last executing test programs: 1m27.322978958s ago: executing program 1 (id=57): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m27.294752307s ago: executing program 1 (id=58): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0x10, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m27.264669107s ago: executing program 1 (id=59): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x163) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) 1m27.183547177s ago: executing program 1 (id=62): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000002fc0)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef", 0x19, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1m27.145509729s ago: executing program 1 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m27.097133932s ago: executing program 1 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x80) 1m19.048094231s ago: executing program 2 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0xd9, 0x0, 0x3, 0x100000012, 0x0, 0x0, 0x0, 0x7, 0x4, 0x6, 0x100000000001], 0x6000, 0x14af40}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.921100345s ago: executing program 2 (id=161): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b007e0b0a42b820a8e8c9881db660164333526f680eac8c863a63f79fe7f1d5514a5a2b016bc0ab07b7ea2914619c9248a3c94ff542d23d8d2253f8e3843394132280bfa1629888fe0f017805cd8f9bceac64d35287f5704d58322a0765d9585883e4f48958696855767c1b1ed4b2f5c0bde2d4bc831a95f12277658c0d707b77"}}, 0x88) 1m18.81185725s ago: executing program 2 (id=163): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0xc}, 0x50) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m18.58136296s ago: executing program 2 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m18.564045528s ago: executing program 2 (id=167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1m18.350101147s ago: executing program 2 (id=168): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x80, 0x4, 0x10, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.337508394s ago: executing program 32 (id=168): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x80, 0x4, 0x10, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.020205659s ago: executing program 33 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x80) 3.807728772s ago: executing program 4 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 3.807154465s ago: executing program 4 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5a}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 3.74937669s ago: executing program 4 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r1 = io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7f, 0x400, 0x2, 0x27d}) r2 = io_uring_setup(0x898, &(0x7f00000000c0)={0x0, 0x4795, 0x20000, 0x21, 0x10e, 0x0, r1}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x26) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) write(r4, &(0x7f0000000400), 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 3.749258893s ago: executing program 4 (id=1456): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) 3.690038562s ago: executing program 4 (id=1457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.689758372s ago: executing program 4 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0xa, 0x5d, 0x8, 0x5, 0xffff2d37, 0xfffffeff, 0x4, 0x3, 0x0, 0x5, 0x4, 0x80000, 0x5, 0x3c5b, 0x1, 0x26, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0x7fff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e5, 0x40cb, 0xf9, 0xe, 0x82c0, 0xffffffff, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x791, 0xe, 0x312, 0x5, 0xea4, 0x1c, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x3, 0xd05, 0x2d, 0x4e4, 0x0, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x78, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x9, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x7ff, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0xaff, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x401, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8000, 0x402, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x1c2, 0x1000, 0xa2, 0x7, 0xe9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x7, 0x8, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x1, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0xa, 0x2, 0x5, 0x2, 0x5, 0x3, 0xfffffffc, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000008, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x14, 0x0, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x0, 0x2, 0x200005, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x1ff, 0xffff3441, 0x4]}, 0x45c) 3.509648614s ago: executing program 3 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='pfn0.0', 0x6) 3.509466794s ago: executing program 3 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='nam', 0x3) 3.509305973s ago: executing program 3 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r1 = io_uring_setup(0x24d3, &(0x7f0000000040)={0x0, 0x7f, 0x400, 0x2, 0x27d}) r2 = io_uring_setup(0x898, &(0x7f00000000c0)={0x0, 0x4795, 0x20000, 0x21, 0x10e, 0x0, r1}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x26) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) write(r4, &(0x7f0000000400), 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 3.419792567s ago: executing program 3 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 1.165656382s ago: executing program 5 (id=1521): keyctl$set_reqkey_keyring(0xe, 0x4) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x11c) exit(0x4) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 739.858928ms ago: executing program 0 (id=1530): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 369.844839ms ago: executing program 3 (id=1531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001e80)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba5838097ddae0b6c9ed0c8dc5de524ba7be7f3a6a99ac2381", 0x39}], 0x2}, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 289.467527ms ago: executing program 3 (id=1532): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2], 0x24}}, 0x4) 228.672396ms ago: executing program 5 (id=1533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 228.501602ms ago: executing program 0 (id=1534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x7, 0x6, 0x0, 0x0, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) 228.430584ms ago: executing program 0 (id=1535): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 170.007665ms ago: executing program 0 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 116.534994ms ago: executing program 5 (id=1537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="9723af4501000000000001008cc5595c4a9b8f99595311dc93a46126", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) 115.002941ms ago: executing program 5 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x1}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r1, 0x401, 0x70bd2e, 0x25df5bfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x14008080) 80.834565ms ago: executing program 0 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 77.2041ms ago: executing program 5 (id=1540): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x64) 74.916818ms ago: executing program 0 (id=1541): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 0s ago: executing program 5 (id=1542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xa) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): idge0: port 1(bridge_slave_0) entered disabled state [ 67.079654][ T6642] bridge_slave_0: entered allmulticast mode [ 67.082364][ T6642] bridge_slave_0: entered promiscuous mode [ 67.086668][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.089232][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.091560][ T6642] bridge_slave_1: entered allmulticast mode [ 67.094284][ T6642] bridge_slave_1: entered promiscuous mode [ 67.107143][ T6681] Bluetooth: (null): Non-link packet received in non-active state [ 67.130115][ T5607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.143762][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.149444][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.164037][ T6642] team0: Port device team_slave_0 added [ 67.169009][ T6642] team0: Port device team_slave_1 added [ 67.212530][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.214791][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.222738][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.227547][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.229709][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.237976][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.259306][ T5607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.301000][ T6642] hsr_slave_0: entered promiscuous mode [ 67.307070][ T6642] hsr_slave_1: entered promiscuous mode [ 67.429804][ T5607] bridge_slave_1: left allmulticast mode [ 67.431534][ T5607] bridge_slave_1: left promiscuous mode [ 67.433368][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.440585][ T5607] bridge_slave_0: left allmulticast mode [ 67.442287][ T5607] bridge_slave_0: left promiscuous mode [ 67.444138][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.537892][ T5607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.542307][ T5607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.546426][ T5607] bond0 (unregistering): Released all slaves [ 67.625343][ T42] audit: type=1400 audit(1785697395.409:495): avc: denied { write } for pid=6696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.648360][ T6642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.659872][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.662777][ T6642] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.671107][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.673861][ T6642] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.678764][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.681613][ T6642] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.685543][ T6642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.686901][ T42] audit: type=1400 audit(1785697395.469:496): avc: denied { write } for pid=6699 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.758334][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 67.788039][ T6709] 0: reclassify loop, rule prio 0, protocol 03 [ 67.846206][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.854422][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.861600][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.863919][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.869454][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.871611][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.876644][ T42] audit: type=1400 audit(1785697395.659:497): avc: denied { write } for pid=6712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.992724][ T5607] hsr_slave_0: left promiscuous mode [ 68.002425][ T5607] hsr_slave_1: left promiscuous mode [ 68.007041][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.011740][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.031990][ T5607] veth1_macvtap: left promiscuous mode [ 68.033813][ T5607] veth0_macvtap: left promiscuous mode [ 68.040618][ T5607] veth1_vlan: left promiscuous mode [ 68.042461][ T5607] veth0_vlan: left promiscuous mode [ 68.219496][ T5607] team0 (unregistering): Port device team_slave_1 removed [ 68.230513][ T5607] team0 (unregistering): Port device team_slave_0 removed [ 68.325612][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.487036][ T5754] Bluetooth: hci2: command tx timeout [ 68.545906][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.592964][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.643215][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 68.643233][ T42] audit: type=1400 audit(1785697396.429:501): avc: denied { map_read map_write } for pid=6747 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.648342][ T5754] Bluetooth: hci4: command tx timeout [ 68.661344][ T42] audit: type=1400 audit(1785697396.439:502): avc: denied { write } for pid=6746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.716359][ T42] audit: type=1400 audit(1785697396.499:503): avc: denied { write } for pid=6754 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.787079][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.826219][ T6642] veth0_vlan: entered promiscuous mode [ 68.832944][ T6642] veth1_vlan: entered promiscuous mode [ 68.856391][ T6642] veth0_macvtap: entered promiscuous mode [ 68.862945][ T6642] veth1_macvtap: entered promiscuous mode [ 68.873848][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.881622][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.927801][ T5607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.961513][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.966354][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.999788][ T6600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.003194][ T6600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.007116][ T5607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.011920][ T5607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.037513][ T5607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.834586][ T6792] binder: 6791:6792 ioctl c0306201 2000000004c0 returned -14 [ 69.901243][ T6796] syzkaller0: entered promiscuous mode [ 69.903704][ T6796] syzkaller0: entered allmulticast mode [ 70.046712][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 70.087537][ T6802] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6802 comm=syz.0.262 [ 70.101314][ T42] audit: type=1400 audit(1785697397.889:504): avc: denied { mount } for pid=6803 comm="syz.4.263" name="/" dev="ramfs" ino=17868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.332471][ T6812] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 70.335238][ T6812] bond1: entered allmulticast mode [ 70.351087][ T6812] ip6erspan0: entered promiscuous mode [ 70.354434][ T6812] ip6erspan0: entered allmulticast mode [ 70.356425][ T6812] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 70.554751][ T42] audit: type=1400 audit(1785697398.339:505): avc: denied { append } for pid=6823 comm="syz.4.270" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.569055][ T42] audit: type=1400 audit(1785697398.349:506): avc: denied { unlink } for pid=6824 comm="syz.3.269" name="#1e" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.727215][ T5754] Bluetooth: hci4: command tx timeout [ 70.847316][ T6838] tipc: Started in network mode [ 70.851149][ T6838] tipc: Node identity cadc9bef6724, cluster identity 4711 [ 70.855706][ T6838] tipc: Enabled bearer , priority 0 [ 70.899696][ T6838] syzkaller0: entered promiscuous mode [ 70.901453][ T6838] syzkaller0: entered allmulticast mode [ 70.903662][ T6838] tipc: Resetting bearer [ 70.926507][ T6837] tipc: Resetting bearer [ 70.963724][ T42] audit: type=1800 audit(1785697398.749:507): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.264" name="/" dev="fuse" ino=4 res=0 errno=0 [ 71.211070][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213563][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.385130][ T6855] binder: 6854:6855 unknown command 0 [ 71.387512][ T6855] binder: 6854:6855 ioctl c0306201 2000000001c0 returned -22 [ 71.876946][ T847] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 72.043782][ T6837] tipc: Disabling bearer [ 72.044616][ T847] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 72.048718][ T847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.051825][ T847] usb 9-1: config 0 has no interfaces? [ 72.053409][ T847] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 