last executing test programs: 1m19.859419083s ago: executing program 0 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x6a0}]}) 1m19.708990116s ago: executing program 0 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f000000f000/0x4000)=nil) 1m19.530758951s ago: executing program 0 (id=18): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000011}) 1m19.384655474s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m19.34271374s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/profiling', 0x40, 0x8) 1m17.953111503s ago: executing program 0 (id=67): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b40), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x74, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x44850) 1m17.887632466s ago: executing program 32 (id=67): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b40), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x74, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x44850) 43.061142563s ago: executing program 4 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) 42.142732644s ago: executing program 4 (id=904): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 42.08266041s ago: executing program 4 (id=905): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7d7, 0x7f, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 42.082285282s ago: executing program 4 (id=907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 42.012290339s ago: executing program 4 (id=909): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 41.961014933s ago: executing program 4 (id=910): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0) 26.962393461s ago: executing program 33 (id=910): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0) 18.144891835s ago: executing program 3 (id=1375): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 18.06977589s ago: executing program 3 (id=1378): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(r0, &(0x7f0000000280)="6aa6bcf414c89222141ffd6e3e0fee102e9d9772441fc60ce66d7f1c697456e500d6483dc075eac161fd5e4b93f919bd659621ce33b0de8c9d7a9ce08facf651ff0e07e0097110aa0a993e5b4a0c75b2a3ce02d21a7aea6c05b69e7e948f00d7153d42ead4bdb3eb38c7755129f53424a0144d8a5f673849314c166c2fd393595e12e1fef9a3dba456c1a6b36c74f3d520de6a5841d259e0abfd2297735558b0eb001295f78d7dccc703b154b9cb3052e91713a5f0ca9127ed08eba9a24f4605b0c3be3cdc9bdc8430545b465052fc4cbf360ea070455d691af90ded22f98528ddd64bbd70ba7c103abba61dc95714fcedfcdad372288cf27409731a14c9baaefcfbaacffdc50b353b43b79de31f9db9ab378f464f63fbfb4f0cfa3f7b037077f3069f04501dceabd334ff7fa65bc3847e5fc29a2827f950040d91c5c90192e0b9304cf2740f20b6d84593fa50a5a63b06ef078f86f478e3fde6dc98b64138bdbbb0bb3c594c0518579d26f1e694e5f449a2bf2c3fd37fe1814e3b1de331f6866dc951a9b40b1ac58ab951d046a88e4e870024bc375ee1a9dee616504e12a2e4914960632a3db9b6897f7a10f763939ad309392a31aef396da1de95dbbaddb1eb30537a1cf201f48058421d010650ed8042a906293c477a18ae8c412038bf1880f932b25effe8c06a786ec1522211a8fb2962bd92943ee9d684752ed3e5e8e0023f8c40f7cd97a6071f73cc25fe534d41a05e4bbf2e3063567e6b910515bd436dfd856e8811943ca0fb52438acf20bb3af0cf5457b63444a6d580336ef462155758c722605d4d950bce91bbd0fbc872af07402691224c47ca15ee930e2061111e1c2e41c5718178d03fb551aa7a551665b5323005c2058ec86d7b990653d79e6cb91df80a12a95e0dee099cf16fcee5c1d8e97845a9298b740269ae17d3dfa8e5c8ee12d2e4808eb431d41605cc4c545b2941c7bdd15aabe6c28fe0f9ff73aa8d816f40ee8e49a2b5e506f1352efd27b32008f9709076a51951cf050a3a3bf6deae62889056e68cd62309b3086f66012677aec6cf849df3704ca1d5f6b7ad20590c42b2266a710b6a11a9c0cb96eb17718379eb4d90e0168695da1de11a6ebe598d941c056cf68368ac32d09634ea7946ded79c62ede825dc31ca34731321ae88afac966fff8747f051376cd8d04420f524f60e54e92c64d5930043086ca6a83269a44002e1d59ffbf59fbcc507fc0bc48710934805314679afe3ad01d181c456dfa57731d2acb2c2186565fec29c1f8468d2c08a89a7a9aed70a563d0a9dda88d6a810b937b4870fdd321ea862378007d641d6722a72c06d220b5f8a1958181f66ed176c7e32e015c9319e4a385ec844b974233e167c51c799a6d524449763f4483aa44a324ccf40ae7ec36f832f1466d0ea360e8e61847b47981ea4229daf25cc8de17a9b2ff68b77fda15c2fe15a60ec9ef5cd1593dead48b7757ba948c647d50d96ed5f95707ec8a2db143207ef00f283bd485ce71f21e4ed5309555d6b728981369c5bae52ae4af32c6684bc2cc7fb5d3f3aaee96ddc65801b42b1c046608165fdcbfc8f2374596f26316ba9e85880b5637e43553c1e5786a4c2724b69f959e598a4dc31d231dbe36e7c329cccc51633fd3d76175388424bc46a50e7f3784b8b332dc81eb3684092db51f58d4ce1d90d3932f58f7eacfe60303f1973459c36181757f3a342f02283a5d9ef3fcdcd4196e2d9620cfb4d915247f221d6bb7162b18e45e7747a4fc136a834e33a693cddb0805d63bdb0d1ba5c86a74f3c04ed54e3cd1a8f0d25c64f5d9deae086e8d867943bc2c53716c91b58e7a0cfda7edbc02d7d7416c859c3b439eca468c10be650de7e375404aec23dddbd154028d68d738b24143ee9bd423ba7e5b27f6683e3214040bb2a4f2e9f4020f9d413b505291aad83a9abaa438f76265bb22dd941d9ea6cb39ebc0315c94e6740409029f365ecacbad074c6cdd841382cd9acfb9238d0e658869cf21e140c0066819de1256c61ac93ecc4be07b4cfaf24a4ae81dd286e59d01c4a2ce4466883ab37f8adcfa69619002b18958b744cab35382b2547ccacc9501c893a1ce2e3df95876ba3969d72c8c8b58614cf03b2f7411a8e315b2444233c07ed8123514a1763b2c2cdc34fd4fe79c801facd8e03c8f4e8decf33eb3f3b55e78d4f7a57c1aee7b73308965fb57ef0b9f5a55cd00aa9a3200f882f285fe36b93e0788fe37a895e314bdcb544210518b07423455d41014d4044649fb777b989a275b364f4da4a4c18402e8c406112cadbeb10da969ce17d29c56e15f1c8007aa94d8a579c36fb91f4faf41116d7815a13242c71de7c297b82487f2af5f999e517b783f8b2b594317237187e1bba0772b424ef9069073876fb4dbab910c9a0e742d6329a7d44eaf1e664f4f25e8e6c25dcab7da14db58eb516e1d0f6505bf997437044a3e30ae17da783852e91b2457e3c5e5b7be8d6424bc8142878bcc160064edce9ad115f7761a1f281a9a6af7740f41690e963f4257969400faf9c4d1e216f5770a7bbfe43f81e6c146b7a035683599ad04f9cdb6778c6f6f0d5e7e6a85862c6e0f2ee22529bc506baf981d9de2943186ab8412a12ce417ba5199304b1528c6e34f4ffb9c7a88c7c5951e49b34c418bfab79a45278352c9f3906f3d49cd58012f1e9f5ef84924cf43449d62f45748161974e0bc613a00ab5f6ea61e555b8ae17d2eebfbc294ecbbb2f0cae712dae140164d6245aab56b0d8bafbaf6bfac2ad03438ed08a011c8aa052e3c3ce4d5a82ed29b21093909d2fbfb6cedccb41fad1dfb136ffa4f5df5530e546e2fd16ca0c0a3e1cf51b37cb2aa315bdff880acc1b2e7c7f87f94cd3e9b93994da69655cdb0ce49e6cc0741c1023cfaa17f08f838b210ae741e7af6d62170fb635b54d394a04d2f4e467237c1343a3e1183363730c93a7c3336c60fee47a8d9e48b0bf6dee7785e4a5e5736d2a0651df4da515e616d43bcc02689dc5910f3ef4fe817e8954873bc2f8c8aeb0874bb034911ff12c516829f33b533a2f68252598bc62d556cb356fc1e49f92a491d5136ca9c99ad964f9f18ab8852454ebd77b4b1b770e063cd16d302fc0f96983204ad684580ad023d76669a07ea6b3a6df64fb5cb226d6adbdddea2bc2072ad1f8b644abd438e6a80d34b5e91c25859813c0cd966e15552efe519fa319207817d46bdb308ce23e719ff2f0d2995ca9f233113168070abef10aced576c0603811a4625a5e8b40a8330d9751d357b25a8105161e3874165c2f08d2489cd0acb64f331d60022f4c80a99eb8b60fd5e4db0fa86245a36db19fd1680f80a975a829131ce33a5fb8b6fe3ac824a7342d47155faba0088eb4f619fcb7bd9fb037d20705a0aecb320cb2edd0d52ee7b14cb0cd1cabb72a47e7a34ab721a7c6cea2dc0126690b1d7f64cb381dbc385df4473b67ab5cdea53687f2edf1cfb232b4db5365c090f10e5fccc98a7461c65ce9f77975d5dc823f71b92c238fcf511acc28a3c342efd658dff997b6e9afa7c3c9a064442f16429c73e158ca584f5b408c0cbc204b8f0e32b2fc26c37d01ed114bdc57ec3346d11a5c5e2b063fe666274b7de00d82ad3eb09d62c9a7b24499af6f87dcead864883618abe5c3955cbfb7e573e4e20a37c3f2e97a7ef83be03fc1ed92aff1f73489f06d18f9589ae7bbadc137910f7e155651cdae29ccce4dd79789e65991d25ca1cd93c515920b2f669167b83957491f55c8091e48713af7af0f876f95442e1556e4807f460ce2a3ca135ed4b8d400c09ccf5dab6abfde6ef4db233fa1b07ba3f743ce3ec2a9bfa3a0ee3367a4556e0d3c1c4a5c6e19b22d8bc4ab5290e474ff85ff9fce461e01a024cf1598a800c18611135f62e57d8bb9c29c6df6581bf8787892cba54052fc59619c636c54f6194272ec560ecabdc449ca03d5a051a807b6da19a9b0f25394da321ce24535eb1c7e2d5562673e5edda64016a5f22196ece7a89b72c4397755902eb57166a2bee39eb9340a41928dd0da12a8c41af97d05db056a60fedf9de69d7fe2db1e1ac7d6531fba7d4f477af89de88e372de183428f56ce68c86d2ac79d235e57ea1e6b3644a70058d47d489f927139e92a02ca5c6f3d8e4c1f7a778a0d404be02425e4773b855913dd0fff9b9b69d9e933bfc87c7316303d1f4b3c17edff9e50db68c4cd6eee470c853d0d71d44ae50b7a8cf4011e15cad130665ac17fcd4bfc8d59a68523cac7fc42ac26e33097e60bd665c4ac88a058faf2bdacaf2370814f4a077e750395f7f796dd6e1f34a755d39ec40042e7e7b96458fcbc7d768c8edf2916124908c529d6734b66b55b372c145bcb1bc79ebd9f1e8e8abe2e2eb10c3f59b57476c34078850a8b23170d63f865d5aad1c5262b2d25530beacd2c1a9ea5804b450c041db85687b24c9fd3bebbbf32fa4e1eb76d6c18a85587515ec5340c172b6420814fe43122602f6f613c82e634d4f6cfce7abfac3ea802955f4a66adde0c1cf220621708bb17b657c9df3dde90261d19013be2720d35aae747393b017a432dedd2c4d3ee66ec0979ff857984aa7d3b117f2c721c1217382cd865b29d44d1c60366d61ed919b1a152708f44ab91c177bbec085b47424f9ecabd53f6cac4ba769539580e0455a29c1ba40ea3b0e0fa83126c475426ba408d01b012eacd77f4321d8f042205d262bee9f93b27d1701d8b11cef854e82c815d16ea2a5cb4bc5c8c91e8a20d02040c0677e0bb2f029765bdfcef560c2dd56d778c8899d754bacbc4143802813bf010c024972ff04ef728430bd61dc77958db5716d1e090f0f52e06bc3c1cdfd34707232da1656b263dae184bc91cc2b87aa9c5cf8e16bde998e3b895790275013ebc78eca7f81e81a75b01f8078ac315d858fe43d7acaa4bf957fc7028bba931c9782e38cfd57058f30d85bd34a12dac4b81b396ad5ddd639315a38fc87f7556895ab6daae125edca01f2e3540e5123e43913bbea2cc6f68c17648b341451c284731eb3a24873d2a7a8d36e9ab79852", 0xe00) 17.989617535s ago: executing program 3 (id=1384): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 17.072294053s ago: executing program 3 (id=1412): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17.071542344s ago: executing program 3 (id=1413): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 16.792664668s ago: executing program 3 (id=1416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1}) 16.75937279s ago: executing program 34 (id=1416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1}) 2.729501159s ago: executing program 6 (id=1785): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000001640)="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", 0x2000, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.686402431s ago: executing program 6 (id=1787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 2.551138289s ago: executing program 6 (id=1791): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x6f) r2 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, 0xfffffffffffffffb, 0x1) 2.487979154s ago: executing program 6 (id=1794): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000340)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 2.339995612s ago: executing program 2 (id=1808): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 2.061239706s ago: executing program 2 (id=1810): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2100) 1.982052658s ago: executing program 2 (id=1803): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0405"], 0x7) 1.446134652s ago: executing program 2 (id=1812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)="3151064b0fba36b1e70ab774f95c01b0d638c0109ccf4617e9184cecd115ef2ec04c0f7d072c32437177593e76825c81da23b2575e75908ecc4c8792fc45b71d89418147d5de94cf1b91223d37a113351b7c1e9bf3afa095f18ae2cbd83c5811d0311ef957feab01c1e41e4df77390c4a5250906659dd51699fe81bcfaa0ef2b66423c021384237377085977d1f042825820277cb014b5c601b91a8f3324e5acd4cb47a66b5fcca85f61630945626a71500a1898a5c110900b0b77ef4d2169bb84ef519d6cd6b109ee4dc8e997be62355511e9aabf5e7b74891bb282583f53d3315830178d32deec4e140ace0fdcd3a46fedbb9e5e06bd4f422b46d7938ab8fde962ca8bdad12bb73de8042fe489768724ba95dd1994a15ea3f3ccd53896166b5c0a4ccca1c44bb04df3e6e057cc700db3d0635fb7929aa8cc909adc32400f03dd6cc7ed1c55a1b8c09ca09de6f3e609dcb2782c50b2f349e6db60b529eb1b981a4594c33b4ccd7115cc09ff6003fa5940e5c75682b44665d1ed9476f7d406a5bfe64434bc0d97a3c60ff3fa44b38a9f7a89fe0572d646b35fd00eda4478f7dfa1d413872e90ceb3abb99da198536f3ddffb063ad72f0d35f62699aaf2563267f27ba4460536a1eb7e26b1ce081b846e67847f0de7439afbd98ccbbf82dbb956af5b4d52232df612d3d8574f2f3eff7f8c07294f4f8d67967d9ba75831be13bde81f35d0fd9b4fd4908b8354c4eb35e9f0ad71d300c535251ea088bdbf6c2651e303f52b326592897ad6b954e6db26e65f1abcc5dc3b2e0005d61f838ebf35811a0b1da1f79c27a062fd498c47bc27607636f8cff63970165c9f9a06832375175ae3fd87e78663db539d4f59122a9bf2d0db5630938163b68a62b8da144f31baa55062cf83b4f7b7dc2a2c0af85355e1c8713da2a94d9b63ef4ea2f040fcd114e0fcd0d4e306a66245820d467c58ad135bc0700637ce26bf3d8e8476ddf0643f6ffdf55d388231ce1a1473901e821bd78cfb8209e4db4c3ae900e2ac6ff747ebb1a38793910bb6110333049dafc55e1176d6d7fd67d9f3f7cbed688b7415ead34ad3ae95ae1b35c7f7e0a4edbb9c3063c801b7db920d2b5adf087ad1752ea7bad8424bdea9b1ce2473e789207c22a17c62ccaeb489aed91ba52d59119339ae573f8f324af7bb277c150fa42f606264a56ed6a97ca8b5ec69cba8d4dc1700ba11c240c2d3a021f1aeff60ce7f8ff9aa99d2f0c0161c88e506ce1f7388f02996f8fd1da7f8f5de32b1aa704210a7845ce58b09af1a611d5dc44877075f4b0857334d905f5af84b055c008feb88e32605adc659282186d74f8c3da537373198f1c858ef83ab53043f3b8c468de479d849a524365478127fe802bcae8b6b642527dabdd02f3e167c7e134addfb275ffa97c174afa9fa6ad8be16e2120e4915a7a400e68a5e058e368c9fb1698f00dee452cacf510d85c4bc502ced908b9644ed0322df6c48bd1133f8aa8191d782edfa9d0e3f584f322144ada8b13ea60cfb357951d7af1fd2e180c0adf4fc7c895092b93b5f69df81d75f51a417bc68d6ed741f4dc4a3a6a617f7897cf44ffc99c84de9abbe3313c299d647104f871d8eebb64a8e9dc71bf37caf115fdd87745963160ff612bae2833323df3788caf4d1d0dc0677f0a8aaa7b689bec0c191044f1b7368cd6a465f5594686162fc9b956eac593e5f90c4e10fa7eab3a32a8dff4a61cd8ac1a3ae20162db6bbca9d4421a133ab92eff58706d72c0937c52ce8b983bfba06f04cfb72d88cb2e06d61edcd3b24310e77be45838d00103a0498ef598aa1c3ba00c0569196d4b4f5ca2d35df6df04323c1c8c5ae4607f58a6a416021a9195fc58f1d61762c985e6ee1aa643d467a34e54eb2c6ece13dd856b1dcb5db56d15a46f027afad87acd5778c9b5c88f19e3a66040e0dfe8e9d0d264885bcaa23721dd8e74e7b7f38b3435268856f2172c86f07c2ed0911bc7468fabaf8d8a79ab08c32ad5b4b7ca5a155cbb78c36990793126e4f864405da3f5a9ff4472cf954333481744d9925535ca2f38a68966e1c50d6842b0d", 0x5c1}], 0x1}, 0x48010) 1.441550882s ago: executing program 2 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002080)={0x1c, r2, 0x139859040d0344b1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x4) 1.3594782s ago: executing program 2 (id=1815): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x8, 0x5, &(0x7f0000000040)={0x1c, "697f4279a9a73ef7b4f807259c4cd9db2f53aa5e86b6180bf91ccf31c200"}}) 1.144400514s ago: executing program 1 (id=1818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.099341968s ago: executing program 1 (id=1819): r0 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d4, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.053834701s ago: executing program 1 (id=1822): unshare(0x6a040000) socket(0xa, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x3a8e5b6e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) 941.456087ms ago: executing program 1 (id=1828): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 