ T69] usb 6-1: USB disconnect, device number 7 [ 64.757572][ T6933] xt_hashlimit: size too large, truncated to 1048576 [ 64.778616][ T39] audit: type=1400 audit(1734490708.172:528): avc: denied { module_request } for pid=7018 comm="syz.0.268" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.855295][ T39] audit: type=1400 audit(1734490708.242:529): avc: denied { create } for pid=7025 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 64.878663][ T6992] netlink: 76 bytes leftover after parsing attributes in process `syz.2.266'. [ 64.891275][ T69] usb 7-1: USB disconnect, device number 5 [ 64.931116][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.137894][ T30] tipc: Node number set to 2130706433 [ 65.194990][ T7033] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 65.347172][ T5969] usb 8-1: USB disconnect, device number 5 [ 65.645441][ T39] audit: type=1400 audit(1734490709.032:530): avc: denied { append } for pid=7050 comm="syz.1.277" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.651811][ T5948] Bluetooth: min 0 < 6 [ 65.652941][ T39] audit: type=1400 audit(1734490709.042:531): avc: denied { listen } for pid=7050 comm="syz.1.277" path=2F36392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 66.216925][ T69] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.386891][ T69] usb 8-1: Using ep0 maxpacket: 8 [ 66.390009][ T69] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 191, changing to 11 [ 66.393098][ T69] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33865, setting to 1024 [ 66.396548][ T69] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.398824][ T69] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.401692][ T69] usb 8-1: config 0 descriptor?? [ 66.404364][ T7054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.416367][ T7070] evm: overlay not supported [ 66.468428][ T1338] libceph: connect (1)[c::]:6789 error -101 [ 66.470547][ T1338] libceph: mon0 (1)[c::]:6789 connect error [ 66.473699][ T1338] libceph: connect (1)[c::]:6789 error -101 [ 66.475733][ T1338] libceph: mon0 (1)[c::]:6789 connect error [ 66.499894][ T7073] ceph: No mds server is up or the cluster is laggy [ 66.609461][ T69] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 66.642517][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 66.673116][ T39] audit: type=1400 audit(1734490710.062:532): avc: denied { create } for pid=7084 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 66.678729][ T39] audit: type=1400 audit(1734490710.062:533): avc: denied { getopt } for pid=7084 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 66.817326][ T30] usb 8-1: USB disconnect, device number 6 [ 66.830486][ T7100] CIFS: Unable to determine destination address [ 66.839756][ T39] audit: type=1400 audit(1734490710.232:534): avc: denied { setopt } for pid=7088 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.889700][ T39] audit: type=1400 audit(1734490710.282:535): avc: denied { name_connect } for pid=7099 comm="syz.1.289" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 66.972158][ T7104] kvm: pic: non byte write [ 67.161548][ T7113] fuse: Unknown parameter '0x0000000000000003' [ 67.352549][ T7123] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 67.355329][ T7123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.371530][ T7121] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 67.677044][ T5948] Bluetooth: hci2: command tx timeout [ 67.942426][ T7131] tipc: Enabled bearer , priority 10 [ 67.999141][ T7135] netlink: 'syz.2.300': attribute type 16 has an invalid length. [ 68.001122][ T7135] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.300'. [ 68.203142][ T7154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54409 sclass=netlink_route_socket pid=7154 comm=syz.1.305 [ 68.207561][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.305'. [ 68.212070][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.305'. [ 68.280886][ T7161] can: request_module (can-proto-0) failed. [ 68.423506][ T6000] hid (null): bogus close delimiter [ 68.425243][ T6000] hid (null): invalid report_count -497650012 [ 68.439418][ T6000] hid-generic AB60:0002:A5674C3.0004: unknown main item tag 0x3 [ 68.441431][ T6000] hid-generic AB60:0002:A5674C3.0004: unknown main item tag 0x4 [ 68.443434][ T6000] hid-generic AB60:0002:A5674C3.0004: unknown main item tag 0x5 [ 68.445371][ T6000] hid-generic AB60:0002:A5674C3.0004: unknown main item tag 0x1 [ 68.447535][ T6000] hid-generic AB60:0002:A5674C3.0004: bogus close delimiter [ 68.449376][ T6000] hid-generic AB60:0002:A5674C3.0004: item 0 0 2 10 parsing failed [ 68.451491][ T6000] hid-generic AB60:0002:A5674C3.0004: probe with driver hid-generic failed with error -22 [ 68.457274][ T7190] overlayfs: missing 'lowerdir' [ 68.620446][ T7207] can0: slcan on ptm0. [ 68.670507][ T7209] pim6reg1: entered promiscuous mode [ 68.671950][ T7209] pim6reg1: entered allmulticast mode [ 68.674432][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 68.867485][ T7206] can0 (unregistered): slcan off ptm0. [ 69.046049][ T7223] netlink: 'syz.1.325': attribute type 4 has an invalid length. [ 69.085979][ T7227] JFS: discard option not supported on device [ 69.091493][ T7227] syz.3.326: attempt to access beyond end of device [ 69.091493][ T7227] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 69.095609][ T7227] syz.3.326: attempt to access beyond end of device [ 69.095609][ T7227] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 69.101383][ T7227] Mount JFS Failure: -5 [ 69.187461][ T69] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.243143][ T7235] __nla_validate_parse: 2 callbacks suppressed [ 69.243153][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.329'. [ 69.261590][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 69.265812][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 69.327058][ T69] usb 7-1: device descriptor read/64, error -71 [ 69.404452][ T7246] xt_l2tp: v2 tid > 0xffff: 150994944 [ 69.410603][ T7252] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 69.412269][ T7252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.415108][ T7252] vhci_hcd vhci_hcd.0: Device attached [ 69.587471][ T69] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.590125][ T35] vhci_hcd: vhci_device speed not set [ 69.646951][ T35] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 69.667070][ T25] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 69.717175][ T69] usb 7-1: device descriptor read/64, error -71 [ 69.736036][ T7278] fuse: Bad value for 'fd' [ 69.766711][ T7279] fuse: Bad value for 'fd' [ 69.770510][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 69.770519][ T39] audit: type=1400 audit(1734490713.162:555): avc: denied { map } for pid=7276 comm="syz.0.343" path="socket:[16244]" dev="sockfs" ino=16244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.780219][ T39] audit: type=1400 audit(1734490713.162:556): avc: denied { read } for pid=7276 comm="syz.0.343" path="socket:[16244]" dev="sockfs" ino=16244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.828452][ T25] usb 6-1: config 0 has no interfaces? [ 69.830491][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.833720][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.837312][ T69] usb usb7-port1: attempt power cycle [ 69.838343][ T25] usb 6-1: config 0 descriptor?? [ 70.153395][ T7281] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 70.176998][ T69] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.197494][ T69] usb 7-1: device descriptor read/8, error -71 [ 70.227047][ T35] vhci_hcd: vhci_device speed not set [ 70.296963][ T35] usb 39-1: device descriptor read/64, error -71 [ 70.402427][ T7263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.405220][ T7263] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.413307][ T7263] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.417525][ T7263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.419130][ T7263] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.421069][ T7263] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.424354][ T7263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.426541][ T7263] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.430762][ T7263] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.434483][ T7263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.436100][ T7263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.438893][ T7263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.447002][ T69] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 70.468726][ T69] usb 7-1: device descriptor read/8, error -71 [ 70.485845][ T7284] netlink: 88 bytes leftover after parsing attributes in process `syz.3.345'. [ 70.488589][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 70.496987][ T35] vhci_hcd: vhci_device speed not set [ 70.528792][ T7286] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.533897][ T7286] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.566997][ T35] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 70.582831][ T39] audit: type=1400 audit(1734490713.972:557): avc: denied { name_bind } for pid=7290 comm="syz.3.347" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.587130][ T69] usb usb7-port1: unable to enumerate USB device [ 70.655571][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 70.658092][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 70.675611][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=7297 comm=syz.3.348 [ 70.873701][ T7312] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 71.115984][ T7314] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.240307][ T39] audit: type=1400 audit(1734490714.594:558): avc: denied { setopt } for pid=7316 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.250805][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.647002][ T39] audit: type=1400 audit(1734490714.977:559): avc: denied { connect } for pid=7334 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.652780][ T39] audit: type=1400 audit(1734490714.977:560): avc: denied { read } for pid=7334 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.717067][ T7335] input: syz1 as /devices/virtual/input/input11 [ 71.752689][ T39] audit: type=1400 audit(1734490715.080:561): avc: denied { mounton } for pid=7339 comm="syz.0.358" path="/32/file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 71.760307][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.766100][ T39] audit: type=1400 audit(1734490715.089:562): avc: denied { ioctl } for pid=7339 comm="syz.0.358" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.786663][ T39] audit: type=1800 audit(1734490715.108:563): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.358" name="/" dev="9p" ino=2 res=0 errno=0 [ 71.883463][ T39] audit: type=1400 audit(1734490715.192:564): avc: denied { ioctl } for pid=7349 comm="syz.0.361" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.975071][ T7356] tipc: Started in network mode [ 71.976488][ T7356] tipc: Node identity 101, cluster identity 4711 [ 71.978197][ T7356] tipc: Node number set to 257 [ 71.982254][ T7356] i2c i2c-1: Invalid block write size 34 [ 72.008820][ T7354] cdrom: dropping to single frame dma [ 72.144563][ T7370] netlink: 'syz.0.367': attribute type 5 has an invalid length. [ 72.253085][ T7376] netlink: 48671 bytes leftover after parsing attributes in process `syz.0.371'. [ 72.272319][ T7378] loop6: detected capacity change from 0 to 4 [ 72.277562][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.366504][ T7384] netlink: 344 bytes leftover after parsing attributes in process `syz.0.375'. [ 72.517118][ T7393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7393 comm=syz.0.379 [ 72.554909][ T1338] usb 6-1: USB disconnect, device number 8 [ 72.560339][ T7253] vhci_hcd: connection reset by peer [ 72.576951][ T1229] vhci_hcd: stop threads [ 72.578430][ T1229] vhci_hcd: release socket [ 72.584698][ T1229] vhci_hcd: disconnect device [ 72.598258][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 72.612385][ T7395] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 72.614543][ T7395] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 72.617022][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.617097][ T5941] Bluetooth: hci3: command 0x040f tx timeout [ 72.617139][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.625318][ T7395] capability: warning: `syz.3.380' uses deprecated v2 capabilities in a way that may be insecure [ 73.735643][ T7412] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 73.984556][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.093948][ T7415] bond0: Unable to set down delay as MII monitoring is disabled [ 74.237727][ T7433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.247170][ T7433] binfmt_misc: register: failed to install interpreter file ./file0 [ 74.302553][ T7438] Bluetooth: MGMT ver 1.23 [ 74.828513][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.839159][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.839199][ T5944] Bluetooth: hci3: command 0x040f tx timeout [ 74.841645][ T7455] ALSA: mixer_oss: invalid OSS volume '' [ 74.880998][ T7458] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.885099][ T7459] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.887729][ T7458] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.890007][ T7459] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.893590][ T7458] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.897068][ T7458] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 74.924131][ T7461] overlayfs: conflicting options: metacopy=off,verity=on [ 74.927964][ T7461] __nla_validate_parse: 4 callbacks suppressed [ 74.927974][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 75.130458][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 75.130479][ T39] audit: type=1400 audit(1734490718.232:582): avc: denied { connect } for pid=7473 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.136766][ T39] audit: type=1400 audit(1734490718.232:583): avc: denied { read } for pid=7473 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.265921][ T39] audit: type=1400 audit(1734490718.354:584): avc: denied { sqpoll } for pid=7480 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.267684][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.405'. [ 75.299569][ T7486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.410'. [ 75.351456][ T39] audit: type=1400 audit(1734490718.438:585): avc: denied { name_bind } for pid=7489 comm="syz.0.412" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 75.415643][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 75.418834][ T1229] Bluetooth: hci4: Frame reassembly failed (-84) [ 75.457610][ T39] audit: type=1400 audit(1734490718.541:586): avc: denied { create } for pid=7496 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.463866][ T39] audit: type=1400 audit(1734490718.541:587): avc: denied { accept } for pid=7496 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.542453][ T7509] tipc: Enabling of bearer rejected, media not registered [ 75.547326][ T7507] overlayfs: failed to resolve './file0': -2 [ 75.548557][ T7509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.419'. [ 75.552505][ T7509] unsupported nlmsg_type 40 [ 75.577863][ T39] audit: type=1400 audit(1734490718.653:588): avc: denied { create } for pid=7511 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.580670][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 75.583346][ T39] audit: type=1400 audit(1734490718.653:589): avc: denied { write } for pid=7511 comm="syz.0.420" path="socket:[17799]" dev="sockfs" ino=17799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.592276][ T39] audit: type=1400 audit(1734490718.653:590): avc: denied { nlmsg_read } for pid=7511 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.597756][ T39] audit: type=1400 audit(1734490718.653:591): avc: denied { write } for pid=7511 comm="syz.0.420" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.679480][ T7520] trusted_key: encrypted_key: insufficient parameters specified [ 75.755329][ T7532] overlay: ./bus is not a directory [ 75.792728][ T7541] netem: invalid attributes len -24 [ 75.794115][ T7541] netem: change failed [ 75.915702][ T7560] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 75.948764][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 75.964242][ T7567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7567 comm=syz.1.437 [ 76.016508][ T35] vhci_hcd: vhci_device speed not set [ 76.058407][ T7584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.442'. [ 76.207593][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.358211][ T7602] x_tables: duplicate underflow at hook 1 [ 76.439907][ T7607] binfmt_misc: register: failed to install interpreter file ./file0 [ 76.501153][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 76.713568][ T832] cfg80211: failed to load regulatory.db [ 77.052267][ T5948] Bluetooth: hci3: command 0x040f tx timeout [ 77.052281][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.062911][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.214456][ T7637] team0 (unregistering): Port device team_slave_0 removed [ 77.224039][ T7637] team0 (unregistering): Port device team_slave_1 removed [ 77.382836][ T7648] hsr0: entered promiscuous mode [ 77.386562][ T7648] macsec1: entered promiscuous mode [ 77.388531][ T7648] macsec1: entered allmulticast mode [ 77.390210][ T7648] hsr0: entered allmulticast mode [ 77.392234][ T7648] hsr_slave_0: entered allmulticast mode [ 77.394039][ T7648] hsr_slave_1: entered allmulticast mode [ 77.400473][ T7648] hsr0: left allmulticast mode [ 77.402269][ T7648] hsr_slave_0: left allmulticast mode [ 77.404145][ T7648] hsr_slave_1: left allmulticast mode [ 77.554856][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 77.566080][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 77.566122][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 77.678935][ T7681] hub 6-0:1.0: USB hub found [ 77.680330][ T7681] hub 6-0:1.0: 1 port detected [ 77.691166][ T7681] hub 6-0:1.0: USB hub found [ 77.693104][ T7681] hub 6-0:1.0: 1 port detected [ 77.730794][ T7686] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 77.825127][ T7697] bond0: entered promiscuous mode [ 77.826491][ T7697] bond_slave_0: entered promiscuous mode [ 77.828009][ T7697] bond_slave_1: entered promiscuous mode [ 77.856310][ T7706] 9pnet_fd: Insufficient options for proto=fd [ 78.033206][ T7726] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.036257][ T7726] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 78.196199][ T7741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.527379][ T832] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 78.689716][ T832] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.693353][ T832] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 78.697038][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 78.700627][ T832] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.707353][ T832] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 78.710326][ T832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.712643][ T832] usb 8-1: Product: syz [ 78.713890][ T832] usb 8-1: Manufacturer: syz [ 78.715254][ T832] usb 8-1: SerialNumber: syz [ 78.719330][ T832] usb 8-1: config 0 descriptor?? [ 78.721531][ T7760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.726036][ T832] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 78.767723][ C1] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 78.951153][ T30] usb 8-1: USB disconnect, device number 7 [ 79.041279][ T7774] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 79.068906][ T7774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.073510][ T7774] tmpfs: Unknown parameter 'pcr' [ 79.201152][ T7791] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 79.209511][ T7791] capability: warning: `syz.0.500' uses 32-bit capabilities (legacy support in use) [ 79.255144][ T7789] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.276311][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.310538][ T7798] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 79.314482][ T7798] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 79.384046][ T7801] kvm: pic: non byte read [ 79.438000][ T7808] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 79.517984][ T7806] bridge0: port 3(macvlan2) entered blocking state [ 79.520138][ T7806] bridge0: port 3(macvlan2) entered disabled state [ 79.523807][ T7806] macvlan2: entered allmulticast mode [ 79.526379][ T7806] bridge0: entered allmulticast mode [ 79.529822][ T7806] macvlan2: left allmulticast mode [ 79.532364][ T7806] bridge0: left allmulticast mode [ 79.622906][ T7826] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 79.625632][ T7826] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0 [ 79.630628][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.764254][ T7837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.767011][ T7837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 80.068262][ T7877] syz.2.527 (7877) used obsolete PPPIOCDETACH ioctl [ 80.237986][ T5944] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 80.274637][ T7897] netlink: 'syz.2.536': attribute type 5 has an invalid length. [ 80.441107][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 80.634540][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 80.637081][ T30] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.639103][ T30] usb 8-1: config 0 has no interface number 0 [ 80.640621][ T30] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.643309][ T30] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.645813][ T30] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.648026][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.651056][ T30] usb 8-1: config 0 descriptor?? [ 80.655878][ T30] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 80.871902][ T7884] iowarrior 8-1:0.1: Error -90 while submitting URB [ 80.875181][ T7884] __nla_validate_parse: 4 callbacks suppressed [ 80.875190][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 80.888522][ T7884] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 80.894002][ T1338] usb 8-1: USB disconnect, device number 8 [ 81.104441][ T7946] kvm: kvm [7945]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 81.245678][ T7951] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 81.264626][ T39] kauditd_printk_skb: 139 callbacks suppressed [ 81.264637][ T39] audit: type=1400 audit(1734490723.976:731): avc: denied { bind } for pid=7950 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.453976][ T39] audit: type=1400 audit(1734490724.144:732): avc: denied { create } for pid=7978 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 81.463113][ T39] audit: type=1400 audit(1734490724.163:733): avc: denied { sys_admin } for pid=7978 comm="syz.1.557" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 81.499406][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.555884][ T39] audit: type=1400 audit(1734490724.247:734): avc: denied { wake_alarm } for pid=7994 comm="syz.1.563" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.610265][ T7999] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 81.617574][ T39] audit: type=1400 audit(1734490724.303:735): avc: denied { create } for pid=7994 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 81.623988][ T39] audit: type=1400 audit(1734490724.303:736): avc: denied { bind } for pid=7994 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 81.629747][ T39] audit: type=1400 audit(1734490724.303:737): avc: denied { read } for pid=7994 comm="syz.1.563" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.638338][ T39] audit: type=1400 audit(1734490724.303:738): avc: denied { open } for pid=7994 comm="syz.1.563" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.645455][ T39] audit: type=1400 audit(1734490724.303:739): avc: denied { ioctl } for pid=7994 comm="syz.1.563" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.659848][ T39] audit: type=1400 audit(1734490724.303:740): avc: denied { nlmsg_write } for pid=7994 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.740244][ T8011] syz.2.569: attempt to access beyond end of device [ 81.740244][ T8011] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 81.747118][ T8011] qnx4: unable to read the superblock [ 82.009955][ T8029] syzkaller0: entered promiscuous mode [ 82.012072][ T8029] syzkaller0: entered allmulticast mode [ 83.313268][ T8041] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 83.354172][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 83.356447][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 83.358722][ T8043] netlink: 'syz.3.576': attribute type 12 has an invalid length. [ 83.394624][ T8048] set match dimension is over the limit! [ 83.418117][ T8051] xt_l2tp: v2 sid > 0xffff: 150994944 [ 83.654238][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 83.820619][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.842621][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.844515][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.846265][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.848001][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.849868][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.851938][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.853705][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.855452][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.857173][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.858926][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.860608][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.862361][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.864086][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.865850][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.867527][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.869195][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.870888][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.872714][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.874505][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.876187][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.877989][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.879750][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.881484][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.883244][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.885215][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.886935][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.888629][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.890344][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.892484][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.893667][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 