72.055955][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.067080][ T847] usb 9-1: config 0 descriptor?? [ 72.074150][ T29] tipc: Node number set to 2918751215 [ 72.259448][ T6878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.269749][ T6878] block device autoloading is deprecated and will be removed. [ 72.283041][ T42] audit: type=1400 audit(1785697400.069:508): avc: denied { ioctl } for pid=6873 comm="syz.0.285" path="/87/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 72.283085][ T6874] md: md130 stopped. [ 72.302774][ T847] usb 9-1: string descriptor 0 read error: -71 [ 72.306002][ T847] usb 9-1: USB disconnect, device number 2 [ 72.390536][ T6884] syzkaller0: entered promiscuous mode [ 72.392691][ T6884] syzkaller0: entered allmulticast mode [ 72.672249][ T42] audit: type=1400 audit(1785697400.459:509): avc: denied { write } for pid=6894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.728826][ T42] audit: type=1400 audit(1785697400.519:510): avc: denied { write } for pid=6897 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.807519][ T5754] Bluetooth: hci4: command tx timeout [ 73.715140][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 73.715154][ T42] audit: type=1400 audit(1785697401.499:517): avc: denied { write } for pid=6932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.781984][ T42] audit: type=1400 audit(1785697401.569:518): avc: denied { write } for pid=6935 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.837974][ T6941] tipc: Failed to remove unknown binding: 66,0,0/0:15014816/15014818 [ 73.843903][ T6941] tipc: Failed to remove unknown binding: 66,0,0/0:15014816/15014817 [ 73.849597][ T6941] tipc: Failed to remove unknown binding: 66,0,0/0:15014816/15014818 [ 73.856370][ T6941] tipc: Failed to remove unknown binding: 66,0,0/0:15014816/15014817 [ 73.987414][ T42] audit: type=1400 audit(1785697401.779:519): avc: denied { write } for pid=6946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.031855][ T42] audit: type=1400 audit(1785697401.819:520): avc: denied { write } for pid=6949 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.049717][ T6951] netlink: 'syz.4.305': attribute type 39 has an invalid length. [ 74.109240][ T42] audit: type=1400 audit(1785697401.899:521): avc: denied { write } for pid=6953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.163144][ T42] audit: type=1400 audit(1785697401.949:522): avc: denied { write } for pid=6959 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.380951][ T6968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.384603][ T6968] block device autoloading is deprecated and will be removed. [ 74.467248][ T6969] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 74.467248][ T6969] The task syz.0.309 (6969) triggered the difference, watch for misbehavior. [ 74.498260][ T6965] block device autoloading is deprecated and will be removed. [ 74.510281][ T6965] md: invalid raid superblock magic on ram32 [ 74.516306][ T6965] md: ram32 does not have a valid v0.0 superblock, not importing! [ 74.519119][ T6965] md: md_import_device returned -22 [ 74.593508][ T42] audit: type=1400 audit(1785697402.379:523): avc: denied { ioctl } for pid=6976 comm="syz.5.312" path="socket:[16238]" dev="sockfs" ino=16238 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.624103][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.5.313'. [ 74.630740][ T6980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6980 comm=syz.5.313 [ 74.669916][ T42] audit: type=1400 audit(1785697402.459:524): avc: denied { bind } for pid=6982 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.688680][ T42] audit: type=1400 audit(1785697402.459:525): avc: denied { node_bind } for pid=6982 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 74.706825][ T42] audit: type=1400 audit(1785697402.469:526): avc: denied { cmd } for pid=6982 comm="syz.5.314" path="socket:[18090]" dev="sockfs" ino=18090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.886845][ T5754] Bluetooth: hci4: command tx timeout [ 75.143681][ T6991] netlink: 88 bytes leftover after parsing attributes in process `syz.5.317'. [ 75.273644][ T6997] binder: 6996:6997 ioctl c0306201 0 returned -14 [ 75.466690][ T7012] fuse: fd is not a fuse device [ 75.936259][ T7042] Set syz1 is full, maxelem 4096 reached [ 76.333025][ T1479] cfg80211: failed to load regulatory.db [ 76.488955][ T5754] Bluetooth: hci0: Malformed LE Event: 0x1d [ 76.562274][ T7067] netlink: 6 bytes leftover after parsing attributes in process `syz.4.340'. [ 76.644172][ T7074] binder: 7073:7074 ioctl c0306201 200000000080 returned -14 [ 76.649407][ T7074] binder: 7073:7074 ioctl c0306201 2000000003c0 returned -14 [ 77.037184][ T7089] binder: 7088:7089 ioctl c0306201 200000004a40 returned -22 [ 77.085166][ T7093] Bluetooth: MGMT ver 1.23 [ 77.164926][ T7097] Bluetooth: Error in BCSP hdr checksum [ 77.386300][ T7105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.387754][ T7113] fuse: fd is not a fuse device [ 77.419233][ T7115] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 77.437078][ T7115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.477873][ T7115] bond4: (slave veth7): Enslaving as an active interface with a down link [ 77.499575][ T7115] bond4: (slave dummy0): making interface the new active one [ 77.504254][ T7115] dummy0: entered promiscuous mode [ 77.506627][ T7115] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 77.514123][ T7115] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 77.516565][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.356'. [ 77.521721][ T7115] bond4: (slave dummy0): Releasing active interface [ 77.584861][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7118 comm=syz.4.358 [ 77.589633][ T7118] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 77.592408][ T7118] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 77.731521][ T7132] fuse: fd is not a fuse device [ 79.042544][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 79.055183][ T7162] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 79.073014][ T7162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 79.076022][ T7162] bond5: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 79.206849][ T5741] Bluetooth: hci1: command 0x1003 tx timeout [ 79.208408][ T5754] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 79.576225][ T7190] kvm: pic: level sensitive irq not supported [ 79.747575][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.753642][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.759545][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.763396][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.767335][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.771285][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.775656][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.780032][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 79.784113][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.4.392 [ 80.045976][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 80.046003][ T42] audit: type=1400 audit(1785697407.829:559): avc: denied { write } for pid=7228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.091874][ T42] audit: type=1400 audit(1785697407.879:560): avc: denied { write } for pid=7233 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.278774][ T42] audit: type=1400 audit(1785697408.069:561): avc: denied { write } for pid=7237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.323748][ T42] audit: type=1400 audit(1785697408.109:562): avc: denied { write } for pid=7240 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.406168][ T5754] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 80.423516][ T42] audit: type=1400 audit(1785697408.209:563): avc: denied { write } for pid=7245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.477985][ T42] audit: type=1400 audit(1785697408.269:564): avc: denied { write } for pid=7253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.487738][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.399'. [ 80.532685][ T7259] netlink: 'syz.0.400': attribute type 12 has an invalid length. [ 80.535786][ T7259] netlink: 'syz.0.400': attribute type 29 has an invalid length. [ 80.540270][ T7259] netlink: 148 bytes leftover after parsing attributes in process `syz.0.400'. [ 80.543177][ T7259] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 80.545662][ T7259] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 80.551131][ T7259] netlink: 11 bytes leftover after parsing attributes in process `syz.0.400'. [ 80.967158][ T42] audit: type=1400 audit(1785697408.749:565): avc: denied { create } for pid=7300 comm="syz.3.414" name="#26" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.979080][ T42] audit: type=1400 audit(1785697408.749:566): avc: denied { link } for pid=7300 comm="syz.3.414" name="#26" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.991598][ T42] audit: type=1326 audit(1785697408.759:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.4.415" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12c359e019 code=0x0 [ 80.997419][ T7307] ip6gre1: entered promiscuous mode [ 81.000054][ T7307] ip6gre1: entered allmulticast mode [ 81.097754][ T42] audit: type=1400 audit(1785697408.889:568): avc: denied { read write } for pid=7317 comm="syz.3.420" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.100697][ T7315] netlink: 'syz.5.418': attribute type 1 has an invalid length. [ 81.130644][ T7315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.145343][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 81.149846][ T7315] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 81.164799][ T7323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.201468][ T7323] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 81.212957][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 81.254816][ T7333] netlink: 'syz.5.424': attribute type 1 has an invalid length. [ 81.267460][ T7333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.301982][ T7333] vlan2: entered allmulticast mode [ 81.313368][ T7333] macsec0: entered allmulticast mode [ 81.315132][ T7333] veth1_macvtap: entered allmulticast mode [ 81.319274][ T7333] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 81.381949][ T7346] tipc: New replicast peer: 255.255.255.255 [ 81.384649][ T7346] tipc: Enabled bearer , priority 10 [ 81.393324][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 81.661527][ T7368] vlan2: entered promiscuous mode [ 81.663082][ T7368] hsr0: entered promiscuous mode [ 81.664764][ T7368] vlan2: entered allmulticast mode [ 81.666255][ T7368] hsr0: entered allmulticast mode [ 81.667868][ T7368] hsr_slave_0: entered allmulticast mode [ 81.669512][ T7368] hsr_slave_1: entered allmulticast mode [ 81.751679][ T7374] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 81.988439][ T7393] syz_tun: entered allmulticast mode [ 81.995032][ T7392] syz_tun: left allmulticast mode [ 82.294536][ T7423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.456'. [ 82.402067][ T7430] syzkaller0: entered promiscuous mode [ 82.406897][ T7430] syzkaller0: entered allmulticast mode [ 82.706140][ T7446] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 82.709319][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 82.898949][ T1497] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 83.039791][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 83.066864][ T1497] usb 9-1: Using ep0 maxpacket: 8 [ 83.072673][ T1497] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 83.076883][ T1497] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 83.081928][ T1497] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.085925][ T1497] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 83.091678][ T1497] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 83.097078][ T1497] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.105053][ T1497] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.108470][ T1497] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.110753][ T7457] bridge1: port 1(veth5) entered blocking state [ 83.114489][ T7457] bridge1: port 1(veth5) entered disabled state [ 83.116699][ T7457] veth5: entered allmulticast mode [ 83.120126][ T7457] veth5: entered promiscuous mode [ 83.127650][ T7458] bond1: (slave veth0_to_bond): Releasing backup interface [ 83.132940][ T7458] bridge1: port 2(veth0_to_bond) entered blocking state [ 83.136027][ T7458] bridge1: port 2(veth0_to_bond) entered disabled state [ 83.139611][ T7458] veth0_to_bond: entered allmulticast mode [ 83.143791][ T7458] veth0_to_bond: entered promiscuous mode [ 83.269289][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.472'. [ 83.278326][ T7460] vlan2: entered promiscuous mode [ 83.280425][ T7460] bridge0: entered promiscuous mode [ 83.323792][ T1497] usb 9-1: GET_CAPABILITIES returned 0 [ 83.326272][ T1497] usbtmc 9-1:16.0: can't read capabilities [ 83.600875][ T34] usb 9-1: USB disconnect, device number 3 [ 83.920985][ T7484] warning: `syz.3.480' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.981645][ T7486] ip6gre1: entered promiscuous mode [ 83.983455][ T7486] ip6gre1: entered allmulticast mode [ 83.994210][ T7486] netlink: 'syz.3.481': attribute type 6 has an invalid length. [ 84.325032][ T1497] IPVS: starting estimator thread 0... [ 84.377964][ T6425] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386926][ T6425] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.417321][ T7507] IPVS: using max 45 ests per chain, 108000 per kthread [ 84.696652][ T7521] uprobe: syz.0.492:7521 failed to unregister, leaking uprobe [ 85.092811][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 85.092829][ T42] audit: type=1400 audit(1785697412.879:591): avc: denied { unmount } for pid=6373 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.181716][ T42] audit: type=1400 audit(1785697412.969:592): avc: denied { write } for pid=7539 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.200113][ T42] audit: type=1400 audit(1785697412.969:593): avc: denied { nlmsg_write } for pid=7539 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.231046][ T7544] netlink: 'syz.0.500': attribute type 3 has an invalid length. [ 85.283737][ T42] audit: type=1400 audit(1785697413.069:594): avc: denied { map } for pid=7545 comm="syz.4.501" path="socket:[19357]" dev="sockfs" ino=19357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.291187][ T42] audit: type=1400 audit(1785697413.069:595): avc: denied { read } for pid=7545 comm="syz.4.501" path="socket:[19357]" dev="sockfs" ino=19357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.529498][ T7561] netlink: 'syz.5.505': attribute type 1 has an invalid length. [ 85.567092][ T7561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.571617][ T7561] bond3: (slave bond4): making interface the new active one [ 85.574650][ T7561] bond3: (slave bond4): Enslaving as an active interface with an up link [ 85.586281][ T7561] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 86.071350][ T7578] __nla_validate_parse: 3 callbacks suppressed [ 86.071363][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.509'. [ 86.077806][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.3.509'. [ 86.083842][ T7578] netlink: 68 bytes leftover after parsing attributes in process `syz.3.509'. [ 86.088681][ T7578] bridge0: port 3(veth0) entered blocking state [ 86.090826][ T7578] bridge0: port 3(veth0) entered disabled state [ 86.092999][ T7578] veth0: entered allmulticast mode [ 86.095553][ T7578] veth0: entered promiscuous mode [ 86.100108][ T7578] bridge0: port 