822.052609ms ago: executing program 5 (id=1829): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 798.156899ms ago: executing program 6 (id=1830): r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000008700)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}}}, 0xe) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) 722.203063ms ago: executing program 5 (id=1831): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 722.010415ms ago: executing program 6 (id=1832): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 721.706241ms ago: executing program 5 (id=1833): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000280)=""/74, 0x4a, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 80.721175ms ago: executing program 1 (id=1834): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xd}, 'port1\x00', 0x72, 0x21cfa, 0x0, 0x8000007, 0x3, 0x4, 0x12, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) dup3(r1, r0, 0x80000) 78.789518ms ago: executing program 5 (id=1842): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x3c, r0, 0x801, 0x70bd26, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cb1fb8c816b399ef33a2a78f9c"}]}]}, 0x3c}}, 0x40000) 523.912µs ago: executing program 1 (id=1835): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) 113.278µs ago: executing program 5 (id=1836): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba5704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1837): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) kernel console output (not intermixed with test programs): vsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.429558][ T1208] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.432391][ T1208] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.465980][ T6017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.470832][ T6017] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.475403][ T6017] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.480726][ T6017] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.484788][ T6017] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.490272][ T6017] usb 9-1: config 0 descriptor?? [ 64.493055][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 64.497559][ T6018] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 64.502331][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.516016][ T6018] pvrusb2: Hardware description: Terratec Grabster AV400 [ 64.518327][ T6018] pvrusb2: ********** [ 64.520001][ T6018] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 64.524830][ T6018] pvrusb2: Important functionality might not be entirely working. [ 64.528124][ T6018] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 64.532570][ T6018] pvrusb2: ********** [ 64.721353][ T2491] pvrusb2: Invalid write control endpoint [ 64.749521][ T2491] pvrusb2: Invalid write control endpoint [ 64.751475][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 64.755234][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 64.757906][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 64.761147][ T2491] pvrusb2: Device being rendered inoperable [ 64.764394][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 64.766726][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 64.771505][ T2491] pvrusb2: Attached sub-driver cx25840 [ 64.773549][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 64.776787][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 64.818144][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 64.905171][ T6017] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 64.921989][ T6017] usb 6-1: USB disconnect, device number 2 [ 65.102779][ T29] usb 9-1: USB disconnect, device number 3 [ 65.212961][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 65.364417][ T9] usb 8-1: config 0 has no interfaces? [ 65.367312][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 65.370999][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.373739][ T9] usb 8-1: SerialNumber: syz [ 65.376811][ T9] usb 8-1: config 0 descriptor?? [ 65.383708][ T5293] Bluetooth: hci2: command tx timeout [ 65.594917][ T9] usb 8-1: USB disconnect, device number 2 [ 65.661456][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 65.666828][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 65.791981][ T6683] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 65.829720][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 65.833770][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 66.149881][ T6700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.477493][ T6104] usb 7-1: USB disconnect, device number 3 [ 66.543365][ T6726] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 66.546806][ T6726] netlink: 'syz.2.285': attribute type 29 has an invalid length. [ 66.549986][ T6726] netlink: 148 bytes leftover after parsing attributes in process `syz.2.285'. [ 66.555952][ T6726] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 66.559243][ T6726] netlink: 23 bytes leftover after parsing attributes in process `syz.2.285'. [ 66.835594][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.838151][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.840762][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.843284][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.845732][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.848253][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.850932][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.853435][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.855914][ T6754] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 66.864738][ T6755] team0 (unregistering): Port device team_slave_0 removed [ 66.870138][ T6755] team0 (unregistering): Port device team_slave_1 removed [ 66.892959][ T6623] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.999438][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 67.002575][ T6762] chnl_net:caif_netlink_parms(): no params data found [ 67.042946][ T6623] usb 8-1: Using ep0 maxpacket: 8 [ 67.045783][ T6623] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 67.048434][ T6623] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.051561][ T6623] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.055803][ T6623] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.058886][ T6623] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.063012][ T6623] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.065881][ T6623] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.248587][ T6779] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 67.277997][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 67.278009][ T40] audit: type=1400 audit(1769255060.931:297): avc: denied { execute } for pid=6781 comm="syz.1.311" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.286004][ T6623] usb 8-1: usb_control_msg returned -32 [ 67.293475][ T6623] usbtmc 8-1:16.0: can't read capabilities [ 67.638701][ T6792] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 67.783906][ T6806] netlink: 236 bytes leftover after parsing attributes in process `syz.4.319'. [ 67.786794][ T6806] netlink: 236 bytes leftover after parsing attributes in process `syz.4.319'. [ 67.846671][ T40] audit: type=1400 audit(1769255061.501:298): avc: denied { allowed } for pid=6811 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.153036][ T6018] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 68.284049][ T40] audit: type=1400 audit(1769255061.941:299): avc: denied { create } for pid=6826 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.312967][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 68.317177][ T6018] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.321066][ T6018] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.325310][ T6018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 68.329643][ T6018] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 68.334562][ T6018] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 68.338107][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.348146][ T6018] hub 7-1:1.0: bad descriptor, ignoring hub [ 68.353543][ T6018] hub 7-1:1.0: probe with driver hub failed with error -5 [ 68.358678][ T6018] cdc_wdm 7-1:1.0: skipping garbage [ 68.360843][ T6018] cdc_wdm 7-1:1.0: skipping garbage [ 68.364368][ T6018] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 68.366849][ T6018] cdc_wdm 7-1:1.0: Unknown control protocol [ 68.663287][ T6017] usb 7-1: USB disconnect, device number 4 [ 69.058979][ T40] audit: type=1400 audit(1769255062.711:300): avc: denied { read } for pid=6851 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.175930][ T40] audit: type=1400 audit(1769255062.831:301): avc: denied { ioctl } for pid=6861 comm="syz.2.346" path="socket:[12260]" dev="sockfs" ino=12260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.183943][ T40] audit: type=1400 audit(1769255062.831:302): avc: denied { write } for pid=6861 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.256420][ T6868] netlink: 92 bytes leftover after parsing attributes in process `syz.2.349'. [ 69.655150][ T6623] usb 8-1: USB disconnect, device number 3 [ 69.715095][ T40] audit: type=1400 audit(1769255063.371:303): avc: denied { mount } for pid=6900 comm="syz.1.363" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.933546][ T6905] mmap: syz.2.364 (6905) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.204244][ T40] audit: type=1400 audit(1769255063.861:304): avc: denied { bind } for pid=6940 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.210723][ T40] audit: type=1400 audit(1769255063.861:305): avc: denied { listen } for pid=6940 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.217093][ T40] audit: type=1400 audit(1769255063.861:306): avc: denied { accept } for pid=6940 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.233509][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.242625][ T6948] misc userio: Invalid payload size [ 70.397653][ T6962] overlay: filesystem on ./bus is read-only [ 70.406657][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 70.410046][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.417425][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.420633][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.426782][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.430639][ T29] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.433498][ T29] usb 8-1: Manufacturer: syz [ 70.436375][ T29] usb 8-1: config 0 descriptor?? [ 70.441264][ T6966] netlink: 'syz.1.390': attribute type 21 has an invalid length. [ 70.819347][ T7011] __nla_validate_parse: 3 callbacks suppressed [ 70.819357][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 70.828487][ T7011] netlink: 'syz.2.409': attribute type 30 has an invalid length. [ 70.836319][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.839402][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.842153][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.848191][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.864248][ T29] hid_parser_main: 26 callbacks suppressed [ 70.864261][ T29] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 70.887866][ T29] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 70.889286][ T7019] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.919360][ T7019] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 70.924097][ T7019] overlayfs: failed to look up (tracing) for ino (-66) [ 71.027298][ T7031] net_ratelimit: 45 callbacks suppressed [ 71.027305][ T7031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.132699][ T6017] usb 8-1: USB disconnect, device number 4 [ 71.213417][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 71.241711][ T7048] bond1: Invalid ad_actor_system MAC address. [ 71.247757][ T7048] bond1: option ad_actor_system: invalid value (255) [ 71.252628][ T7048] bond1 (unregistering): Released all slaves [ 71.703029][ T6104] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 71.751023][ T7083] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 71.852953][ T6104] usb 9-1: Using ep0 maxpacket: 8 [ 71.860834][ T6104] usb 9-1: config 0 interface 0 has no altsetting 0 [ 71.862776][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 71.863555][ T6104] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 71.863571][ T6104] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.866001][ T6104] usb 9-1: config 0 descriptor?? [ 72.019793][ T7102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=7102 comm=syz.2.439 [ 72.050615][ T7106] netlink: 52 bytes leftover after parsing attributes in process `syz.1.442'. [ 72.253257][ T7130] mmap: syz.3.448 (7130): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 72.294261][ T6104] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 72.299683][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 72.299693][ T40] audit: type=1400 audit(1769255065.951:319): avc: denied { connect } for pid=7133 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.323580][ T40] audit: type=1400 audit(1769255065.951:320): avc: denied { getopt } for pid=7133 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.392635][ T7143] Illegal XDP return value 4232784264 on prog (id 36) dev N/A, expect packet loss! [ 72.499322][ T7060] i2c i2c-2: unsupported multi-msg i2c transaction [ 72.502260][ T6018] usb 9-1: USB disconnect, device number 4 [ 72.610003][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 72.616265][ T7162] netlink: 'syz.1.462': attribute type 7 has an invalid length. [ 72.619716][ T7162] netlink: 'syz.1.462': attribute type 8 has an invalid length. [ 72.623444][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 73.342053][ T40] audit: type=1400 audit(1769255066.991:321): avc: denied { read } for pid=7219 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.725041][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.499'. [ 73.728512][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.499'. [ 73.790876][ T40] audit: type=1400 audit(1769255067.441:322): avc: denied { create } for pid=7248 comm="syz.4.502" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.799001][ T40] audit: type=1400 audit(1769255067.441:323): avc: denied { write } for pid=7248 comm="syz.4.502" name="file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.806393][ T40] audit: type=1400 audit(1769255067.441:324): avc: denied { open } for pid=7248 comm="syz.4.502" path="/109/file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.813660][ T40] audit: type=1400 audit(1769255067.451:325): avc: denied { ioctl } for pid=7248 comm="syz.4.502" path="/109/file0" dev="tmpfs" ino=580 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.847210][ T40] audit: type=1400 audit(1769255067.501:326): avc: denied { unlink } for pid=6170 comm="syz-executor" name="file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.979960][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 74.003227][ T7265] hsr_slave_1 (unregistering): left promiscuous mode [ 74.162771][ T7277] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 74.162771][ T7277] The task syz.3.513 (7277) triggered the difference, watch for misbehavior. [ 74.170810][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 74.329539][ T40] audit: type=1400 audit(1769255067.981:327): avc: denied { unlink } for pid=7280 comm="syz.2.516" name="#7" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.524265][ T7286] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 74.670290][ T40] audit: type=1400 audit(1769255068.321:328): avc: denied { create } for pid=7291 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.168944][ T7327] netlink: ct family unspecified [ 75.202692][ T7331] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 75.441331][ T7350] input: syz1 as /devices/virtual/input/input8 [ 75.493109][ T6623] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.572978][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 75.645820][ T6623] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.651064][ T6623] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.654882][ T6623] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.657685][ T6623] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.662748][ T6623] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.666680][ T6623] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.669349][ T6623] usb 8-1: Product: syz [ 75.670793][ T6623] usb 8-1: Manufacturer: syz [ 75.678893][ T6623] cdc_wdm 8-1:1.0: skipping garbage [ 75.680632][ T6623] cdc_wdm 8-1:1.0: skipping garbage [ 75.684413][ T6623] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 75.686584][ T6623] cdc_wdm 8-1:1.0: Unknown control protocol [ 75.733324][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 75.736965][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 75.741618][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 75.752952][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.757069][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.762216][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.773290][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.981611][ T53] usb 7-1: usb_control_msg returned -32 [ 75.984240][ T53] usbtmc 7-1:16.0: can't read capabilities [ 76.015526][ T7377] __nla_validate_parse: 2 callbacks suppressed [ 76.015544][ T7377] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.558'. [ 76.122970][ T7385] capability: warning: `syz.4.562' uses deprecated v2 capabilities in a way that may be insecure [ 76.157929][ T7387] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.563'. [ 76.223639][ T7391] input: syz0 as /devices/virtual/input/input9 [ 76.243469][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.266829][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.270211][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.336177][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 76.339348][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 76.340381][ T6017] usb 8-1: USB disconnect, device number 5 [ 76.342290][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 76.346972][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 76.349113][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 76.393044][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 76.397037][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 76.399610][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.406111][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.409827][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.414305][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.418340][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.421513][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.424456][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 76.426112][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 76.429664][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 76.433447][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 76.437980][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.442529][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.446438][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.449700][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.453632][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.457334][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.461704][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 76.466186][ T29] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 76.468607][ T29] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 76.473107][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 76.477462][ T29] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.481767][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.485593][ T29] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.489341][ T29] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 76.493695][ T29] usb 6-1: config 168 interface 0 has no altsetting 0 [ 76.498391][ T29] usb 6-1: string descriptor 0 read error: -22 [ 76.500511][ T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 76.503290][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.510378][ T29] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 76.774136][ T29] usb 6-1: USB disconnect, device number 3 [ 76.894195][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 77.321704][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 77.321722][ T40] audit: type=1400 audit(1769255070.971:351): avc: denied { accept } for pid=7445 comm="syz.1.590" path="/164/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 77.593079][ T6623] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 77.742959][ T6623] usb 9-1: Using ep0 maxpacket: 8 [ 77.746891][ T6623] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.750654][ T6623] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.754755][ T6623] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.758320][ T6623] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.762774][ T6623] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.765625][ T6623] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.974375][ T6623] usb 9-1: GET_CAPABILITIES returned 0 [ 77.977039][ T6623] usbtmc 9-1:16.0: can't read capabilities [ 78.146075][ T40] audit: type=1400 audit(1769255071.801:352): avc: denied { mount } for pid=7456 comm="syz.1.594" name="/" dev="rpc_pipefs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 78.155634][ T40] audit: type=1400 audit(1769255071.801:353): avc: denied { watch watch_reads } for pid=7456 comm="syz.1.594" path="/165/file0" dev="rpc_pipefs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 78.165387][ T40] audit: type=1400 audit(1769255071.801:354): avc: denied { unmount } for pid=7456 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 78.178976][ T6623] usb 9-1: USB disconnect, device number 5 [ 78.344034][ T6627] usb 7-1: USB disconnect, device number 5 [ 78.359761][ T40] audit: type=1400 audit(1769255072.011:355): avc: denied { create } for pid=7464 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.370482][ T40] audit: type=1400 audit(1769255072.021:356): avc: denied { bind } for pid=7464 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.378584][ T40] audit: type=1400 audit(1769255072.021:357): avc: denied { write } for pid=7464 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.487414][ T7465] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 78.493091][ T7465] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 78.667830][ T40] audit: type=1400 audit(1769255072.321:358): avc: denied { block_suspend } for pid=7481 comm="syz.1.605" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.999631][ T40] audit: type=1400 audit(1769255072.651:359): avc: denied { mounton } for pid=7503 comm="syz.1.617" path="/178/file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.176219][ T40] audit: type=1400 audit(1769255072.831:360): avc: denied { lock } for pid=7517 comm="syz.4.622" path="socket:[16809]" dev="sockfs" ino=16809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.049170][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 80.308163][ T7578] input: syz0 as /devices/virtual/input/input10 [ 80.343040][ T55] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.492961][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 80.495969][ T55] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.498526][ T55] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.502240][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.506410][ T55] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.510472][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.514281][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.518567][ T55] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.523098][ T55] usb 7-1: config 168 interface 0 has no altsetting 0 [ 80.526075][ T55] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.528747][ T55] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.532348][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.536270][ T55] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.540461][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.545704][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.550270][ T55] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.555117][ T55] usb 7-1: config 168 interface 0 has no altsetting 0 [ 80.558048][ T55] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 80.560628][ T55] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.564429][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.569977][ T55] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.574836][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.579275][ T55] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.584494][ T55] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.587291][ T7590] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.655'. [ 80.589851][ T55] usb 7-1: config 168 interface 0 has no altsetting 0 [ 80.598367][ T55] usb 7-1: string descriptor 0 read error: -22 [ 80.600993][ T55] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.604898][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.621055][ T55] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 80.878851][ T7616] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.963277][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 81.079501][ T55] usb 7-1: USB disconnect, device number 6 [ 81.237265][ T6621] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 81.381059][ T7642] Invalid argument reading file caps for ./file0 [ 81.385818][ T6621] usb 8-1: config 0 has no interfaces? [ 81.390894][ T6621] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 81.402176][ T6621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.408586][ T6621] usb 8-1: Product: syz [ 81.409951][ T6621] usb 8-1: Manufacturer: syz [ 81.413118][ T6621] usb 8-1: SerialNumber: syz [ 81.416037][ T6621] usb 8-1: config 0 descriptor?? [ 81.823081][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.826763][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.832219][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.838952][ T6621] usb 8-1: USB disconnect, device number 6 [ 81.973109][ T6627] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 81.984340][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.987875][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.991046][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.994026][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.998651][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.001507][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.004188][ T29] usb 7-1: Product: syz [ 82.005522][ T29] usb 7-1: Manufacturer: syz [ 82.009952][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 82.011897][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 82.015543][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 82.017655][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 82.127962][ T6627] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 82.131744][ T6627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 82.135348][ T6627] usb 9-1: Product: syz [ 82.137085][ T6627] usb 9-1: Manufacturer: syz [ 82.139036][ T6627] usb 9-1: SerialNumber: syz [ 82.143411][ T6627] usb 9-1: config 0 descriptor?? [ 82.148436][ T6627] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 82.152054][ T6627] dvb-usb: bulk message failed: -22 (2/0) [ 82.159183][ T6627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.163840][ T6627] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 82.168517][ T6627] usb 9-1: media controller created [ 82.180329][ T6627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.349984][ T7683] cxusb: i2c wr: len=79 is too big! [ 82.349984][ T7683] [ 82.354980][ T6627] cxusb: set interface failed [ 82.357075][ T6627] dvb-usb: bulk message failed: -22 (1/0) [ 82.379518][ T6627] DVB: Unable to find symbol mt352_attach() [ 82.391061][ T6627] dvb-usb: bulk message failed: -22 (5/0) [ 82.393938][ T6627] zl10353_read_register: readreg error (reg=127, ret==-121) [ 82.397102][ T6627] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 82.443066][ T6627] rc_core: IR keymap rc-dvico-mce not found [ 82.445852][ T6627] Registered IR keymap rc-empty [ 82.450812][ T6627] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 82.457504][ T6627] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input11 [ 82.468272][ T6627] dvb-usb: schedule remote query interval to 100 msecs. [ 82.471138][ T6627] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 82.479312][ T6627] usb 9-1: USB disconnect, device number 6 [ 82.530408][ T6627] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 82.669648][ T53] usb 7-1: USB disconnect, device number 7 [ 83.268615][ T7706] input: syz1 as /devices/virtual/input/input12 [ 84.085830][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 84.089870][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 84.230903][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 84.230919][ T40] audit: type=1400 audit(1769255077.881:372): avc: denied { name_bind } for pid=7760 comm="syz.1.734" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.335339][ T40] audit: type=1400 audit(1769255077.991:373): avc: denied { create } for