last executing test programs: 1m48.258699321s ago: executing program 0 (id=9590): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m48.025049219s ago: executing program 0 (id=9597): userfaultfd(0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 1m48.024937173s ago: executing program 0 (id=9598): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="edc08818", 0x4}, {0x0, 0x13}], 0x2) 1m47.906721625s ago: executing program 0 (id=9601): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m47.906402321s ago: executing program 0 (id=9603): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000006f80)=0x1, 0x4) 1m47.618097899s ago: executing program 0 (id=9610): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) 1m47.540777427s ago: executing program 32 (id=9610): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) 1m35.933163104s ago: executing program 3 (id=9929): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) 1m35.868186329s ago: executing program 3 (id=9932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r1, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1m35.793780403s ago: executing program 3 (id=9935): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f00000000c0)={0xb, 0x3, 0x0, 0x3, 'syz0\x00', 0x8}) 1m35.788630004s ago: executing program 3 (id=9938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m35.727915616s ago: executing program 3 (id=9941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m35.466002414s ago: executing program 3 (id=9945): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 1m35.406443075s ago: executing program 33 (id=9945): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) 1m27.219730682s ago: executing program 2 (id=10202): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 1m27.175651975s ago: executing program 2 (id=10206): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) 1m27.100373595s ago: executing program 2 (id=10210): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) 1m27.099953244s ago: executing program 2 (id=10213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m27.024208307s ago: executing program 2 (id=10215): r0 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xf0}], 0x0, 0x1}, 0x20) 1m26.757479467s ago: executing program 2 (id=10226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 1m26.635246981s ago: executing program 34 (id=10226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e190987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b68090890e0878f0e1ac6e7049b3146959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) 1m25.804621032s ago: executing program 1 (id=10252): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06"], 0xe) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m25.333916488s ago: executing program 1 (id=10262): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a80", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m24.508303973s ago: executing program 1 (id=10259): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1m23.598770664s ago: executing program 1 (id=10290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m23.523750165s ago: executing program 1 (id=10292): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3d51c, 0x0, 0x2d, 0x9, 0x1a, "0012412d08d500201e850a21077b0a00e0edff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 1m23.482856106s ago: executing program 1 (id=10293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1m23.323298943s ago: executing program 35 (id=10293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 30.680253138s ago: executing program 7 (id=12549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 30.680072338s ago: executing program 7 (id=12550): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r0, &(0x7f00000088c0)=""/48, 0x30) getdents(r0, 0xffffffffffffffff, 0x5a) 30.609304358s ago: executing program 7 (id=12552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) 30.550284617s ago: executing program 7 (id=12554): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/241) 29.295174065s ago: executing program 7 (id=12586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 29.285291512s ago: executing program 7 (id=12589): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 13.072119573s ago: executing program 36 (id=12589): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 2.364561786s ago: executing program 4 (id=13266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000a, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) 2.301005575s ago: executing program 4 (id=13267): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) readv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) 2.097580296s ago: executing program 4 (id=13271): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.79767799s ago: executing program 4 (id=13273): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') pause() read(r0, &(0x7f0000000180)=""/199, 0xc7) 1.368968625s ago: executing program 5 (id=13281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.295256154s ago: executing program 5 (id=13282): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 863.988503ms ago: executing program 4 (id=13292): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x103400) read$qrtrtun(r0, 0x0, 0x0) 619.63689ms ago: executing program 4 (id=13299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0xef49) 407.09221ms ago: executing program 5 (id=13306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000080)={0x9000, 0x1000}) 249.986761ms ago: executing program 5 (id=13314): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 191.828269ms ago: executing program 6 (id=13315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @none, 0x9, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xb2) 191.487377ms ago: executing program 8 (id=13316): r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', r0) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r1) 191.369849ms ago: executing program 6 (id=13317): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0xa}, {0xfd, 0x2}, {0x7}, @raw32={[0x2, 0x0, 0x8080000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xfd, 0x40}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}], 0x54) 129.04022ms ago: executing program 8 (id=13318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2040}}, 0x0) 128.823253ms ago: executing program 6 (id=13319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 128.687889ms ago: executing program 6 (id=13320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 74.187959ms ago: executing program 8 (id=13321): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x7fff, 0x15f9) syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0) 73.982253ms ago: executing program 6 (id=13322): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80c4}, 0x200008d0) 72.293654ms ago: executing program 5 (id=13323): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24008010) 63.419932ms ago: executing program 8 (id=13324): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 282.518µs ago: executing program 6 (id=13325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 123.885µs ago: executing program 5 (id=13326): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000001c0)) 52.971µs ago: executing program 8 (id=13327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x1ff, 0x7, 0x3, 0x0, 0x6, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xa88, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x3, 0x2000000000005}) 0s ago: executing program 8 (id=13328): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x8, &(0x7f00000001c0)=[{0xb, '\x00', @data=0x2abe, 0x1}]}) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 219.876141][ T6371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.880649][ T6371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.884637][ T6371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.899089][ T6371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.906942][ T6371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.945579][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.085677][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.229745][T29281] chnl_net:caif_netlink_parms(): no params data found [ 220.522932][T29281] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.527617][T29281] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.531041][T29281] bridge_slave_0: entered allmulticast mode [ 220.536509][T29281] bridge_slave_0: entered promiscuous mode [ 220.543216][T29281] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.546261][T29281] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.550076][T29281] bridge_slave_1: entered allmulticast mode [ 220.553264][T29281] bridge_slave_1: entered promiscuous mode [ 220.570503][ T71] bridge_slave_1: left allmulticast mode [ 220.572734][ T71] bridge_slave_1: left promiscuous mode [ 220.575300][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.599665][ T71] bridge_slave_0: left allmulticast mode [ 220.602583][ T71] bridge_slave_0: left promiscuous mode [ 220.604977][T29482] tmpfs: Group quota block hardlimit too large. [ 220.605072][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.757609][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10330'. [ 220.965669][ T6368] Bluetooth: hci2: command tx timeout [ 221.311686][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.316239][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.321359][ T71] bond0 (unregistering): Released all slaves [ 221.328807][ T71] bond1 (unregistering): Released all slaves [ 221.336269][ T71] bond2 (unregistering): Released all slaves [ 221.346142][ T71] bond3 (unregistering): Released all slaves [ 221.354433][ T71] bond4 (unregistering): Released all slaves [ 221.362376][ T71] bond5 (unregistering): Released all slaves [ 221.391201][T29488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 221.398033][T29488] batman_adv: batadv0: Adding interface: gretap1 [ 221.401133][T29488] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.412102][T29488] batman_adv: batadv0: Interface activated: gretap1 [ 221.428588][T29281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.434609][T29281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.470712][T29529] option changes via remount are deprecated (pid=29527 comm=syz.6.10332) [ 221.551459][ T71] tipc: Left network mode [ 221.581249][T29281] team0: Port device team_slave_0 added [ 221.583912][T29561] tipc: Enabling of bearer rejected, failed to enable media [ 221.592161][T29281] team0: Port device team_slave_1 added [ 221.637549][T29281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.649220][T29281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.660699][T29281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.704893][T29281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.707389][T29281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.720450][T29281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.766209][T29281] hsr_slave_0: entered promiscuous mode [ 221.769696][T29281] hsr_slave_1: entered promiscuous mode [ 221.774446][T29281] debugfs: 'hsr0' already exists in 'hsr' [ 221.777175][T29281] Cannot create hsr debugfs directory [ 221.941357][T29692] gfs2: path_lookup on b::: returned error -2 [ 222.055905][T29730] tmpfs: Group quota block hardlimit too large. [ 222.078648][ T6368] Bluetooth: hci0: command tx timeout [ 222.085284][T29733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10354'. [ 222.181339][T29281] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.187821][T29281] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.197096][T29281] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 222.202318][T29281] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 222.319124][T29281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.337188][T29281] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.366635][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.369244][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.379386][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.382173][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.399169][ T71] hsr_slave_0: left promiscuous mode [ 222.402576][ T71] hsr_slave_1: left promiscuous mode [ 222.425570][ T71] veth1_macvtap: left allmulticast mode [ 222.428141][ T71] veth1_macvtap: left promiscuous mode [ 222.430512][ T71] veth0_macvtap: left allmulticast mode [ 222.433209][ T71] veth0_macvtap: left promiscuous mode [ 222.438996][T29796] delete_channel: no stack [ 222.447624][ T71] veth1_vlan: left promiscuous mode [ 222.449976][ T71] veth0_vlan: left promiscuous mode [ 222.462033][T29799] tmpfs: Cannot enable quota on remount [ 222.530834][ T71] pim6reg (unregistering): left allmulticast mode [ 222.759099][T29812] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.768909][T29812] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 222.927794][T29837] tipc: MTU too low for tipc bearer [ 223.018294][T29281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.140485][T29863] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10379'. [ 223.192319][ T6368] Bluetooth: hci2: command tx timeout [ 223.205274][ T71] IPVS: stop unused estimator thread 0... [ 223.358746][T29281] veth0_vlan: entered promiscuous mode [ 223.368194][T29281] veth1_vlan: entered promiscuous mode [ 223.392826][T29281] veth0_macvtap: entered promiscuous mode [ 223.406331][T29281] veth1_macvtap: entered promiscuous mode [ 223.427481][T29281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.437814][T29281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.445909][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.450134][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.460780][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.464878][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.511224][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.513942][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.528489][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.532148][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.596522][T29919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10393'. [ 223.596962][T29920] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10296'. [ 223.600584][T29919] netlink: 'syz.4.10393': attribute type 6 has an invalid length. [ 223.609095][T29919] netlink: 'syz.4.10393': attribute type 5 has an invalid length. [ 223.612466][T29919] netlink: 'syz.4.10393': attribute type 4 has an invalid length. [ 223.886395][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.165330][ T40] kauditd_printk_skb: 299 callbacks suppressed [ 224.165347][ T40] audit: type=1400 audit(524501.720:45245): avc: denied { mounton } for pid=29978 comm="syz.7.10411" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.200266][ T40] audit: type=1400 audit(524501.739:45246): avc: denied { unmount } for pid=29281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.206483][ T40] audit: type=1400 audit(524501.749:45247): avc: denied { map_create } for pid=29985 comm="syz.4.10413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.251581][ T40] audit: type=1400 audit(524501.749:45248): avc: denied { map_read map_write } for pid=29985 