4(veth1) entered blocking state [ 86.102417][ T7578] bridge0: port 4(veth1) entered disabled state [ 86.105682][ T7578] veth1: entered allmulticast mode [ 86.108248][ T7578] veth1: entered promiscuous mode [ 86.128726][ T7582] bond0: (slave bridge0): Releasing backup interface [ 86.140986][ T7582] bridge_slave_0: left allmulticast mode [ 86.143512][ T7582] bridge_slave_0: left promiscuous mode [ 86.146152][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.153128][ T7582] bridge_slave_1: left allmulticast mode [ 86.158066][ T7582] bridge_slave_1: left promiscuous mode [ 86.164361][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.172862][ T7582] bond0: (slave bond_slave_0): Releasing backup interface [ 86.182523][ T7582] bond0: (slave bond_slave_1): Releasing backup interface [ 86.190183][ T7582] team0: Port device team_slave_0 removed [ 86.193142][ T7582] team0: Port device team_slave_1 removed [ 86.196249][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.199176][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.203449][ T7582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.214938][ T7590] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 86.235819][ T7590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.261340][ T7590] bond2: entered allmulticast mode [ 86.287802][ T7590] bond2: (slave ip6gretap1): making interface the new active one [ 86.290449][ T7590] ip6gretap1: entered allmulticast mode [ 86.294765][ T7590] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 86.349560][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.516'. [ 86.457994][ T42] audit: type=1400 audit(1785697414.249:596): avc: denied { shutdown } for pid=7606 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.500459][ T42] audit: type=1400 audit(1785697414.289:597): avc: denied { read write } for pid=7608 comm="syz.3.520" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.522757][ T42] audit: type=1400 audit(1785697414.289:598): avc: denied { open } for pid=7608 comm="syz.3.520" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.535122][ T42] audit: type=1400 audit(1785697414.299:599): avc: denied { ioctl } for pid=7608 comm="syz.3.520" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.590600][ T7609] xt_CT: No such helper "netbios-ns" [ 86.671480][ T42] audit: type=1400 audit(1785697414.459:600): avc: denied { read append } for pid=7624 comm="syz.4.533" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.688715][ T7627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.747510][ T7634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.804553][ T7638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.944627][ T7643] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 87.156985][ T847] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 87.218740][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 87.327023][ T847] usb 10-1: Using ep0 maxpacket: 16 [ 87.330645][ T847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.334805][ T847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.338205][ T847] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.342339][ T847] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.345240][ T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.350474][ T847] usb 10-1: config 0 descriptor?? [ 87.368243][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.371435][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.374525][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 87.377960][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.387888][ T9] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 87.398274][ T9] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 87.747622][ T7648] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 87.750869][ T7648] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 87.754045][ T7648] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 87.805674][ T7658] Illegal XDP return value 32768 on prog (id 40) dev N/A, expect packet loss! [ 87.810266][ T847] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0002/input/input6 [ 87.834203][ T847] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 87.845883][ T7648] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 87.856074][ T7648] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 88.069421][ T847] usb 10-1: USB disconnect, device number 2 [ 88.907850][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 88.914765][ T7715] tipc: Started in network mode [ 88.916397][ T7715] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 88.922572][ T7715] tipc: Enabled bearer , priority 10 [ 89.194303][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 89.291706][ T7732] lo: entered allmulticast mode [ 89.916907][ T1479] tipc: Node number set to 1 [ 89.930472][ T847] usb 9-1: USB disconnect, device number 4 [ 89.939867][ T847] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 89.942755][ T847] spcp8x5 9-1:1.0: device disconnected [ 90.048761][ T7740] syzkaller0: entered promiscuous mode [ 90.050548][ T7740] syzkaller0: entered allmulticast mode [ 90.054060][ T7740] tipc: Started in network mode [ 90.055727][ T7740] tipc: Node identity 4261f91078b6, cluster identity 4711 [ 90.059592][ T7740] tipc: Enabled bearer , priority 0 [ 90.062470][ T7739] tipc: Resetting bearer [ 90.074994][ T7739] tipc: Disabling bearer [ 90.083264][ T7730] lo: left allmulticast mode [ 90.086965][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 90.111203][ T7744] bond5: entered promiscuous mode [ 90.112877][ T7744] bond5: entered allmulticast mode [ 90.364147][ T7764] binder: 7763:7764 ioctl c0306201 200000000080 returned -14 [ 90.396346][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 90.396370][ T42] audit: type=1400 audit(1785697418.179:633): avc: denied { setopt } for pid=7766 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.555311][ T7784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.558518][ T7784] block device autoloading is deprecated and will be removed. [ 91.564536][ T7783] md: md130 stopped. [ 91.659983][ T7787] syzkaller0: entered promiscuous mode [ 91.661694][ T7787] syzkaller0: entered allmulticast mode [ 91.901498][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'. [ 91.905341][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.589'. [ 92.077713][ T42] audit: type=1400 audit(1785697419.869:634): avc: denied { read write } for pid=7821 comm="syz.3.595" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.086978][ T42] audit: type=1400 audit(1785697419.869:635): avc: denied { open } for pid=7821 comm="syz.3.595" path="/150/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.122765][ T7822] smpboot: CPU 1 is now offline [ 92.151591][ T7823] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 92.205189][ T7825] syzkaller0: entered promiscuous mode [ 92.207070][ T7825] syzkaller0: entered allmulticast mode [ 92.351613][ T7829] syzkaller0: entered promiscuous mode [ 92.353474][ T7829] syzkaller0: entered allmulticast mode [ 92.401784][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.459827][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.516106][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.886156][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 93.033307][ T7857] netlink: 156 bytes leftover after parsing attributes in process `syz.0.608'. [ 93.056035][ T7861] syzkaller0: entered promiscuous mode [ 93.058345][ T7861] syzkaller0: entered allmulticast mode [ 93.266471][ T7861] tipc: Enabled bearer , priority 0 [ 93.269764][ T7860] tipc: Resetting bearer [ 93.280896][ T7860] tipc: Disabling bearer [ 93.306839][ T5832] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 93.457159][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 93.460265][ T5832] usb 9-1: config 0 has no interfaces? [ 93.462031][ T5832] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.464358][ T42] audit: type=1400 audit(1785697421.249:636): avc: denied { ioctl } for pid=7891 comm="syz.0.616" path="socket:[22350]" dev="sockfs" ino=22350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.464909][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.476834][ T5832] usb 9-1: config 0 descriptor?? [ 93.495388][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 93.515936][ T7894] selinux_netlink_send: 2042 callbacks suppressed [ 93.515949][ T7894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7894 comm=syz.0.617 [ 93.681517][ T42] audit: type=1400 audit(1785697421.469:637): avc: denied { read } for pid=7863 comm="syz.4.611" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.689538][ T42] audit: type=1400 audit(1785697421.469:638): avc: denied { open } for pid=7863 comm="syz.4.611" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.778727][ T7904] syz_tun: entered promiscuous mode [ 93.781941][ T7904] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 93.807931][ T29] usb 9-1: USB disconnect, device number 5 [ 93.864842][ T42] audit: type=1400 audit(1785697421.649:639): avc: denied { write } for pid=7905 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.118575][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 94.130435][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 94.133612][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 94.146870][ T6425] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.149890][ T6425] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.152683][ T6425] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.155470][ T6425] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.338692][ T7913] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 94.475957][ T7915] syzkaller0: entered promiscuous mode [ 94.478283][ T7915] syzkaller0: entered allmulticast mode [ 94.597253][ T42] audit: type=1400 audit(1785697422.379:640): avc: denied { map } for pid=7917 comm="syz.4.628" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.715490][ T42] audit: type=1400 audit(1785697422.499:641): avc: denied { read } for pid=7927 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.748195][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 94.785995][ T7931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7931 comm=syz.4.633 [ 94.847320][ T7940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.636'. [ 94.964324][ T42] audit: type=1400 audit(1785697422.749:642): avc: denied { watch watch_reads } for pid=7943 comm="syz.4.638" path="/115/file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 95.428217][ T7919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.564582][ T7956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7956 comm=syz.4.642 [ 95.766091][ T7970] binder: 7969:7970 ioctl c0306201 0 returned -14 [ 95.877612][ T42] audit: type=1800 audit(1785697423.659:643): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.648" name="/" dev="fuse" ino=1 res=0 errno=0 [ 95.941710][ T7982] binder: 7981:7982 ioctl c0306201 200000000080 returned -14 [ 95.946080][ T7982] binder: 7981:7982 ioctl c0306201 2000000003c0 returned -14 [ 95.951339][ T7984] syzkaller0: entered promiscuous mode [ 95.953140][ T7984] syzkaller0: entered allmulticast mode [ 96.045192][ T42] audit: type=1804 audit(1785697423.829:644): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.655" name="/newroot/103/file0" dev="tmpfs" ino=579 res=1 errno=0 [ 96.058422][ T7989] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 96.065469][ T7989] ref_ctr increment failed for inode: 0x243 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803716a640 [ 96.076290][ T7989] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 96.080868][ T7989] ref_ctr decrement failed for inode: 0x243 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803716a640 [ 96.086161][ T7989] uprobe: syz.5.655:7989 failed to unregister, leaking uprobe [ 96.151567][ T7996] sctp: [Deprecated]: syz.4.658 (pid 7996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.151567][ T7996] Use struct sctp_sack_info instead [ 96.370384][ T42] audit: type=1400 audit(1785697424.159:645): avc: denied { write } for pid=8011 comm="syz.5.664" name="strings" dev="configfs" ino=7917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.383587][ T42] audit: type=1400 audit(1785697424.159:646): avc: denied { write } for pid=8011 comm="syz.5.664" name="configs" dev="configfs" ino=7916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.395773][ T42] audit: type=1400 audit(1785697424.169:647): avc: denied { write } for pid=8011 comm="syz.5.664" name="strings" dev="configfs" ino=23108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.410287][ T42] audit: type=1400 audit(1785697424.169:648): avc: denied { write } for pid=8011 comm="syz.5.664" name="functions" dev="configfs" ino=7915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.417765][ T42] audit: type=1400 audit(1785697424.199:649): avc: denied { write } for pid=8011 comm="syz.5.664" name="c.1" dev="configfs" ino=23107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.424181][ T42] audit: type=1400 audit(1785697424.199:650): avc: denied { create } for pid=8011 comm="syz.5.664" name="gser.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 96.440284][ T42] audit: type=1400 audit(1785697424.199:651): avc: denied { write } for pid=8011 comm="syz.5.664" name="c.1" dev="configfs" ino=23107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.477570][ T42] audit: type=1326 audit(1785697424.269:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.0.665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7ffc0000 [ 96.691924][ T8020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8020 comm=syz.0.668 [ 96.788253][ T8020] veth9: entered allmulticast mode [ 96.838778][ T8020] bond6: (slave veth9): Enslaving as an active interface with an up link [ 96.891494][ T8022] bond6 (unregistering): (slave veth9): Releasing backup interface [ 96.902222][ T8022] bond6 (unregistering): Released all slaves [ 97.045293][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880568c9800: rx timeout, send abort [ 97.097638][ T8028] __nla_validate_parse: 2 callbacks suppressed [ 97.097651][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 97.166355][ T8028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8028 comm=syz.0.671 [ 97.548077][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880568c9800: abort rx timeout. Force session deactivation [ 97.680480][ T8049] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 97.725071][ T8051] syzkaller0: entered promiscuous mode [ 97.726966][ T8051] syzkaller0: entered allmulticast mode [ 97.896366][ T8053] bond2: (slave ip6gretap1): making interface the new active one [ 97.900222][ T8053] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.335650][ T8070] syzkaller0: entered promiscuous mode [ 98.341779][ T8070] syzkaller0: entered allmulticast mode [ 98.372991][ T8072] pimreg3: entered allmulticast mode [ 98.449089][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.689'. [ 98.466561][ T8077] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 98.478327][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.689'. [ 98.485890][ T8077] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 98.856493][ T8112] syzkaller0: entered promiscuous mode [ 98.863498][ T8112] syzkaller0: entered allmulticast mode [ 99.081013][ T8118] tipc: Disabling bearer [ 99.254962][ T8127] kvm: pic: non byte read [ 99.257867][ T8127] kvm: pic: non byte read [ 99.260860][ T8127] kvm: pic: non byte read [ 99.263838][ T8127] kvm: pic: non byte read [ 99.266690][ T8127] kvm: pic: non byte read [ 99.269850][ T8127] kvm: pic: non byte read [ 99.272562][ T8127] kvm: pic: non byte read [ 