pid=7768 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.356812][ T40] audit: type=1400 audit(1769255077.991:374): avc: denied { write } for pid=7768 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.392992][ T40] audit: type=1400 audit(1769255078.031:375): avc: denied { read write } for pid=7774 comm="syz.4.740" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.402656][ T40] audit: type=1400 audit(1769255078.031:376): avc: denied { open } for pid=7774 comm="syz.4.740" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.544232][ T40] audit: type=1400 audit(1769255078.201:377): avc: denied { getopt } for pid=7785 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.871856][ T40] audit: type=1400 audit(1769255078.521:378): avc: denied { mount } for pid=7794 comm="syz.3.746" name="/" dev="autofs" ino=17884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.879279][ T40] audit: type=1400 audit(1769255078.521:379): avc: denied { read } for pid=7794 comm="syz.3.746" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.887142][ T40] audit: type=1400 audit(1769255078.521:380): avc: denied { open } for pid=7794 comm="syz.3.746" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.896175][ T40] audit: type=1400 audit(1769255078.531:381): avc: denied { ioctl } for pid=7794 comm="syz.3.746" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.966902][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 84.971376][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 85.253098][ T6623] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.413159][ T6623] usb 6-1: Using ep0 maxpacket: 8 [ 85.417672][ T6623] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.420609][ T6623] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.425185][ T6623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.431592][ T6623] usb 6-1: config 0 descriptor?? [ 85.580965][ T7832] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.621697][ T7834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 85.845973][ T6623] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 86.043781][ T29] usb 6-1: USB disconnect, device number 4 [ 86.507983][ T10] cfg80211: failed to load regulatory.db [ 86.612991][ T6104] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.772975][ T6104] usb 8-1: Using ep0 maxpacket: 8 [ 86.776196][ T6104] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.780578][ T6104] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.784420][ T6104] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.787953][ T6104] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.792107][ T6104] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.795199][ T6104] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.828016][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 86.833521][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 86.878206][ T7877] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.007180][ T6104] usb 8-1: usb_control_msg returned -32 [ 87.008992][ T6104] usbtmc 8-1:16.0: can't read capabilities [ 87.105966][ T7898] syzkaller1: entered promiscuous mode [ 87.107831][ T7898] syzkaller1: entered allmulticast mode [ 87.319226][ T7906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.798'. [ 87.326165][ T7906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.798'. [ 87.454455][ T7915] kAFS: unable to lookup cell '(,c¾ûL' [ 87.458086][ T7915] kAFS: unable to lookup cell '(,' [ 87.803072][ T6627] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.883022][ T6623] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.957091][ T6627] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 87.960011][ T6627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 87.962679][ T6627] usb 6-1: Product: syz [ 87.964465][ T6627] usb 6-1: Manufacturer: syz [ 87.965950][ T6627] usb 6-1: SerialNumber: syz [ 87.968776][ T6627] usb 6-1: config 0 descriptor?? [ 87.972760][ T6627] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 87.975284][ T6627] dvb-usb: bulk message failed: -22 (2/0) [ 87.979944][ T6627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.983245][ T6627] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 87.985818][ T6627] usb 6-1: media controller created [ 87.992256][ T6627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.034739][ T6623] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.037956][ T6623] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 88.040881][ T6623] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.045135][ T6623] usb 7-1: config 0 descriptor?? [ 88.104897][ T7943] binder: 7942:7943 ioctl c0306201 200000000540 returned -14 [ 88.175920][ T7923] cxusb: i2c wr: len=79 is too big! [ 88.175920][ T7923] [ 88.179092][ T6627] cxusb: set interface failed [ 88.180695][ T6627] dvb-usb: bulk message failed: -22 (1/0) [ 88.198425][ T6627] DVB: Unable to find symbol mt352_attach() [ 88.200428][ T6627] dvb-usb: bulk message failed: -22 (5/0) [ 88.202219][ T6627] zl10353_read_register: readreg error (reg=127, ret==-121) [ 88.204716][ T6627] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 88.252972][ T6627] rc_core: IR keymap rc-dvico-mce not found [ 88.254994][ T6627] Registered IR keymap rc-empty [ 88.257127][ T6627] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 88.261578][ T6627] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input14 [ 88.261788][ T6623] usbhid 7-1:0.0: can't add hid device: -71 [ 88.267433][ T6627] dvb-usb: schedule remote query interval to 100 msecs. [ 88.269631][ T6627] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 88.270445][ T6623] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 88.273479][ T6627] usb 6-1: USB disconnect, device number 5 [ 88.280828][ T6623] usb 7-1: USB disconnect, device number 8 [ 88.324603][ T6627] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 89.187410][ T7965] capability: warning: `syz.4.822' uses 32-bit capabilities (legacy support in use) [ 89.369702][ T7991] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.836'. [ 89.371518][ T10] usb 8-1: USB disconnect, device number 7 [ 89.536276][ T8008] binder: 8007:8008 ioctl c0306201 200000000540 returned -14 [ 89.579270][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 89.579281][ T40] audit: type=1400 audit(1769255083.231:391): avc: denied { name_bind } for pid=8011 comm="syz.1.843" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.675338][ T8018] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.847'. [ 89.733035][ T6104] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 89.761280][ T40] audit: type=1400 audit(1769255083.411:392): avc: denied { watch_sb } for pid=8026 comm="syz.4.853" path="/216" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.770696][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 89.892957][ T6104] usb 7-1: Using ep0 maxpacket: 8 [ 89.895982][ T6104] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 89.898591][ T6104] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.901624][ T6104] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.905081][ T6104] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.908105][ T6104] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.910984][ T8040] pim6reg1: entered promiscuous mode [ 89.912201][ T6104] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.914608][ T8040] pim6reg1: entered allmulticast mode [ 89.917658][ T6104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.013398][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 90.145905][ T6104] usb 7-1: GET_CAPABILITIES returned 0 [ 90.147716][ T6104] usbtmc 7-1:16.0: can't read capabilities [ 90.264442][ T40] audit: type=1400 audit(1769255083.921:393): avc: denied { remount } for pid=8056 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.282979][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.305471][ T40] audit: type=1400 audit(1769255083.961:394): avc: denied { setopt } for pid=8058 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.318177][ T40] audit: type=1400 audit(1769255083.971:395): avc: denied { connect } for pid=8058 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.335586][ T40] audit: type=1400 audit(1769255083.991:396): avc: denied { read } for pid=8060 comm="syz.4.868" path="socket:[19342]" dev="sockfs" ino=19342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.399129][ T8004] usbtmc 7-1:16.0: stb usb_control_msg returned -71 [ 90.400206][ T55] usb 7-1: USB disconnect, device number 9 [ 90.433437][ T40] audit: type=1326 audit(1769255084.091:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8069 comm="syz.4.872" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa50259acb9 code=0x0 [ 90.454965][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.459526][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.466089][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.471859][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.476755][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.484999][ T29] usb 6-1: config 0 descriptor?? [ 90.894403][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.896950][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.899386][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.901935][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.904322][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.906710][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.909104][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.911856][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.916666][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.919827][ T29] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.927418][ T29] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.144601][ T29] usb 6-1: USB disconnect, device number 6 [ 91.713921][ T8128] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.897'. [ 92.002993][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.154608][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.158692][ T29] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 92.162469][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.168828][ T29] usb 8-1: config 0 descriptor?? [ 92.382950][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 92.385808][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 92.391614][ T29] usb 8-1: USB disconnect, device number 8 [ 93.392997][ T6623] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 93.554195][ T6623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.557737][ T6623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.560875][ T6623] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.564938][ T6623] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.567828][ T6623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.572695][ T6623] usb 6-1: config 0 descriptor?? [ 93.984426][ T6623] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 93.996880][ T6623] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.054621][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 94.202984][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 94.206171][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 94.208701][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.212060][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.215709][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.218756][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.223222][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.226075][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.234559][ T10] usb 6-1: USB disconnect, device number 7 [ 94.372992][ T6010] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 94.436509][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 94.438275][ T29] usbtmc 8-1:16.0: can't read capabilities [ 94.533039][ T6010] usb 7-1: Using ep0 maxpacket: 16 [ 94.536298][ T6010] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.540032][ T6010] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.542438][ T6010] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 94.545587][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.550202][ T6010] usb 7-1: config 0 descriptor?? [ 94.693428][ T55] usb 8-1: USB disconnect, device number 9 [ 94.693461][ T8184] usbtmc 8-1:16.0: stb usb_control_msg returned -71 [ 94.820352][ T8198] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 94.823793][ T8198] netlink: 'syz.1.929': attribute type 2 has an invalid length. [ 95.019317][ T8202] Bluetooth: MGMT ver 1.23 [ 95.020985][ T8202] Bluetooth: hci1: expected 2178 bytes, got 2 bytes [ 95.181025][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 95.184029][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 95.189685][ T6010] usb 7-1: USB disconnect, device number 10 [ 95.357688][ T40] audit: type=1400 audit(1769255089.011:398): avc: denied { module_load } for pid=8215 comm="syz.1.938" path="/266/bus" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 95.357983][ T8216] Invalid ELF header magic: != ELF [ 95.464587][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 95.530588][ T8224] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 90 [ 95.739405][ T8228] PID 8228 killed due to inadequate hugepage pool [ 95.799465][ T8240] Invalid ELF header magic: != ELF [ 95.814041][ T40] audit: type=1400 audit(1769255089.471:399): avc: denied { create } for pid=8241 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.819916][ T40] audit: type=1400 audit(1769255089.471:400): avc: denied { ioctl } for pid=8241 comm="syz.1.949" path="socket:[22568]" dev="sockfs" ino=22568 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.898835][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 96.043060][ T29] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 96.173564][ T8267] netlink: 248 bytes leftover after parsing attributes in process `syz.3.962'. [ 96.204966][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.208063][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.212316][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.217367][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.221772][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.227848][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.230875][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.236296][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.241049][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.247922][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.254520][ T29] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 96.258333][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.262361][ T29] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.272985][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.276488][ T29] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 96.284839][ T29] usb 7-1: string descriptor 0 read error: -22 [ 96.286817][ T29] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.289571][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.303913][ T29] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 96.556830][ T6628] usb 7-1: USB disconnect, device number 11 [ 96.643005][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 96.794432][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.798772][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.802576][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.807778][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.811355][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.823649][ T29] usb 8-1: config 0 descriptor?? [ 97.106477][ T8290] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.234632][ T8294] netlink: 56 bytes leftover after parsing attributes in process `syz.2.974'. [ 97.240689][ T29] hid_parser_main: 5 callbacks suppressed [ 97.240707][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.250615][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.254988][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.257991][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.268610][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.271698][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.275785][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.279310][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.282430][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.286196][ T29] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 97.291513][ T40] audit: type=1400 audit(1769255090.941:401): avc: denied { create } for pid=8296 comm="syz.2.