83.894559][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.894607][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.898629][ T8093] bond0: option arp_interval: invalid value (18446744073709551615) [ 83.899272][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.901245][ T8093] bond0: option arp_interval: allowed values 0 - 2147483647 [ 83.903499][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.910659][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.912389][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.914354][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.916128][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.917836][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.919561][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.921293][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.923067][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.925346][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.927928][ T8090] infiniband syz2: set down [ 83.928190][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.929289][ T8090] infiniband syz2: added ipvlan1 [ 83.931660][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.935425][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.938056][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.940351][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.942674][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.945040][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.947378][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.955364][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.957755][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.960363][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.962699][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.965011][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.967321][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.969724][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.972029][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.974368][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.976688][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.978107][ T8090] RDS/IB: syz2: added [ 83.979027][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.983082][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.985438][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.987633][ T8090] smc: adding ib device syz2 with port count 1 [ 83.987699][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 83.989822][ T8090] smc: ib device syz2 port 1 has pnetid [ 83.992304][ T5944] Bluetooth: hci3: unexpected event for opcode 0x202f [ 84.022846][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 84.023248][ T8099] syzkaller1: entered promiscuous mode [ 84.026154][ T8099] syzkaller1: entered allmulticast mode [ 84.026527][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.031359][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.034741][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 84.038990][ T35] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 84.042146][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.049047][ T35] usb 5-1: config 0 descriptor?? [ 84.229020][ T8108] syzkaller1: entered promiscuous mode [ 84.230391][ T8108] syzkaller1: entered allmulticast mode [ 84.270497][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.273069][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.278222][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input13 [ 84.315564][ T8124] bridge_slave_0: left allmulticast mode [ 84.317135][ T8124] bridge_slave_0: left promiscuous mode [ 84.320074][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.325798][ T8124] bridge_slave_1: left allmulticast mode [ 84.327258][ T8124] bridge_slave_1: left promiscuous mode [ 84.328846][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.334534][ T8124] bond0: (slave bond_slave_0): Releasing backup interface [ 84.336770][ T8127] binder: 8126:8127 ioctl c018620c 20000140 returned -22 [ 84.339530][ T8124] bond_slave_0: left promiscuous mode [ 84.343137][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 84.350546][ T8124] bond0: (slave bond_slave_1): Releasing backup interface [ 84.351556][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0005/input/input14 [ 84.357224][ T8124] bond_slave_1: left promiscuous mode [ 84.366699][ T35] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 84.371919][ T35] usb 5-1: USB disconnect, device number 4 [ 84.382207][ T8124] team0: Port device team_slave_0 removed [ 84.391940][ T8124] team0: Port device team_slave_1 removed [ 84.394025][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.395879][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.399558][ T8124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.401461][ T8124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.435475][ T8130] team0: Mode changed to "loadbalance" [ 84.437853][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 84.474156][ T5944] Bluetooth: hci0: unexpected event for opcode 0x2036 [ 84.481831][ T8136] bridge0: entered allmulticast mode [ 84.530720][ T8136] bridge0: entered promiscuous mode [ 84.796646][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 84.899566][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.037984][ T35] usb 5-1: device descriptor read/64, error -71 [ 85.241181][ T6000] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.316085][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.320441][ T8182] bridge_slave_0: left allmulticast mode [ 85.322451][ T8182] bridge_slave_0: left promiscuous mode [ 85.324173][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.330410][ T8182] bridge_slave_1: left allmulticast mode [ 85.332085][ T8182] bridge_slave_1: left promiscuous mode [ 85.335360][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.346923][ T8182] bond0: (slave bond_slave_0): Releasing backup interface [ 85.352124][ T8182] bond0: (slave bond_slave_1): Releasing backup interface [ 85.359114][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.361448][ T8182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.366246][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.369411][ T8182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.402705][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.412264][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.415645][ T6000] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 85.418490][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.422290][ T6000] usb 8-1: config 0 descriptor?? [ 85.439503][ T8185] syzkaller0: entered promiscuous mode [ 85.441332][ T8185] syzkaller0: entered allmulticast mode [ 85.476947][ T35] usb 5-1: device descriptor read/64, error -71 [ 85.608038][ T35] usb usb5-port1: attempt power cycle [ 85.671565][ T6000] usbhid 8-1:0.0: can't add hid device: -71 [ 85.673212][ T6000] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 85.682466][ T6000] usb 8-1: USB disconnect, device number 9 [ 85.989489][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.031935][ T35] usb 5-1: device descriptor read/8, error -71 [ 86.278333][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.303120][ T35] usb 5-1: device descriptor read/8, error -71 [ 86.432693][ T35] usb usb5-port1: unable to enumerate USB device [ 86.657532][ T8190] gtp0: entered promiscuous mode [ 86.659282][ T8190] gtp0: entered allmulticast mode [ 86.865571][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 86.865587][ T39] audit: type=1400 audit(1734490729.204:752): avc: denied { connect } for pid=8197 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.256798][ T8206] hid-generic 0003:0627:0001.0001: pid 8206 passed too short report [ 87.371559][ T8194] Set syz1 is full, maxelem 65536 reached [ 87.407435][ T8210] tmpfs: Bad value for 'mpol' [ 87.408940][ T39] audit: type=1400 audit(1734490729.719:753): avc: denied { map } for pid=8209 comm="syz.3.627" path="socket:[21885]" dev="sockfs" ino=21885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.482356][ T8217] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 87.485016][ T8217] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 87.661286][ T39] audit: type=1326 audit(1734490729.953:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.3.631" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9500f85d29 code=0x0 [ 87.774536][ T8226] netlink: 'syz.3.631': attribute type 12 has an invalid length. [ 87.907003][ T39] audit: type=1400 audit(1734490730.187:755): avc: denied { bind } for pid=8242 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 87.944615][ T39] audit: type=1400 audit(1734490730.215:756): avc: denied { bind } for pid=8242 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.950193][ T8226] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 87.996983][ T8249] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 87.999041][ T8249] netlink: 55 bytes leftover after parsing attributes in process `syz.2.637'. [ 88.017092][ T8247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.022146][ T8247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.026286][ T8247] bond0 (unregistering): Released all slaves [ 88.042343][ T8226] bridge0: left promiscuous mode [ 88.043654][ T8226] bridge0: left allmulticast mode [ 88.048847][ T8226] bridge0: entered promiscuous mode [ 88.050340][ T8226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.139588][ T93] smc: removing ib device syz2 [ 88.334512][ T39] audit: type=1400 audit(1734490730.589:757): avc: denied { map } for pid=8268 comm="syz.0.642" path="socket:[23883]" dev="sockfs" ino=23883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.340321][ T39] audit: type=1400 audit(1734490730.589:758): avc: denied { read } for pid=8268 comm="syz.0.642" path="socket:[23883]" dev="sockfs" ino=23883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.395912][ T39] audit: type=1400 audit(1734490730.645:759): avc: denied { accept } for pid=8268 comm="syz.0.642" lport=50385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.402413][ T39] audit: type=1400 audit(1734490730.645:760): avc: denied { getopt } for pid=8268 comm="syz.0.642" lport=50385 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.408279][ T39] audit: type=1400 audit(1734490730.645:761): avc: denied { write } for pid=8268 comm="syz.0.642" lport=50385 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.706431][ T6000] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.839390][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 88.841668][ T8291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 88.846036][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 88.848283][ T8291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'. [ 88.881391][ T6000] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 88.883778][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.885987][ T6000] usb 5-1: Product: syz [ 88.887246][ T6000] usb 5-1: Manufacturer: syz [ 88.888436][ T6000] usb 5-1: SerialNumber: syz [ 88.892353][ T6000] usb 5-1: config 0 descriptor?? [ 88.993609][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 89.110356][ T25] usb 5-1: USB disconnect, device number 9 [ 89.180564][ T30] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.182898][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.184974][ T30] usb 8-1: Product: syz [ 89.186170][ T30] usb 8-1: Manufacturer: syz [ 89.187335][ T30] usb 8-1: SerialNumber: syz [ 89.193348][ T30] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.213632][ T30] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.434697][ T56] usb 8-1: USB disconnect, device number 10 [ 90.319592][ T30] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 90.322131][ T30] ath9k_htc: Failed to initialize the device [ 90.326269][ T56] usb 8-1: ath9k_htc: USB layer deinitialized [ 90.363777][ T8321] ebtables: ebtables: counters copy to user failed while replacing table [ 90.493917][ T8339] netlink: 512 bytes leftover after parsing attributes in process `syz.3.661'. [ 90.647995][ T8359] fuse: Bad value for 'user_id' [ 90.649337][ T8359] fuse: Bad value for 'user_id' [ 90.795280][ T8365] sctp: [Deprecated]: syz.3.669 (pid 8365) Use of int in max_burst socket option. [ 90.795280][ T8365] Use struct sctp_assoc_value instead [ 90.815833][ T8365] syz.3.669 (8365) used greatest stack depth: 19776 bytes left [ 90.822139][ T35] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 90.919167][ T6000] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 91.004730][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.008050][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.010408][ T35] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 91.012686][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.016111][ T35] usb 7-1: config 0 descriptor?? [ 91.079232][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 91.081849][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.084328][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.086804][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.089787][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.093006][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.095323][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.316813][ T6000] usb 6-1: GET_CAPABILITIES returned 0 [ 91.318261][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 