99.275261][ T8127] kvm: pic: non byte read [ 99.278309][ T8127] kvm: pic: non byte read [ 99.281077][ T8127] kvm: pic: non byte read [ 99.437652][ T8136] syz_tun: entered allmulticast mode [ 99.440088][ T8136] lo: entered allmulticast mode [ 99.448893][ T8135] syz_tun: left allmulticast mode [ 100.395720][ T8157] syzkaller0: entered promiscuous mode [ 100.397606][ T8157] syzkaller0: entered allmulticast mode [ 100.510402][ T8164] syzkaller0: entered promiscuous mode [ 100.512230][ T8164] syzkaller0: entered allmulticast mode [ 100.701886][ T8169] netlink: 'syz.5.722': attribute type 4 has an invalid length. [ 100.814193][ T8184] null_blk: nullb1: using native zone append [ 100.845587][ T8184] null_blk: disk nullb1 created [ 101.072021][ T8205] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 101.091144][ T8205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.110114][ T8205] bond4: (slave gretap1): making interface the new active one [ 101.113274][ T8205] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 101.123960][ T8205] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8205 comm=syz.4.733 [ 101.330830][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 101.330849][ T42] audit: type=1400 audit(1785697429.119:705): avc: denied { create } for pid=8219 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.634864][ T8224] syz_tun: entered allmulticast mode [ 101.640462][ T8223] syz_tun: left allmulticast mode [ 101.754295][ T8242] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 101.766565][ T8242] 8021q: adding VLAN 0 to HW filter on device bond6 [ 101.789342][ T8242] bond6: (slave gretap3): making interface the new active one [ 101.793584][ T8242] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 101.795453][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 101.805083][ T8242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8242 comm=syz.0.747 [ 101.950851][ T6425] syzkaller0: tun_net_xmit 76 [ 101.956147][ T8263] syzkaller0: create flow: hash 1463848722 index 1 [ 101.958309][ T6425] syzkaller0: tun_net_xmit 48 [ 101.977516][ T847] syzkaller0: tun_net_xmit 76 [ 102.003656][ T8263] syzkaller0: delete flow: hash 1463848722 index 1 [ 103.118579][ T8286] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 103.133143][ T8286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.152170][ T8286] bond3: (slave gretap1): making interface the new active one [ 103.155884][ T8286] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 103.171835][ T8286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8286 comm=syz.3.764 [ 103.354795][ T42] audit: type=1400 audit(1785697431.139:706): avc: denied { setopt } for pid=8307 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.621994][ T8327] syzkaller0: entered promiscuous mode [ 103.623870][ T8327] syzkaller0: entered allmulticast mode [ 103.629146][ T8331] syzkaller0: entered promiscuous mode [ 103.630968][ T8331] syzkaller0: entered allmulticast mode [ 103.712579][ T42] audit: type=1400 audit(1785697431.499:707): avc: denied { mount } for pid=8338 comm="syz.5.783" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.721845][ T42] audit: type=1400 audit(1785697431.499:708): avc: denied { search } for pid=8338 comm="syz.5.783" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.728735][ T42] audit: type=1400 audit(1785697431.499:709): avc: denied { search } for pid=8338 comm="syz.5.783" name="events" dev="tracefs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.735640][ T42] audit: type=1400 audit(1785697431.499:710): avc: denied { search } for pid=8338 comm="syz.5.783" name="mac80211" dev="tracefs" ino=24295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.744801][ T42] audit: type=1400 audit(1785697431.499:711): avc: denied { write } for pid=8338 comm="syz.5.783" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.752099][ T42] audit: type=1400 audit(1785697431.499:712): avc: denied { open } for pid=8338 comm="syz.5.783" path="/131/trace/events/mac80211/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.825119][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.783'. [ 104.556005][ T42] audit: type=1400 audit(1785697432.339:713): avc: denied { unmount } for pid=6642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 104.933760][ T42] audit: type=1400 audit(1785697432.719:714): avc: denied { read } for pid=8376 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.035989][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 105.798053][ T8393] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 105.812966][ T8395] fuse: fd is not a fuse device [ 105.921145][ T8403] syzkaller0: entered promiscuous mode [ 105.922950][ T8403] syzkaller0: entered allmulticast mode [ 106.088772][ T8414] syzkaller0: entered promiscuous mode [ 106.090553][ T8414] syzkaller0: entered allmulticast mode [ 106.330288][ T8428] netlink: 'syz.5.818': attribute type 1 has an invalid length. [ 106.334091][ T8428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.337991][ T8428] IPv6: NLM_F_CREATE should be set when creating new route [ 106.407775][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.821'. [ 106.424208][ T8434] 8021q: adding VLAN 0 to HW filter on device bond6 [ 106.458197][ T8434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 106.464226][ T8434] bond6: (slave bond7): Enslaving as an active interface with an up link [ 106.500588][ T8434] bond6 (unregistering): (slave bond7): Releasing backup interface [ 106.507684][ T8434] bond6 (unregistering): Released all slaves [ 106.777627][ T8467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.834225][ T8467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.892566][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.914916][ T8480] binder: 8478:8480 ioctl c0306201 200000000080 returned -14 [ 106.925674][ T8480] binder: 8478:8480 ioctl c0306201 2000000003c0 returned -14 [ 107.985699][ T8514] syzkaller0: entered promiscuous mode [ 107.989126][ T8514] syzkaller0: entered allmulticast mode [ 108.137339][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 108.137351][ T42] audit: type=1400 audit(1785697435.929:720): avc: denied { watch watch_reads } for pid=8520 comm="syz.4.854" path="/proc/421/net/dev_snmp6" dev="proc" ino=4026533861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 108.155153][ T8521] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 108.159917][ T42] audit: type=1400 audit(1785697435.949:721): avc: denied { getopt } for pid=8520 comm="syz.4.854" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.175613][ T8526] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.180688][ T8526] sock: sock_set_timeout: `syz.3.856' (pid 8526) tries to set negative timeout [ 108.199581][ T8528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.242206][ T1479] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 108.245951][ T1479] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 108.256254][ T6573] wlan1: authenticated [ 108.257016][ T8532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.278505][ T6573] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 108.316179][ T6573] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 108.318172][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.319927][ T6573] wlan1: associated [ 108.853876][ T42] audit: type=1400 audit(1785697436.639:722): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 108.967087][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.156936][ T1479] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 109.328278][ T1479] usb 8-1: Using ep0 maxpacket: 8 [ 109.331371][ T1479] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 109.334067][ T1479] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 109.338381][ T1479] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.341614][ T1479] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 109.345161][ T1479] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 109.348735][ T1479] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.352745][ T1479] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.355489][ T1479] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.440704][ T8561] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 109.443288][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.445740][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.457962][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.460181][ T8561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.462548][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.464784][ T8561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.471225][ T8561] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.477888][ T8561] bridge0: port 3(syz_tun) entered blocking state [ 109.480061][ T8561] bridge0: port 3(syz_tun) entered disabled state [ 109.482227][ T8561] syz_tun: entered allmulticast mode [ 109.489933][ T42] audit: type=1400 audit(1785697437.279:723): avc: denied { ioctl } for pid=8560 comm="syz.5.870" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 109.490432][ T8561] netlink: 'syz.5.870': attribute type 10 has an invalid length. [ 109.503991][ T8561] bridge0: port 3(syz_tun) entered blocking state [ 109.506131][ T8561] bridge0: port 3(syz_tun) entered forwarding state [ 109.508675][ T8561] syz_tun: left allmulticast mode [ 109.510504][ T8561] bridge0: port 3(syz_tun) entered disabled state [ 109.564584][ T1479] usb 8-1: GET_CAPABILITIES returned 0 [ 109.566482][ T1479] usbtmc 8-1:16.0: can't read capabilities [ 109.593215][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.872'. [ 109.651750][ T8567] netlink: 'syz.5.873': attribute type 1 has an invalid length. [ 109.679004][ T8567] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 109.690077][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.873'. [ 109.693881][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.694849][ T8567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 109.809140][ T5607] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 109.822217][ T1479] usb 8-1: USB disconnect, device number 4 [ 109.862564][ T42] audit: type=1400 audit(1785697437.649:724): avc: denied { audit_write } for pid=8585 comm="syz.4.877" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 109.893612][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.878'. [ 109.927314][ T8590] bond8: entered promiscuous mode [ 109.928998][ T8590] bond8: entered allmulticast mode [ 110.014180][ T8603] netlink: 'syz.5.881': attribute type 1 has an invalid length. [ 110.030710][ T8603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 110.052070][ T8603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 110.054311][ T8603] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 110.057914][ T8603] bond9: (slave gre2): Error -95 calling set_mac_address [ 110.113366][ T8607] gretap2: entered promiscuous mode [ 110.118867][ T8607] bond9: (slave gretap2): making interface the new active one [ 110.121671][ T8607] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 110.122925][ T8609] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 110.139541][ T8609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.145172][ T8603] macvlan2: entered promiscuous mode [ 110.148064][ T8603] macvlan2: entered allmulticast mode [ 110.150080][ T8603] bond9: entered promiscuous mode [ 110.152504][ T8603] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.155952][ T8603] bond9: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 110.160073][ T8603] bond9: left promiscuous mode [ 110.178900][ T8609] bond5: (slave gretap2): making interface the new active one [ 110.182060][ T8609] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 110.463800][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 110.479519][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 110.484778][ T8621] hsr_slave_0: left promiscuous mode [ 110.488425][ T8621] hsr_slave_1: left promiscuous mode [ 110.502715][ T8622] create_pit_timer: 11 callbacks suppressed [ 110.502740][ T8622] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.516613][ T8622] picdev_read: 18 callbacks suppressed [ 110.516625][ T8622] kvm: pic: non byte read [ 110.521533][ T8622] kvm: pic: level sensitive irq not supported [ 110.521812][ T8622] kvm: pic: non byte read [ 110.526339][ T8622] kvm: pic: level sensitive irq not supported [ 110.526613][ T8622] kvm: pic: non byte read [ 110.531516][ T8622] kvm: pic: level sensitive irq not supported [ 110.531867][ T8622] kvm: pic: non byte read [ 110.536530][ T8622] kvm: pic: level sensitive irq not supported [ 110.536952][ T8622] kvm: pic: non byte read [ 110.538365][ T8627] syz_tun: entered allmulticast mode [ 110.540278][ T8622] kvm: pic: level sensitive irq not supported [ 110.545149][ T8622] kvm: pic: non byte read [ 110.550167][ T8622] kvm: pic: level sensitive irq not supported [ 110.550480][ T8622] kvm: pic: non byte read [ 110.679127][ T8631] nicvf0: renamed from team0 (while UP) [ 110.688050][ T8631] nicvf0: Cannot enslave team device to itself [ 110.690537][ T8631] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 111.033072][ T8647] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 111.036850][ T1479] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 111.066726][ T8647] bridge4: entered promiscuous mode [ 111.073844][ T8647] bond4: (slave bridge4): making interface the new active one [ 111.077447][ T8647] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 111.086146][ T8647] bridge5: entered promiscuous mode [ 111.090005][ T8647] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 111.121733][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 111.132213][ T42] audit: type=1400 audit(1785697438.919:725): avc: denied { read } for pid=8650 comm="syz.3.897" path="socket:[26208]" dev="sockfs" ino=26208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.197291][ T1479] usb 9-1: Using ep0 maxpacket: 32 [ 111.200476][ T1479] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 111.203854][ T1479] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 111.208362][ T1479] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.211917][ T1479] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 111.219015][ T1479] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 111.221879][ T1479] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.224468][ T1479] usb 9-1: Product: syz [ 111.225782][ T1479] usb 9-1: Manufacturer: syz [ 111.227546][ T1479] usb 9-1: SerialNumber: syz [ 111.237382][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 111.245257][ T1479] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input7 [ 111.317943][ T8623] syz_tun: left allmulticast mode [ 111.361026][ T8656] syzkaller0: entered promiscuous mode [ 111.362858][ T8656] syzkaller0: entered allmulticast mode [ 111.366480][ T8656] 0: reclassify loop, rule prio 0, protocol 700 [ 111.457226][ T1479] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 111.461086][ T1479] (id 0x00) [ 111.506889][ T1479] rc_core: IR keymap rc-imon-pad not found [ 111.510026][ T1479] Registered IR keymap rc-empty [ 111.511593][ T1479] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 111.514850][ T1479] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 111.661556][ T1479] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 111.666952][ T5754] Bluetooth: Unexpected continuation frame (len 18) [ 111.667862][ T1479] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input8 [ 111.676677][ T1479] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:6> initialized [ 112.324210][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.915'. [ 112.362029][ T8714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8714 comm=syz.5.915 [ 112.401848][ T42] audit: type=1400 audit(1785697440.189:726): avc: denied { listen } for pid=8717 comm="syz.5.