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.294307][ T29] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 97.301735][ T40] audit: type=1400 audit(1769255090.961:402): avc: denied { bind } for pid=8296 comm="syz.2.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.498764][ T6623] usb 8-1: USB disconnect, device number 10 [ 97.704277][ T40] audit: type=1400 audit(1769255091.361:403): avc: denied { read write } for pid=8312 comm="syz.1.981" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.716513][ T40] audit: type=1400 audit(1769255091.361:404): avc: denied { open } for pid=8312 comm="syz.1.981" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.750799][ T8315] netlink: 7 bytes leftover after parsing attributes in process `syz.1.982'. [ 97.943610][ T6623] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 98.093521][ T6623] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 98.097403][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.100995][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.107054][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.110641][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.114506][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.118833][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.122421][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.126557][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.130876][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.144043][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.147697][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.152734][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.157310][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.161239][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.165711][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.169324][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.173117][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.177400][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.181009][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.184947][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.189210][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.192770][ T6623] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.196878][ T6623] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.201784][ T6623] usb 7-1: config 0 interface 0 has no altsetting 0 [ 98.206334][ T6623] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 98.209906][ T6623] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 98.213483][ T6623] usb 7-1: Product: syz [ 98.215219][ T6623] usb 7-1: Manufacturer: syz [ 98.217109][ T6623] usb 7-1: SerialNumber: syz [ 98.234785][ T6623] usb 7-1: config 0 descriptor?? [ 98.252820][ T6623] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 98.310650][ T29] IPVS: starting estimator thread 0... [ 98.360465][ T8332] syzkaller1: entered promiscuous mode [ 98.362731][ T8332] syzkaller1: entered allmulticast mode [ 98.403034][ T8330] IPVS: using max 43 ests per chain, 103200 per kthread [ 98.445486][ T6623] usb 7-1: USB disconnect, device number 12 [ 98.452230][ T6623] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 98.627259][ T8338] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.698333][ T8342] netlink: 56 bytes leftover after parsing attributes in process `syz.3.994'. [ 98.777391][ T8356] syzkaller1: entered promiscuous mode [ 98.779178][ T8356] syzkaller1: entered allmulticast mode [ 99.212992][ T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 99.362962][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 99.366581][ T55] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 99.369876][ T55] usb 8-1: config 179 has no interface number 0 [ 99.372496][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 99.376678][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 99.380916][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.388359][ T55] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 99.394274][ T55] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 99.399352][ T55] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 99.404296][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.423162][ T8361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.563431][ T40] audit: type=1400 audit(1769255093.221:405): avc: denied { create } for pid=8376 comm="syz.1.1017" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.576612][ T40] audit: type=1400 audit(1769255093.231:406): avc: denied { read } for pid=8376 comm="syz.1.1017" name="file0" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.587886][ T40] audit: type=1400 audit(1769255093.231:407): avc: denied { open } for pid=8376 comm="syz.1.1017" path="/299/file0" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.660418][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input16 [ 99.755932][ T8385] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 99.860094][ T55] usb 8-1: USB disconnect, device number 11 [ 99.862754][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 99.862789][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.886186][ T8389] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1014'. [ 100.046338][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 100.194336][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.198057][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.201179][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.205213][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.207863][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.216806][ T29] usb 7-1: config 0 descriptor?? [ 100.638667][ T29] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 100.650747][ T29] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.751111][ T8420] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 100.851855][ T6623] IPVS: starting estimator thread 0... [ 100.906073][ T29] usb 7-1: USB disconnect, device number 13 [ 100.943014][ T8427] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.436498][ T8430] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1030'. [ 101.686781][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 101.686793][ T40] audit: type=1400 audit(1769255095.341:410): avc: denied { bind } for pid=8440 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.956177][ T8455] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1041'. [ 101.995599][ T40] audit: type=1400 audit(1769255095.651:411): avc: denied { mount } for pid=8456 comm="syz.1.1042" name="/" dev="hugetlbfs" ino=21185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.118997][ T8468] erspan0: entered promiscuous mode [ 102.413279][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 102.497062][ T40] audit: type=1400 audit(1769255096.151:412): avc: denied { mount } for pid=8483 comm="syz.3.1054" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.518681][ T40] audit: type=1400 audit(1769255096.171:413): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.594581][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 102.602036][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.606092][ T29] usb 7-1: config 179 has no interface number 0 [ 102.609370][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.622947][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.627586][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.631998][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 102.640204][ T8488] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1056'. [ 102.643704][ T29] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.649525][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.653483][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.660654][ T8474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.791462][ T8493] can0: slcan on pty22. [ 102.880351][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input18 [ 102.885152][ T8489] can0 (unregistered): slcan off pty22. [ 103.078344][ T29] usb 7-1: USB disconnect, device number 14 [ 103.080331][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.080353][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.401843][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 104.002779][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 104.415807][ T8575] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1095'. [ 104.419911][ T8575] 0ªX¹¦À: renamed from caif0 [ 104.427037][ T8575] 0ªX¹¦À: entered allmulticast mode [ 104.429325][ T8575] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 104.856647][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 104.893064][ T8591] team0: Port device team_slave_0 removed [ 105.041903][ T5293] Bluetooth: hci1: adv larger than maximum supported [ 105.041946][ T5293] Bluetooth: hci1: Malformed LE Event: 0x0d [ 105.072638][ T8594] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 105.399361][ T8626] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1112'. [ 105.402339][ T8626] 0ªX¹¦À: renamed from caif0 [ 105.413009][ T8626] 0ªX¹¦À: entered allmulticast mode [ 105.415060][ T8626] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 105.885126][ T40] audit: type=1400 audit(1769255099.541:414): avc: denied { mount } for pid=8673 comm="syz.3.1127" name="/" dev="ramfs" ino=21370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.918443][ T8665] block nbd1: shutting down sockets [ 106.402976][ T6017] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.565872][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 106.569831][ T6017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.572735][ T6017] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.577252][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.589100][ T6017] usb 6-1: config 0 descriptor?? [ 106.650523][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.658321][ T8692] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.666756][ T8692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.998950][ T6017] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 107.047465][ T8718] netlink: 'syz.3.1146': attribute type 29 has an invalid length. [ 107.057471][ T8718] netlink: 'syz.3.1146': attribute type 29 has an invalid length. [ 107.062217][ T8718] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1146'. [ 107.068539][ T8718] unsupported nla_type 58 [ 107.113942][ T8719] can0: slcan on pty24. [ 107.208659][ T6623] usb 6-1: USB disconnect, device number 8 [ 107.235097][ T8715] can0 (unregistered): slcan off pty24. [ 107.382208][ T40] audit: type=1400 audit(1769255101.031:415): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 107.597859][ T40] audit: type=1400 audit(1769255101.251:416): avc: denied { getattr } for pid=8752 comm="syz.3.1157" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 107.597869][ T8754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.625341][ T8756] binder: 8755:8756 ioctl c0306201 2000000001c0 returned -14 [ 107.746463][ T40] audit: type=1400 audit(1769255101.401:417): avc: denied { ioctl } for pid=8763 comm="syz.3.1162" path="socket:[22330]" dev="sockfs" ino=22330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.923232][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.927357][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.931879][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.937154][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.940872][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.112045][ T8776] chnl_net:caif_netlink_parms(): no params data found [ 108.177328][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.180497][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.183763][ T8776] bridge_slave_0: entered allmulticast mode [ 108.187733][ T8776] bridge_slave_0: entered promiscuous mode [ 108.193777][ T8776] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.196439][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.199593][ T8776] bridge_slave_1: entered allmulticast mode [ 108.203657][ T8776] bridge_slave_1: entered promiscuous mode [ 108.217954][ T8794] block nbd3: shutting down sockets [ 108.227193][ T8776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.233820][ T8776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.277575][ T8776] team0: Port device team_slave_0 added [ 108.307087][ T4922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.311082][ T4922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.324301][ T8776] team0: Port device team_slave_1 added [ 108.346658][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.349454][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.363528][ T8776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.369958][ T8776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.373205][ T8776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.385975][ T8776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.407655][ T4922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.411731][ T4922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.471094][ T8776] hsr_slave_0: entered promiscuous mode [ 108.474594][ T8776] hsr_slave_1: entered promiscuous mode [ 108.488734][ T4922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.492341][ T4922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.591970][ T4922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.597695][ T4922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.767111][ T4922] bridge_slave_1: left allmulticast mode [ 108.769536][ T4922] bridge_slave_1: left promiscuous mode [ 108.772009][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.796348][ T4922] bridge_slave_0: left allmulticast mode [ 108.798922][ T4922] bridge_slave_0: left promiscuous mode [ 108.803227][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.145911][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.151915][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.156985][ T4922] bond0 (unregistering): Released all slaves [ 109.195123][ T8776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.199741][ T8776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.204198][ T8776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.210952][ T8776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.301985][ T8776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.326536][ T8776] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.355233][ T8868] binder: 8867:8868 ioctl c0306201 2000000001c0 returned -14 [ 109.356292][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.361097][ T6353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.416327][ T40] audit: type=1400 audit(1769255103.071:418): avc: denied { write } for pid=8869 comm="syz.1.1198" name="/" dev="9p" ino=72876269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.429599][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.432582][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.462845][ T8776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.467846][ T8776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.648932][ T4922] hsr_slave_0: left promiscuous mode [ 109.664084][ T4922] hsr_slave_1: left promiscuous mode [ 109.667010][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.669731][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.685460][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.687884][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.712750][ T4922] veth1_macvtap: left promiscuous mode [ 109.716559][ T4922] veth0_macvtap: left promiscuous mode [ 109.719350][ T4922] veth1_vlan: left promiscuous mode [ 109.721604][ T4922] veth0_vlan: left promiscuous mode [ 110.024807][ T5293] Bluetooth: hci4: command tx timeout [ 110.221667][ T4922] team0 (unregistering): Port device team_slave_1 removed [ 110.277701][ T4922] team0 (unregistering): Port device team_slave_0 removed [ 110.589741][ T8907] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 110.604623][ T8776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.697453][ T40] audit: type=1400 audit(1769255104.351:419): avc: denied { create } for pid=8927 comm="syz.2.1218" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 110.796286][ T5677] hid_parser_main: 5 callbacks suppressed [ 110.796306][ T5677] hid-generic 0005:15C2:0C6E.000D: unknown main item tag 0x0 [ 110.807495][ T5677] hid-generic 0005:15C2:0C6E.000D: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 110.939609][ T8776] veth0_vlan: entered promiscuous mode [ 110.958915][ T8776] veth1_vlan: entered promiscuous mode [ 110.996048][ T8776] veth0_macvtap: entered promiscuous mode [ 111.003851][ T8776] veth1_macvtap: entered promiscuous mode [ 111.021738][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.034988][ T8776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.053538][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.057212][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.061406][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.065518][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.144506][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.148023][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.238640][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.241611][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.293638][ T40] audit: type=1400 audit(1769255104.951:420): avc: denied { mounton } for pid=8776 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 111.700984][ T40] audit: type=1400 audit(1769255105.351:421): avc: denied { setopt } for pid=9012 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.713037][ T40] audit: type=1400 audit(1769255105.361:422): avc: denied { bind } for pid=9012 comm="syz.5.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.999276][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'. [ 112.003231][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1252'. [ 112.074788][ T40] audit: type=1326 audit(1769255105.731:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9033 comm="syz.5.1255" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f146f99acb9 code=0x0 [ 112.114078][ T5293] Bluetooth: hci4: command tx timeout [ 112.641679][ T6104] hid-generic 0005:15C2:0C6E.000E: unknown main item tag 0x0 [ 112.646957][ T6104] hid-generic 0005:15C2:0C6E.000E: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 113.180926][ T9102] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1283'. [ 113.455985][ T9120] netlink: 'syz.1.1292': attribute type 29 has an invalid length. [ 113.460202][ T9120] netlink: 'syz.1.1292': attribute type 29 has an invalid length. [ 113.463994][ T9120] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1292'. [ 113.561272][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.838173][ T9167] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1313'. [ 113.953328][ T55] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 114.104206][ T55] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 114.107249][ T55] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.110542][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.120956][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.124513][ T55] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.130980][ T55] usb 6-1: Product: syz [ 114.132798][ T55] usb 6-1: Manufacturer: syz [ 114.135332][ T55] usb 6-1: SerialNumber: syz [ 114.138302][ T55] usb 6-1: config 0 descriptor?? [ 114.144241][ T55] hub 6-1:0.0: bad descriptor, ignoring hub [ 114.146328][ T55] hub 6-1:0.0: probe with driver hub failed with error -5 [ 114.152312][ T55] usb 6-1: selecting invalid altsetting 0 [ 114.183027][ T5293] Bluetooth: hci4: command tx timeout [ 114.483264][ T7855] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 114.652938][ T7855] usb 10-1: Using ep0 maxpacket: 8 [ 114.655847][ T7855] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.659015][ T7855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.662121][ T7855] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 114.672197][ T7855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 114.675497][ T7855] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.679598][ T7855] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.682476][ T7855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.904701][ T7855] usb 10-1: GET_CAPABILITIES returned 0 [ 114.906573][ T7855] usbtmc 10-1:16.0: can't read capabilities [ 115.034536][ T9152] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 115.105800][ T6104] usb 10-1: USB disconnect, device number 2 [ 115.615719][ T10] usb 6-1: USB disconnect, device number 9 [ 115.664878][ T40] audit: type=1400 audit(1769255110.324:424): avc: denied { shutdown } for pid=9233 comm="syz.2.1345" lport=129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.733951][ T40] audit: type=1400 audit(1769255110.384:425): avc: denied { write } for pid=9238 comm="syz.2.1340" name="memory.events" dev="9p" ino=72876347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.901971][ T40] audit: type=1400 audit(1769255110.554:426): avc: denied { bind } for pid=9252 comm="syz.2.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.911408][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 115.939767][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1350'. [ 116.021098][ T9266] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.1361'. [ 116.262984][ T5293] Bluetooth: hci4: command tx timeout [ 116.268511][ T9281] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.269850][ T40] audit: type=1400 audit(1769255110.924:427): avc: denied { create } for pid=9280 comm="syz.2.1359" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 116.313091][ T40] audit: type=1400 audit(1769255110.924:428): avc: denied { associate } for pid=9280 comm="syz.2.1359" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 116.351225][ T40] audit: type=1400 audit(1769255110.924:429): avc: denied { mounton } for pid=9280 comm="syz.2.1359" path="/335/file0" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 116.392736][ T40] audit: type=1400 audit(1769255110.924:430): avc: denied { add_name } for pid=9280 comm="syz.2.1359" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 116.434025][ T40] audit: type=1400 audit(1769255110.934:431): avc: denied { setattr } for pid=9280 comm="syz.2.1359" name="work" dev="tmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 116.466716][ T40] audit: type=1400 audit(1769255110.934:432): avc: denied { write open } for pid=9280 comm="syz.2.1359" path=2F202864656C6574656429 dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 116.502858][ T40] audit: type=1400 audit(1769255110.934:433): avc: denied { create } for pid=9280 comm="syz.2.1359" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 116.648053][ T9309] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1375'. [ 117.056939][ T9353] syzkaller1: entered promiscuous mode [ 117.059331][ T9353] syzkaller1: entered allmulticast mode [ 117.348632][ T9382] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 117.493027][ T6628] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.576215][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 117.644482][ T6628] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.648096][ T6628] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.651777][ T6628] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.655366][ T6628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.659871][ T9374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.664918][ T6628] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.712954][ T6104] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 117.751968][ T5932] bridge0: port 3(syz_tun) entered disabled state [ 117.759702][ T5932] syz_tun (unregistering): left allmulticast mode [ 117.761948][ T5932] syz_tun (unregistering): left promiscuous mode [ 117.764165][ T5932] bridge0: port 3(syz_tun) entered disabled state [ 117.865199][ T6104] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 117.867744][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.871190][ T6104] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.873073][ T7855] usb 6-1: USB disconnect, device number 10 [ 117.875178][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.881208][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.885758][ T6104] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 117.888160][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.891730][ T6104] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.895704][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.899330][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.903900][ T6104] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 117.906615][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.910164][ T6104] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.914602][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.918322][ T6104] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.925949][ T6104] usb 10-1: string descriptor 0 read error: -22 [ 117.928054][ T6104] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.930919][ T6104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.938005][ T6104] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 118.095868][ T65] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.100393][ T65] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.104142][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.107579][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.110553][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.216636][ T9406] chnl_net:caif_netlink_parms(): no params data found [ 118.309951][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.312640][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.315481][ T9406] bridge_slave_0: entered allmulticast mode [ 118.319368][ T9406] bridge_slave_0: entered promiscuous mode [ 118.330917][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.334418][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.337389][ T9406] bridge_slave_1: entered allmulticast mode [ 118.341059][ T9406] bridge_slave_1: entered promiscuous mode [ 118.374825][ T4922] bridge_slave_1: left allmulticast mode [ 118.378164][ T4922] bridge_slave_1: left promiscuous mode [ 118.380640][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.385644][ T4922] bridge_slave_0: left allmulticast mode [ 118.388070][ T4922] bridge_slave_0: left promiscuous mode [ 118.390553][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.647831][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.651866][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.655183][ T4922] bond0 (unregistering): Released all slaves [ 118.660883][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.666347][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.692782][ T9406] team0: Port device team_slave_0 added [ 118.703374][ T9406] team0: Port device team_slave_1 added [ 118.717660][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.719913][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.727981][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.737827][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.740432][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.750813][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.796083][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 118.813953][ T9406] hsr_slave_0: entered promiscuous mode [ 118.817212][ T9406] hsr_slave_1: entered promiscuous mode [ 118.820208][ T9406] debugfs: 'hsr0' already exists in 'hsr' [ 118.822641][ T9406] Cannot create hsr debugfs directory [ 118.972672][ T9406] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.977383][ T9406] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.993573][ T9406] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.003420][ T9406] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.052950][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.055525][ T9406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.057922][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.060230][ T9406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.071286][ T1208] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.085921][ T1208] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.120564][ T4922] hsr_slave_0: left promiscuous mode [ 119.123364][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.129467][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.428557][ T4922] team0 (unregistering): Port device team_slave_1 removed [ 119.721399][ T9406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.740889][ T9406] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.747613][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.749988][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.755379][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.757719][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.895394][ T9406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.978062][ T4922] IPVS: stop unused estimator thread 0... [ 120.050612][ T9406] veth0_vlan: entered promiscuous mode [ 120.058650][ T9406] veth1_vlan: entered promiscuous mode [ 120.078428][ T9406] veth0_macvtap: entered promiscuous mode [ 120.083707][ T9406] veth1_macvtap: entered promiscuous mode [ 120.094103][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.099907][ T9406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.107285][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.110149][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.124772][ T56] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.129878][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.167618][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.170486][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.183623][ T5293] Bluetooth: hci1: command tx timeout [ 120.203248][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.210645][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.265451][ T53] usb 10-1: USB disconnect, device number 3 [ 120.267184][ T9511] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1417'. [ 120.271096][ T9511] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1417'. [ 120.370538][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1444'. [ 120.374999][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1444'. [ 120.416731][ T9527] veth0_to_bridge: entered promiscuous mode [ 120.421366][ T9526] veth0_to_bridge: left promiscuous mode [ 120.536026][ T9539] input: syz1 as /devices/virtual/input/input19 [ 120.668224][ T9551] veth0_to_bridge: entered promiscuous mode [ 120.675304][ T9549] veth0_to_bridge: left promiscuous mode [ 121.213040][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 121.364504][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.369061][ T53] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.375179][ T53] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 121.379034][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.382428][ T53] usb 6-1: Product: syz [ 121.384432][ T53] usb 6-1: Manufacturer: syz [ 121.386421][ T53] usb 6-1: SerialNumber: syz [ 121.390512][ T53] usb 6-1: config 0 descriptor?? [ 121.606682][ T53] usb 6-1: USB disconnect, device number 11 [ 121.974430][ T9622] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1482'. [ 122.169974][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 122.169990][ T40] audit: type=1400 audit(1769255116.824:447): avc: denied { setopt } for pid=9634 comm="syz.2.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.183592][ T40] audit: type=1400 audit(1769255116.824:448): avc: denied { ioctl } for pid=9634 comm="syz.2.1488" path="socket:[30088]" dev="sockfs" ino=30088 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.263239][ T5293] Bluetooth: hci1: command tx timeout [ 122.324836][ T9646] input: syz1 as /devices/virtual/input/input20 [ 122.365983][ T9650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 122.369789][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1493'. [ 122.503440][ T6017] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 122.661188][ T9689] input: syz1 as /devices/virtual/input/input21 [ 122.663118][ T6017] usb 10-1: Using ep0 maxpacket: 8 [ 122.681531][ T6017] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 122.687940][ T6017] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.696907][ T6017] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.700115][ T6017] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.703509][ T6017] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.707641][ T6017] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.710751][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.857534][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1512'. [ 122.918857][ T6017] usb 10-1: usb_control_msg returned -32 [ 122.925378][ T6017] usbtmc 10-1:16.0: can't read capabilities [ 122.981006][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1514'. [ 123.285016][ T9731] usbtmc 10-1:16.0: control status returned 0 [ 123.295530][ T40] audit: type=1800 audit(1769255117.954:449): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1520" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 123.381193][ T9737] TCP: TCP_TX_DELAY enabled [ 123.488055][ T10] usb 10-1: USB disconnect, device number 4 [ 123.854748][ T9776] sock: sock_set_timeout: `syz.1.1535' (pid 9776) tries to set negative timeout [ 123.923851][ T6104] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 124.103053][ T6104] usb 7-1: Using ep0 maxpacket: 8 [ 124.116351][ T6104] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.119762][ T6104] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.122453][ T9796] netlink: 'syz.6.1542': attribute type 39 has an invalid length. [ 124.126336][ T6104] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.138607][ T6104] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.142943][ T6104] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.145871][ T6104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.353191][ T5293] Bluetooth: hci1: command tx timeout [ 124.359602][ T6104] usb 7-1: GET_CAPABILITIES returned 0 [ 124.376265][ T6104] usbtmc 7-1:16.0: can't read capabilities [ 124.563609][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.567625][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.571493][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.576364][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.579237][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.582518][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.586217][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.589693][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.592790][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.595737][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.598549][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.601541][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.608112][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.611842][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.615626][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.619395][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 124.634391][ T6104] usb 7-1: USB disconnect, device number 15 [ 124.649959][ T40] audit: type=1400 audit(1769255119.304:450): avc: denied { read } for pid=9822 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.719635][ T9827] bond1: option downdelay: invalid value (18446744073709551615) [ 124.723218][ T9827] bond1: option downdelay: allowed values 0 - 2147483647 [ 124.729839][ T9827] bond1 (unregistering): Released all slaves [ 125.707755][ T9907] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1590'. [ 125.847879][ T40] audit: type=1400 audit(1769255120.504:451): avc: denied { name_connect } for pid=9926 comm="syz.5.1597" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 125.863916][ T9929] netlink: 'syz.2.1599': attribute type 39 has an invalid length. [ 125.897817][ T9931] batadv0: entered allmulticast mode [ 126.088927][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1610'. [ 126.092828][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1610'. [ 126.099003][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1610'. [ 126.104397][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1610'. [ 126.142508][ T9954] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 126.158744][ T40] audit: type=1400 audit(1769255120.814:452): avc: denied { ioctl } for pid=9955 comm="syz.2.1612" path="socket:[32162]" dev="sockfs" ino=32162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.200884][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1614'. [ 126.302976][ T7855] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 126.423192][ T5293] Bluetooth: hci1: command tx timeout [ 126.453257][ T7855] usb 10-1: Using ep0 maxpacket: 8 [ 126.456704][ T7855] usb 10-1: config 0 interface 0 has no altsetting 0 [ 126.459488][ T7855] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.464695][ T7855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.473853][ T7855] usb 10-1: config 0 descriptor?? [ 126.476573][ T9982] bond1: option downdelay: invalid value (18446744073709551615) [ 126.479035][ T9982] bond1: option downdelay: allowed values 0 - 2147483647 [ 126.496811][ T9982] bond1 (unregistering): Released all slaves [ 126.519360][ T9985] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 126.893825][ T7855] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 127.082626][T10010] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1628'. [ 127.091972][ T55] usb 10-1: USB disconnect, device number 5 [ 127.589183][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 127.592185][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 127.595781][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'. [ 127.831974][T10056] input: syz1 as /devices/virtual/input/input24 [ 128.086092][T10084] input: syz1 as /devices/virtual/input/input25 [ 128.551369][T10126] No such timeout policy "syz1" [ 128.727216][ T40] audit: type=1400 audit(1769255123.384:453): avc: denied { accept } for pid=10154 comm="syz.6.1698" path="socket:[31574]" dev="sockfs" ino=31574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.729576][T10157] loop6: detected capacity change from 0 to 2640 [ 128.736002][ T40] audit: type=1400 audit(1769255123.384:454): avc: denied { append } for pid=10155 comm="syz.5.1699" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.742120][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.751151][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.757241][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.760635][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.764135][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.767567][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.771071][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.774965][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.778135][ T6727] ldm_validate_partition_table(): Disk read failed. [ 128.781177][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.786015][ T6727] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.788910][ T6727] Dev loop6: unable to read RDB block 0 [ 128.790817][ T6727] loop6: unable to read partition table [ 128.795510][T10157] ldm_validate_partition_table(): Disk read failed. [ 128.798291][T10157] Dev loop6: unable to read RDB block 0 [ 128.800810][T10157] loop6: unable to read partition table [ 128.803088][T10157] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 128.817696][ T5341] ldm_validate_partition_table(): Disk read failed. [ 128.820048][ T5341] Dev loop6: unable to read RDB block 0 [ 128.821985][ T5341] loop6: unable to read partition table [ 128.905864][T10176] GUP no longer grows the stack in syz.6.1709 (10176): 200000004000-20000000a000 (200000002000) [ 128.913066][T10176] CPU: 2 UID: 0 PID: 10176 Comm: syz.6.1709 Not tainted syzkaller #0 PREEMPT(full) [ 128.913083][T10176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.913089][T10176] Call Trace: [ 128.913093][T10176] [ 128.913098][T10176] dump_stack_lvl+0x100/0x190 [ 128.913116][T10176] gup_vma_lookup.cold+0x83/0x96 [ 128.913132][T10176] __get_user_pages+0x241/0x34d0 [ 128.913152][T10176] ? find_held_lock+0x2b/0x80 [ 128.913166][T10176] ? mtree_load+0x311/0xa40 [ 128.913178][T10176] ? __pfx___get_user_pages+0x10/0x10 [ 128.913197][T10176] get_user_pages_remote+0x3d2/0xb10 [ 128.913213][T10176] ? mas_new_root+0x660/0x6e0 [ 128.913225][T10176] ? __pfx_get_user_pages_remote+0x10/0x10 [ 128.913243][T10176] ? __access_remote_vm+0x84d/0xa70 [ 128.913262][T10176] __access_remote_vm+0x3ba/0xa70 [ 128.913279][T10176] ? do_raw_spin_lock+0x128/0x260 [ 128.913292][T10176] ? __pfx___access_remote_vm+0x10/0x10 [ 128.913307][T10176] ? alloc_pages_noprof+0x233/0x390 [ 128.913324][T10176] proc_pid_cmdline_read+0x4f2/0x8c0 [ 128.913341][T10176] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 128.913357][T10176] ? rw_verify_area+0xce/0x6d0 [ 128.913368][T10176] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 128.913382][T10176] vfs_readv+0x5d8/0x8d0 [ 128.913395][T10176] ? __pfx_vfs_readv+0x10/0x10 [ 128.913415][T10176] ? __fget_files+0x21f/0x3d0 [ 128.913431][T10176] ? do_preadv+0x1ac/0x270 [ 128.913441][T10176] do_preadv+0x1ac/0x270 [ 128.913452][T10176] ? __pfx_do_preadv+0x10/0x10 [ 128.913465][T10176] do_syscall_64+0xc9/0xf80 [ 128.913478][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.913489][T10176] RIP: 0033:0x7f7aef39acb9 [ 128.913498][T10176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.913508][T10176] RSP: 002b:00007f7af01fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 128.913519][T10176] RAX: ffffffffffffffda RBX: 00007f7aef615fa0 RCX: 00007f7aef39acb9 [ 128.913525][T10176] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.913532][T10176] RBP: 00007f7aef408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 128.913538][T10176] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 128.913544][T10176] R13: 00007f7aef616038 R14: 00007f7aef615fa0 R15: 00007fff0c577558 [ 128.913557][T10176] [ 128.973047][ T53] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 129.202954][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 129.206440][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.209934][ T53] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.212818][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.233660][ T53] usb 7-1: config 0 descriptor?? [ 129.446600][ T53] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 129.656139][ T53] usb 7-1: USB disconnect, device number 16 [ 130.373399][ T7855] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 130.440380][T10254] syzkaller1: entered promiscuous mode [ 130.442968][T10254] syzkaller1: entered allmulticast mode [ 130.524403][ T7855] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 130.528011][ T7855] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.532484][ T7855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.536088][ T7855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 130.539650][ T7855] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.545110][ T7855] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.548106][ T7855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.552618][ T7855] usb 10-1: config 0 descriptor?? [ 130.555005][T10239] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 130.825304][T10283] tipc: Started in network mode [ 130.828703][T10283] tipc: Node identity ac1414aa, cluster identity 4711 [ 130.831861][T10283] tipc: Enabled bearer , priority 10 [ 130.962023][ T7855] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 130.973019][ T7855] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 131.035213][ T40] audit: type=1400 audit(1769255125.694:455): avc: denied { getopt } for pid=10292 comm="syz.6.