comm="syz.4.10413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.259807][ T40] audit: type=1400 audit(524501.786:45249): avc: denied { read write } for pid=29990 comm="syz.5.10407" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.265276][T30005] random: crng reseeded on system resumption [ 224.281019][T30005] Restarting kernel threads ... [ 224.283972][T30005] Done restarting kernel threads. [ 224.293374][ T40] audit: type=1400 audit(524501.786:45250): avc: denied { open } for pid=29990 comm="syz.5.10407" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.303005][ T40] audit: type=1400 audit(524501.786:45251): avc: denied { ioctl } for pid=29990 comm="syz.5.10407" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.305060][ T6368] Bluetooth: hci0: command tx timeout [ 224.317781][ T40] audit: type=1400 audit(524501.805:45252): avc: denied { write } for pid=30004 comm="syz.7.10418" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.328022][ T40] audit: type=1400 audit(524501.805:45253): avc: denied { open } for pid=30004 comm="syz.7.10418" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.343770][ T40] audit: type=1400 audit(524501.814:45254): avc: denied { ioctl } for pid=30004 comm="syz.7.10418" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.495720][ T6399] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 224.690867][ T6399] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 224.693886][ T6399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.697852][ T6399] usb 10-1: Product: syz [ 224.699987][ T6399] usb 10-1: Manufacturer: syz [ 224.701795][ T6399] usb 10-1: SerialNumber: syz [ 224.707032][ T6399] usb 10-1: config 0 descriptor?? [ 224.725707][ T6399] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 224.738667][ T6399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.744025][ T6399] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 224.747926][ T6399] usb 10-1: media controller created [ 224.758920][ T6399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.807133][ T6399] DVB: Unable to find symbol mt352_attach() [ 224.829244][ T6399] DVB: Unable to find symbol nxt6000_attach() [ 224.831726][ T6399] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 224.836594][ T6399] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input35 [ 224.843648][ T6399] dvb-usb: schedule remote query interval to 1000 msecs. [ 224.846260][ T6399] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 224.849964][ T6399] dvb-usb: bulk message failed: -22 (7/0) [ 224.851466][T30063] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10428'. [ 224.851813][ T6399] dvb-usb: bulk message failed: -22 (7/0) [ 224.935451][T29994] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 224.938104][T29994] dvb-usb: bulk message failed: -22 (7/0) [ 224.940723][ T6399] usb 10-1: USB disconnect, device number 2 [ 224.973336][ T6399] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 225.310804][T30105] mkiss: ax0: crc mode is auto. [ 225.416156][ T6368] Bluetooth: hci2: command tx timeout [ 225.446995][T30113] mkiss: ax0: crc mode is auto. [ 225.702364][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10450'. [ 225.724765][T30153] program syz.7.10451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.900468][T30179] ALSA: mixer_oss: invalid OSS volume '' [ 225.900788][T30178] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10461'. [ 225.906654][T30178] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10461'. [ 226.107153][T30208] program syz.5.10471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.425853][T30244] program syz.4.10484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.539063][ T6368] Bluetooth: hci0: command tx timeout [ 226.595397][T30266] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 226.675720][T30275] program syz.5.10496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.903837][T30310] netlink: 'syz.5.10509': attribute type 1 has an invalid length. [ 226.907694][T30310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.283576][T30372] sp0: Synchronizing with TNC [ 227.818791][T30410] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 228.002162][T30432] sp0: Synchronizing with TNC [ 228.047068][T30442] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.10556'. [ 228.051388][T30442] openvswitch: netlink: Message has 6 unknown bytes. [ 228.182968][T30455] Dead loop on virtual device ip6_vti0, fix it urgently! [ 228.515276][T30499] netlink: 'syz.6.10580': attribute type 3 has an invalid length. [ 228.766323][ T6368] Bluetooth: hci0: command tx timeout [ 228.985700][T21267] udevd[21267]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 229.470317][T30624] program syz.4.10635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.525564][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 229.525576][ T40] audit: type=1400 audit(524506.731:45472): avc: denied { prog_load } for pid=30627 comm="syz.5.10637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.536025][ T40] audit: type=1400 audit(524506.740:45473): avc: denied { prog_run } for pid=30627 comm="syz.5.10637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.543843][ T40] audit: type=1400 audit(524506.740:45474): avc: denied { create } for pid=30630 comm="syz.4.10638" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.562533][ T40] audit: type=1400 audit(524506.740:45475): avc: denied { map } for pid=30630 comm="syz.4.10638" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=85700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.573630][ T40] audit: type=1400 audit(524506.740:45476): avc: denied { read } for pid=30630 comm="syz.4.10638" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=85700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.608104][ T40] audit: type=1400 audit(524506.768:45477): avc: denied { execute } for pid=30631 comm="syz.6.10639" dev="tmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.620168][ T40] audit: type=1400 audit(524506.768:45478): avc: denied { execute_no_trans } for pid=30631 comm="syz.6.10639" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.632975][ T40] audit: type=1400 audit(524506.806:45479): avc: denied { create } for pid=30634 comm="syz.4.10640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.641611][ T40] audit: type=1400 audit(524506.806:45480): avc: denied { bind } for pid=30634 comm="syz.4.10640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.647845][ T40] audit: type=1400 audit(524506.806:45481): avc: denied { write } for pid=30634 comm="syz.4.10640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.685265][T30644] program syz.6.10644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.001548][T30687] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.10661' resets device [ 230.462201][T30747] EXT4-fs: Conflicting test_dummy_encryption options [ 230.813228][T30796] netlink: 184 bytes leftover after parsing attributes in process `syz.4.10709'. [ 230.816870][T30796] xt_socket: unknown flags 0xd0 [ 230.884253][T30806] netlink: 10 bytes leftover after parsing attributes in process `syz.6.10705'. [ 230.961918][T30817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10712'. [ 231.129553][T30841] netlink: 'syz.6.10727': attribute type 1 has an invalid length. [ 231.146904][T30845] tmpfs: Bad value for 'mpol' [ 231.246190][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.327510][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10743'. [ 231.327775][T30890] netlink: 'syz.4.10736': attribute type 1 has an invalid length. [ 231.331700][T30891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10743'. [ 231.339013][T30891] netlink: 'syz.6.10743': attribute type 18 has an invalid length. [ 231.344844][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10743'. [ 231.633184][T30920] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10747'. [ 231.659105][T30923] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.783809][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10758'. [ 231.787483][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10758'. [ 231.791161][T30944] netlink: 'syz.5.10758': attribute type 18 has an invalid length. [ 231.876094][T30960] atomic_op ffff8880420e7998 conn xmit_atomic 0000000000000000 [ 231.895785][T30964] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 231.899930][T30964] overlayfs: missing 'lowerdir' [ 232.057557][T30993] netlink: 'syz.6.10784': attribute type 12 has an invalid length. [ 232.093120][T30998] mkiss: ax0: crc mode is auto. [ 232.216503][T31026] veth0_to_team: entered promiscuous mode [ 232.223606][T31029] atomic_op ffff888039029998 conn xmit_atomic 0000000000000000 [ 232.299835][T31043] mkiss: ax0: crc mode is auto. [ 232.306530][T31047] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 232.313067][T31047] overlayfs: missing 'lowerdir' [ 232.382566][T31055] hugetlbfs: Bad value for 'uid' [ 232.384846][T31055] hugetlbfs: Bad value for 'uid' [ 232.605704][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.735774][ T24] kernel write not supported for file /audio1 (pid: 24 comm: kworker/2:0) [ 232.863219][T31125] : entered promiscuous mode [ 233.302510][T31174] nbd: must specify a size in bytes for the device [ 233.562164][ T10] kernel write not supported for file /audio1 (pid: 10 comm: kworker/0:1) [ 233.594086][T31214] xt_hashlimit: size too large, truncated to 1048576 [ 233.833218][T31254] __nla_validate_parse: 3 callbacks suppressed [ 233.833230][T31254] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10881'. [ 233.978677][T31275] [U] v3f"S/4:XTzWtlW= [ 233.980616][T31275] [U] J"e:" [ 234.410693][T31328] SELinux: failed to load policy [ 234.714624][T31367] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.10927'. [ 234.719640][T31367] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 234.887748][ T40] kauditd_printk_skb: 293 callbacks suppressed [ 234.887760][ T40] audit: type=1400 audit(524511.742:45775): avc: denied { map_create } for pid=31384 comm="syz.7.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.899755][ T40] audit: type=1400 audit(524511.742:45776): avc: denied { map_read map_write } for pid=31385 comm="syz.5.10938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.909262][ T40] audit: type=1400 audit(524511.742:45777): avc: denied { perfmon } for pid=31384 comm="syz.7.10935" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.918582][ T40] audit: type=1400 audit(524511.751:45778): avc: denied { prog_load } for pid=31384 comm="syz.7.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.925273][ T40] audit: type=1400 audit(524511.751:45779): avc: denied { bpf } for pid=31384 comm="syz.7.10935" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.933501][ T40] audit: type=1400 audit(524511.751:45780): avc: denied { prog_run } for pid=31384 comm="syz.7.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.953616][ T40] audit: type=1400 audit(524511.798:45781): avc: denied { read } for pid=31392 comm="syz.5.10940" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 234.966917][ T40] audit: type=1400 audit(524511.798:45782): avc: denied { open } for pid=31392 comm="syz.5.10940" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 234.979221][ T40] audit: type=1400 audit(524511.807:45783): avc: denied { ioctl } for pid=31392 comm="syz.5.10940" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x6402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 235.010891][ T40] audit: type=1400 audit(524511.844:45784): avc: denied { create } for pid=31402 comm="syz.6.10944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.031874][T31405] netlink: 4436 bytes leftover after parsing attributes in process `syz.7.10945'. [ 235.043406][T31405] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 235.124673][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10951'. [ 235.208472][T31433] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 235.248154][T31442] No control pipe specified [ 235.277324][ T6368] Bluetooth: hci3: Unable to find connection for big 0x00 [ 235.681234][T31479] IPVS: Scheduler module ip_vs_sip not found [ 235.922772][T31507] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10984'. [ 236.076630][T31520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10989'. [ 236.157066][T31527] netlink: 'syz.5.10991': attribute type 62 has an invalid length. [ 236.383164][T31554] netlink: 'syz.6.11002': attribute type 62 has an invalid length. [ 236.403965][T31556] netlink: 100 bytes leftover after parsing attributes in process `syz.4.11004'. [ 236.679235][T31602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11024'. [ 237.110329][T31658] program syz.6.11048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.299335][T31678] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 237.343820][ T6840] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 237.537885][ T6840] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 237.541477][ T6840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.564568][ T6840] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 237.568989][ T6840] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 237.572393][ T6840] usb 10-1: Manufacturer: syz [ 237.577298][ T6840] usb 10-1: config 0 descriptor?? [ 237.598594][T31700] xt_l2tp: unknown flags: 51 [ 237.643523][ T6840] rc_core: IR keymap rc-hauppauge not found [ 237.646013][ T6840] Registered IR keymap rc-empty [ 237.650541][ T6840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 237.657664][ T6840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input38 [ 237.801488][ T6840] usb 10-1: USB disconnect, device number 3 [ 238.594149][T31774] CIFS mount error: No usable UNC path provided in device string! [ 238.594149][T31774] [ 238.595058][ T6318] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 238.600127][T31774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 238.637854][ T1458] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 238.685375][T31778] netlink: 'syz.5.11091': attribute type 1 has an invalid length. [ 238.688128][T31778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11091'. [ 238.729746][T31780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11092'. [ 238.781397][ T6318] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 238.784914][ T6318] usb 9-1: config 0 has no interface number 0 [ 238.791152][ T6318] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 238.795459][ T6318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.800556][ T6318] usb 9-1: Product: syz [ 238.802364][ T6318] usb 9-1: Manufacturer: syz [ 238.804294][ T6318] usb 9-1: SerialNumber: syz [ 238.809494][ T6318] usb 9-1: config 0 descriptor?? [ 238.820010][ T1458] usb 12-1: Using ep0 maxpacket: 8 [ 238.824549][ T1458] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.830114][ T1458] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.834784][ T1458] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.838713][ T1458] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.854973][ T1458] usb 12-1: config 0 descriptor?? [ 239.069853][T31813] netlink: 'syz.6.11099': attribute type 1 has an invalid length. [ 239.082007][ T1458] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 239.295836][T31757] iowarrior 12-1:0.0: Error -90 while submitting URB [ 239.300275][ T1458] usb 