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.402254][ T8718] syz.5.918 (8718): /proc/8717/oom_adj is deprecated, please use /proc/8717/oom_score_adj instead. [ 112.404184][ T8720] fuse: fd is not a fuse device [ 112.478325][ T8726] syzkaller0: entered promiscuous mode [ 112.480180][ T8726] syzkaller0: entered allmulticast mode [ 112.560201][ T42] audit: type=1400 audit(1785697440.349:727): avc: denied { accept } for pid=8732 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.611044][ T8737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.925'. [ 112.622247][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'. [ 112.623525][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.629482][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.634038][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.663708][ T8735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.670832][ T8735] veth1_vlan: left promiscuous mode [ 112.673410][ T8735] veth0_vlan: left promiscuous mode [ 112.675925][ T8735] veth0_vlan: entered promiscuous mode [ 112.680626][ T8735] veth1_vlan: entered promiscuous mode [ 112.687143][ T8735] veth1_macvtap: left promiscuous mode [ 112.690274][ T8735] veth0_macvtap: left promiscuous mode [ 112.693989][ T8735] veth0_macvtap: entered promiscuous mode [ 112.697572][ T8735] veth1_macvtap: entered promiscuous mode [ 112.704090][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.707981][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.711586][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.715061][ T8735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.725071][ T8735] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 112.733294][ T8735] ip6gretap0: entered promiscuous mode [ 112.739118][ T8735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.752873][ T8735] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 112.838978][ T5607] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 112.848095][ T5607] bond4: (slave veth7): making interface the new active one [ 112.854011][ T5607] bond4: active interface up! [ 113.050437][ T8758] netlink: 156 bytes leftover after parsing attributes in process `syz.5.930'. [ 113.108246][ T42] audit: type=1400 audit(1785697440.889:728): avc: denied { write } for pid=8761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.153003][ T42] audit: type=1400 audit(1785697440.939:729): avc: denied { write } for pid=8770 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.183310][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 113.223003][ T8758] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 113.224829][ T42] audit: type=1400 audit(1785697441.009:730): avc: denied { connect } for pid=8638 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.243782][ T8733] imon:send_packet: task interrupted [ 113.246701][ T8733] imon:send_packet: packet tx failed (-512) [ 113.254160][ T42] audit: type=1400 audit(1785697441.039:731): avc: denied { write } for pid=8778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.268454][ T8733] imon:vfd_write: send packet #5 failed [ 113.281901][ T1479] usb 9-1: USB disconnect, device number 6 [ 113.295375][ T42] audit: type=1400 audit(1785697441.079:732): avc: denied { write } for pid=8783 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.331343][ T8787] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 113.331630][ T42] audit: type=1804 audit(1785697441.119:733): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.936" name="file0" dev="tmpfs" ino=1506 res=1 errno=0 [ 113.340757][ T8787] ref_ctr increment failed for inode: 0x5e2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88806263f2c0 [ 113.342236][ T8787] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 113.348460][ T8787] ref_ctr decrement failed for inode: 0x5e2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88806263f2c0 [ 113.352395][ T8787] uprobe: syz.0.936:8787 failed to unregister, leaking uprobe [ 113.365596][ T42] audit: type=1400 audit(1785697441.149:734): avc: denied { write } for pid=8788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.422246][ T42] audit: type=1400 audit(1785697441.209:735): avc: denied { write } for pid=8793 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.433724][ T42] audit: type=1400 audit(1785697441.209:736): avc: denied { kexec_image_load } for pid=8797 comm="syz.5.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 113.504173][ T42] audit: type=1400 audit(1785697441.289:737): avc: denied { write } for pid=8803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.543426][ T42] audit: type=1400 audit(1785697441.329:738): avc: denied { write } for pid=8810 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.641009][ T5754] Bluetooth: hci3: unexpected subevent 0x0c length: 30 > 5 [ 114.487499][ T8914] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 114.495796][ T8914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.499109][ T8914] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 114.517808][ T8914] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 114.525324][ T8914] bond0 (unregistering): Released all slaves [ 114.638939][ T8921] fuse: fd is not a fuse device [ 114.665441][ T8923] netlink: 'syz.0.968': attribute type 4 has an invalid length. [ 114.792185][ T8934] mmap: syz.4.973 (8934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.973653][ T8944] bond0: Removing last arp target with arp_interval on [ 115.009924][ T8956] syzkaller0: entered promiscuous mode [ 115.011835][ T8956] syzkaller0: entered allmulticast mode [ 115.176350][ T8972] __nla_validate_parse: 1 callbacks suppressed [ 115.176372][ T8972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'. [ 115.463713][ T8994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.473910][ T8994] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 115.671817][ T9013] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 115.698138][ T9015] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 115.700378][ T9015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.703398][ T9016] vhci_hcd: xmit failed -107 [ 115.706436][ T9015] vhci_hcd vhci_hcd.0: Device attached [ 115.712339][ T5607] vhci_hcd vhci_hcd.0: stop threads [ 115.713993][ T5607] vhci_hcd vhci_hcd.0: release socket [ 115.715760][ T5607] vhci_hcd vhci_hcd.0: disconnect device [ 115.769008][ T9018] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 115.780163][ T9018] CIFS: Attempting to mount //127.0.0.1/share [ 115.797866][ T9018] CIFS: VFS: cifs_mount failed w/return code = -112 [ 116.302295][ T9021] syzkaller0: entered promiscuous mode [ 116.304195][ T9021] syzkaller0: entered allmulticast mode [ 116.418767][ T9023] overlayfs: failed to resolve './file2': -2 [ 116.552000][ T9038] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 116.666326][ T9038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9038 comm=syz.3.1009 [ 116.751617][ T9057] syzkaller0: entered promiscuous mode [ 116.754576][ T9057] syzkaller0: entered allmulticast mode [ 117.379551][ T9103] syzkaller0: entered promiscuous mode [ 117.381212][ T9103] syzkaller0: entered allmulticast mode [ 117.616885][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 117.697900][ T9109] nicvf0: renamed from team0 (while UP) [ 117.707282][ T9109] nicvf0: Cannot enslave team device to itself [ 117.710495][ T9109] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 117.776907][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 117.779844][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 117.783040][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 117.788083][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.791081][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.793574][ T9110] memory length for this resource is wrong [ 117.794277][ T29] usb 8-1: Product: syz [ 117.798205][ T29] usb 8-1: Manufacturer: syz [ 117.798539][ T9112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9112 comm=syz.5.1019 [ 117.799739][ T29] usb 8-1: SerialNumber: syz [ 117.809811][ T29] usb 8-1: config 0 descriptor?? [ 117.813659][ T29] hub 8-1:0.0: bad descriptor, ignoring hub [ 117.816297][ T29] hub 8-1:0.0: probe with driver hub failed with error -5 [ 117.827649][ T9110] isp1760 0000:00:03.0: probe with driver isp1760 failed with error -12 [ 118.028897][ T9132] bridge_slave_1: left allmulticast mode [ 118.030696][ T9132] bridge_slave_1: left promiscuous mode [ 118.033538][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.037316][ T9132] bridge_slave_0: left allmulticast mode [ 118.039092][ T9132] bridge_slave_0: left promiscuous mode [ 118.041004][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.051654][ T9132] bond0: (slave bridge0): Releasing backup interface [ 118.314900][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 118.314922][ T42] audit: type=1400 audit(1785697446.099:773): avc: denied { write } for pid=9143 comm="syz.4.1030" name="dlm" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.324320][ T42] audit: type=1400 audit(1785697446.109:774): avc: denied { write } for pid=9143 comm="syz.4.1030" name="spaces" dev="configfs" ino=30624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.331489][ T42] audit: type=1400 audit(1785697446.119:775): avc: denied { write } for pid=9143 comm="syz.4.1030" name="nodes" dev="configfs" ino=30627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.338538][ T29] usb 8-1: USB disconnect, device number 5 [ 118.391853][ T42] audit: type=1400 audit(1785697446.179:776): avc: denied { mounton } for pid=9143 comm="syz.4.1030" path="/210/my_configfs" dev="configfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.391922][ T9144] bpf: Bad value for 'uid' [ 118.949741][ T42] audit: type=1400 audit(1785697446.739:777): avc: denied { mount } for pid=9164 comm="syz.0.1039" name="/" dev="hugetlbfs" ino=30644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.971323][ T9167] fuse: Bad value for 'group_id' [ 118.973021][ T9167] fuse: Bad value for 'group_id' [ 118.975572][ T9167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9167 comm=syz.5.1041 [ 118.987217][ T9167] dns_resolver: Unsupported content type (234) [ 119.011921][ T1497] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 119.068321][ T42] audit: type=1400 audit(1785697446.859:778): avc: denied { create } for pid=9178 comm="syz.5.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.071217][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 119.092794][ T42] audit: type=1400 audit(1785697446.879:779): avc: denied { read } for pid=9178 comm="syz.5.1047" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.100925][ T42] audit: type=1400 audit(1785697446.879:780): avc: denied { open } for pid=9178 comm="syz.5.1047" path="net:[4026532897]" dev="nsfs" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.110079][ T42] audit: type=1400 audit(1785697446.889:781): avc: denied { perfmon } for pid=9178 comm="syz.5.1047" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.126882][ T1479] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 119.176940][ T1497] usb 8-1: Using ep0 maxpacket: 32 [ 119.182136][ T1497] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 119.191408][ T1497] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.195206][ T1497] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.199085][ T1497] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.204789][ T1497] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.208278][ T1497] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.210810][ T1497] usb 8-1: Product: syz [ 119.212138][ T1497] usb 8-1: Manufacturer: syz [ 119.213659][ T1497] usb 8-1: SerialNumber: syz [ 119.246494][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 119.255510][ T1497] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input9 [ 119.259370][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 119.278222][ T1479] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.282419][ T1479] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.287719][ T1479] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 119.290543][ T1479] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.293093][ T1479] usb 9-1: Product: syz [ 119.294405][ T1479] usb 9-1: Manufacturer: syz [ 119.295914][ T1479] usb 9-1: SerialNumber: syz [ 119.303708][ T1479] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 119.312767][ T1479] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 119.318338][ T1479] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 119.358285][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 119.424982][ T5754] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 119.467010][ T1497] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 119.469693][ T1497] (id 0x00) [ 119.518024][ T1497] rc_core: IR keymap rc-imon-pad not found [ 119.519429][ T9231] CIFS: Attempting to mount //127.0.0.1/share [ 119.521431][ T1497] Registered IR keymap rc-empty [ 119.523661][ T1497] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 119.523859][ T9231] CIFS: VFS: Error connecting to socket. Aborting operation. [ 119.528395][ T1497] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 119.533188][ T9231] CIFS: VFS: cifs_mount failed w/return code = -22 [ 119.626411][ T9247] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 119.677426][ T1497] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 119.680770][ T9247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9247 comm=syz.0.1076 [ 119.688100][ T1497] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input10 [ 119.695875][ T1497] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:6> initialized [ 119.763962][ T5754] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 119.791231][ T9263] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1083'. [ 120.128815][ T5754] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 120.131052][ T5754] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 120.920757][ T5754] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 120.922095][ T9299] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.283620][ T9296] imon:send_packet: task interrupted [ 121.285436][ T9296] imon:send_packet: packet tx failed (-512) [ 121.287437][ T9296] imon:vfd_write: send packet #5 failed [ 121.292177][ T1497] usb 8-1: USB disconnect, device number 6 [ 121.835155][ T9308] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 121.843526][ T9308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.876039][ T5754] Bluetooth: hci0: unexpected event for opcode 0x041c [ 121.901795][ T5754] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 121.943446][ T9321] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 121.945820][ T9321] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 121.991914][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 122.127473][ T9347] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 122.153082][ T9352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 122.226819][ T42] audit: type=1400 audit(1785697450.009:782): avc: denied { write } for pid=9355 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.282898][ T5754] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 122.814087][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.966250][ T9407] veth1_macvtap: left promiscuous mode [ 122.968079][ T9407] macsec0: entered promiscuous mode [ 122.969903][ T9407] macsec0: entered allmulticast mode [ 122.977990][ T9407] veth1_macvtap: entered promiscuous mode [ 122.979929][ T9407] veth1_macvtap: entered allmulticast mode [ 122.982066][ T9407] macsec0: left promiscuous mode [ 122.983806][ T9407] macsec0: left allmulticast mode [ 122.985527][ T9407] veth1_macvtap: left allmulticast mode [ 123.023485][ T9409] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 123.096873][ T847] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 123.097393][ T9413] fuse: fd is not a fuse device [ 123.103053][ T9413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9413 comm=syz.0.1147 [ 123.110697][ T9413] dns_resolver: Unsupported content type (234) [ 123.192061][ T5754] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 123.246921][ T847] usb 8-1: Using ep0 maxpacket: 16 [ 123.252225][ T847] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 123.256885][ T847] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 123.262107][ T847] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 123.270019][ T847] usb 8-1: config 0 interface 0 has no altsetting 0 [ 123.284491][ T847] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 123.291017][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.296856][ T847] usb 8-1: Product: syz [ 123.300604][ T847] usb 8-1: Manufacturer: syz [ 123.303942][ T847] usb 8-1: SerialNumber: syz [ 123.315176][ T847] usb 8-1: config 0 descriptor?? [ 123.530563][ T847] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 123.537455][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.556673][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.572112][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.576255][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.607224][ T9160] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -110 [ 123.613291][ T9] usb 9-1: USB disconnect, device number 7 [ 123.626150][ T7282] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.641905][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 123.646667][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.650861][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 123.658192][ T9] ti_usb_3410_5052 9-1:2.0: device disconnected [ 123.674363][ T5132] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.680061][ T5754] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 123.731447][ T9399] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.735852][ T34] usb 8-1: USB disconnect, device number 7 [ 123.794993][ T9446] pim6reg: entered allmulticast mode [ 123.801744][ T9446] pim6reg: left allmulticast mode usb_generic_handle_packet: ctrl buffer too small (16383 > 4096) [ 124.479366][ T9483] fuse: fd is not a fuse device [ 124.483881][ T9483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9483 comm=syz.0.1178 [ 124.519912][ T42] audit: type=1400 audit(1785697452.309:783): avc: denied { read } for pid=9487 comm="syz.0.1179" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.624209][ T42] audit: type=1400 audit(1785697452.409:784): avc: denied { name_bind } for pid=9494 comm="syz.0.1182" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 124.628102][ T9497] Bluetooth: MGMT ver 1.23 [ 124.748945][ T42] audit: type=1400 audit(1785697452.539:785): avc: denied { create } for pid=9507 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.761273][ T42] audit: type=1400 audit(1785697452.539:786): avc: denied { bind } for pid=9507 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.945891][ T42] audit: type=1400 audit(1785697452.729:787): avc: denied { execute } for pid=9522 comm="syz.0.1194" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 125.071757][ T42] audit: type=1400 audit(1785697452.859:788): avc: denied { setopt } for pid=9532 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.082593][ T42] audit: type=1400 audit(1785697452.869:789): avc: denied { connect } for pid=9532 comm="syz.4.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.096034][ T9529] hid-generic 0003:0627:0001.0001: pid 9529 passed too large report [ 125.150772][ T9542] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 125.171212][ T9546] fuse: Bad value for 'group_id' [ 125.172906][ T9546] fuse: Bad value for 'group_id' [ 125.181377][ T9546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9546 comm=syz.5.1204 [ 125.209132][ T42] audit: type=1400 audit(1785697452.999:790): avc: denied { write } for pid=9547 comm="syz.4.1207" name="/" dev="9p" ino=75785883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.218636][ T42] audit: type=1400 audit(1785697452.999:791): avc: denied { remove_name } for pid=9547 comm="syz.4.1207" name="file2" dev="9p" ino=75785889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.231279][ T9552] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 125.235439][ T9552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.238156][ T42] audit: type=1400 audit(1785697452.999:792): avc: denied { rmdir } for pid=9547 comm="syz.4.1207" name="file2" dev="9p" ino=75785889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.405608][ T9575] fuse: fd is not a fuse device [ 125.407826][ T9575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9575 comm=syz.0.1219 [ 125.496169][ T9591] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1224'. [ 125.551577][ T9599] fuse: fd is not a fuse device [ 125.554067][ T9599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9599 comm=syz.0.1227 [ 125.561354][ T9599] dns_resolver: Unsupported content type (234) [ 125.607464][ T847] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 125.639629][ T9609] syzkaller0: entered promiscuous mode [ 125.641523][ T9609] syzkaller0: entered allmulticast mode [ 125.769517][ T847] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.780323][ T847] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.797817][ T847] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.811908][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.828085][ T847] usb 8-1: config 0 descriptor?? [ 125.865145][ T847] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.899549][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 125.954162][ T9635] fuse: fd is not a fuse device [ 125.959918][ T9635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9635 comm=syz.0.1239 [ 125.966420][ T9635] dns_resolver: Unsupported content type (234) [ 125.990782][ T847] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.995861][ T847] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 126.000081][ T847] usb 8-1: media controller created [ 126.029025][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.094745][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 126.097066][ T847] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 126.107136][ T847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input12 [ 126.113403][ T847] dvb-usb: schedule remote query interval to 150 msecs. [ 126.116297][ T847] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.127439][ T847] usb 8-1: USB disconnect, device number 8 [ 126.212813][ T847] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.310324][ T9662] fuse: fd is not a fuse device [ 126.318333][ T9662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9662 comm=syz.0.1249 [ 126.323685][ T9662] dns_resolver: Unsupported content type (234) [ 127.315313][ T9681] xt_hashlimit: size too large, truncated to 1048576 [ 127.558216][ T9724] xt_hashlimit: size too large, truncated to 1048576 [ 127.806075][ T9764] fuse: Bad value for 'group_id' [ 127.809040][ T9764] fuse: Bad value for 'group_id' [ 127.811086][ T9764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9764 comm=syz.3.1290 [ 127.884405][ T9774] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1296'. [ 127.940220][ T5754] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 127.944357][ T5754] Bluetooth: hci2: Injecting HCI hardware error event [ 127.952455][ T5741] Bluetooth: hci2: hardware error 0x00 [ 128.016094][ T9796] fuse: Bad value for 'group_id' [ 128.020432][ T9796] fuse: Bad value for 'group_id' [ 128.022441][ T9796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9796 comm=syz.4.1305 [ 128.167243][ T847] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 128.206527][ T5754] Bluetooth: hci3: Unable to find connection for big 0x20 [ 128.326902][ T847] usb 10-1: Using ep0 maxpacket: 32 [ 128.329882][ T847] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 128.332582][ T847] usb 10-1: config 0 has no interface number 0 [ 128.334643][ T847] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.338277][ T847] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 128.342161][ T847] usb 10-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 128.345494][ T847] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.351574][ T847] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 128.354453][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.357218][ T847] usb 10-1: Product: syz [ 128.358595][ T847] usb 10-1: Manufacturer: syz [ 128.360144][ T847] usb 10-1: SerialNumber: syz [ 128.363611][ T847] usb 10-1: config 0 descriptor?? [ 128.365864][ T9781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 128.374094][ T847] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input13 [ 128.382971][ T5132] usb 10-1: BOGUS urb xfer, pipe 1 != type 3 [ 128.457539][ C0] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 128.579931][ T847] usb 10-1: USB disconnect, device number 3 [ 129.539083][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 129.539097][ T42] audit: type=1400 audit(1785697457.329:800): avc: denied { read } for pid=9830 comm="syz.4.1322" lport=10037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.629620][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 129.683774][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 129.741178][ T9860] loop6: detected capacity change from 0 to 128 [ 129.902481][ T9881] fuse: fd is not a fuse device [ 129.905852][ T9881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9881 comm=syz.0.1344 [ 129.979422][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 130.009043][ T5741] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 130.114079][ T9912] fuse: Bad value for 'group_id' [ 130.116062][ T9912] fuse: Bad value for 'group_id' [ 130.118662][ T9912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9912 comm=syz.5.1355 [ 130.129245][ T9] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 130.133462][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.138319][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.143831][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.150073][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.154070][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.155998][ T42] audit: type=1400 audit(1785697457.939:801): avc: denied { getopt } for pid=9916 comm="syz.5.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.163302][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.174258][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.178096][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.181569][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.188442][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.191304][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.194786][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.199005][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.201887][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.205602][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.209165][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.212053][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.215483][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.219455][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.222316][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.225913][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.230250][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.237203][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.243279][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 130.249505][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.253094][ T9] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.257037][ T9] usb 8-1: Product: syz [ 130.259091][ T9] usb 8-1: Manufacturer: syz [ 130.261355][ T9] usb 8-1: SerialNumber: syz [ 130.270704][ T9] usb 8-1: config 0 descriptor?? [ 130.278368][ T9] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.322678][ T5741] Bluetooth: hci3: unexpected event for opcode 0x200a [ 130.443899][ T9954] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 130.493535][ T34] usb 8-1: USB disconnect, device number 9 [ 130.498891][ T34] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 130.602128][ T9958] fuse: Bad value for 'group_id' [ 130.603846][ T9958] fuse: Bad value for 'group_id' [ 130.606050][ T9958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9958 comm=syz.4.1376 [ 130.611656][ T9958] dns_resolver: Unsupported content type (234) [ 130.635634][ T9960] Config c/1 of g1 needs at least one function. [ 130.638627][ T9960] udc usbip-vudc.0: failed to start g1: -22 [ 130.641716][ T9960] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 130.646090][ T9960] UDC core: g1: couldn't find an available UDC or it's busy [ 130.927423][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 131.078248][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.081287][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 131.085227][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.088187][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.090924][ T9] usb 9-1: Product: syz [ 131.092630][ T9] usb 9-1: Manufacturer: syz [ 131.094483][ T9] usb 9-1: SerialNumber: syz [ 131.099214][ T9] usb 9-1: config 0 descriptor?? [ 131.108841][ T9] usb 9-1: selecting invalid altsetting 0 [ 131.220721][ T42] audit: type=1400 audit(1785697459.009:802): avc: denied { load_policy } for pid=9970 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.298448][ T9971] SELinux: failed to load policy [ 131.309181][ T9] usb 9-1: USB disconnect, device number 8 [ 131.327915][ T9980] fuse: Bad value for 'group_id' [ 131.329562][ T9980] fuse: Bad value for 'group_id' [ 131.337544][ T9980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=9980 comm=syz.3.1386 [ 131.344714][ T9980] dns_resolver: Unsupported content type (234) [ 131.492306][ T5741] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 131.607819][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 131.653144][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 131.702640][ T42] audit: type=1400 audit(1785697459.489:803): avc: denied { read } for pid=10000 comm="syz.3.1395" name="iTerminal" dev="configfs" ino=37299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 131.717541][ T42] audit: type=1800 audit(1785697459.499:804): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1395" name="iTerminal" dev="configfs" ino=37299 res=0 errno=0 [ 131.773502][ T34] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 131.776281][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 131.779263][ T34] usb 10-1: Product: syz [ 131.780944][ T34] usb 10-1: Manufacturer: syz [ 131.783276][ T34] usb 10-1: SerialNumber: syz [ 131.794965][ T34] usb 10-1: config 0 descriptor?? [ 131.798697][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 131.801377][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 131.805254][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.809238][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 131.811710][ T34] usb 10-1: media controller created [ 131.818270][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.859327][ T5741] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 131.888930][T10012] fuse: Bad value for 'group_id' [ 131.890617][T10012] fuse: Bad value for 'group_id' [ 131.892732][T10012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39766 sclass=netlink_route_socket pid=10012 comm=syz.3.1400 [ 132.002281][ T9983] cxusb: i2c rd: len=80 is too big! [ 132.002281][ T9983] [ 132.008042][ T34] cxusb: set interface failed [ 132.009563][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 132.029939][ T34] DVB: Unable to find symbol mt352_attach() [ 132.031930][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 132.035868][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 132.039176][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 132.088010][ T34] rc_core: IR keymap rc-dvico-mce not found [ 132.089996][ T34] Registered IR keymap rc-empty [ 132.092426][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 132.096493][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input14 [ 132.109903][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 132.112150][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 132.119344][ T34] usb 10-1: USB disconnect, device number 4 [ 132.160153][T10029] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 132.161466][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 132.221195][ T42] audit: type=1400 audit(1785697460.009:805): avc: denied { read } for pid=10038 comm="syz.4.1410" name="trace" dev="tracefs" ino=4381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.257381][ T42] audit: type=1400 audit(1785697460.049:806): avc: denied { write } for pid=10040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.296008][ T42] audit: type=1400 audit(1785697460.079:807): avc: denied { write } for pid=10048 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.380375][ T42] audit: type=1400 audit(1785697460.169:808): avc: denied { write } for pid=10058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.421771][ T42] audit: type=1400 audit(1785697460.209:809): avc: denied { write } for pid=10063 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.438731][ T1497] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 132.586980][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 132.606801][ T1497] usb 8-1: Using ep0 maxpacket: 32 [ 132.610242][ T1497] usb 8-1: config 0 has no interfaces? [ 132.612279][ T1497] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 132.615238][ T1497] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.620244][ T1497] usb 8-1: config 0 descriptor?? [ 132.622824][T10068] fuse: Bad value for 'group_id' [ 132.624505][T10068] fuse: Bad value for 'group_id' [ 132.627907][T10068] dns_resolver: Unsupported content type (234) [ 132.650596][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653744][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.654497][T10070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1418'. [ 132.660752][ T7198] sl0: compressed packet ignored [ 132.736812][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 132.740266][ T9] usb 9-1: config 0 has no interfaces? [ 132.743570][ T9] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 132.747041][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.749577][ T9] usb 9-1: Product: syz [ 132.750893][ T9] usb 9-1: Manufacturer: syz [ 132.752440][ T9] usb 9-1: SerialNumber: syz [ 132.755746][ T9] usb 9-1: config 0 descriptor?? [ 132.914786][T10083] fuse: fd is not a fuse device [ 132.941074][ T29] usb 8-1: USB disconnect, device number 10 [ 132.949196][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 132.964065][ T1479] usb 9-1: USB disconnect, device number 9 [ 133.106934][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 133.110880][ T34] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 133.117967][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.125148][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.128962][ T34] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.133025][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.135878][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.344187][ T34] usb 10-1: GET_CAPABILITIES returned 0 [ 133.346017][ T34] usbtmc 10-1:16.0: can't read capabilities [ 133.468753][T10111] fuse: Bad value for 'group_id' [ 133.470427][T10111] fuse: Bad value for 'group_id' [ 133.474352][T10111] dns_resolver: Unsupported content type (234) [ 133.503225][T10114] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1429'. [ 133.541047][T10117] fuse: Bad value for 'group_id' [ 133.542687][T10117] fuse: Bad value for 'group_id' [ 133.549756][ T1497] usb 10-1: USB disconnect, device number 5 [ 133.645963][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 133.757697][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 133.916847][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 133.919902][ T29] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.922522][ T29] usb 8-1: config 179 has no interface number 0 [ 133.924541][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.928247][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.931741][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.935149][ T29] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.938896][ T29] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.942997][ T29] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.945810][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.950984][T10115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.173823][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 134.360104][ T34] usb 8-1: USB disconnect, device number 11 [ 134.360154][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.365218][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 134.377108][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 134.528892][ T9] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.532880][ T9] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 134.536171][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 134.540055][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.542941][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.545572][ T9] usb 10-1: Product: syz [ 134.547066][ T9] usb 10-1: Manufacturer: syz [ 134.548648][ T9] usb 10-1: SerialNumber: syz [ 134.551687][ T9] usb 10-1: config 0 descriptor?? [ 134.553815][T10151] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 134.559453][ T9] usb 10-1: selecting invalid altsetting 0 [ 134.650957][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 134.681704][T10170] fuse: Bad value for 'group_id' [ 134.683392][T10170] fuse: Bad value for 'group_id' [ 134.765975][ T34] usb 10-1: USB disconnect, device number 6 [ 134.961058][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 134.961070][ T42] audit: type=1326 audit(1785697462.749:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 134.963253][T10193] fuse: Bad value for 'group_id' [ 134.970915][ T42] audit: type=1326 audit(1785697462.749:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 134.971758][T10193] fuse: Bad value for 'group_id' [ 134.979209][ T42] audit: type=1326 audit(1785697462.749:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 134.988575][ T42] audit: type=1326 audit(1785697462.749:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 134.996251][ T42] audit: type=1326 audit(1785697462.749:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.003774][ T42] audit: type=1326 audit(1785697462.749:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.006843][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 135.010739][ T42] audit: type=1326 audit(1785697462.749:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.020216][ T42] audit: type=1326 audit(1785697462.749:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.027350][ T42] audit: type=1326 audit(1785697462.749:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.034450][ T42] audit: type=1326 audit(1785697462.749:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.0.1461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad0b9e019 code=0x7fc00000 [ 135.068283][T10202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.168627][ T29] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.173807][ T29] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.180985][ T29] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 135.184609][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.187697][ T29] usb 9-1: Product: syz [ 135.189323][ T29] usb 9-1: Manufacturer: syz [ 135.191136][ T29] usb 9-1: SerialNumber: syz [ 135.199394][ T29] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 135.204685][ T29] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 135.212229][ T29] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 135.267193][ T847] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 135.284391][T10210] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1473'. [ 135.329455][T10216] syzkaller0: entered promiscuous mode [ 135.331399][T10216] syzkaller0: entered allmulticast mode [ 135.410271][T10220] dns_resolver: Unsupported content type (234) [ 135.439325][ T847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.446847][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.453713][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 135.458503][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 135.461662][ T847] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.464668][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.468577][ T847] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.474890][ T847] usb 8-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 135.478350][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.481010][ T847] usb 8-1: Product: syz [ 135.482366][ T847] usb 8-1: Manufacturer: syz [ 135.484017][ T847] usb 8-1: SerialNumber: syz [ 135.488996][T10199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.491359][T10199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.494211][T10199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.499155][ T847] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected [ 135.502018][ T847] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 135.505402][ T847] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82 [ 135.508385][ T847] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 135.511770][ T847] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 135.518980][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 135.571693][T10239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1486'. [ 135.586438][T10241] fuse: fd is not a fuse device [ 135.594291][T10241] dns_resolver: Unsupported content type (234) [ 135.603686][ T9623] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 135.638251][T10246] syzkaller0: entered promiscuous mode [ 135.640301][T10246] syzkaller0: entered allmulticast mode [ 135.714465][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 135.830794][T10264] fuse: Bad value for 'group_id' [ 135.832479][T10264] fuse: Bad value for 'group_id' [ 135.835602][T10264] dns_resolver: Unsupported content type (234) [ 136.084809][T10278] syzkaller0: entered promiscuous mode [ 136.087367][T10278] syzkaller0: entered allmulticast mode [ 137.245720][T10307] fuse: Bad value for 'group_id' [ 137.247513][T10307] fuse: Bad value for 'group_id' [ 137.251313][T10307] dns_resolver: Unsupported content type (234) [ 137.320787][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.323334][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.326248][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.329893][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.332400][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.334774][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.337303][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.339872][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.342237][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.344612][ T41] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 137.351146][ T41] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.03 Device [syz1] on syz1 [ 137.369569][T10313] UHID_CREATE from different security context by process 742 (syz.5.1521), this is not allowed. [ 137.704693][T10331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.709334][T10331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.789896][T10331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.793150][T10331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.873213][T10331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.877132][T10331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.958906][T10331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.962256][T10331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.027442][ T9] usb 8-1: USB disconnect, device number 12 [ 138.044593][ T9] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 138.049389][ T9] keyspan 8-1:1.0: device disconnected [ 138.086948][T10177] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 138.100745][ T29] usb 9-1: USB disconnect, device number 10 [ 138.114976][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 138.137691][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 138.143323][ T29] ti_usb_3410_5052 9-1:2.0: device disconnected [ 138.169034][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.176804][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.179606][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.182115][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.184764][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.188197][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.190857][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.193473][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.407098][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.485355][T10361] ================================================================== [ 138.487941][T10361] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40 SYZFAIL: failed to recv rpc [ 138.490411][T10361] Read of size 1 at addr ffff888029bed5a0 by task syz.5.1540/10361 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.493832][T10361] [ 138.495201][T10361] CPU: 3 UID: 0 PID: 10361 Comm: syz.5.1540 Tainted: G S L syzkaller #0 PREEMPT(full) [ 138.495219][T10361] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 138.495224][T10361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.495237][T10361] Call Trace: [ 138.495254][T10361] [ 138.495258][T10361] dump_stack_lvl+0x100/0x190 [ 138.495325][T10361] print_report+0x13d/0x4b0 [ 138.495353][T10361] ? __virt_addr_valid+0x239/0x430 [ 138.495395][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.495406][T10361] kasan_report+0xdf/0x1c0 [ 138.495436][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.495447][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.495458][T10361] __kasan_check_byte+0x36/0x50 [ 138.495471][T10361] lock_acquire+0x132/0x370 [ 138.495492][T10361] ? do_raw_spin_lock+0x128/0x260 [ 138.495507][T10361] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.495522][T10361] _raw_spin_lock_bh+0x33/0x40 [ 138.495533][T10361] ? bt_accept_unlink+0x64/0x370 [ 138.495551][T10361] bt_accept_unlink+0x64/0x370 [ 138.495562][T10361] ? __local_bh_enable_ip+0x9e/0x120 [ 138.495582][T10361] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 138.495600][T10361] l2cap_chan_del+0xa6/0x920 [ 138.495610][T10361] l2cap_conn_del+0x34f/0x6b0 [ 138.495622][T10361] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 138.495632][T10361] l2cap_disconn_cfm+0x9f/0x100 [ 