91.414942][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 91.450012][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 91.451975][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 91.454590][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 91.456490][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 91.458461][ T35] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 91.461507][ T35] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 91.467029][ T35] cm6533_jd 0003:0D8C:0022.0006: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 91.531660][ T35] usb 6-1: USB disconnect, device number 9 [ 91.619985][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.626395][ T8407] netlink: zone id is out of range [ 91.660544][ T8410] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 91.667694][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.664'. [ 91.670749][ T6000] usb 7-1: USB disconnect, device number 10 [ 91.749941][ T8361] cgroup: Unknown subsys name 'func' [ 91.765658][ T8415] binder: 8414:8415 unknown command 0 [ 91.767012][ T8415] binder: 8414:8415 ioctl c0306201 200001c0 returned -22 [ 91.790546][ T8417] binder: 8414:8417 unknown command 0 [ 91.791954][ T8417] binder: 8414:8417 ioctl c0306201 200001c0 returned -22 [ 92.026187][ T8434] bridge0: port 3(veth0_to_bridge) entered blocking state [ 92.028101][ T8434] bridge0: port 3(veth0_to_bridge) entered disabled state [ 92.030359][ T8434] veth0_to_bridge: entered allmulticast mode [ 92.032474][ T8434] veth0_to_bridge: entered promiscuous mode [ 92.034239][ T8434] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.037967][ T8434] bridge0: port 3(veth0_to_bridge) entered blocking state [ 92.039791][ T8434] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 92.043331][ T8434] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 92.080811][ T8440] netlink: 64 bytes leftover after parsing attributes in process `syz.0.693'. [ 92.080845][ T8439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.693'. [ 92.237567][ T8448] kAFS: unable to lookup cell '/,c¾ûL' [ 92.240021][ T8448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8448 comm=syz.3.696 [ 92.253140][ T8455] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 92.375727][ T8469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8469 comm=syz.1.702 [ 92.400661][ T8471] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 92.418056][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 92.418072][ T39] audit: type=1400 audit(1734490734.405:771): avc: denied { ioctl } for pid=8470 comm="syz.2.703" path="socket:[22197]" dev="sockfs" ino=22197 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.444811][ T8472] gfs2: gfs2 mount does not exist [ 92.475012][ T39] audit: type=1326 audit(1734490734.452:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8480 comm="syz.1.705" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fd385d29 code=0x0 [ 92.531458][ T39] audit: type=1400 audit(1734490734.508:773): avc: denied { open } for pid=8480 comm="syz.1.705" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.569783][ T39] audit: type=1400 audit(1734490734.546:774): avc: denied { read } for pid=8460 comm="syz.0.700" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.576843][ T39] audit: type=1400 audit(1734490734.546:775): avc: denied { open } for pid=8460 comm="syz.0.700" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.583513][ T39] audit: type=1400 audit(1734490734.546:776): avc: denied { ioctl } for pid=8460 comm="syz.0.700" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.621721][ T8501] overlayfs: missing 'lowerdir' [ 92.782102][ T8508] netlink: ct family unspecified [ 92.783397][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.818144][ T39] audit: type=1400 audit(2000000000.074:777): avc: denied { write } for pid=8509 comm="syz.3.713" name="bus" dev="9p" ino=38928578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.824873][ T39] audit: type=1400 audit(2000000000.074:778): avc: denied { open } for pid=8509 comm="syz.3.713" path="/180/file0/bus" dev="9p" ino=38928578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.826952][ T8510] tipc: Enabled bearer , priority 7 [ 92.834770][ T8510] ªªªªªª: renamed from syzkaller0 [ 92.837579][ T8510] tipc: Disabling bearer [ 93.729239][ T39] audit: type=1400 audit(1999999994.982:779): avc: denied { read append } for pid=8540 comm="syz.2.721" name="net_prio.prioidx" dev="9p" ino=38928582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.736731][ T39] audit: type=1400 audit(1999999994.982:780): avc: denied { map } for pid=8540 comm="syz.2.721" path="/216/file0/net_prio.prioidx" dev="9p" ino=38928582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.981827][ T8551] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.989528][ T8551] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 94.279611][ T8596] __nla_validate_parse: 4 callbacks suppressed [ 94.279622][ T8596] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.737'. [ 94.283520][ T8596] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.428615][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.738'. [ 94.460626][ T8601] fuse: Unknown parameter 'fF' [ 94.491618][ T8603] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 94.500806][ T8603] batman_adv: batadv0: Adding interface: team0 [ 94.502465][ T8603] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.509039][ T8603] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 94.513817][ T8603] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 94.516093][ T8603] netlink: 2 bytes leftover after parsing attributes in process `syz.0.740'. [ 94.518400][ T8603] team0: entered promiscuous mode [ 94.519742][ T8603] team_slave_0: entered promiscuous mode [ 94.521405][ T8603] team_slave_1: entered promiscuous mode [ 94.523694][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.526559][ T8603] batman_adv: batadv0: Interface activated: team0 [ 94.528261][ T8603] batman_adv: batadv0: Interface deactivated: team0 [ 94.530007][ T8603] batman_adv: batadv0: Removing interface: team0 [ 94.532421][ T8603] bridge0: port 4(team0) entered blocking state [ 94.534135][ T8603] bridge0: port 4(team0) entered disabled state [ 94.538171][ T8603] team0: entered allmulticast mode [ 94.539469][ T8603] team_slave_0: entered allmulticast mode [ 94.540981][ T8603] team_slave_1: entered allmulticast mode [ 94.543431][ T8603] bridge0: port 4(team0) entered blocking state [ 94.545063][ T8603] bridge0: port 4(team0) entered forwarding state [ 94.605651][ T8607] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.637669][ T8609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64019 sclass=netlink_route_socket pid=8609 comm=syz.0.743 [ 94.818063][ T8621] netlink: 'syz.0.749': attribute type 16 has an invalid length. [ 94.820025][ T8621] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.749'. [ 94.866263][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'. [ 94.977591][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 95.086668][ T5979] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 95.231234][ T5979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.234756][ T5979] usb 6-1: not running at top speed; connect to a high speed hub [ 95.238149][ T5979] usb 6-1: config 254 has an invalid interface number: 72 but max is 0 [ 95.241050][ T5979] usb 6-1: config 254 has no interface number 0 [ 95.243025][ T5979] usb 6-1: config 254 interface 72 altsetting 7 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 95.246271][ T5979] usb 6-1: config 254 interface 72 has no altsetting 0 [ 95.250902][ T5979] usb 6-1: string descriptor 0 read error: -22 [ 95.252552][ T5979] usb 6-1: New USB device found, idVendor=2040, idProduct=b703, bcdDevice=ac.e3 [ 95.254845][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.260528][ T8626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.453567][ T25] usb 6-1: USB disconnect, device number 10 [ 95.863103][ T8639] netlink: 112 bytes leftover after parsing attributes in process `syz.3.756'. [ 96.064220][ T8656] Illegal XDP return value 147091538 on prog (id 198) dev N/A, expect packet loss! [ 96.126408][ T8667] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 96.128977][ T8667] [U] J"—E:ÀÆ" [ 96.183920][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 96.245597][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 96.254783][ T8674] sp0: Synchronizing with TNC [ 96.313518][ T8677] 9pnet_fd: Insufficient options for proto=fd [ 96.794286][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 97.159046][ T8705] netlink: 'syz.1.776': attribute type 1 has an invalid length. [ 97.177821][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.189273][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.191857][ T8705] bond1: (slave batadv1): making interface the new active one [ 97.197383][ T8705] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 97.206926][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 97.318715][ T8737] netlink: 'syz.2.784': attribute type 4 has an invalid length. [ 97.451221][ T8750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=8750 comm=syz.0.788 [ 98.182873][ T8748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.184598][ T8748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.187173][ T8748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.188964][ T8748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.304051][ T8771] binder_alloc: binder_alloc_mmap_handler: 8770 20ffd000-21000000 already mapped failed -16 [ 98.316396][ T8772] binder: BINDER_SET_CONTEXT_MGR already set [ 98.319524][ T8772] binder: 8770:8772 ioctl 4018620d 20000040 returned -16 [ 98.335847][ T8765] syzkaller0: entered promiscuous mode [ 98.337571][ T8765] syzkaller0: entered allmulticast mode [ 98.464128][ T8799] sg_read: process 477 (syz.0.799) changed security contexts after opening file descriptor, this is not allowed. [ 98.573192][ T6000] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 98.578854][ T39] kauditd_printk_skb: 41811 callbacks suppressed [ 98.578870][ T39] audit: type=1800 audit(2000000002.071:42592): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.800" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 98.583183][ T8813] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 98.591918][ T8815] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 98.653634][ T39] audit: type=1400 audit(2000000002.145:42593): avc: denied { ioctl } for pid=8822 comm="syz.2.803" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.727389][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 98.730747][ T6000] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 98.732950][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.736517][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.739231][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.741995][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.754098][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.756513][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.805270][ T8830] tmpfs: Bad value for 'mpol' [ 98.816712][ T8833] xt_hashlimit: size too large, truncated to 1048576 [ 98.865855][ T8840] »»»»»»: renamed from lo (while UP) [ 98.899168][ T39] audit: type=1400 audit(2000000002.418:42594): avc: denied { create } for pid=8837 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.907283][ T39] audit: type=1400 audit(2000000002.418:42595): avc: denied { ioctl } for pid=8837 comm="syz.2.808" path="socket:[26660]" dev="sockfs" ino=26660 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.077218][ T8860] trusted_key: encrypted_key: key trusted:syz not found [ 99.122485][ T8862] __nla_validate_parse: 10 callbacks suppressed [ 99.122497][ T8862] netlink: 1788 bytes leftover after parsing attributes in process `syz.3.814'. [ 99.171235][ T5984] usb 6-1: USB disconnect, device number 11 [ 99.189272][ T8869] raw_sendmsg: syz.3.817 forgot to set AF_INET. Fix it! [ 99.469753][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.919893][ T8886] ebt_limit: overflow, try lower: 570423552/2483027968 [ 100.044234][ T8893] netlink: 277 bytes leftover after parsing attributes in process `syz.0.822'. [ 100.154859][ T5944] Bluetooth: hci3: command 0x040f tx timeout [ 100.154919][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.156501][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.483456][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.818'. [ 100.584784][ T39] audit: type=1400 audit(2000000004.182:42596): avc: denied { connect } for pid=8909 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.586876][ T8912] netlink: 'syz.3.827': attribute type 23 has an invalid length. [ 100.591751][ T39] audit: type=1400 audit(2000000004.182:42597): avc: denied { setopt } for pid=8909 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.678437][ T8917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8917 comm=syz.2.829 [ 100.684416][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 100.696676][ T8917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.755529][ T39] audit: type=1400 audit(2000000004.360:42598): avc: denied { setopt } for pid=8921 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.863340][ T39] audit: type=1400 audit(2000000004.476:42599): avc: denied { remove_name } for pid=8930 comm="syz.2.834" name="file0" dev="9p" ino=38928543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.869936][ T39] audit: type=1400 audit(2000000004.476:42600): avc: denied { rename } for pid=8930 comm="syz.2.834" name="file0" dev="9p" ino=38928543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.901124][ T39] audit: type=1400 audit(2000000004.517:42601): avc: denied { mounton } for pid=8930 comm="syz.2.834" path="/248/file0/file0" dev="9p" ino=38928577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.906882][ T8931] 9pnet_virtio: no channels available for device syz [ 101.106524][ T8950] input: syz0 as /devices/virtual/input/input16 [ 101.108934][ T8952] netlink: 'syz.1.839': attribute type 27 has an invalid length. [ 101.177461][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 101.214636][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.216566][ T8964] loop2: detected capacity change from 0 to 7 [ 101.217818][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.220471][ T8964] Dev loop2: unable to read RDB block 7 [ 101.222614][ T8964] loop2: unable to read partition table [ 101.224236][ T8964] loop2: partition table beyond EOD, truncated [ 101.225937][ T8964] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà) failed (rc=-5) [ 101.269817][ T8964] Dev loop2: unable to read RDB block 7 [ 101.271586][ T8964] loop2: unable to read partition table [ 101.273222][ T8964] loop2: partition table beyond EOD, truncated [ 101.274989][ T8964] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà) failed (rc=-5) [ 101.320924][ T8952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.331754][ T8952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.352233][ T8952] hsr0: left promiscuous mode [ 101.406763][ T8952] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.409189][ T8952] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.411534][ T8952] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.414352][ T8952] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.441314][ T8952] gretap1: left promiscuous mode [ 101.442685][ T8952] gretap1: left allmulticast mode [ 101.456301][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 101.489224][ T8968] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 101.553164][ T8973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.568856][ T8973] netlink: 68 bytes leftover after parsing attributes in process `syz.1.844'. [ 101.623545][ T8988] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.625631][ T8988] overlayfs: failed to set xattr on upper [ 101.627113][ T8988] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.628970][ T8988] overlayfs: ...falling back to index=off. [ 101.631996][ T8988] overlayfs: ...falling back to uuid=null. [ 101.633872][ T8988] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 102.147350][ T9039] netfs: Couldn't get user pages (rc=-14) [ 102.462627][ T9000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.464295][ T9000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.465909][ T9000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.469121][ T9000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.590055][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 102.776140][ T9064] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 102.872202][ T9069] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 102.874836][ T9070] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 103.031788][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 103.047632][ T9082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9082 comm=syz.0.871 [ 103.106626][ T9090] xfrm1: entered allmulticast mode [ 103.153323][ T9093] mkiss: ax0: crc mode is auto. [ 103.186636][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.189176][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.259630][ T9102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=9102 comm=syz.3.876 [ 103.412286][ T35] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.564862][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 103.576040][ T35] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 103.578201][ T35] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 103.580279][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 103.582560][ T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 103.585393][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 40 [ 103.587898][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 103.594825][ T35] usb 5-1: string descriptor 0 read error: -22 [ 103.596530][ T35] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 103.598858][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.602237][ T35] usb 5-1: config 0 descriptor?? [ 103.606179][ T9099] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.608640][ T35] hub 5-1:0.0: bad descriptor, ignoring hub [ 103.610189][ T35] hub 5-1:0.0: probe with driver hub failed with error -5 [ 103.669218][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.908199][ T35] usb 5-1: USB disconnect, device number 10 [ 104.027905][ T39] kauditd_printk_skb: 92 callbacks suppressed [ 104.027917][ T39] audit: type=1400 audit(2000000007.793:42694): avc: denied { bind } for pid=9106 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.066943][ T39] audit: type=1400 audit(2000000007.835:42695): avc: denied { nlmsg_read } for pid=9114 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.068973][ T9115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.880'. [ 104.155339][ T9117] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.197426][ T9122] kvm: user requested TSC rate below hardware speed [ 104.203464][ T9125] kvm: user requested TSC rate below hardware speed [ 104.222840][ T9130] input: syz1 as /devices/virtual/input/input17 [ 104.240813][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 104.241382][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 104.394613][ T39] audit: type=1400 audit(2000000008.171:42696): avc: denied { nlmsg_write } for pid=9135 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 104.422224][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 104.424417][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.428124][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.001562][ T39] audit: type=1800 audit(2000000008.811:42697): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.858" name="bus" dev="9p" ino=38928578 res=0 errno=0 [ 105.043348][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 105.074836][ T9146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4114 sclass=netlink_route_socket pid=9146 comm=syz.3.891 [ 105.150902][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 105.153927][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 105.318091][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'. [ 105.320628][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.896'. [ 105.365646][ T9173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=9173 comm=syz.0.897 [ 105.382497][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 105.392657][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.396255][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 105.399769][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.402332][ T9177] IPv6: NLM_F_CREATE should be set when creating new route [ 105.469276][ T9179] nvme_fabrics: missing parameter 'transport=%s' [ 105.471698][ T9179] nvme_fabrics: missing parameter 'nqn=%s' [ 105.550845][ T9181] pim6reg527: entered allmulticast mode [ 105.639160][ T9207] syz.2.907[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.639216][ T9207] syz.2.907[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.642389][ T9207] syz.2.907[9207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.652017][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 105.669640][ T9211] pimreg: entered allmulticast mode [ 105.707685][ T9220] fuse: Invalid rootmode [ 105.774448][ T39] audit: type=1400 audit(2000000009.630:42698): avc: denied { read } for pid=9226 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 105.863776][ T39] audit: type=1400 audit(2000000009.725:42699): avc: denied { mount } for pid=9237 comm="syz.1.917" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 105.872215][ T9242] bridge0: port 4(team0) entered disabled state [ 105.872598][ T39] audit: type=1400 audit(2000000009.735:42700): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 105.874008][ T9242] bridge0: port 3(veth0_to_bridge) entered disabled state [ 105.882822][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.885111][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.889756][ T9242] bridge0: entered allmulticast mode [ 105.910871][ T39] audit: type=1400 audit(2000000009.777:42701): avc: denied { ioctl } for pid=9244 comm="syz.1.919" path="socket:[27109]" dev="sockfs" ino=27109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.950310][ T9252] overlay: Unknown parameter 'appraise_type' [ 105.987882][ T9256] loop2: detected capacity change from 0 to 7 [ 105.991035][ T9256] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 105.992919][ T9256] loop2: partition table partially beyond EOD, truncated [ 105.995321][ T9256] loop2: p1 size 276741282 extends beyond EOD, truncated [ 106.002139][ T9256] loop2: p2 start 579963744 is beyond EOD, truncated [ 106.068544][ T6027] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 106.074061][ T6027] loop2: partition table partially beyond EOD, truncated [ 106.077091][ T6027] loop2: p1 size 276741282 extends beyond EOD, truncated [ 106.080097][ T6027] loop2: p2 start 579963744 is beyond EOD, truncated [ 106.089321][ T9256] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 106.091267][ T9256] loop2: partition table partially beyond EOD, truncated [ 106.094296][ T9256] loop2: p1 size 276741282 extends beyond EOD, truncated [ 106.100261][ T9256] loop2: p2 start 579963744 is beyond EOD, truncated [ 106.109125][ T5350] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 106.110975][ T9263] syz.3.925: attempt to access beyond end of device [ 106.110975][ T9263] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 106.114163][ T5350] loop2: partition table partially beyond EOD, truncated [ 106.116038][ T5350] loop2: p1 size 276741282 extends beyond EOD, truncated [ 106.119094][ T5350] loop2: p2 start 579963744 is beyond EOD, truncated [ 106.119815][ T9263] overlay: ./file0 is not a directory [ 106.123114][ T9265] overlayfs: disabling nfs_export due to verity=on [ 106.127930][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.143518][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.168062][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.173838][ T9270] SELinux: Context #! ./cgroup/file0 is not valid (left unmapped). [ 106.185591][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.212654][ T39] audit: type=1400 audit(2000000010.081:42702): avc: denied { mount } for pid=9276 comm="syz.3.930" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.218800][ T5948] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 106.229637][ T39] audit: type=1400 audit(2000000010.102:42703): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.479295][ T35] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 106.650742][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 106.655060][ T35] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.658815][ T35] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.661900][ T35] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.666210][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.668533][ T35] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 106.671731][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.676957][ T35] usb 6-1: config 0 descriptor?? [ 106.749343][ T9333] input: syz0 as /devices/virtual/input/input18 [ 106.801271][ T9336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9336 comm=syz.0.944 [ 106.860086][ T9341] binder: 9340:9341 ioctl c018620c 20000140 returned -22 [ 106.980167][ T9374] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 107.108959][ T35] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5010.0007/input/input19 [ 107.187997][ T35] kye 0003:0458:5010.0007: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 107.365494][ T69] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.523586][ T9435] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 107.527518][ T69] usb 5-1: Using ep0 maxpacket: 8 [ 107.531098][ T69] usb 5-1: config 13 has an invalid interface number: 221 but max is 1 [ 107.533184][ T69] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 107.535767][ T69] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 2 [ 107.546054][ T69] usb 5-1: config 13 has no interface number 0 [ 107.547728][ T69] usb 5-1: config 13 interface 221 altsetting 24 endpoint 0x1 has an invalid bInterval 185, changing to 11 [ 107.554664][ T69] usb 5-1: config 13 interface 221 altsetting 24 endpoint 0x1 has invalid maxpacket 8436, setting to 1024 [ 107.558241][ T69] usb 5-1: config 13 interface 221 altsetting 24 has an invalid endpoint descriptor of length 5, skipping [ 107.561137][ T69] usb 5-1: config 13 interface 221 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 107.564468][ T69] usb 5-1: config 13 interface 221 has no altsetting 0 [ 107.568660][ T69] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5f.9c [ 107.571628][ T69] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.573633][ T69] usb 5-1: Product: 直沣蠻躄ꠅá®ã¦ˆå¤¿ãŽ»Ú€ï¤µï”™â›æ˜½è„„༒펔낛뚔믿駦쥋멌쮧顱௼鶉㖙瀒ì¿æ£åŠ¸é‡µå‘¡é§žç©Šì¬€ï²¡è†„㧕ë¹ç²©ä¼·à©“à¸é°šê– ëˆ…â«ê¿ªâ¬–겢㵣쯹㒥ä㌞彴臨銢è¤îŸ¦ç‡’僧贆⯜ﶒꜵê´î²ƒâ£ì繗䛆ì‹àµ£ë™˜í‘œæ›” [ 