12-1: USB disconnect, device number 2 [ 240.248877][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 240.248889][ T40] audit: type=1400 audit(524516.752:46027): avc: denied { execmem } for pid=31998 comm="syz.7.11139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 240.540796][ T40] audit: type=1400 audit(524517.014:46028): avc: denied { read write } for pid=32017 comm="syz.6.11149" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.551175][ T40] audit: type=1400 audit(524517.014:46029): avc: denied { open } for pid=32017 comm="syz.6.11149" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.561064][ T40] audit: type=1400 audit(524517.033:46030): avc: denied { ioctl } for pid=32017 comm="syz.6.11149" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.614159][ T40] audit: type=1400 audit(524517.089:46031): avc: denied { allowed } for pid=32021 comm="syz.6.11151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.623393][ T40] audit: type=1400 audit(524517.098:46032): avc: denied { sqpoll } for pid=32021 comm="syz.6.11151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.631023][ T40] audit: type=1400 audit(524517.098:46033): avc: denied { create } for pid=32021 comm="syz.6.11151" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.639278][ T40] audit: type=1400 audit(524517.098:46034): avc: denied { map } for pid=32021 comm="syz.6.11151" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.649886][ T40] audit: type=1400 audit(524517.098:46035): avc: denied { read write } for pid=32021 comm="syz.6.11151" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.715783][ T40] audit: type=1400 audit(524517.191:46036): avc: denied { read append } for pid=32029 comm="syz.6.11154" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 240.723259][T32030] XFS (nullb0): Invalid superblock magic number [ 241.026119][T32049] __nla_validate_parse: 5 callbacks suppressed [ 241.026136][T32049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11160'. [ 241.032320][T32049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11160'. [ 241.368440][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.372268][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.375418][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.379728][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.382964][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.389899][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.393065][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.396291][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.400375][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.403523][ T6840] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 241.453444][ T6840] hid-generic 0005:000B:0009.0004: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 241.509731][T32089] fido_id[32089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.574802][ T6318] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 241.580765][ T6318] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 241.592976][ T6318] asix 9-1:0.251: probe with driver asix failed with error -5 [ 241.627215][ T6318] usb 9-1: USB disconnect, device number 4 [ 241.836341][ T6441] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 242.008570][ T6441] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 242.011745][ T6441] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.021961][ T6441] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 242.029212][ T6441] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 242.033131][ T6441] usb 11-1: Manufacturer: syz [ 242.042595][ T6441] usb 11-1: config 0 descriptor?? [ 242.073854][T32170] Bluetooth: MGMT ver 1.23 [ 242.103961][ T6441] rc_core: IR keymap rc-hauppauge not found [ 242.106457][ T6441] Registered IR keymap rc-empty [ 242.109937][ T6441] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 242.116687][ T6441] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input39 [ 242.200580][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.270123][ T829] usb 11-1: USB disconnect, device number 2 [ 242.906127][ T6840] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 243.077667][ T6840] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 243.081177][ T6840] usb 12-1: config 1 has no interface number 0 [ 243.083822][ T6840] usb 12-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 243.089129][ T6840] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 243.093378][ T6840] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.104891][ T6840] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 243.108598][ T6840] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.112574][ T6840] usb 12-1: Product: syz [ 243.114415][ T6840] usb 12-1: Manufacturer: syz [ 243.116400][ T6840] usb 12-1: SerialNumber: syz [ 243.123083][T32229] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.345068][ T54] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 243.357130][T32229] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.507618][ T54] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 243.511455][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.516993][ T54] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 243.520944][ T54] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 243.524428][ T54] usb 9-1: Manufacturer: syz [ 243.530187][ T54] usb 9-1: config 0 descriptor?? [ 243.583818][ T54] rc_core: IR keymap rc-hauppauge not found [ 243.586410][ T54] Registered IR keymap rc-empty [ 243.589433][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 243.604677][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input40 [ 243.609358][ T6840] sierra_net 12-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 243.791634][ T6840] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 243.796788][ T6840] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 243.800999][ T6840] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 243.803928][ T6840] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 243.816303][ T6840] usb 12-1: USB disconnect, device number 3 [ 243.825449][ T6840] sierra_net 12-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 244.039966][ T6441] usb 9-1: USB disconnect, device number 5 [ 244.117877][ T6840] sierra_net 12-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 244.364528][T32348] : entered promiscuous mode [ 244.409368][T32360] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 244.657061][T32398] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 244.900661][T32434] mkiss: ax0: crc mode is auto. [ 245.160864][T32471] mkiss: ax0: crc mode is auto. [ 245.323900][T32492] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 245.327034][ T6840] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 245.362948][T32497] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 245.497900][ T6840] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.501302][ T6840] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.506397][ T6840] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 245.511380][ T6840] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 245.514662][ T6840] usb 12-1: Manufacturer: syz [ 245.521108][ T6840] usb 12-1: config 0 descriptor?? [ 245.552584][T32526] vlan2: entered promiscuous mode [ 245.554775][T32526] bridge0: entered promiscuous mode [ 245.591508][ T6840] rc_core: IR keymap rc-hauppauge not found [ 245.594010][ T6840] Registered IR keymap rc-empty [ 245.601541][ T6840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 245.608303][ T6840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input41 [ 245.609959][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 245.609974][ T40] audit: type=1400 audit(524521.763:46225): avc: denied { create } for pid=32531 comm="syz.5.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.627032][ T40] audit: type=1400 audit(524521.772:46226): avc: denied { read } for pid=5318 comm="acpid" name="event4" dev="devtmpfs" ino=3252 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.636150][ T40] audit: type=1400 audit(524521.772:46227): avc: denied { open } for pid=5318 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3252 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.648022][ T40] audit: type=1400 audit(524521.772:46228): avc: denied { ioctl } for pid=5318 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3252 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.658251][ T40] audit: type=1400 audit(524521.781:46229): avc: denied { read } for pid=32531 comm="syz.5.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.670965][ T40] audit: type=1400 audit(524521.819:46230): avc: denied { mount } for pid=32542 comm="syz.4.11321" name="/" dev="hugetlbfs" ino=92454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 245.681366][ T40] audit: type=1400 audit(524521.828:46231): avc: denied { remount } for pid=32542 comm="syz.4.11321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 245.696334][ T40] audit: type=1400 audit(524521.837:46232): avc: denied { unmount } for pid=26113 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 245.751395][ T40] audit: type=1400 audit(524521.884:46233): avc: denied { read } for pid=32457 comm="syz.7.11278" name="event4" dev="devtmpfs" ino=3252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.759322][ T53] usb 12-1: USB disconnect, device number 4 [ 245.762515][ T40] audit: type=1400 audit(524521.893:46234): avc: denied { open } for pid=32457 comm="syz.7.11278" path="/dev/input/event4" dev="devtmpfs" ino=3252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.959606][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11336'. [ 246.022496][T32599] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 246.022496][T32599] program syz.5.11340 not setting count and/or reply_len properly [ 246.190475][ T54] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 246.324622][T32625] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 246.345695][T32625] CUSE: unknown device info "&b%ZW)3\my " [ 246.350670][T32625] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 246.356443][T32625] CUSE: DEVNAME unspecified [ 246.362187][ T54] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 246.366118][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 246.369546][ T54] usb 9-1: Product: syz [ 246.375358][ T54] usb 9-1: Manufacturer: syz [ 246.377403][ T54] usb 9-1: SerialNumber: syz [ 246.382179][ T54] usb 9-1: config 0 descriptor?? [ 246.391457][ T54] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 246.397242][ T54] dvb-usb: bulk message failed: -22 (2/0) [ 246.404959][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.411990][ T54] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 246.416683][ T54] usb 9-1: media controller created [ 246.427748][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.612821][T32582] dvb-usb: bulk message failed: -22 (4/0) [ 246.615743][T32582] cxusb: i2c read failed [ 246.620067][ T54] cxusb: set interface failed [ 246.621912][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 246.648530][ T54] DVB: Unable to find symbol mt352_attach() [ 246.655950][ T54] dvb-usb: bulk message failed: -22 (5/0) [ 246.658451][ T54] zl10353_read_register: readreg error (reg=127, ret==-121) [ 246.665078][ T54] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 246.726545][ T54] rc_core: IR keymap rc-dvico-mce not found [ 246.731711][ T54] Registered IR keymap rc-empty [ 246.738741][ T54] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 246.744570][ T54] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input42 [ 246.753811][ T54] dvb-usb: schedule remote query interval to 100 msecs. [ 246.756750][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 246.761284][ T6840] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 246.772166][ T54] usb 9-1: USB disconnect, device number 6 [ 246.849643][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 246.921435][ T6840] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 246.925039][ T6840] usb 11-1: config 1 has no interface number 0 [ 246.927845][ T6840] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 246.935842][ T6840] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 246.940086][ T6840] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.959691][ T6840] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 246.964211][ T6840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.971532][ T6840] usb 11-1: Product: syz [ 246.973464][ T6840] usb 11-1: Manufacturer: syz [ 246.975488][ T6840] usb 11-1: SerialNumber: syz [ 246.982776][T32654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.220035][T32654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 247.227078][T32751] block nbd5: NBD_DISCONNECT [ 247.446559][ T6840] sierra_net 11-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 247.559478][ T53] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 247.662369][ T6840] sierra_net 11-1:1.7 wwan0: Submit SYNC failed -71 [ 247.665356][ T6840] sierra_net 11-1:1.7 wwan0: Send SYNC failed, status -71 [ 247.670911][ T6840] sierra_net 11-1:1.7 wwan0: Submit SYNC failed -71 [ 247.673554][ T6840] sierra_net 11-1:1.7 wwan0: Send SYNC failed, status -71 [ 247.691888][ T6840] usb 11-1: USB disconnect, device number 3 [ 247.702192][ T6840] sierra_net 11-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 247.721815][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 247.727361][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26037, setting to 1024 [ 247.735659][ T53] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 247.739404][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.743689][ T53] usb 9-1: Product: syz [ 247.745486][ T53] usb 9-1: Manufacturer: syz [ 247.747475][ T53] usb 9-1: SerialNumber: syz [ 247.754977][ T53] usb 9-1: config 0 descriptor?? [ 247.760556][ T53] hub 9-1:0.0: bad descriptor, ignoring hub [ 247.763966][ T53] hub 9-1:0.0: probe with driver hub failed with error -5 [ 247.770020][ T53] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input43 [ 247.786446][ T6840] sierra_net 11-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 248.071148][ T367] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 248.107506][ T372] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 248.132385][ T374] block nbd7: NBD_DISCONNECT [ 248.213117][ T9] usb 9-1: USB disconnect, device number 7 [ 248.312947][ T407] mkiss: ax0: crc mode is auto. [ 248.478558][ T433] program syz.6.11439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.570768][ T447] netlink: 'syz.5.11446': attribute type 11 has an invalid length. [ 248.573634][ T447] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.11446'. [ 248.581109][ T449] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11447'. [ 248.837961][ T477] xt_time: unknown flags 0xf4 [ 249.017093][ T506] mkiss: ax0: crc mode is auto. [ 249.047113][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.051641][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.062606][ T515] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11474'. [ 249.166506][ T528] netlink: 'syz.7.11477': attribute type 11 has an invalid length. [ 249.169540][ T528] netlink: 199788 bytes leftover after parsing attributes in process `syz.7.11477'. [ 249.365234][ T551] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 249.365234][ T551] The task syz.7.11484 (551) triggered the difference, watch for misbehavior. [ 249.597212][ T576] usb usb9: usbfs: process 576 (syz.4.11496) did not claim interface 0 before use [ 249.636425][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11500'. [ 249.865211][ T611] netlink: 200 bytes leftover after parsing attributes in process `syz.4.11512'. [ 249.954580][ T621] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11517'. [ 250.084249][ T641] F2FS-fs: Conflicting test_dummy_encryption options [ 250.298076][ T6318] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 250.300598][ T663] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11537'. [ 250.470696][ T6318] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 250.473692][ T6318] usb 9-1: config 1 has no interface number 0 [ 250.475951][ T6318] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 250.479901][ T6318] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 250.483611][ T6318] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.492140][ T6318] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 250.495099][ T6318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.497712][ T6318] usb 9-1: Product: syz [ 250.499295][ T6318] usb 9-1: Manufacturer: syz [ 250.501144][ T6318] usb 9-1: SerialNumber: syz [ 250.512117][ T634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.734203][ T634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.848480][ T717] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11559'. [ 250.891662][ T722] mkiss: ax0: crc mode is auto. [ 250.958594][ T6318] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 251.155493][ T745] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11566'. [ 251.172268][ T6318] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 251.179186][ T6318] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 251.182889][ T6318] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 251.185710][ T6318] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 251.197703][ T6318] usb 9-1: USB disconnect, device number 8 [ 251.207644][ T6318] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 251.266857][ T40] kauditd_printk_skb: 234 callbacks suppressed [ 251.266880][ T40] audit: type=1400 audit(524527.044:46469): avc: denied { read open } for pid=762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.281218][ T40] audit: type=1400 audit(524527.044:46470): avc: denied { getattr } for pid=762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.292448][ T40] audit: type=1400 audit(524527.054:46471): avc: denied { add_name } for pid=759 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.302718][ T40] audit: type=1400 audit(524527.054:46472): avc: denied { create } for pid=759 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.311902][ T6318] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 251.326755][ T40] audit: type=1400 audit(524527.054:46473): avc: denied { write open } for pid=759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=7009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.338868][ T40] audit: type=1400 audit(524527.054:46474): avc: denied { append } for pid=759 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=7009 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.348873][ T40] audit: type=1400 audit(524527.054:46475): avc: denied { getattr } for pid=759 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 251.357078][ T54] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 251.360190][ T40] audit: type=1400 audit(524527.072:46476): avc: denied { ioctl } for pid=739 comm="syz.7.11564" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.371266][ T40] audit: type=1400 audit(524527.082:46477): avc: denied { read write } for pid=764 comm="syz.5.11571" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.381294][ T40] audit: type=1400 audit(524527.082:46478): avc: denied { open } for pid=764 comm="syz.5.11571" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.532629][ T54] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.537362][ T54] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.542592][ T54] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.547246][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.552815][ T740] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 251.559939][ T54] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.603819][ T6368] Bluetooth: hci1: command tx timeout [ 251.753133][ T54] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 251.822353][ T9] usb 12-1: USB disconnect, device number 5 [ 251.916449][ T854] sp0: Synchronizing with TNC [ 251.924463][ T54] usb 10-1: Using ep0 maxpacket: 16 [ 251.926353][ T853] [U] [ 251.929595][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26037, setting to 1024 [ 251.937157][ T54] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 251.941296][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.945260][ T54] usb 10-1: Product: syz [ 251.952487][ T54] usb 10-1: Manufacturer: syz [ 251.954739][ T54] usb 10-1: SerialNumber: syz [ 251.962319][ T54] usb 10-1: config 0 descriptor?? [ 251.967394][ T54] hub 10-1:0.0: bad descriptor, ignoring hub [ 251.970189][ T54] hub 10-1:0.0: probe with driver hub failed with error -5 [ 251.976713][ T54] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input44 [ 252.070243][ T876] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 252.223577][T28044] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 252.406328][T28044] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 252.412543][T28044] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 252.417181][T28044] usb 11-1: Product: syz [ 252.418993][T28044] usb 11-1: Manufacturer: syz [ 252.419042][ T890] overlay: ./file0 is not a directory [ 252.420944][T28044] usb 11-1: SerialNumber: syz [ 252.423050][T28044] usb 11-1: config 0 descriptor?? [ 252.431143][ T6441] usb 10-1: USB disconnect, device number 4 [ 252.432768][T28044] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 252.436183][T28044] dvb-usb: bulk message failed: -22 (2/0) [ 252.443706][T28044] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.448035][T28044] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 252.451624][T28044] usb 11-1: media controller created [ 252.464803][T28044] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.634340][ T919] loop6: detected capacity change from 0 to 524288000 [ 252.654728][ T863] dvb-usb: bulk message failed: -22 (4/0) [ 252.657361][ T863] cxusb: i2c read failed [ 252.660314][T28044] cxusb: set interface failed [ 252.664690][T28044] dvb-usb: bulk message failed: -22 (1/0) [ 252.713066][T28044] DVB: Unable to find symbol mt352_attach() [ 252.715911][T28044] dvb-usb: bulk message failed: -22 (5/0) [ 252.719649][T28044] zl10353_read_register: readreg error (reg=127, ret==-121) [ 252.722955][T28044] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 252.790570][T28044] rc_core: IR keymap rc-dvico-mce not found [ 252.793045][T28044] Registered IR keymap rc-empty [ 252.796389][T28044] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 252.811449][T28044] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input45 [ 252.817328][T28044] dvb-usb: schedule remote query interval to 100 msecs. [ 252.819533][T28044] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 252.825755][T28044] usb 11-1: USB disconnect, device number 4 [ 252.872889][T28044] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 253.002292][ T964] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 253.302340][ T1008] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 253.356959][ T1016] loop4: detected capacity change from 0 to 7 [ 253.381676][ T1016] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.384021][ T1016] loop4: partition table partially beyond EOD, truncated [ 253.386671][ T1016] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 253.430957][T21267] udevd[21267]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 253.474186][ T1034] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 253.478920][ T1034] SELinux: failed to load policy [ 253.575062][ T1057] program syz.6.11649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.590213][ T1060] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 253.595906][ T1060] overlayfs: missing 'lowerdir' [ 253.829833][ T6368] Bluetooth: hci1: command tx timeout [ 254.077529][ T1164] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 254.081363][ T1164] overlayfs: missing 'lowerdir' [ 254.170134][ T1184] __nla_validate_parse: 1 callbacks suppressed [ 254.170146][ T1184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11688'. [ 254.282355][ T1200] loop4: detected capacity change from 0 to 7 [ 254.289334][ T1200] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 254.291356][ T1200] loop4: partition table partially beyond EOD, truncated [ 254.294310][ T1200] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 254.347149][T21267] udevd[21267]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 254.421236][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11700'. [ 254.553025][ T1247] sg_read: process 1080 (syz.4.11709) changed security contexts after opening file descriptor, this is not allowed. [ 254.961500][ T1303] devpts: Bad value for 'max' [ 255.022493][ T1312] autofs: Bad value for 'fd' [ 255.076509][ T1319] support for cryptoloop has been removed. Use dm-crypt instead. [ 255.327046][ T1339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 255.533129][ T1373] devpts: Bad value for 'max' [ 255.845276][ T1416] autofs: Bad value for 'fd' [ 255.975653][ T1428] support for cryptoloop has been removed. Use dm-crypt instead. [ 256.011272][ T1433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11777'. [ 256.180674][ T1459] No buffer was provided with the request [ 256.499965][ T1498] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 256.614417][ T1510] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 256.682019][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 256.682036][ T40] audit: type=1400 audit(524532.111:46711): avc: denied { create } for pid=1520 comm="syz.5.11802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.696624][ T40] audit: type=1400 audit(524532.130:46712): avc: denied { setopt } for pid=1520 comm="syz.5.11802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.707186][ T40] audit: type=1400 audit(524532.130:46713): avc: denied { connect } for pid=1520 comm="syz.5.11802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.722375][ T40] audit: type=1400 audit(524532.148:46714): avc: denied { write } for pid=1523 comm="syz.7.11805" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 256.726973][ T1519] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.761216][ T40] audit: type=1400 audit(524532.186:46715): avc: denied { sendto } for pid=54 comm="kworker/1:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 256.770790][ T1531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11808'. [ 256.771315][ T40] audit: type=1400 audit(524532.186:46716): avc: denied { create } for pid=1527 comm="syz.6.11806" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.782375][ T40] audit: type=1400 audit(524532.186:46717): avc: denied { map } for pid=1527 comm="syz.6.11806" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.800914][ T40] audit: type=1400 audit(524532.186:46718): avc: denied { read write } for pid=1527 comm="syz.6.11806" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 256.822901][ T1537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.831444][ T40] audit: type=1400 audit(524532.251:46719): avc: denied { read } for pid=1538 comm="syz.6.11811" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 256.841134][ T40] audit: type=1400 audit(524532.251:46720): avc: denied { open } for pid=1538 comm="syz.6.11811" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 257.061008][ T1579] binder_alloc: binder_alloc_mmap_handler: 1578 200000ffc000-200000ffd000 already mapped failed -16 [ 257.104231][ T1583] program syz.7.11826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.220653][ T1598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11831'. [ 257.449891][ T1637] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11847'. [ 257.451148][ T1639] binder_alloc: binder_alloc_mmap_handler: 1638 200000ffc000-200000ffd000 already mapped failed -16 [ 257.564653][ T1654] program syz.4.11855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.649611][ T1670] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11859'. [ 257.844577][ T1692] netlink: 'syz.7.11867': attribute type 13 has an invalid length. [ 258.294658][ T1745] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11888'. [ 258.490561][ T1775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11901'. [ 258.631362][ T1794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11911'. [ 258.635683][ T1794] netem: invalid attributes len -22 [ 258.638279][ T1794] netem: change failed [ 258.989336][ T1853] netem: invalid attributes len -22 [ 258.991709][ T1853] netem: change failed [ 259.038973][ T1857] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 259.041966][ T1857] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 259.047429][ T1857] cramfs: wrong magic [ 259.301356][ T1888] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 259.303840][ T1888] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 259.308115][ T1888] cramfs: wrong magic [ 259.756690][ T6368] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 259.972047][ T6368] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 260.094609][ T1991] __nla_validate_parse: 2 callbacks suppressed [ 260.094622][ T1991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11984'. [ 260.153469][ T2001] tmpfs: Cannot disable swap on remount [ 260.314402][ T2033] tmpfs: Cannot disable swap on remount [ 260.319132][ T2032] sp0: Synchronizing with TNC [ 260.327098][ T2031] [U] [ 260.369793][ T2047] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 260.583939][ T2081] netlink: 252 bytes leftover after parsing attributes in process `syz.5.12018'. [ 260.775102][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12037'. [ 261.107691][ T2162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.186706][ T2173] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 261.237130][ T2178] netlink: 252 bytes leftover after parsing attributes in process `syz.4.12053'. [ 261.364850][ T2195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12060'. [ 261.396916][ T2198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12061'. [ 261.402268][ T54] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 261.573316][ T54] usb 11-1: Using ep0 maxpacket: 8 [ 261.580320][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.584585][ T54] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.588307][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.596834][ T54] usb 11-1: config 0 descriptor?? [ 261.707065][ T2236] mkiss: ax0: crc mode is auto. [ 261.977914][ T2272] nvme_fabrics: missing parameter 'transport=%s' [ 261.981205][ T2272] nvme_fabrics: missing parameter 'nqn=%s' [ 262.019289][ T2278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.040137][ T54] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 262.055493][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 262.055508][ T40] audit: type=1326 audit(524537.140:46930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2286 comm="syz.4.12090" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b7eb9bf79 code=0x0 [ 262.063422][ T54] usb 11-1: USB disconnect, device number 5 [ 262.066644][ T2280] mkiss: ax0: crc mode is auto. [ 262.073032][ T40] audit: type=1400 audit(524537.149:46931): avc: denied { search } for pid=5637 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.083420][ T40] audit: type=1400 audit(524537.149:46932): avc: denied { search } for pid=5637 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.094487][ T40] audit: type=1400 audit(524537.149:46933): avc: denied { search } for pid=5637 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.103810][ T40] audit: type=1400 audit(524537.149:46934): avc: denied { read } for pid=5637 comm="dhcpcd" name="n159" dev="tmpfs" ino=7881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.113191][ T40] audit: type=1400 audit(524537.149:46935): avc: denied { open } for pid=5637 comm="dhcpcd" path="/run/udev/data/n159" dev="tmpfs" ino=7881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.123444][ T40] audit: type=1400 audit(524537.149:46936): avc: denied { getattr } for pid=5637 comm="dhcpcd" path="/run/udev/data/n159" dev="tmpfs" ino=7881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.133888][ T40] audit: type=1400 audit(524537.196:46937): avc: denied { mounton } for pid=2303 comm="syz.5.12092" path="/585/file0" dev="tmpfs" ino=2986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.143310][ T40] audit: type=1400 audit(524537.205:46938): avc: denied { mount } for pid=2303 comm="syz.5.12092" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.152433][ T40] audit: type=1400 audit(524537.215:46939): avc: denied { unmount } for pid=27452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.290653][ T2319] tmpfs: Cannot change global quota limit on remount [ 262.381482][ T2329] netlink: 'syz.7.12104': attribute type 11 has an invalid length. [ 262.384383][ T2329] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12104'. [ 262.642330][ T2349] hid-generic 0003:0627:0001.0001: pid 2349 passed too large report [ 262.723453][ T2362] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 262.923216][ T2379] nvme_fabrics: missing parameter 'transport=%s' [ 262.925208][ T2379] nvme_fabrics: missing parameter 'nqn=%s' [ 262.993836][ T2389] tmpfs: Cannot change global quota limit on remount [ 263.091664][ T2402] netlink: 'syz.5.12132': attribute type 11 has an invalid length. [ 263.095100][ T2402] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12132'. [ 263.296765][ T2415] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.372191][ T6399] hid_parser_main: 4086 callbacks suppressed [ 263.372209][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.378033][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.384277][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.387446][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.390617][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.394154][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.397149][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.400103][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.403399][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.406603][ T6399] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 263.441109][ T6399] hid-generic 0005:00B6:0009.0005: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 263.494840][ T2437] block nbd7: Unsupported socket: should be TCP or UNIX. [ 263.497829][ T2434] fido_id[2434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.874667][ T2477] block nbd4: Unsupported socket: should be TCP or UNIX. [ 264.009407][ T2497] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.230673][ T2533] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 264.421276][ T2564] trusted_key: encrypted_key: key trusted:syz not found [ 264.672930][ T6399] hid-generic 0005:00B6:0009.0006: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 264.686720][ T2611] trusted_key: encrypted_key: key trusted:syz not found [ 264.722609][ T2615] fido_id[2615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.779024][ T2630] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 265.099449][ T2680] PKCS8: Unsupported PKCS#8 version [ 265.133976][ T2691] netlink: 348 bytes leftover after parsing attributes in process `syz.6.12226'. [ 265.431159][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12233'. [ 265.824973][ T2776] macsec1: entered promiscuous mode [ 265.827286][ T2776] macsec1: entered allmulticast mode [ 265.970209][ T2791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12255'. [ 265.981672][ T2799] xt_l2tp: wrong L2TP version: 0 [ 266.079628][ T2814] fuse: Bad value for 'group_id' [ 266.081991][ T2814] fuse: Bad value for 'group_id' [ 266.177576][ T2830] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12265'. [ 266.375040][ T2862] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12278'. [ 266.388657][ T6441] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 266.568863][ T6441] usb 9-1: Using ep0 maxpacket: 8 [ 266.572827][ T6441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.577490][ T6441] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.583990][ T6441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.591862][ T6441] usb 9-1: config 0 descriptor?? [ 266.819312][ T2916] xt_l2tp: wrong L2TP version: 0 [ 266.984629][ T2933] fuse: Bad value for 'group_id' [ 266.986540][ T2933] fuse: Bad value for 'group_id' [ 267.022470][ T2940] program syz.7.12306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.023574][ T2941] Bluetooth: MGMT ver 1.23 [ 267.034987][ T6441] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 267.056393][ T6441] usb 9-1: USB disconnect, device number 9 [ 267.106068][ T2967] Failed to initialize the IGMP autojoin socket (err -2) [ 267.189591][ T2982] PKCS8: Unsupported PKCS#8 version [ 267.452790][ T3008] ptrace attach of "/syz-executor exec"[3009] was attempted by "/syz-executor exec"[3008] [ 267.474507][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 267.474524][ T40] audit: type=1400 audit(524542.197:47198): avc: denied { mount } for pid=3016 comm="syz.5.12324" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.491308][ T40] audit: type=1400 audit(524542.216:47199): avc: denied { unmount } for pid=27452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.499981][ T40] audit: type=1400 audit(524542.216:47200): avc: denied { map_create } for pid=3018 comm="syz.7.12325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.507880][ T40] audit: type=1400 audit(524542.216:47201): avc: denied { map_read map_write } for pid=3018 comm="syz.7.12325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 267.524639][ T40] audit: type=1400 audit(524542.244:47202): avc: denied { execute } for pid=3020 comm="syz.5.12327" path="/646/file0" dev="tmpfs" ino=3299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.534147][ T40] audit: type=1800 audit(524542.244:47203): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.12327" name="file0" dev="tmpfs" ino=3299 res=0 errno=0 [ 267.542840][ T40] audit: type=1804 audit(524542.253:47204): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.12327" name="/newroot/646/file0" dev="tmpfs" ino=3299 res=1 errno=0 [ 267.556114][ T3025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.624886][ T3036] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 267.625023][ T40] audit: type=1400 audit(524542.338:47205): avc: denied { module_request } for pid=3032 comm="syz.7.12332" kmod="br_netfilter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 267.627737][ T3036] overlayfs: missing 'lowerdir' [ 267.656977][ T40] audit: type=1400 audit(524542.366:47206): avc: denied { recv } for pid=5835 comm="syz-executor" saddr=127.0.0.1 src=37596 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 267.684080][ T40] audit: type=1400 audit(524542.394:47207): avc: denied { read write } for pid=3040 comm="syz.4.12335" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 267.708170][ T3045] program syz.5.12334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.999246][ T3088] Failed to initialize the IGMP autojoin socket (err -2) [ 268.130759][ T6441] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 268.186856][ T3103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 268.190264][ T3103] overlayfs: missing 'lowerdir' [ 268.198114][ T3107] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 268.291274][ T6441] usb 10-1: Using ep0 maxpacket: 32 [ 268.295680][ T6441] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 268.299550][ T6441] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 268.304512][ T6441] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 268.309171][ T6441] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 268.314819][ T6441] usb 10-1: config 0 interface 0 has no altsetting 0 [ 268.320164][ T6441] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 268.324180][ T6441] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 268.327844][ T6441] usb 10-1: Product: syz [ 268.329804][ T6441] usb 10-1: Manufacturer: syz [ 268.331868][ T6441] usb 10-1: SerialNumber: syz [ 268.336656][ T6441] usb 10-1: config 0 descriptor?? [ 268.341863][ T6441] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.347302][ T6441] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 268.641648][T28044] usb 10-1: USB disconnect, device number 5 [ 268.658594][T28044] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 268.848182][ T3158] tmpfs: Too few inodes for current use [ 268.864835][ T3160] 9pnet_fd: Insufficient options for proto=fd [ 269.159075][ T3193] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12396'. [ 269.271260][ T3211] loop4: detected capacity change from 0 to 7 [ 269.278339][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.280473][ T3210] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 269.283440][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.290945][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.293605][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.296313][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.299158][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.302550][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.305150][T21267] ldm_validate_partition_table(): Disk read failed. [ 269.307615][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.310245][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.312874][T21267] Buffer I/O error on dev loop4, logical block 0, async page read [ 269.315840][T21267] Dev loop4: unable to read RDB block 0 [ 269.317780][T21267] loop4: unable to read partition table [ 269.319955][T21267] loop4: partition table beyond EOD, truncated [ 269.324248][ T3211] ldm_validate_partition_table(): Disk read failed. [ 269.327030][ T3211] Dev loop4: unable to read RDB block 0 [ 269.329702][ T3211] loop4: unable to read partition table [ 269.332163][ T3211] loop4: partition table beyond EOD, truncated [ 269.334695][ T3211] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 269.340638][ T3216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12407'. [ 269.473625][ T3232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12412'. [ 269.523515][ T3237] hub 6-0:1.0: USB hub found [ 269.527068][ T3237] hub 6-0:1.0: 1 port detected [ 270.315811][ T3300] Bluetooth: MGMT ver 1.23 [ 270.506653][ T54] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 270.665020][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12449'. [ 270.668155][ T3335] openvswitch: netlink: Unknown nsh attribute 0 [ 270.696514][ T54] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 270.700696][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.702754][ T3338] delete_channel: no stack [ 270.710232][ T54] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 270.713437][ T54] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 270.716243][ T54] usb 12-1: Manufacturer: syz [ 270.729291][ T54] usb 12-1: config 0 descriptor?? [ 270.744103][ T3346] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 270.794783][ T54] rc_core: IR keymap rc-hauppauge not found [ 270.797393][ T54] Registered IR keymap rc-empty [ 270.806360][ T3359] tmpfs: Cannot change global quota limit on remount [ 270.806428][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 270.824203][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input46 [ 270.959129][ T54] usb 12-1: USB disconnect, device number 6 [ 270.965974][ T3384] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 271.084680][ T3407] binder: 3406:3407 ioctl c018620c 2000000000c0 returned -22 [ 271.558497][ T3480] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12504'. [ 271.611263][ T3480] bond1 (unregistering): Released all slaves [ 271.664586][ T3566] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 271.740716][ T3574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12513'. [ 272.247591][ T3645] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 272.337914][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12545'. [ 272.368138][ T3659] sp0: Synchronizing with TNC [ 272.373952][ T3658] [U] [ 272.538038][ T3686] ip6gretap0: entered promiscuous mode [ 272.762767][ T6318] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 272.882237][ T40] kauditd_printk_skb: 173 callbacks suppressed [ 272.882248][ T40] audit: type=1400 audit(524547.255:47381): avc: denied { read } for pid=3707 comm="syz.5.12564" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.894635][ T40] audit: type=1400 audit(524547.255:47382): avc: denied { open } for pid=3707 comm="syz.5.12564" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.904464][ T40] audit: type=1400 audit(524547.255:47383): avc: denied { ioctl } for pid=3707 comm="syz.5.12564" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.923188][ T6318] usb 12-1: Using ep0 maxpacket: 16 [ 272.929355][ T6318] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 272.932762][ T6318] usb 12-1: config 0 has no interface number 0 [ 272.936293][ T6318] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.941532][ T6318] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 272.947304][ T6318] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 272.950890][ T6318] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 272.954255][ T6318] usb 12-1: Product: syz [ 272.956201][ T6318] usb 12-1: SerialNumber: syz [ 272.967236][ T6318] usb 12-1: config 0 descriptor?? [ 272.972043][ T40] audit: type=1400 audit(524547.339:47384): avc: denied { write } for pid=3711 comm="syz.5.12566" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 272.972436][ T6318] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 272.985164][ T6318] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input47 [ 273.008325][ T40] audit: type=1400 audit(524547.367:47385): avc: denied { read write } for pid=27452 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.018275][ T40] audit: type=1400 audit(524547.367:47386): avc: denied { open } for