138.495643][T10361] hci_conn_hash_flush+0x10e/0x280 [ 138.495659][T10361] hci_dev_close_sync+0x5cf/0x13c0 [ 138.495675][T10361] ? find_held_lock+0x2b/0x80 [ 138.495685][T10361] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 138.495702][T10361] hci_dev_do_close+0x2e/0xb0 [ 138.495716][T10361] hci_unregister_dev+0x23f/0x690 [ 138.495730][T10361] vhci_release+0x17d/0x230 [ 138.495753][T10361] ? __pfx_vhci_release+0x10/0x10 [ 138.495765][T10361] __fput+0x3ff/0xb50 [ 138.495787][T10361] task_work_run+0x150/0x240 [ 138.495807][T10361] ? __pfx_task_work_run+0x10/0x10 [ 138.495820][T10361] do_exit+0x951/0x2ae0 [ 138.495839][T10361] ? __pfx_do_exit+0x10/0x10 [ 138.495854][T10361] ? __pfx_proc_coredump_connector+0x10/0x10 [ 138.495897][T10361] do_group_exit+0xd5/0x2a0 [ 138.495908][T10361] get_signal+0x1ec7/0x21e0 [ 138.495925][T10361] ? __pfx_get_signal+0x10/0x10 [ 138.495939][T10361] ? __pfx_force_sig_fault+0x10/0x10 [ 138.495958][T10361] arch_do_signal_or_restart+0x91/0x7e0 [ 138.495979][T10361] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 138.495994][T10361] irqentry_exit+0x402/0xa00 [ 138.496007][T10361] asm_exc_page_fault+0x26/0x30 [ 138.496019][T10361] RIP: 0033:0x7f8d2519e021 [ 138.496028][T10361] Code: Unable to access opcode bytes at 0x7f8d2519dff7. [ 138.496044][T10361] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 138.496054][T10361] RAX: 0000000000000000 RBX: 00007f8d25425fa0 RCX: 00007f8d2519e019 [ 138.496061][T10361] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000011 [ 138.496068][T10361] RBP: 00007f8d2523500c R08: 0000000000000000 R09: 0000000000000000 [ 138.496074][T10361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.496081][T10361] R13: 00007f8d25426038 R14: 00007f8d25425fa0 R15: 00007ffc5842a9d8 [ 138.496091][T10361] [ 138.496094][T10361] [ 138.589639][T10361] Allocated by task 5136: [ 138.591012][T10361] kasan_save_stack+0x30/0x50 [ 138.592510][T10361] kasan_save_track+0x14/0x30 [ 138.594027][T10361] __kasan_kmalloc+0xaa/0xb0 [ 138.595499][T10361] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 138.597203][T10361] syslog_print+0xf8/0x620 [ 138.598614][T10361] do_syslog+0x5bd/0x6d0 [ 138.599981][T10361] __x64_sys_syslog+0x74/0xb0 [ 138.601376][T10361] do_syscall_64+0x115/0x870 [ 138.602724][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.604604][T10361] [ 138.605366][T10361] Freed by task 5136: [ 138.606627][T10361] kasan_save_stack+0x30/0x50 [ 138.608095][T10361] kasan_save_track+0x14/0x30 [ 138.609515][T10361] kasan_save_free_info+0x3b/0x70 [ 138.611108][T10361] __kasan_slab_free+0x5f/0x80 [ 138.612624][T10361] kfree+0x22b/0x6c0 [ 138.613897][T10361] syslog_print+0x548/0x620 [ 138.615368][T10361] do_syslog+0x5bd/0x6d0 [ 138.616713][T10361] __x64_sys_syslog+0x74/0xb0 [ 138.618199][T10361] do_syscall_64+0x115/0x870 [ 138.619674][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.621534][T10361] [ 138.622304][T10361] The buggy address belongs to the object at ffff888029bed000 [ 138.622304][T10361] which belongs to the cache kmalloc-2k of size 2048 [ 138.626628][T10361] The buggy address is located 1440 bytes inside of [ 138.626628][T10361] freed 2048-byte region [ffff888029bed000, ffff888029bed800) [ 138.630717][T10361] [ 138.631439][T10361] The buggy address belongs to the physical page: [ 138.633460][T10361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029bee000 pfn:0x29be8 [ 138.636569][T10361] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 138.639188][T10361] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 138.641809][T10361] page_type: f5(slab) [ 138.643080][T10361] raw: 00fff00000000240 ffff88801bc42f00 ffffea0000968610 ffffea0000cb2c10 [ 138.645767][T10361] raw: ffff888029bee000 0000000800080005 00000000f5000000 0000000000000000 [ 138.648438][T10361] head: 00fff00000000240 ffff88801bc42f00 ffffea0000968610 ffffea0000cb2c10 [ 138.651136][T10361] head: ffff888029bee000 0000000800080005 00000000f5000000 0000000000000000 [ 138.653843][T10361] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 138.656543][T10361] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 138.659235][T10361] page dumped because: kasan: bad access detected [ 138.661236][T10361] page_owner tracks the page as allocated [ 138.663019][T10361] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5738, tgid 5738 (syz-executor), ts 46569873435, free_ts 44410002861 [ 138.669231][T10361] post_alloc_hook+0xfd/0x120 [ 138.670700][T10361] get_page_from_freelist+0xf48/0x3530 [ 138.672331][T10361] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 138.674194][T10361] new_slab+0xa2/0x640 [ 138.675489][T10361] refill_objects+0xe3/0x410 [ 138.676930][T10361] __pcs_replace_empty_main+0x376/0x680 [ 138.678592][T10361] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 138.680568][T10361] kmalloc_reserve+0xe8/0x350 [ 138.682068][T10361] pskb_expand_head+0x249/0x10e0 [ 138.683642][T10361] netlink_trim+0x22d/0x2f0 [ 138.685094][T10361] netlink_broadcast_filtered+0x6d/0xf20 [ 138.686843][T10361] nlmsg_notify+0xb1/0x290 [ 138.688260][T10361] rtmsg_ifinfo+0x177/0x1b0 [ 138.689699][T10361] __dev_notify_flags+0x24c/0x2e0 [ 138.691290][T10361] rtnl_configure_link+0x1b5/0x280 [ 138.692896][T10361] rtnl_newlink+0x153b/0x2380 [ 138.694384][T10361] page last free pid 5716 tgid 5716 stack trace: [ 138.696381][T10361] __free_frozen_pages+0x79f/0x1090 [ 138.697984][T10361] __folio_put+0x3b4/0x5f0 [ 138.699402][T10361] skb_release_data+0x649/0x8e0 [ 138.700839][T10361] __kfree_skb+0x4f/0x70 [ 138.702132][T10361] tcp_ack+0x2079/0x7650 [ 138.703485][T10361] tcp_rcv_established+0x282a/0x3990 [ 138.705158][T10361] tcp_v4_do_rcv+0xbb6/0x1260 [ 138.706643][T10361] __release_sock+0x35a/0x440 [ 138.708134][T10361] release_sock+0x1e5/0x280 [ 138.709568][T10361] tcp_recvmsg+0x14c/0x630 [ 138.710972][T10361] inet_recvmsg+0xd5/0x4c0 [ 138.712315][T10361] sock_recvmsg+0x1b8/0x220 [ 138.713674][T10361] sock_read_iter+0x2b0/0x3a0 [ 138.715277][T10361] vfs_read+0x960/0xb40 [ 138.716617][T10361] ksys_read+0x1f8/0x250 [ 138.717976][T10361] do_syscall_64+0x115/0x870 [ 138.719466][T10361] [ 138.720237][T10361] Memory state around the buggy address: [ 138.722003][T10361] ffff888029bed480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.724523][T10361] ffff888029bed500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.727027][T10361] >ffff888029bed580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.729434][T10361] ^ [ 138.731006][T10361] ffff888029bed600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.733521][T10361] ffff888029bed680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.735941][T10361] ================================================================== [ 138.738430][T10361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.740682][T10361] CPU: 3 UID: 0 PID: 10361 Comm: syz.5.1540 Tainted: G S L syzkaller #0 PREEMPT(full) [ 138.744205][T10361] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 138.746243][T10361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.749400][T10361] Call Trace: [ 138.750473][T10361] [ 138.751436][T10361] dump_stack_lvl+0x100/0x190 [ 138.752938][T10361] vpanic+0x552/0x970 [ 138.754218][T10361] ? __pfx_vpanic+0x10/0x10 [ 138.755633][T10361] ? mark_held_locks+0x40/0x70 [ 138.757060][T10361] ? irqentry_exit+0x24d/0xa00 [ 138.758568][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.760133][T10361] panic+0xd1/0xe0 [ 138.761319][T10361] ? __pfx_panic+0x10/0x10 [ 138.762711][T10361] ? check_panic_on_warn+0x1f/0x90 [ 138.764340][T10361] check_panic_on_warn.cold+0x19/0x34 [ 138.766042][T10361] end_report.part.0+0x3a/0x90 [ 138.767592][T10361] kasan_report.cold+0xe/0x18 [ 138.769089][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.770660][T10361] ? _raw_spin_lock_bh+0x33/0x40 [ 138.772240][T10361] __kasan_check_byte+0x36/0x50 [ 138.773787][T10361] lock_acquire+0x132/0x370 [ 138.775234][T10361] ? do_raw_spin_lock+0x128/0x260 [ 138.776831][T10361] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.778526][T10361] _raw_spin_lock_bh+0x33/0x40 [ 138.780046][T10361] ? bt_accept_unlink+0x64/0x370 [ 138.781541][T10361] bt_accept_unlink+0x64/0x370 [ 138.783036][T10361] ? __local_bh_enable_ip+0x9e/0x120 [ 138.784740][T10361] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 138.786441][T10361] l2cap_chan_del+0xa6/0x920 [ 138.787974][T10361] l2cap_conn_del+0x34f/0x6b0 [ 138.789474][T10361] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 138.791081][T10361] l2cap_disconn_cfm+0x9f/0x100 [ 138.792626][T10361] hci_conn_hash_flush+0x10e/0x280 [ 138.794257][T10361] hci_dev_close_sync+0x5cf/0x13c0 [ 138.795804][T10361] ? find_held_lock+0x2b/0x80 [ 138.797243][T10361] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 138.798984][T10361] hci_dev_do_close+0x2e/0xb0 [ 138.800485][T10361] hci_unregister_dev+0x23f/0x690 [ 138.802070][T10361] vhci_release+0x17d/0x230 [ 138.803540][T10361] ? __pfx_vhci_release+0x10/0x10 [ 138.805136][T10361] __fput+0x3ff/0xb50 [ 138.806411][T10361] task_work_run+0x150/0x240 [ 138.807884][T10361] ? __pfx_task_work_run+0x10/0x10 [ 138.809500][T10361] do_exit+0x951/0x2ae0 [ 138.810828][T10361] ? __pfx_do_exit+0x10/0x10 [ 138.812300][T10361] ? __pfx_proc_coredump_connector+0x10/0x10 [ 138.814176][T10361] do_group_exit+0xd5/0x2a0 [ 138.815618][T10361] get_signal+0x1ec7/0x21e0 [ 138.817013][T10361] ? __pfx_get_signal+0x10/0x10 [ 138.818482][T10361] ? __pfx_force_sig_fault+0x10/0x10 [ 138.820141][T10361] arch_do_signal_or_restart+0x91/0x7e0 [ 138.821879][T10361] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 138.823825][T10361] irqentry_exit+0x402/0xa00 [ 138.825302][T10361] asm_exc_page_fault+0x26/0x30 [ 138.826800][T10361] RIP: 0033:0x7f8d2519e021 [ 138.828218][T10361] Code: Unable to access opcode bytes at 0x7f8d2519dff7. [ 138.830396][T10361] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 138.832302][T10361] RAX: 0000000000000000 RBX: 00007f8d25425fa0 RCX: 00007f8d2519e019 [ 138.834743][T10361] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000011 [ 138.837195][T10361] RBP: 00007f8d2523500c R08: 0000000000000000 R09: 0000000000000000 [ 138.839663][T10361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.842120][T10361] R13: 00007f8d25426038 R14: 00007f8d25425fa0 R15: 00007ffc5842a9d8 [ 138.844626][T10361] [ 138.846176][T10361] Kernel Offset: disabled [ 138.847554][T10361] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:04:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000016f677 RBX=ffffffff8e891480 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a815f RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ad0beb700 CR3=000000003da1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad195d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad265bf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad265bf6 00007fffad265bfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0df2600 00007f0ad0df25e0 00007f0ad0df25e8 00007f0ad0df2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ad0df25f8 00007f0ad0df25c8 00007f0ad0df2600 00007f0ad0df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001ac967 RBX=ffff88801eaea540 RCX=ffffffff8bbb42d5 RDX=0000000000000000 RSI=ffffffff8e1a815f RDI=ffffffff8c402680 RBP=ffffed1003d5d4a8 RSP=ffffc90000177e00 R8 =0000000000000001 R9 =ffffed100d4a678d R10=ffff88806a533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=dffffc0000000000 RIP=ffffffff8bbb289f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558d8c6aa8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000004 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc584277d0 00007ffc584277d0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d253f2823 00007f8d253f2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5842aec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5842aec6 00007ffc5842aecc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d252355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d2523562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d25235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d25235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e756f6d75004445 54504d4545525020 3a524f5455434558 452d5a5953000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b504a4850004445 54504d4545525005 1f524f5455434558 45085a5953000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffff1100ab59040 RBX=ffff888055ac8420 RCX=ffffffff821c95d2 RDX=ffff88802b174a80 RSI=ffffffff821ae44d RDI=ffff888055ac8200 RBP=ffff888055ac8420 RSP=ffffc9000313f460 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00007f974daa7407 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88802b174a80 RIP=ffffffff821ae464 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f974e151300 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd2dd557e20 CR3=00000000270e9000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=af23263caf103125 a4d514f23e7bdebe af23263caf103125 a4d514f23e7bdebe af23263caf103125 a4d514f23e7bdebe af23263caf103125 a4d514f23e7bdebe ZMM18=9f6af7779a15a4cd b5a6ccc769030029 9f6af7779a15a4cd b5a6ccc769030029 9f6af7779a15a4cd b5a6ccc769030029 9f6af7779a15a4cd b5a6ccc769030029 ZMM19=ee12000000000000 0000000000000005 ee12000000000000 0000000000000004 ee12000000000000 0000000000000003 ee12000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff88592fde ffffffff8210a6c2 ffffffff88592167 ffffffff885a2177 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff88592526 ffffffff88591df5 ffffffff885a0ace ffffffff84e75128 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff84e74f7f ffffffff89d91916 ffffffff89d9185d ffffffff8a09e11f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff818b4019 ffffffff8a09ecd8 ffffffff8a09e19d ffffffff81a0429d ZMM25=1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc 1bb6a9bc1bb6a9bc ZMM26=1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 1c2d37531c2d3753 ZMM27=86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d 86b3508d86b3508d ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=200b0000200b0000 200b0000200b0000 200b0000200b0000 200b0000200b0000 200b0000200b0000 200b0000200b0000 200b0000200b0000 200b0000200b0000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2fef5 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc90007f3f148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b6fe1f2 R15=ffffffff85a2fe90 RIP=ffffffff85a2ff1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000030 CR3=000000003da1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=000000000301003f Opmask03=0000000080000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 352d70392f696462 2f6c617574726976 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a46cedca0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9f33f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9f33f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464327e22abad44 6464327e22ab49d4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464327e22ab49dc 6464327e22ab49dc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a46cec2b0 0000561a46cee900 0000561a46aa7290 0000561a46cddf60 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a46cf0a40 0000561a46ce5df0 0000561a46ce1580 0000561a46cec6f0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a46cdbb10 0000561a46cece70 0000561a46ce5730 0000561a46ce4f40 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561a46cdca60 0000561a46cdd0c0 0000561a46aa53b0 0000561a46cfbea0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000561a46ce0570 0000000000000020 0000531a42410053 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00000005276a054c 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000