107.580063][ T69] usb 5-1: Manufacturer: ᱞ [ 107.581340][ T69] usb 5-1: SerialNumber: ダࢂ嶔╸ӷꧤꈣ޳࢛⭱욒툙柿ä‡âžŽî¼¦êª²ê»€àªœä¹•ã›¨ë©¸âœÜ“潴ۃï²îˆšì¸©áº‘瞮뻃躘èڀսꗓ㧓æ”瑇՜佺í¢àª•é„‚笨ᶼ䑳ⵒ鿯䢑ꆗ矼൯늱糔Ᾰá“᳥倞姫᩠ë½å¿ä£ê¤¼âˆ êµžâ“‡ï£žæ½³ì¢´ê¬¡îº‡ë²ˆì«…Çⶶ왪⪛촺瓔äƒéª¸ì›­çŒé‹‚ì‹’ [ 107.783112][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.786166][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.807191][ T9454] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 107.857160][ T9460] virtio-fs: tag <(null)> not found [ 107.863746][ T9460] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.866711][ T9460] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.869660][ T9460] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.873748][ T9460] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.876741][ T9460] geneve2: entered promiscuous mode [ 107.878454][ T9460] geneve2: entered allmulticast mode [ 108.168951][ C3] kye 0003:0458:5010.0007: usb_submit_urb(ctrl) failed: -1 [ 108.311268][ T9490] netlink: 'syz.2.979': attribute type 3 has an invalid length. [ 108.314033][ T5948] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 108.412972][ T9501] input: syz0 as /devices/virtual/input/input20 [ 108.535210][ T9506] xt_hashlimit: size too large, truncated to 1048576 [ 108.535313][ T9507] xt_hashlimit: size too large, truncated to 1048576 [ 108.775494][ T5984] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.777666][ T5984] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 108.829933][ T9522] fuse: Unknown parameter 'ÿ0x0000000000000003' [ 108.836039][ T9521] affs: No valid root block on device nullb0 [ 108.836242][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 108.836252][ T39] audit: type=1400 audit(2000000012.842:42711): avc: denied { create } for pid=9520 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.885384][ T9524] delete_channel: no stack [ 108.923597][ T9528] pim6reg1: entered promiscuous mode [ 108.925133][ T9528] pim6reg1: entered allmulticast mode [ 108.945265][ T9401] usb 6-1: USB disconnect, device number 12 [ 108.956951][ T9528] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 108.975396][ T9528] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.033079][ T39] audit: type=1400 audit(2000000013.052:42712): avc: denied { bind } for pid=9534 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.547786][ T9555] __nla_validate_parse: 3 callbacks suppressed [ 109.547802][ T9555] netlink: 80 bytes leftover after parsing attributes in process `syz.0.998'. [ 109.572137][ T9557] Cannot find del_set index 2 as target [ 109.690748][ T9568] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1003'. [ 109.883888][ T9582] fuse: Bad value for 'fd' [ 109.889161][ T39] audit: type=1400 audit(2000000013.945:42713): avc: denied { create } for pid=9583 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.065460][ T5948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 110.067745][ T5948] Bluetooth: hci1: Injecting HCI hardware error event [ 110.073539][ T5945] Bluetooth: hci1: hardware error 0x00 [ 110.756368][ T5984] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 110.756480][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.758016][ T5984] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 112.052001][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.587672][ T69] ums-cypress 5-1:13.221: USB Mass Storage device detected [ 112.728209][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 112.732922][ T5984] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 112.734530][ T5984] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 112.897976][ T39] audit: type=1400 audit(2000000017.105:42714): avc: denied { connect } for pid=9606 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.910019][ T39] audit: type=1400 audit(2000000017.126:42715): avc: denied { write } for pid=9606 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.924311][ T9616] loop2: detected capacity change from 0 to 524287999 [ 112.950650][ T9622] hsr0: entered promiscuous mode [ 112.952235][ T9622] macsec1: entered promiscuous mode [ 112.953750][ T9622] macsec1: entered allmulticast mode [ 112.955251][ T9622] hsr0: entered allmulticast mode [ 112.956693][ T9622] hsr_slave_0: entered allmulticast mode [ 112.958224][ T9622] hsr_slave_1: entered allmulticast mode [ 112.962246][ T9622] hsr0: left allmulticast mode [ 112.963597][ T9622] hsr_slave_0: left allmulticast mode [ 112.965081][ T9622] hsr_slave_1: left allmulticast mode [ 113.035336][ T9630] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 113.037396][ T9630] netlink: 'syz.1.1016': attribute type 4 has an invalid length. [ 113.039663][ T9630] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1016'. [ 113.070378][ T9636] kAFS: No cell specified [ 113.141656][ T39] audit: type=1400 audit(2000000017.357:42716): avc: denied { watch } for pid=9635 comm="syz.1.1017" path="/193/file0" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.155280][ T39] audit: type=1400 audit(2000000017.357:42717): avc: denied { watch_sb } for pid=9635 comm="syz.1.1017" path="/193/file0" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.176689][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 113.179182][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 113.181624][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 113.183877][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 113.253129][ T39] audit: type=1400 audit(2000000017.472:42718): avc: denied { name_connect } for pid=9659 comm="syz.0.1022" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.259270][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.262251][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.264894][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.267556][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.269910][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.273629][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.276223][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.278741][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.282165][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.284747][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.287177][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.289761][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.292270][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.294835][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.296957][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.298850][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.301227][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.303124][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.305104][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.307008][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.308909][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.312369][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.314307][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.316324][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.318250][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.320631][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.322566][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.324552][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.326573][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.328869][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.330776][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.332707][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.334631][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.336572][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.339486][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.341431][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 113.347649][ T30] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 113.495243][ T39] audit: type=1400 audit(2000000017.734:42719): avc: denied { write } for pid=9689 comm="syz.3.1027" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.060177][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 114.143553][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 114.158429][ T9720] overlayfs: missing 'workdir' [ 114.398628][ T39] audit: type=1400 audit(2000000018.690:42720): avc: denied { map } for pid=9733 comm="syz.0.1038" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.457063][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.459472][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.974168][ T39] audit: type=1326 audit(2000000019.288:42721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9739 comm="syz.2.1040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ae785d29 code=0x0 [ 115.121302][ T9747] overlayfs: unescaped trailing colons in lowerdir mount option. [ 115.218593][ T9761] overlayfs: failed to resolve './file1': -2 [ 115.236009][ T9771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 115.268453][ T9775] binder: 9768:9775 ioctl 890b 20000040 returned -22 [ 115.580018][ T9786] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 115.614551][ T6000] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 115.769212][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.772817][ T6000] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.776000][ T6000] usb 8-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 115.793450][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.800507][ T6000] usb 8-1: config 0 descriptor?? [ 115.838927][ T9799] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.841321][ T9799] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.843684][ T9799] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.845999][ T9799] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.014279][ T6000] usb 8-1: USB disconnect, device number 11 [ 116.214567][ T9824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25112 sclass=netlink_route_socket pid=9824 comm=syz.1.1062 [ 116.246201][ T39] audit: type=1400 audit(2000000020.621:42722): avc: denied { connect } for pid=9825 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.696092][ T9853] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 116.831394][ T39] audit: type=1400 audit(2000000021.230:42723): avc: denied { ioctl } for pid=9867 comm="syz.3.1074" path="socket:[32921]" dev="sockfs" ino=32921 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.846966][ T9870] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 117.062408][ T6000] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 117.104373][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.106701][ T9885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.126342][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.128780][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.131293][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.133908][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'. [ 117.215119][ T6000] usb 8-1: Using ep0 maxpacket: 16 [ 117.217756][ T6000] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 117.220422][ T6000] usb 8-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.223651][ T6000] usb 8-1: config 1 interface 0 has no altsetting 0 [ 117.227129][ T6000] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.229524][ T6000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.231573][ T6000] usb 8-1: Product: Ж [ 117.232729][ T6000] usb 8-1: Manufacturer: Ñ• [ 117.233931][ T6000] usb 8-1: SerialNumber: ÐŽ [ 117.239510][ T9868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.442140][ T6000] usb 8-1: USB disconnect, device number 12 [ 117.635597][ T9914] deleting an unspecified loop device is not supported. [ 117.809542][ T39] audit: type=1400 audit(2000000022.270:42724): avc: denied { getopt } for pid=9928 comm="syz.0.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.810126][ T9930] trusted_key: syz.0.1094 sent an empty control message without MSG_MORE. [ 117.854161][ T9935] mkiss: ax0: crc mode is auto. [ 118.023795][ T9955] xt_CT: No such helper "pptp" [ 118.068972][ T9939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.190787][ T39] audit: type=1400 audit(2000000022.669:42725): avc: denied { append } for pid=9971 comm="syz.2.1104" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.215814][ T9976] syz.0.1105[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.215874][ T9976] syz.0.1105[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.219865][ T9976] syz.0.1105[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.227066][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 118.255725][ T9970] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 118.319890][ T5984] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 118.367020][ T9993] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 118.439752][T10007] overlayfs: failed to resolve './file1/file0': -2 [ 118.443156][T10007] Cannot find set identified by id 0 to match [ 118.490660][ T5984] usb 8-1: config index 0 descriptor too short (expected 26395, got 27) [ 118.501734][ T5984] usb 8-1: config 130 has 1 interface, different from the descriptor's value: 20 [ 118.504335][ T5984] usb 8-1: config 130 interface 0 has no altsetting 0 [ 118.513470][ T5984] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.516011][ T5984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.518265][ T5984] usb 8-1: Product: syz [ 118.519616][ T5984] usb 8-1: Manufacturer: syz [ 118.521218][ T5984] usb 8-1: SerialNumber: syz [ 118.575939][T10023] 9pnet_fd: Insufficient options for proto=fd [ 118.884499][ T39] audit: type=1400 audit(2000000023.393:42726): avc: denied { bind } for pid=10035 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.920201][ T6000] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 119.073176][ T6000] usb 7-1: Using ep0 maxpacket: 8 [ 119.075831][ T6000] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.078017][ T6000] usb 7-1: config 179 has no interface number 0 [ 119.079635][ T6000] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.082544][ T6000] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.085426][ T6000] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.087036][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 119.088250][ T6000] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.094961][ T6000] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.098377][ T6000] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.100728][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.104266][T10030] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.114878][ T5984] usblp 8-1:130.