pid=27452 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.028499][ T40] audit: type=1400 audit(524547.367:47387): avc: denied { ioctl } for pid=27452 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.061523][ T40] audit: type=1400 audit(524547.414:47388): avc: denied { read write } for pid=3721 comm="syz.5.12568" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.072908][ T40] audit: type=1400 audit(524547.414:47389): avc: denied { open } for pid=3721 comm="syz.5.12568" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.085743][ T40] audit: type=1400 audit(524547.432:47390): avc: denied { ioctl } for pid=3721 comm="syz.5.12568" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.189420][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 273.195464][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 273.198701][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 273.201685][ C2] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 273.203906][ T6441] usb 12-1: USB disconnect, device number 7 [ 273.204564][ C2] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 273.212567][ T6441] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 273.396407][ T3752] tipc: Cannot configure node identity twice [ 273.914131][ T3792] devtmpfs: Cannot change global quota limit on remount [ 274.153414][ T6318] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 274.315430][ T6318] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 274.320081][ T6318] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 274.323628][ T6318] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 274.335272][ T6318] usb 9-1: config 250 has no interface number 0 [ 274.338220][ T6318] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 274.343577][ T6318] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 231, setting to 64 [ 274.348425][ T6318] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 274.354030][ T6318] usb 9-1: config 250 interface 228 has no altsetting 0 [ 274.359286][ T6318] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 274.363121][ T6318] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 274.366589][ T6318] usb 9-1: Product: syz [ 274.373106][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.373275][ T6318] usb 9-1: SerialNumber: syz [ 274.384426][ T3814] tipc: Started in network mode [ 274.386007][ T3814] tipc: Node identity , cluster identity 4711 [ 274.387674][ T6318] hub 9-1:250.228: bad descriptor, ignoring hub [ 274.391348][ T6318] hub 9-1:250.228: probe with driver hub failed with error -5 [ 274.608935][ T6318] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 274.904566][ C3] usblp0: nonzero read bulk status received: -71 [ 274.924272][ T6441] usb 9-1: USB disconnect, device number 10 [ 274.928786][ T6441] usblp0: removed [ 275.406567][ T3851] overlayfs: regular lower layers cannot follow data lower layers [ 275.495322][ T3857] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 275.586730][ T3863] tipc: Enabled bearer , priority 10 [ 275.667966][ T3873] overlayfs: regular lower layers cannot follow data lower layers [ 276.251804][ T3928] tipc: Started in network mode [ 276.254029][ T3928] tipc: Node identity ac1414aa, cluster identity 4711 [ 276.258251][ T3928] tipc: Enabled bearer , priority 10 [ 276.635208][ T6443] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 276.784673][ T3952] IPVS: persistence engine module ip_vs_pe_s not found [ 276.791301][ T6441] tipc: Node number set to 2886997043 [ 276.798138][ T6443] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 276.801709][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.806916][ T6443] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.812079][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.816858][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.825497][ T6443] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 276.826602][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12662'. [ 276.831035][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.831635][ T3955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12662'. [ 276.836153][ T6443] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.840360][ T3955] netlink: 'syz.6.12662': attribute type 11 has an invalid length. [ 276.844850][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.847859][ T3955] netlink: 'syz.6.12662': attribute type 7 has an invalid length. [ 276.852199][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.853169][ T6443] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 276.863431][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.867757][ T6443] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.872199][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.876565][ T6443] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.882620][ T6443] usb 10-1: string descriptor 0 read error: -22 [ 276.884665][ T6443] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 276.887573][ T6443] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.899355][ T6443] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 276.943426][ T3964] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 277.110220][ T6443] usb 10-1: USB disconnect, device number 6 [ 277.458998][ T6840] tipc: Node number set to 2886997162 [ 277.533916][ T54] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 277.694214][ T4002] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 277.694305][ T54] usb 11-1: Using ep0 maxpacket: 16 [ 277.700569][ T54] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 277.703343][ T54] usb 11-1: config 0 has no interface number 0 [ 277.706404][ T54] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.710621][ T54] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 277.714944][ T54] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 277.718130][ T54] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 277.720719][ T54] usb 11-1: Product: syz [ 277.722192][ T54] usb 11-1: SerialNumber: syz [ 277.724920][ T54] usb 11-1: config 0 descriptor?? [ 277.732051][ T54] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 277.735688][ T54] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input48 [ 277.956724][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 277.957087][ T6441] usb 11-1: USB disconnect, device number 6 [ 277.959373][ C1] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 277.969608][ T6441] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 278.000198][ T4027] netlink: 'syz.5.12681': attribute type 1 has an invalid length. [ 278.002762][ T4027] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12681'. [ 278.242522][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 278.242534][ T40] audit: type=1400 audit(524552.256:47518): avc: denied { read } for pid=4044 comm="syz.5.12690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.270844][ T40] audit: type=1400 audit(524552.284:47519): avc: denied { create } for pid=4046 comm="syz.5.12691" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.278479][ T40] audit: type=1400 audit(524552.284:47520): avc: denied { map } for pid=4046 comm="syz.5.12691" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=105748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.287579][ T40] audit: type=1400 audit(524552.284:47521): avc: denied { read write } for pid=4046 comm="syz.5.12691" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=105748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.311976][ T40] audit: type=1400 audit(524552.331:47522): avc: denied { read } for pid=4049 comm="syz.5.12692" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 278.325667][ T40] audit: type=1400 audit(524552.331:47523): avc: denied { open } for pid=4049 comm="syz.5.12692" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 278.333765][ T40] audit: type=1400 audit(524552.340:47524): avc: denied { ioctl } for pid=4049 comm="syz.5.12692" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 278.428405][ T40] audit: type=1400 audit(524552.433:47525): avc: denied { mounton } for pid=4053 comm="syz.5.12694" path="/745/bus" dev="tmpfs" ino=3798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 278.428674][ T4054] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 278.475290][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.499844][ T40] audit: type=1400 audit(524552.508:47526): avc: denied { read write } for pid=4055 comm="syz.5.12695" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.509198][ T4056] binder: 4055:4056 ioctl 40046205 0 returned -22 [ 278.509212][ T40] audit: type=1400 audit(524552.508:47527): avc: denied { open } for pid=4055 comm="syz.5.12695" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.517707][ T4056] binder: 4055:4056 ioctl c0306201 200000002100 returned -11 [ 278.624487][ T4064] netlink: 'syz.5.12699': attribute type 1 has an invalid length. [ 278.842139][ T4086] IPVS: persistence engine module ip_vs_pe_s not found [ 279.119369][ T4103] tipc: Enabled bearer , priority 10 [ 279.266274][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12721'. [ 279.271752][ T4116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12721'. [ 279.278594][ T4116] erspan0: entered promiscuous mode [ 279.362214][ T4129] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 279.425295][ T4134] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12731'. [ 279.473964][ T4139] binder: 4137:4139 ioctl 40046205 0 returned -22 [ 279.477183][ T4139] binder: 4137:4139 ioctl c0306201 200000002100 returned -11 [ 279.572348][ T4149] ptrace attach of "/syz-executor exec"[26113] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 279.989516][ T6318] IPVS: starting estimator thread 0... [ 280.184918][ T4190] IPVS: using max 28 ests per chain, 67200 per kthread [ 280.475846][ T54] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 280.615187][ T54] usb 10-1: device descriptor read/64, error -71 [ 280.871507][ T54] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 281.023223][ T54] usb 10-1: device descriptor read/64, error -71 [ 281.133914][ T4228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12773'. [ 281.140602][ T54] usb usb10-port1: attempt power cycle [ 281.326142][ T4244] blktrace: Concurrent blktraces are not allowed on nullb0 [ 281.503274][ T54] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 281.525133][ T54] usb 10-1: device descriptor read/8, error -71 [ 281.675030][ T4264] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 281.784638][ T54] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 281.825723][ T54] usb 10-1: device descriptor read/8, error -71 [ 281.941609][ T54] usb usb10-port1: unable to enumerate USB device [ 282.134056][ T54] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 282.318764][ T54] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 282.321576][ T54] usb 9-1: config 0 has no interface number 0 [ 282.324166][ T54] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 282.329351][ T54] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 282.333193][ T54] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 282.338040][ T54] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 282.341677][ T54] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 282.345109][ T54] usb 9-1: Product: syz [ 282.346960][ T54] usb 9-1: SerialNumber: syz [ 282.354290][ T54] usb 9-1: config 0 descriptor?? [ 282.360034][ T54] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 282.365802][ T54] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input49 [ 282.582707][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.583047][ T6441] usb 9-1: USB disconnect, device number 11 [ 282.585639][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 282.592969][ T6441] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 283.267889][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.615581][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 283.615596][ T40] audit: type=1400 audit(524557.285:47623): avc: denied { read write } for pid=4320 comm="syz.4.12811" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 283.637604][ T40] audit: type=1400 audit(524557.285:47624): avc: denied { open } for pid=4320 comm="syz.4.12811" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 283.646306][ T40] audit: type=1400 audit(524557.285:47625): avc: denied { ioctl } for pid=4320 comm="syz.4.12811" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 283.778131][ T40] audit: type=1400 audit(524557.435:47626): avc: denied { create } for pid=4330 comm="syz.5.12804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.787703][ T40] audit: type=1400 audit(524557.444:47627): avc: denied { write } for pid=4330 comm="syz.5.12804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.795372][ T40] audit: type=1400 audit(524557.444:47628): avc: denied { read } for pid=4330 comm="syz.5.12804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.832044][ T40] audit: type=1400 audit(524557.491:47629): avc: denied { append } for pid=4334 comm="syz.6.12807" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.322793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.020503][ T40] audit: type=1400 audit(524563.277:47630): avc: denied { execute } for pid=4340 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 290.032244][ T40] audit: type=1400 audit(524563.277:47631): avc: denied { execute_no_trans } for pid=4340 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 290.060624][ T40] audit: type=1400 audit(524563.286:47632): avc: denied { execmem } for pid=4340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 290.068657][ T40] audit: type=1400 audit(524563.286:47633): avc: denied { recv } for pid=5835 comm="syz-executor" saddr=127.0.0.1 src=37596 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.126631][ T40] audit: type=1400 audit(524563.380:47634): avc: denied { create } for pid=4347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.148769][ T40] audit: type=1400 audit(524563.380:47635): avc: denied { read write } for pid=4347 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 290.149760][ T6371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.167704][ T6371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.171600][ T6371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.175362][ T6371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.180104][ T40] audit: type=1400 audit(524563.380:47636): avc: denied { open } for pid=4347 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 290.189393][ T6371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.210396][ T40] audit: type=1400 audit(524563.380:47637): avc: denied { allowed } for pid=4348 comm="syz.4.12815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 290.218239][ T40] audit: type=1400 audit(524563.380:47638): avc: denied { create } for pid=4348 comm="syz.4.12815" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.233103][ T40] audit: type=1400 audit(524563.380:47639): avc: denied { map } for pid=4348 comm="syz.4.12815" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 290.504387][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 290.578774][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.582171][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.585419][ T4347] bridge_slave_0: entered allmulticast mode [ 290.589429][ T4347] bridge_slave_0: entered promiscuous mode [ 290.594414][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.598186][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.601263][ T4347] bridge_slave_1: entered allmulticast mode [ 290.605260][ T4347] bridge_slave_1: entered promiscuous mode [ 290.643932][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.651104][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.729053][ T60] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.742680][ T4347] team0: Port device team_slave_0 added [ 290.758271][ T4347] team0: Port device team_slave_1 added [ 290.780576][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.783311][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.793543][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.798089][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.800600][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.812512][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.841198][ T60] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.889920][ T4347] hsr_slave_0: entered promiscuous mode [ 290.893193][ T4347] hsr_slave_1: entered promiscuous mode [ 290.916003][ T60] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.940089][ T4595] bridge0: entered promiscuous mode [ 290.942112][ T4595] macsec1: entered promiscuous mode [ 291.029457][ T60] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.190600][ T4694] bridge0: port 3(ipvlan2) entered blocking state [ 291.194019][ T4694] bridge0: port 3(ipvlan2) entered disabled state [ 291.196781][ T4694] ipvlan2: entered allmulticast mode [ 291.198994][ T4694] bridge0: entered allmulticast mode [ 291.203021][ T4694] ipvlan2: left allmulticast mode [ 291.210008][ T4694] bridge0: left allmulticast mode [ 291.245838][ T60] bridge_slave_1: left allmulticast mode [ 291.247695][ T60] bridge_slave_1: left promiscuous mode [ 291.250126][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.254263][ T60] bridge_slave_0: left allmulticast mode [ 291.256060][ T60] bridge_slave_0: left promiscuous mode [ 291.258130][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.459031][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.466254][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.470765][ T60] bond0 (unregistering): Released all slaves [ 291.476782][ T4710] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 291.510412][ T4347] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.515193][ T4347] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.520923][ T4347] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 291.525900][ T4347] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.594723][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.627325][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.632372][ T4741] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 291.638553][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.640845][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.643201][ T4743] usb usb9: usbfs: process 4743 (syz.6.12857) did not claim interface 4 before use [ 291.648458][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.650746][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.880663][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12867'. [ 291.930999][ T60] hsr_slave_0: left promiscuous mode [ 291.936167][ T60] hsr_slave_1: left promiscuous mode [ 291.939017][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.946702][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.954525][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.956916][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.972990][ T60] veth1_macvtap: left promiscuous mode [ 291.975695][ T60] veth0_macvtap: left promiscuous mode [ 291.977989][ T60] veth1_vlan: left promiscuous mode [ 291.980213][ T60] veth0_vlan: left promiscuous mode [ 292.130396][ T60] team0 (unregistering): Port device team_slave_1 removed [ 292.139468][ T60] team0 (unregistering): Port device team_slave_0 removed [ 292.231691][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.424807][ T6368] Bluetooth: hci4: command tx timeout [ 292.470040][ T4347] veth0_vlan: entered promiscuous mode [ 292.482076][ T4347] veth1_vlan: entered promiscuous mode [ 292.517624][ T4347] veth0_macvtap: entered promiscuous mode [ 292.524756][ T4347] veth1_macvtap: entered promiscuous mode [ 292.540774][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.553998][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.566432][ T191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.570317][ T191] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.587619][ T191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.591876][ T191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.664470][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.668867][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.695600][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.699405][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.819340][ T4877] vxcan1: entered allmulticast mode [ 292.880514][ T4883] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 293.010073][ T4907] program syz.8.12909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.406093][ T4964] mkiss: ax0: crc mode is auto. [ 293.533525][ T4986] SELinux: failed to load policy [ 293.650541][ T5003] vim2m vim2m.0: vidioc_s_fmt queue busy [ 293.699927][ T5011] netlink: 'syz.8.12949': attribute type 2 has an invalid length. [ 293.702564][ T5011] netlink: 68 bytes leftover after parsing attributes in process `syz.8.12949'. [ 294.404059][ T54] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 294.565852][ T54] usb 11-1: Using ep0 maxpacket: 8 [ 294.571229][ T54] usb 11-1: unable to get BOS descriptor or descriptor too short [ 294.576458][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 294.581061][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.585105][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 294.592767][ T54] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 294.598245][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 294.602359][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 294.619818][ T54] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 294.630998][ T54] usb 11-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 294.633304][ T5131] vim2m vim2m.0: vidioc_s_fmt queue busy [ 294.634671][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.634692][ T54] usb 11-1: Product: syz [ 294.634705][ T54] usb 11-1: Manufacturer: syz [ 294.650363][ T6368] Bluetooth: hci4: command tx timeout [ 294.663316][ T54] usb 11-1: SerialNumber: syz [ 294.677417][ T54] usb 11-1: config 0 descriptor?? [ 294.680443][ T5078] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.685097][ T5078] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.691110][ T54] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.889564][ T5168] Cannot find add_set index 46338 as target [ 294.933399][ T6318] usb 11-1: USB disconnect, device number 7 [ 294.960067][ T6441] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 295.124159][ T6441] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 295.127962][ T6441] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.131676][ T6441] usb 13-1: Product: syz [ 295.133680][ T6441] usb 13-1: Manufacturer: syz [ 295.135671][ T6441] usb 13-1: SerialNumber: syz [ 295.140306][ T6441] usb 13-1: config 0 descriptor?? [ 295.369879][ T6441] usb 13-1: USB disconnect, device number 2 [ 295.371626][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13014'. [ 295.405850][ T40] kauditd_printk_skb: 296 callbacks suppressed [ 295.405865][ T40] audit: type=1400 audit(524568.306:47936): avc: denied { map_create } for pid=5235 comm="syz.4.13015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 295.417443][ T40] audit: type=1400 audit(524568.316:47937): avc: denied { map_read map_write } for pid=5235 comm="syz.4.13015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 295.510023][ T40] audit: type=1400 audit(524568.409:47938): avc: denied { create } for pid=5239 comm="syz.4.13016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.521926][ T40] audit: type=1400 audit(524568.418:47939): avc: denied { setopt } for pid=5239 comm="syz.4.13016" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.530534][ T40] audit: type=1400 audit(524568.418:47940): avc: denied { write } for pid=5239 comm="syz.4.13016" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.613900][ T5250] Bluetooth: MGMT ver 1.23 [ 295.627450][ T40] audit: type=1400 audit(524568.521:47941): avc: denied { read } for pid=5251 comm="syz.4.13023" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.636429][ T40] audit: type=1400 audit(524568.521:47942): avc: denied { open } for pid=5251 comm="syz.4.13023" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.644271][ T40] audit: type=1400 audit(524568.531:47943): avc: denied { ioctl } for pid=5251 comm="syz.4.13023" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 295.730504][ T40] audit: type=1400 audit(524568.615:47944): avc: denied { read } for pid=5637 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 295.753617][ T40] audit: type=1400 audit(524568.633:47945): avc: denied { search } for pid=5637 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.958267][ T5294] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13034'. [ 296.335266][ T5359] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.13055'. [ 296.357490][ T5358] netlink: 'syz.5.13054': attribute type 83 has an invalid length. [ 296.583523][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13070'. [ 296.620062][ T54] IPVS: starting estimator thread 0... [ 296.695289][ T5412] xt_socket: unknown flags 0x20 [ 296.725352][ T5399] IPVS: using max 28 ests per chain, 67200 per kthread [ 296.815834][ T5432] ata1.00: invalid multi_count 128 ignored [ 296.877783][ T6371] Bluetooth: hci4: command tx timeout [ 296.943043][ T5452] sp0: Synchronizing with TNC [ 296.962056][ T5451] [U] [ 297.339247][ T5494] hid-generic 0003:0627:0001.0001: pid 5494 passed too short report [ 297.891869][ T5588] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 298.034446][ T5603] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 298.916307][ T5684] xt_hashlimit: size too large, truncated to 1048576 [ 298.989182][ T5697] tipc: Enabling of bearer rejected, media not registered [ 299.103402][ T5718] tmpfs: Bad value for 'mpol' [ 299.116222][ T6371] Bluetooth: hci4: command 0x0419 tx timeout [ 299.244853][ T5750] blktrace: Concurrent blktraces are not allowed on sg0 [ 299.472964][ T5795] sp0: Synchronizing with TNC [ 299.477167][ T5795] sp0: Found TNC [ 299.480691][ T5794] [U] ` [ 299.488493][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13218'. [ 299.754033][ T5841] xt_limit: Overflow, try lower: 271964/0 [ 299.860499][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13237'. [ 300.441014][ T5890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=5890 comm=syz.4.13254 [ 300.592641][ T5910] tipc: Started in network mode [ 300.594380][ T5910] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 300.602546][ T5910] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 300.606471][ T5910] tipc: Enabled bearer , priority 10 [ 300.758940][ T40] kauditd_printk_skb: 287 callbacks suppressed [ 300.758958][ T40] audit: type=1400 audit(524573.317:48233): avc: denied { read write } for pid=5949 comm="syz.4.13267" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.771276][ T40] audit: type=1400 audit(524573.317:48234): avc: denied { open } for pid=5949 comm="syz.4.13267" path="/dev/sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.780968][ T40] audit: type=1400 audit(524573.326:48235): avc: denied { read } for pid=5952 comm="syz.5.13268" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.790700][ T40] audit: type=1400 audit(524573.326:48236): avc: denied { open } for pid=5952 comm="syz.5.13268" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.800202][ T40] audit: type=1400 audit(524573.326:48237): avc: denied { ioctl } for pid=5952 comm="syz.5.13268" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.816530][ T40] audit: type=1400 audit(524573.364:48238): avc: denied { ioctl } for pid=5954 comm="syz.5.13269" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.862003][ T40] audit: type=1400 audit(524573.410:48239): avc: denied { append } for pid=5956 comm="syz.5.13270" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 300.929237][ T53] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 300.969488][ T40] audit: type=1400 audit(524573.504:48240): avc: denied { ioctl } for pid=5960 comm="syz.4.13271" path="socket:[110040]" dev="sockfs" ino=110040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.979588][ T40] audit: type=1400 audit(524573.504:48241): avc: denied { write } for pid=5960 comm="syz.4.13271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.091397][ T53] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.094887][ T53] usb 13-1: config 0 has no interface number 0 [ 301.097620][ T53] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.102549][ T53] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 301.107048][ T53] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 301.112280][ T53] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 301.116884][ T53] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 301.121467][ T53] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.127338][ T53] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 301.131188][ T53] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.138452][ T53] usb 13-1: config 0 descriptor?? [ 301.144248][ T5942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 301.147385][ T5942] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 301.155282][ T53] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 301.300295][ T40] audit: type=1400 audit(524573.822:48242): avc: denied { write } for pid=5967 comm="syz.6.13272" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.327713][ T6371] Bluetooth: hci4: command 0x0419 tx timeout [ 301.374458][ T6441] usb 13-1: USB disconnect, device number 3 [ 301.389712][ T6441] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 301.393713][ T5977] bond1: (slave bond_slave_1): Device is not our slave [ 301.396636][ T5977] bond1: option active_slave: invalid value (bond_slave_1) [ 301.404603][ T5977] bond1 (unregistering): Released all slaves [ 301.550064][ T29] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 301.711661][ T29] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 301.714445][ T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.718894][ T29] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 301.724302][ T29] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 301.727588][ T29] usb 11-1: Manufacturer: syz [ 301.732551][ T29] usb 11-1: config 0 descriptor?? [ 301.795759][ T29] rc_core: IR keymap rc-hauppauge not found [ 301.798462][ T29] Registered IR keymap rc-empty [ 301.800507][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 301.804840][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input50 [ 301.818409][ T6441] tipc: Node number set to 1 [ 301.953323][ T5056] usb 11-1: USB disconnect, device number 8 [ 302.191669][ T6109] bridge_slave_0: invalid flags given to default FDB implementation [ 302.742194][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13308'. [ 302.745871][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13308'. [ 302.817267][ T6194] tipc: Enabled bearer , priority 0 [ 302.981524][ T6215] netlink: 'syz.6.13320': attribute type 1 has an invalid length. [ 302.984137][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.109545][ T6237] ================================================================== [ 303.112967][ T6237] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 303.116076][ T6237] Write of size 4 at addr ffff88802ee0ad08 by task syz.8.13328/6237 [ 303.121088][ T6237] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.122158][ T6237] CPU: 2 UID: 0 PID: 6237 Comm: syz.8.13328 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.122184][ T6237] Tainted: [L]=SOFTLOCKUP [ 303.122191][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.122202][ T6237] Call Trace: [ 303.122209][ T6237] [ 303.122216][ T6237] dump_stack_lvl+0x100/0x190 [ 303.122248][ T6237] print_report+0x156/0x4c9 [ 303.122275][ T6237] ? __virt_addr_valid+0x81/0x620 [ 303.122303][ T6237] ? __phys_addr+0xe8/0x180 [ 303.122329][ T6237] ? try_module_get+0x4c/0xd0 [ 303.122349][ T6237] kasan_report+0xdf/0x1e0 [ 303.122375][ T6237] ? try_module_get+0x4c/0xd0 [ 303.122399][ T6237] kasan_check_range+0x10f/0x1e0 [ 303.122416][ T6237] try_module_get+0x4c/0xd0 [ 303.122437][ T6237] dvb_device_open+0x124/0x3b0 [ 303.122462][ T6237] ? __pfx_dvb_device_open+0x10/0x10 [ 303.122485][ T6237] chrdev_open+0x234/0x6a0 [ 303.122512][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 303.122539][ T6237] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 303.122572][ T6237] do_dentry_open+0x6d8/0x1660 [ 303.122597][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 303.122628][ T6237] vfs_open+0x82/0x3f0 [ 303.122647][ T6237] path_openat+0x208c/0x31a0 [ 303.122678][ T6237] ? __pfx_path_openat+0x10/0x10 [ 303.122714][ T6237] do_file_open+0x20e/0x430 [ 303.122742][ T6237] ? __pfx_do_file_open+0x10/0x10 [ 303.122778][ T6237] ? alloc_fd+0x476/0x790 [ 303.122806][ T6237] ? do_getname+0x191/0x390 [ 303.122826][ T6237] do_sys_openat2+0x10d/0x1e0 [ 303.122844][ T6237] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.122867][ T6237] __x64_sys_openat+0x12d/0x210 [ 303.122886][ T6237] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.122906][ T6237] ? do_user_addr_fault+0x8d6/0x12f0 [ 303.122929][ T6237] do_syscall_64+0x106/0xf80 [ 303.122951][ T6237] ? clear_bhb_loop+0x40/0x90 [ 303.122973][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.122991][ T6237] RIP: 0033:0x7f5be5b5c84e [ 303.123006][ T6237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.123023][ T6237] RSP: 002b:00007f5be6a10b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.123040][ T6237] RAX: ffffffffffffffda RBX: 00007f5be6a116c0 RCX: 00007f5be5b5c84e [ 303.123052][ T6237] RDX: 0000000000040002 RSI: 00007f5be6a10c00 RDI: ffffffffffffff9c [ 303.123064][ T6237] RBP: 00007f5be6a10c00 R08: 0000000000000000 R09: 0000000000000000 [ 303.123075][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 303.123086][ T6237] R13: 00007f5be5e16038 R14: 00007f5be5e15fa0 R15: 00007ffe23626d08 [ 303.123105][ T6237] [ 303.123111][ T6237] [ 303.144880][ T6238] ptrace attach of "/syz-executor exec"[6239] was attempted by "/syz-executor exec"[6238] [ 303.146438][ T6237] Allocated by task 1: [ 303.146452][ T6237] kasan_save_stack+0x30/0x50 [ 303.146479][ T6237] kasan_save_track+0x14/0x30 [ 303.242437][ T6237] __kasan_kmalloc+0xaa/0xb0 [ 303.244424][ T6237] bus_add_driver+0x92/0x5b0 [ 303.246420][ T6237] driver_register+0x1e2/0x360 [ 303.248447][ T6237] vidtv_bridge_init+0x38/0x70 [ 303.250481][ T6237] do_one_initcall+0x11d/0x760 [ 303.252558][ T6237] kernel_init_freeable+0x6e5/0x7a0 [ 303.254783][ T6237] kernel_init+0x1f/0x1e0 [ 303.256630][ T6237] ret_from_fork+0x754/0xd80 [ 303.258468][ T6237] ret_from_fork_asm+0x1a/0x30 [ 303.260308][ T6237] [ 303.261345][ T6237] The buggy address belongs to the object at ffff88802ee0ac00 [ 303.261345][ T6237] which belongs to the cache kmalloc-256 of size 256 [ 303.267136][ T6237] The buggy address is located 56 bytes to the right of [ 303.267136][ T6237] allocated 208-byte region [ffff88802ee0ac00, ffff88802ee0acd0) [ 303.272143][ T6237] [ 303.272919][ T6237] The buggy address belongs to the physical page: [ 303.274946][ T6237] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ee0a [ 303.277707][ T6237] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 303.280703][ T6237] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 303.283786][ T6237] page_type: f5(slab) [ 303.285511][ T6237] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 303.289090][ T6237] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 303.292679][ T6237] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 303.296288][ T6237] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 303.299910][ T6237] head: 00fff00000000001 ffffea0000bb8281 00000000ffffffff 00000000ffffffff [ 303.303550][ T6237] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 303.307161][ T6237] page dumped because: kasan: bad access detected [ 303.309747][ T6237] page_owner tracks the page as allocated [ 303.312016][ T6237] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19723602881, free_ts 0 [ 303.319720][ T6237] post_alloc_hook+0x153/0x170 [ 303.321770][ T6237] get_page_from_freelist+0x111d/0x3140 [ 303.324109][ T6237] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 303.326603][ T6237] new_slab+0xa6/0x6e0 [ 303.328342][ T6237] refill_objects+0x26b/0x400 [ 303.330343][ T6237] __pcs_replace_empty_main+0x19f/0x600 [ 303.332662][ T6237] __kmalloc_cache_noprof+0x493/0x6f0 [ 303.334940][ T6237] bus_add_driver+0x92/0x5b0 [ 303.336901][ T6237] driver_register+0x1e2/0x360 [ 303.338959][ T6237] i2c_register_driver+0xd9/0x1f0 [ 303.341093][ T6237] do_one_initcall+0x11d/0x760 [ 303.343156][ T6237] kernel_init_freeable+0x6e5/0x7a0 [ 303.345369][ T6237] kernel_init+0x1f/0x1e0 [ 303.347217][ T6237] ret_from_fork+0x754/0xd80 [ 303.349175][ T6237] ret_from_fork_asm+0x1a/0x30 [ 303.351218][ T6237] page_owner free stack trace missing [ 303.353524][ T6237] [ 303.354556][ T6237] Memory state around the buggy address: [ 303.356901][ T6237] ffff88802ee0ac00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.360250][ T6237] ffff88802ee0ac80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 303.363618][ T6237] >ffff88802ee0ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.366963][ T6237] ^ [ 303.368788][ T6237] ffff88802ee0ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.372144][ T6237] ffff88802ee0ae00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 303.375484][ T6237] ================================================================== [ 303.381333][ T6237] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.384408][ T6237] CPU: 2 UID: 0 PID: 6237 Comm: syz.8.13328 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.388926][ T6237] Tainted: [L]=SOFTLOCKUP [ 303.390962][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.395199][ T6237] Call Trace: [ 303.396623][ T6237] [ 303.397922][ T6237] dump_stack_lvl+0x100/0x190 [ 303.399940][ T6237] vpanic+0x552/0x970 [ 303.401655][ T6237] ? __pfx_vpanic+0x10/0x10 [ 303.403593][ T6237] ? try_module_get+0x4c/0xd0 [ 303.405613][ T6237] panic+0xd1/0xe0 [ 303.407218][ T6237] ? __pfx_panic+0x10/0x10 [ 303.409121][ T6237] ? try_module_get+0x4c/0xd0 [ 303.411140][ T6237] ? preempt_schedule_common+0x42/0xc0 [ 303.413476][ T6237] check_panic_on_warn.cold+0x19/0x34 [ 303.415748][ T6237] end_report.part.0+0x3a/0x90 [ 303.417817][ T6237] kasan_report.cold+0xe/0x18 [ 303.419815][ T6237] ? try_module_get+0x4c/0xd0 [ 303.421843][ T6237] kasan_check_range+0x10f/0x1e0 [ 303.423953][ T6237] try_module_get+0x4c/0xd0 [ 303.425893][ T6237] dvb_device_open+0x124/0x3b0 [ 303.427935][ T6237] ? __pfx_dvb_device_open+0x10/0x10 [ 303.430181][ T6237] chrdev_open+0x234/0x6a0 [ 303.432118][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 303.434229][ T6237] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 303.436892][ T6237] do_dentry_open+0x6d8/0x1660 [ 303.438950][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 303.441060][ T6237] vfs_open+0x82/0x3f0 [ 303.442812][ T6237] path_openat+0x208c/0x31a0 [ 303.444788][ T6237] ? __pfx_path_openat+0x10/0x10 [ 303.446903][ T6237] do_file_open+0x20e/0x430 [ 303.448831][ T6237] ? __pfx_do_file_open+0x10/0x10 [ 303.450983][ T6237] ? alloc_fd+0x476/0x790 [ 303.452847][ T6237] ? do_getname+0x191/0x390 [ 303.454794][ T6237] do_sys_openat2+0x10d/0x1e0 [ 303.456789][ T6237] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.459010][ T6237] __x64_sys_openat+0x12d/0x210 [ 303.461072][ T6237] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.463358][ T6237] ? do_user_addr_fault+0x8d6/0x12f0 [ 303.465591][ T6237] do_syscall_64+0x106/0xf80 [ 303.467557][ T6237] ? clear_bhb_loop+0x40/0x90 [ 303.469566][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.472095][ T6237] RIP: 0033:0x7f5be5b5c84e [ 303.474016][ T6237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.482047][ T6237] RSP: 002b:00007f5be6a10b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.485533][ T6237] RAX: ffffffffffffffda RBX: 00007f5be6a116c0 RCX: 00007f5be5b5c84e [ 303.488834][ T6237] RDX: 0000000000040002 RSI: 00007f5be6a10c00 RDI: ffffffffffffff9c [ 303.492175][ T6237] RBP: 00007f5be6a10c00 R08: 0000000000000000 R09: 0000000000000000 [ 303.495478][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 303.498808][ T6237] R13: 00007f5be5e16038 R14: 00007f5be5e15fa0 R15: 00007ffe23626d08 [ 303.502150][ T6237] [ 303.504108][ T6237] Kernel Offset: disabled [ 303.505941][ T6237] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:43:22 Registers: info registers vcpu 0 CPU#0 RAX=00000000001eb545 RBX=ffffffff8e4975c0 RCX=ffffffff8b8e5c75 RDX=0000000000000000 RSI=ffffffff8de6cf89 RDI=ffffffff8c1adf20 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d92f10 R15=0000000000000000 RIP=ffffffff8b8e45df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6352000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ce25456b8 CR3=00000000256ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fc02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeadd1db56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeadd1db56 00007ffeadd1db5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce1832e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce1832e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce1832fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9ce1832e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=ffff8880510e6988 RCX=ffffffff84ad2007 RDX=0000000000000800 RSI=0000000000000000 RDI=ffff88803a69a480 RBP=ffffc90001d2f7f8 RSP=ffffc90001d2f668 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000800 R11=0000000000000000 R12=0000000000000800 R13=0000000000000600 R14=ffffc90001d2fac0 R15=ffffc90001d2f7f8 RIP=ffffffff820891ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556e36c500 ffffffff 00c00000 GS =0000 ffff8880d6452000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f714a04e661 CR3=0000000028242000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80f83ea6c3 00007f80f83ea6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6370722076636572 206f742064656c69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80f83ead20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80f83ead20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e3807b8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8030008000ef003 0008000ee8030008 000ee0030008000e d8030208000ed003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d80030811800205 0e800418848392c0 0800010000000806 0601148a0008000e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011d800418858392 ce08000100000008 06060113f6000800 1e98030008001e90 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030008001e880300 08001e8003000800 1df8030008001df0 030008001de80300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000208061de003 0008001dd0030808 001dc80307c3e1f0 f8bc9e91c008001d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0031980041db003 1b80041da0033880 041d90031880041d 800308118002050e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f44495f45555149 4e555f5f20722063 3061666537623966 666666666666660a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f20722038336166 6537623966666666 666666660a393639 5f6f666e69646f6d ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a3836395f6f66 6e69646f6d5f4449 5f455551494e555f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a3537385f6f 666e69646f6d5f44 495f455551494e55 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3437385f6f666e69 646f6d5f44495f45 5551494e555f5f20 7220356462306637 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f44495f45555149 4e555f5f20722038 3063306637623966 666666666666660a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f20722062336330 6637623966666666 666666660a333738 5f6f666e69646f6d info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85781c65 RDI=ffffffff9b493800 RBP=ffffffff9b4937c0 RSP=ffffc90004e072b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000079 R14=0000000000000010 R15=ffffffff85781c00 RIP=ffffffff85781c8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5be6a116c0 ffffffff 00c00000 GS =0000 ffff8880d6552000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5be5b85640 CR3=000000003e222000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe236271f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe236271f6 00007ffe236271fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5be5c32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5be5c32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5be5c32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5be5c32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5be5dea498 00007f5be5dea468 00007f5be5dea4a0 00007f5be5dea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff81fc3e12 RDX=0000000000000001 RSI=0000000000000000 RDI=ffff888024ae8000 RBP=ffff88806a642da0 RSP=ffffc90006797648 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c85b5 R14=0000000000000001 R15=ffff88806a73c3c0 RIP=ffffffff820891ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c713500 ffffffff 00c00000 GS =0000 ffff8880d6652000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5be5e17dac CR3=00000000256ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7f94d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeece12f96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeece12f96 00007ffeece12f9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7ec32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7ec32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7ec32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7ec32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7edea4a0 00007f3b7edea480 00007f3b7edea488 00007f3b7edea4b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b7edea498 00007f3b7edea468 00007f3b7edea4a0 00007f3b7edea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000