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8 [ 119.134095][T10053] xt_hashlimit: size too large, truncated to 1048576 [ 119.305209][ T39] audit: type=1400 audit(2000000023.834:42727): avc: denied { read write } for pid=9948 comm="syz.3.1097" name="lp0" dev="devtmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 119.306397][ T6000] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input25 [ 119.314381][ T39] audit: type=1400 audit(2000000023.834:42728): avc: denied { open } for pid=9948 comm="syz.3.1097" path="/dev/usb/lp0" dev="devtmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 119.491372][ T6000] usb 7-1: USB disconnect, device number 11 [ 119.492896][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 119.492916][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.497686][ T6000] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 119.552600][ T39] audit: type=1400 audit(2000000024.096:42729): avc: denied { listen } for pid=9948 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.560709][ T39] audit: type=1400 audit(2000000024.096:42730): avc: denied { accept } for pid=9948 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.562425][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 119.569873][T10058] netlink: 'syz.1.1131': attribute type 21 has an invalid length. [ 119.601382][T10056] overlay: ./file0 is not a directory [ 119.718794][T10067] xt_l2tp: wrong L2TP version: 0 [ 119.818918][T10078] xt_hashlimit: size too large, truncated to 1048576 [ 119.868943][ T39] audit: type=1400 audit(2000000024.422:42731): avc: denied { name_bind } for pid=10077 comm="syz.0.1139" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.952847][T10087] [U]  [ 120.002464][ T39] audit: type=1400 audit(2000000024.569:42732): avc: denied { execute } for pid=10090 comm="syz.2.1144" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.048843][T10094] usb usb8: usbfs: process 10094 (syz.1.1143) did not claim interface 0 before use [ 120.172789][T10103] input: syz0 as /devices/virtual/input/input26 [ 120.623316][T10077] TCP: out of memory -- consider tuning tcp_mem [ 120.890387][T10110] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1150'. [ 120.940808][ T25] usb 8-1: USB disconnect, device number 13 [ 120.944006][ T25] usblp0: removed [ 120.945322][T10113] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1151'. [ 120.952197][T10114] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1151'. [ 121.019639][T10126] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1155'. [ 121.029033][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 121.112139][T10140] xt_hashlimit: size too large, truncated to 1048576 [ 121.171857][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 121.186843][T10143] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 121.193854][T10143] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 121.228854][T10153] loop6: detected capacity change from 0 to 524287999 [ 121.231365][ T39] audit: type=1400 audit(2000000025.860:42733): avc: denied { map } for pid=10151 comm="syz.3.1162" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.236442][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 121.237949][ T39] audit: type=1400 audit(2000000025.860:42734): avc: denied { execute } for pid=10151 comm="syz.3.1162" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.240211][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.248878][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.252086][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.254595][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.257125][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.259487][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.261734][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.264182][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.266351][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.268778][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.272690][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.275046][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.277269][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.279666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.281955][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.284505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.287724][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.290806][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.294097][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.309006][ T39] audit: type=1326 audit(2000000025.933:42735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10155 comm="syz.0.1163" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3383585d29 code=0x0 [ 121.361974][T10161] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.416743][ T39] audit: type=1400 audit(2000000026.059:42736): avc: denied { create } for pid=10167 comm="syz.3.1167" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 121.467911][T10175] loop8: detected capacity change from 0 to 7 [ 121.471656][T10175] Dev loop8: unable to read RDB block 7 [ 121.476235][T10175] loop8: AHDI p1 p3 p4 [ 121.477405][T10175] loop8: partition table partially beyond EOD, truncated [ 121.479672][T10175] loop8: p1 start 975770946 is beyond EOD, truncated [ 121.481461][T10175] loop8: p3 start 6514546 is beyond EOD, truncated [ 121.689672][T10181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1170'. [ 121.893622][T10138] TCP: out of memory -- consider tuning tcp_mem [ 122.987442][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 122.990129][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'. [ 122.992551][T10197] netlink: 'syz.2.1177': attribute type 18 has an invalid length. [ 123.089607][T10210] syzkaller0: entered promiscuous mode [ 123.091091][T10210] syzkaller0: entered allmulticast mode [ 123.773676][T10223] xt_hashlimit: size too large, truncated to 1048576 [ 124.101423][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 124.577584][T10222] TCP: out of memory -- consider tuning tcp_mem [ 124.879017][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 124.898728][T10251] tipc: Started in network mode [ 124.900177][T10251] tipc: Node identity aaac8c6ed039, cluster identity 4711 [ 124.902798][T10251] tipc: Enabled bearer , priority 0 [ 124.914583][T10251] tipc: Disabling bearer [ 131.002291][T10258] netlink: 'syz.0.1193': attribute type 4 has an invalid length. [ 131.012881][T10258] netlink: 'syz.0.1193': attribute type 4 has an invalid length. [ 131.045045][T10269] veth1_macvtap: left promiscuous mode [ 131.046583][T10269] macsec0: entered promiscuous mode [ 131.048733][T10269] macsec0: entered allmulticast mode [ 131.052781][T10269] veth1_macvtap: entered promiscuous mode [ 131.054377][T10269] veth1_macvtap: entered allmulticast mode [ 131.056262][T10269] macsec0: left promiscuous mode [ 131.057789][T10269] macsec0: left allmulticast mode [ 131.059368][T10269] veth1_macvtap: left allmulticast mode [ 131.082266][T10274] syzkaller0: entered promiscuous mode [ 131.083749][T10274] syzkaller0: entered allmulticast mode [ 131.088200][T10280] xt_hashlimit: size too large, truncated to 1048576 [ 131.183263][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 131.183274][ T39] audit: type=1400 audit(2000000036.295:42739): avc: denied { setopt } for pid=10287 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.208440][T10288] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 131.210597][T10288] __nla_validate_parse: 1 callbacks suppressed [ 131.210604][T10288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'. [ 131.478555][T10308] netlink: 'syz.1.1209': attribute type 4 has an invalid length. [ 131.527426][T10309] netlink: 'syz.1.1209': attribute type 4 has an invalid length. [ 131.879866][T10278] TCP: out of memory -- consider tuning tcp_mem [ 132.172978][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.020205][ T832] usb 5-1: USB disconnect, device number 11 [ 164.167643][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.171505][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.174081][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.177057][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.179084][ T5948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.181546][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.230001][ T5945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.248989][ T5941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.254236][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.254718][ T5941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.259268][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.259784][ T5941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.262483][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.264640][ T5941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.265932][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.266553][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.268364][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.271684][ T5941] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.272570][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.274306][ T5941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.275286][ T5953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.278292][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.283604][ T5945] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.286231][ T5945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.449544][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.452563][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.536722][T10319] chnl_net:caif_netlink_parms(): no params data found [ 164.546094][T10324] chnl_net:caif_netlink_parms(): no params data found [ 164.614357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.638765][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.642160][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.648633][T10322] chnl_net:caif_netlink_parms(): no params data found [ 164.741925][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.745268][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.769621][T10324] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.771442][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.773959][T10324] bridge_slave_0: entered allmulticast mode [ 164.775921][T10324] bridge_slave_0: entered promiscuous mode [ 164.778760][T10324] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.780843][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.782574][T10324] bridge_slave_1: entered allmulticast mode [ 164.784467][T10324] bridge_slave_1: entered promiscuous mode [ 164.787222][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.789299][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.791135][T10319] bridge_slave_0: entered allmulticast mode [ 164.793021][T10319] bridge_slave_0: entered promiscuous mode [ 164.810959][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.813352][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.816938][T10319] bridge_slave_1: entered allmulticast mode [ 164.819780][T10319] bridge_slave_1: entered promiscuous mode [ 164.863229][T10324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.884160][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.887724][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.905858][T10319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.919035][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.921001][T10322] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.922831][T10322] bridge_slave_0: entered allmulticast mode [ 164.925202][T10322] bridge_slave_0: entered promiscuous mode [ 164.928747][T10324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.951158][T10319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.953638][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.955681][T10322] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.958350][T10322] bridge_slave_1: entered allmulticast mode [ 164.960681][T10322] bridge_slave_1: entered promiscuous mode [ 165.013275][T10324] team0: Port device team_slave_0 added [ 165.017169][T10324] team0: Port device team_slave_1 added [ 165.032030][T10319] team0: Port device team_slave_0 added [ 165.036802][T10319] team0: Port device team_slave_1 added [ 165.039262][T10322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.043980][T10322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.055051][T10324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.056841][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.064236][T10324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.098302][T10324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.102641][T10324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.111155][T10324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.128741][T10322] team0: Port device team_slave_0 added [ 165.132885][T10322] team0: Port device team_slave_1 added [ 165.137932][T10319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.140833][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.147184][T10319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.179908][T10319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.180098][ T39] audit: type=1400 audit(2000000071.999:42740): avc: denied { write } for pid=10358 comm="syz.3.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.181647][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.194220][T10319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.225648][T10322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.227357][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.233957][T10322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.237447][T10322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.239332][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.242269][T10362] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 165.245714][T10322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.250019][T10362] vimc vimc.0: subdev_call error Scaler [ 165.256787][T10362] ------------[ cut here ]------------ [ 165.258273][T10362] WARNING: CPU: 3 PID: 10362 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 [ 165.261498][T10362] Modules linked in: [ 165.263123][T10362] CPU: 3 UID: 0 PID: 10362 Comm: syz.3.1217 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.267269][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.270034][T10362] RIP: 0010:call_s_stream+0x2df/0x350 [ 165.271448][T10362] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 00 17 4f 8c e8 bc 43 39 fe e9 54 fe ff ff e8 62 79 0e fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 11 27 71 fa e9 48 fd ff ff e8 [ 165.276635][T10362] RSP: 0018:ffffc900049d7a60 EFLAGS: 00010293 [ 165.278154][T10362] RAX: 0000000000000000 RBX: ffff88810830d020 RCX: ffffffff878b985e [ 165.280091][T10362] RDX: ffff888021cd8000 RSI: ffffffff878b9ade RDI: 0000000000000000 [ 165.282197][T10362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.284155][T10362] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 165.286102][T10362] R13: 0000000000000000 R14: ffff88810830d198 R15: ffffffff87de4620 [ 165.288026][T10362] FS: 00007f9501de66c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 165.290198][T10362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.292040][T10362] CR2: 00007f9500f69ae0 CR3: 00000000278ba000 CR4: 0000000000352ef0 [ 165.294098][T10362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.296053][T10362] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 165.298023][T10362] Call Trace: [ 165.298903][T10362] [ 165.299656][T10362] ? __warn+0xea/0x3c0 [ 165.300840][T10362] ? call_s_stream+0x2df/0x350 [ 165.302058][T10362] ? report_bug+0x3c0/0x580 [ 165.303203][T10362] ? handle_bug+0x54/0xa0 [ 165.304295][T10362] ? exc_invalid_op+0x17/0x50 [ 165.305473][T10362] ? asm_exc_invalid_op+0x1a/0x20 [ 165.306750][T10362] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 165.308167][T10362] ? call_s_stream+0x5e/0x350 [ 165.309345][T10362] ? call_s_stream+0x2de/0x350 [ 165.310675][T10362] ? call_s_stream+0x2df/0x350 [ 165.311899][T10362] ? __pfx_call_s_stream+0x10/0x10 [ 165.313181][T10362] vimc_streamer_pipeline_terminate+0x218/0x320 [ 165.314771][T10362] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 165.316204][T10362] vimc_streamer_s_stream+0x650/0x9a0 [ 165.317549][T10362] vimc_capture_start_streaming+0xa1/0x130 [ 165.319024][T10362] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 165.320671][T10362] vb2_start_streaming+0x15f/0x5a0 [ 165.321978][T10362] ? __bitmap_weight+0xdc/0x110 [ 165.323184][T10362] vb2_core_streamon+0x2a7/0x450 [ 165.324441][T10362] vb2_ioctl_streamon+0xf4/0x170 [ 165.325669][T10362] __video_do_ioctl+0xaf0/0xf00 [ 165.326884][T10362] ? __pfx___video_do_ioctl+0x10/0x10 [ 165.328284][T10362] ? __might_fault+0xe3/0x190 [ 165.329552][T10362] video_usercopy+0x4d2/0x1620 [ 165.330833][T10362] ? __pfx___video_do_ioctl+0x10/0x10 [ 165.332201][T10362] ? __pfx_video_usercopy+0x10/0x10 [ 165.333544][T10362] v4l2_ioctl+0x1ba/0x250 [ 165.334799][T10362] ? __pfx_v4l2_ioctl+0x10/0x10 [ 165.336022][T10362] __x64_sys_ioctl+0x190/0x200 [ 165.337270][T10362] do_syscall_64+0xcd/0x250 [ 165.338579][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.340020][T10362] RIP: 0033:0x7f9500f85d29 [ 165.341200][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.345983][T10362] RSP: 002b:00007f9501de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.348085][T10362] RAX: ffffffffffffffda RBX: 00007f9501175fa0 RCX: 00007f9500f85d29 [ 165.349999][T10362] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000006 [ 165.351945][T10362] RBP: 00007f9501001a20 R08: 0000000000000000 R09: 0000000000000000 [ 165.353879][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.355824][T10362] R13: 0000000000000000 R14: 00007f9501175fa0 R15: 00007ffcfd0326a8 [ 165.357853][T10362] [ 165.358638][T10362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.360443][T10362] CPU: 3 UID: 0 PID: 10362 Comm: syz.3.1217 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 165.363132][T10362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.365789][T10362] Call Trace: [ 165.366606][T10362] [ 165.367361][T10362] dump_stack_lvl+0x3d/0x1f0 [ 165.368583][T10362] panic+0x71d/0x800 [ 165.369592][T10362] ? __pfx_panic+0x10/0x10 [ 165.370728][T10362] ? show_trace_log_lvl+0x29d/0x3d0 [ 165.372054][T10362] ? check_panic_on_warn+0x1f/0xb0 [ 165.373314][T10362] ? call_s_stream+0x2df/0x350 [ 165.374540][T10362] check_panic_on_warn+0xab/0xb0 [ 165.375753][T10362] __warn+0xf6/0x3c0 [ 165.376722][T10362] ? call_s_stream+0x2df/0x350 [ 165.377890][T10362] report_bug+0x3c0/0x580 [ 165.378940][T10362] handle_bug+0x54/0xa0 [ 165.379995][T10362] exc_invalid_op+0x17/0x50 [ 165.381168][T10362] asm_exc_invalid_op+0x1a/0x20 [ 165.382376][T10362] RIP: 0010:call_s_stream+0x2df/0x350 [ 165.383716][T10362] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 00 17 4f 8c e8 bc 43 39 fe e9 54 fe ff ff e8 62 79 0e fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 11 27 71 fa e9 48 fd ff ff e8 [ 165.388440][T10362] RSP: 0018:ffffc900049d7a60 EFLAGS: 00010293 [ 165.389943][T10362] RAX: 0000000000000000 RBX: ffff88810830d020 RCX: ffffffff878b985e [ 165.391920][T10362] RDX: ffff888021cd8000 RSI: ffffffff878b9ade RDI: 0000000000000000 [ 165.393922][T10362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.395884][T10362] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 165.397903][T10362] R13: 0000000000000000 R14: ffff88810830d198 R15: ffffffff87de4620 [ 165.399848][T10362] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 165.401293][T10362] ? call_s_stream+0x5e/0x350 [ 165.402486][T10362] ? call_s_stream+0x2de/0x350 [ 165.403718][T10362] ? __pfx_call_s_stream+0x10/0x10 [ 165.405004][T10362] vimc_streamer_pipeline_terminate+0x218/0x320 [ 165.406540][T10362] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 165.407953][T10362] vimc_streamer_s_stream+0x650/0x9a0 [ 165.409308][T10362] vimc_capture_start_streaming+0xa1/0x130 [ 165.410817][T10362] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 165.412423][T10362] vb2_start_streaming+0x15f/0x5a0 [ 165.413712][T10362] ? __bitmap_weight+0xdc/0x110 [ 165.414962][T10362] vb2_core_streamon+0x2a7/0x450 [ 165.416217][T10362] vb2_ioctl_streamon+0xf4/0x170 [ 165.417440][T10362] __video_do_ioctl+0xaf0/0xf00 [ 165.418679][T10362] ? __pfx___video_do_ioctl+0x10/0x10 [ 165.420009][T10362] ? __might_fault+0xe3/0x190 [ 165.421215][T10362] video_usercopy+0x4d2/0x1620 [ 165.422429][T10362] ? __pfx___video_do_ioctl+0x10/0x10 [ 165.423788][T10362] ? __pfx_video_usercopy+0x10/0x10 [ 165.425090][T10362] v4l2_ioctl+0x1ba/0x250 [ 165.426193][T10362] ? __pfx_v4l2_ioctl+0x10/0x10 [ 165.427458][T10362] __x64_sys_ioctl+0x190/0x200 [ 165.428686][T10362] do_syscall_64+0xcd/0x250 [ 165.429862][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.431413][T10362] RIP: 0033:0x7f9500f85d29 [ 165.432558][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.437372][T10362] RSP: 002b:00007f9501de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.439453][T10362] RAX: ffffffffffffffda RBX: 00007f9501175fa0 RCX: 00007f9500f85d29 [ 165.441497][T10362] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000006 [ 165.443453][T10362] RBP: 00007f9501001a20 R08: 0000000000000000 R09: 0000000000000000 [ 165.445396][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.447320][T10362] R13: 0000000000000000 R14: 00007f9501175fa0 R15: 00007ffcfd0326a8 [ 165.449286][T10362] [ 165.450633][T10362] Kernel Offset: disabled [ 165.451830][T10362] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:00:08 Registers: info registers vcpu 0 CPU#0 RAX=fffff52000f26d40 RBX=ffff88802119af70 RCX=1ffffffff2dcaef3 RDX=0000000000000001 RSI=0000000000000100 RDI=ffffffff96e57798 RBP=ffffc90007936b10 RSP=ffffc900079369d0 R8 =0000000000000000 R9 =fffffbfff2dca19a R10=ffffffff96e50cd7 R11=0000000000000000 R12=ffff88802119a440 R13=0000000000000100 R14=0000000000000008 R15=1ffff92000f26d40 RIP=ffffffff81766821 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555582b6e500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9501de5f98 CR3=0000000045948000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1b8ccc30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574616c20676e69 7972746572282031 5f6576616c735f76 6461746162206500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574616620676463 7372746572222031 5565766166735576 6461746162206500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2055544d20656870 2065686920656553 202e20636c616d72 2030363531206568 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020322020323537 2032343320632022 2024203420300000 2030202c30202c30 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a26322a26383f3d 3e383e3939723a22 2a3a323e723a3e3c 30616479306f787f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a5f5e472a6f627e 2a6d64637e7e6f59 2a246f69646b6778 656c786f7a2a6f62 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffea0001024000 RBX=ffff888028c2c440 RCX=ffffffff81e37e6e RDX=ffff888023232440 RSI=ffffffff81e39c7b RDI=0000000000000000 RBP=8000000040900847 RSP=ffffc90006257890 R8 =0000000000000006 R9 =0000000000013793 R10=0000000000040900 R11=0000000000000003 R12=dffffc0000000000 R13=0000000000000001 R14=ffffea00010253c8 R15=ffffc90006257cc8 RIP=ffffffff81e39ca1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7838a7d60 CR3=00000000252e0000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb782d4b6a3 00007fb782d4b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff54315400 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fb49659 000055557fb49240 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fad63c4 000055557fad63c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fadc9b5 000055557fadc860 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0498030208000490 0300080004880300 0400048403500400 0480030008000210 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100003ffffff ff04048084818010 0005af1000188004 0100000c08060c01 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54ca005d05c82784 bf45b4afba22eaa6 24b097fcd1fba560 776874402d51ff63 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc5df07bfe47284c 80aca49cffbd21eb d27209a592173efc 0e5f700818800320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000048004010000 0c0806060103ba00 0200070008000498 0302080004900300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001468bf RBX=0000000000000002 RCX=ffffffff8b2936e9 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1e860 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f3090 R15=0000000000000000 RIP=ffffffff8b294acf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002416a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfd032a40 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9501002a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9501002b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b91a5 RDI=ffffffff9ab0ec20 RBP=ffffffff9ab0ebe0 RSP=ffffc900049d73c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000033 R14=ffffffff851b9140 R15=0000000000000000 RIP=ffffffff851b91cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9501de66c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9500f69ae0 CR3=00000000278ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f95010029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9501002a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9501002b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000366f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000154c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000