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.224868][ T6628] usb 10-1: USB disconnect, device number 6 [ 131.249915][T10314] tipc: Started in network mode [ 131.251513][T10314] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.255541][T10314] tipc: Enabled bearer , priority 10 [ 131.575572][T10327] __nla_validate_parse: 6 callbacks suppressed [ 131.575584][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1770'. [ 131.783052][ T55] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.845465][ T6628] tipc: Node number set to 2886997162 [ 131.932980][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 131.938075][ T55] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 131.940918][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.948594][ T55] usb 6-1: Product: syz [ 131.950401][ T55] usb 6-1: Manufacturer: syz [ 131.952126][ T55] usb 6-1: SerialNumber: syz [ 131.958444][ T55] usb 6-1: config 0 descriptor?? [ 131.973793][ T55] option 6-1:0.0: GSM modem (1-port) converter detected [ 131.998312][T10362] syzkaller1: entered promiscuous mode [ 132.000105][T10362] syzkaller1: entered allmulticast mode [ 132.005456][ T40] audit: type=1400 audit(1769255126.664:456): avc: denied { listen } for pid=10345 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.015164][ T40] audit: type=1400 audit(1769255126.674:457): avc: denied { accept } for pid=10345 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.065151][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1784'. [ 132.074669][T10370] erspan0: entered promiscuous mode [ 132.077761][T10370] erspan0: left promiscuous mode [ 132.170495][ T55] usb 6-1: USB disconnect, device number 12 [ 132.179739][ T55] option 6-1:0.0: device disconnected [ 132.245001][ T40] audit: type=1400 audit(1769255126.904:458): avc: denied { write } for pid=10387 comm="syz.6.1791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.383087][ T6628] tipc: Node number set to 2886997162 [ 132.396970][T10404] netlink: 83 bytes leftover after parsing attributes in process `syz.5.1799'. [ 132.543036][ T6628] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 132.693077][ T6628] usb 11-1: Using ep0 maxpacket: 8 [ 132.696001][ T6628] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 132.698577][ T6628] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.701701][ T6628] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.705174][ T6628] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.708194][ T6628] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.712450][ T6628] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.716357][ T6628] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.924977][ T6628] usb 11-1: usb_control_msg returned -32 [ 132.927734][ T6628] usbtmc 11-1:16.0: can't read capabilities [ 133.278271][T10429] usbtmc 11-1:16.0: control status returned 0 [ 133.479935][ T6621] usb 11-1: USB disconnect, device number 2 [ 133.633083][ T55] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 133.783035][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 133.786804][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 133.790426][ T55] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.796677][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.804644][ T55] usb 7-1: config 0 descriptor?? [ 134.218525][ T55] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 134.419165][ T6623] usb 7-1: USB disconnect, device number 17 [ 134.804229][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1837'. [ 134.809679][T10491] erspan0: entered promiscuous mode [ 134.812491][T10491] erspan0: left promiscuous mode [ 134.823099][ T5293] Bluetooth: hci0: command 0x2016 tx timeout [ 134.823178][ T65] ================================================================== [ 134.828500][ T65] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380 [ 134.832111][ T65] Write of size 4 at addr ffff88802b04c010 by task kworker/u33:0/65 [ 134.837368][ T65] [ 134.838429][ T65] CPU: 1 UID: 0 PID: 65 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 134.838450][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.838462][ T65] Workqueue: hci0 hci_cmd_sync_work [ 134.838488][ T65] Call Trace: [ 134.838494][ T65] [ 134.838500][ T65] dump_stack_lvl+0x100/0x190 [ 134.838523][ T65] print_report+0x156/0x4c9 [ 134.838543][ T65] ? __virt_addr_valid+0x81/0x620 [ 134.838559][ T65] ? __phys_addr+0xe8/0x180 [ 134.838574][ T65] ? le_read_features_complete+0x56/0x380 [ 134.838596][ T65] kasan_report+0xdf/0x1a0 [ 134.838619][ T65] ? le_read_features_complete+0x56/0x380 [ 134.838644][ T65] kasan_check_range+0x10f/0x1e0 [ 134.838669][ T65] le_read_features_complete+0x56/0x380 [ 134.838693][ T65] hci_cmd_sync_work+0x214/0x470 [ 134.838715][ T65] ? __pfx_le_read_features_complete+0x10/0x10 [ 134.838742][ T65] process_one_work+0x9c2/0x1840 [ 134.838768][ T65] ? __pfx_process_one_work+0x10/0x10 [ 134.838792][ T65] ? assign_work+0x19c/0x250 [ 134.838811][ T65] worker_thread+0x5da/0xe40 [ 134.838835][ T65] ? kthread+0x17d/0x730 [ 134.838851][ T65] ? __pfx_worker_thread+0x10/0x10 [ 134.838869][ T65] kthread+0x3b3/0x730 [ 134.838886][ T65] ? __pfx_kthread+0x10/0x10 [ 134.838902][ T65] ? ret_from_fork+0x79/0xaf0 [ 134.838920][ T65] ? ret_from_fork+0x79/0xaf0 [ 134.838939][ T65] ? rcu_is_watching+0x12/0xc0 [ 134.838961][ T65] ? __pfx_kthread+0x10/0x10 [ 134.838978][ T65] ret_from_fork+0x754/0xaf0 [ 134.838998][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 134.839019][ T65] ? __switch_to+0x7b9/0x10c0 [ 134.839042][ T65] ? __pfx_kthread+0x10/0x10 [ 134.839059][ T65] ret_from_fork_asm+0x1a/0x30 [ 134.839081][ T65] [ 134.839086][ T65] [ 134.906338][ T65] Allocated by task 5293: [ 134.907946][ T65] kasan_save_stack+0x30/0x50 [ 134.910487][ T65] kasan_save_track+0x14/0x30 [ 134.912504][ T65] __kasan_kmalloc+0xaa/0xb0 [ 134.914472][ T65] __hci_conn_add+0x1f4/0x1ca0 [ 134.916479][ T65] hci_conn_add_unset+0x76/0x120 [ 134.918476][ T65] le_conn_complete_evt+0x633/0x1f40 [ 134.920740][ T65] hci_le_conn_complete_evt+0x23c/0x3a0 [ 134.923092][ T65] hci_le_meta_evt+0x34a/0x5f0 [ 134.925064][ T65] hci_event_packet+0x682/0x11c0 [ 134.927145][ T65] hci_rx_work+0x451/0xfc0 [ 134.929006][ T65] process_one_work+0x9c2/0x1840 [ 134.930957][ T65] worker_thread+0x5da/0xe40 [ 134.932897][ T65] kthread+0x3b3/0x730 [ 134.934630][ T65] ret_from_fork+0x754/0xaf0 [ 134.936352][ T65] ret_from_fork_asm+0x1a/0x30 [ 134.938215][ T65] [ 134.939007][ T65] Freed by task 5293: [ 134.940480][ T65] kasan_save_stack+0x30/0x50 [ 134.942141][ T65] kasan_save_track+0x14/0x30 [ 134.943379][T10493] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1838'. [ 134.943764][ T65] kasan_save_free_info+0x3b/0x70 [ 134.948724][ T65] __kasan_slab_free+0x5f/0x80 [ 134.950822][ T65] kfree+0x1c7/0x690 [ 134.952139][ T65] device_release+0xa4/0x240 [ 134.953723][ T65] kobject_put+0x1f7/0x640 [ 134.955361][ T65] device_unregister+0x2f/0xe0 [ 134.957300][ T65] hci_conn_del_sysfs+0xb9/0x1a0 [ 134.959441][ T65] hci_conn_del+0x506/0x1180 [ 134.961490][ T65] hci_disconn_complete_evt+0x410/0xa20 [ 134.963873][ T65] hci_event_packet+0xa86/0x11c0 [ 134.965993][ T65] hci_rx_work+0x451/0xfc0 [ 134.967862][ T65] process_one_work+0x9c2/0x1840 [ 134.970012][ T65] worker_thread+0x5da/0xe40 [ 134.972013][ T65] kthread+0x3b3/0x730 [ 134.973785][ T65] ret_from_fork+0x754/0xaf0 [ 134.975774][ T65] ret_from_fork_asm+0x1a/0x30 [ 134.977723][ T65] [ 134.978815][ T65] The buggy address belongs to the object at ffff88802b04c000 [ 134.978815][ T65] which belongs to the cache kmalloc-8k of size 8192 [ 134.984653][ T65] The buggy address is located 16 bytes inside of [ 134.984653][ T65] freed 8192-byte region [ffff88802b04c000, ffff88802b04e000) [ 134.990302][ T65] [ 134.991334][ T65] The buggy address belongs to the physical page: [ 134.993618][ T65] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b048 [ 134.997058][ T65] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.000064][ T65] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 135.003279][ T65] page_type: f5(slab) [ 135.004950][ T65] raw: 00fff00000000040 ffff88801b843180 ffffea0000d4c600 0000000000000002 [ 135.008289][ T65] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 135.011132][ T65] head: 00fff00000000040 ffff88801b843180 ffffea0000d4c600 0000000000000002 [ 135.014538][ T65] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 135.018035][ T65] head: 00fff00000000003 ffffea0000ac1201 00000000ffffffff 00000000ffffffff [ 135.021630][ T65] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 135.025116][ T65] page dumped because: kasan: bad access detected [ 135.027325][ T65] page_owner tracks the page as allocated [ 135.029256][ T65] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10180, tgid 10179 (syz.1.1710), ts 128979234024, free_ts 128940435193 [ 135.036818][ T65] post_alloc_hook+0x1e1/0x250 [ 135.038723][ T65] get_page_from_freelist+0xe3d/0x2e10 [ 135.041011][ T65] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 135.043547][ T65] alloc_pages_mpol+0x1fb/0x550 [ 135.045460][ T65] new_slab+0x2c4/0x440 [ 135.046866][ T65] ___slab_alloc+0xda3/0x1ca0 [ 135.048722][ T65] __slab_alloc.isra.0+0x63/0x110 [ 135.050710][ T65] __kmalloc_noprof+0x618/0x9c0 [ 135.052725][ T65] ops_init+0x77/0x5f0 [ 135.054470][ T65] setup_net+0x118/0x3a0 [ 135.056227][ T65] copy_net_ns+0x46f/0x7c0 [ 135.057754][ T65] create_new_namespaces+0x3ea/0xab0 [ 135.059511][ T65] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 135.061440][ T65] ksys_unshare+0x455/0xab0 [ 135.062957][ T65] __x64_sys_unshare+0x31/0x40 [ 135.064551][ T65] do_syscall_64+0xc9/0xf80 [ 135.066131][ T65] page last free pid 8776 tgid 8776 stack trace: [ 135.068220][ T65] __free_frozen_pages+0x822/0x1130 [ 135.070021][ T65] __put_partials+0x127/0x160 [ 135.071569][ T65] qlist_free_all+0x47/0xe0 [ 135.073083][ T65] kasan_quarantine_reduce+0x1a0/0x1f0 [ 135.075036][ T65] __kasan_slab_alloc+0x69/0x90 [ 135.077055][ T65] kmem_cache_alloc_noprof+0x2ad/0x780 [ 135.079291][ T65] vm_area_dup+0x27/0x8e0 [ 135.081089][ T65] dup_mmap+0x6a4/0x1e20 [ 135.082873][ T65] copy_process+0x7451/0x7890 [ 135.084926][ T65] kernel_clone+0xfc/0x930 [ 135.086861][ T65] __do_sys_clone+0xd9/0x120 [ 135.088849][ T65] do_syscall_64+0xc9/0xf80 [ 135.090840][ T65] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.093388][ T65] [ 135.094496][ T65] Memory state around the buggy address: [ 135.096793][ T65] ffff88802b04bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.100203][ T65] ffff88802b04bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.103559][ T65] >ffff88802b04c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.106930][ T65] ^ [ 135.108879][ T65] ffff88802b04c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.112288][ T65] ffff88802b04c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.115699][ T65] ================================================================== [ 135.122946][ T65] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.125680][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u33:0 Not tainted syzkaller #0 PREEMPT(full) [ 135.128925][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.132012][ T65] Workqueue: hci0 hci_cmd_sync_work [ 135.133566][ T65] Call Trace: [ 135.134669][ T65] [ 135.135570][ T65] dump_stack_lvl+0x100/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.136982][ T65] vpanic+0x20d/0x630 [ 135.138894][ T65] panic+0xd1/0xd1 [ 135.140397][ T65] ? __pfx_panic+0x10/0x10 [ 135.142173][ T65] ? le_read_features_complete+0x56/0x380 [ 135.144352][ T65] ? preempt_schedule_common+0x42/0xc0 [ 135.146586][ T65] ? check_panic_on_warn+0x1f/0x90 [ 135.148269][ T65] check_panic_on_warn.cold+0x19/0x34 [ 135.150017][ T65] end_report.part.0+0x3a/0x90 [ 135.151560][ T65] kasan_report.cold+0xe/0x18 [ 135.153074][ T65] ? le_read_features_complete+0x56/0x380 [ 135.154927][ T65] kasan_check_range+0x10f/0x1e0 [ 135.156708][ T65] le_read_features_complete+0x56/0x380 [ 135.158660][ T65] hci_cmd_sync_work+0x214/0x470 [ 135.160626][ T65] ? __pfx_le_read_features_complete+0x10/0x10 [ 135.163148][ T65] process_one_work+0x9c2/0x1840 [ 135.165186][ T65] ? __pfx_process_one_work+0x10/0x10 [ 135.167345][ T65] ? assign_work+0x19c/0x250 [ 135.169321][ T65] worker_thread+0x5da/0xe40 [ 135.171382][ T65] ? kthread+0x17d/0x730 [ 135.173197][ T65] ? __pfx_worker_thread+0x10/0x10 [ 135.175320][ T65] kthread+0x3b3/0x730 [ 135.177065][ T65] ? __pfx_kthread+0x10/0x10 [ 135.179029][ T65] ? ret_from_fork+0x79/0xaf0 [ 135.180994][ T65] ? ret_from_fork+0x79/0xaf0 [ 135.183024][ T65] ? rcu_is_watching+0x12/0xc0 [ 135.185043][ T65] ? __pfx_kthread+0x10/0x10 [ 135.187186][ T65] ret_from_fork+0x754/0xaf0 [ 135.189025][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 135.191136][ T65] ? __switch_to+0x7b9/0x10c0 [ 135.193145][ T65] ? __pfx_kthread+0x10/0x10 [ 135.195151][ T65] ret_from_fork_asm+0x1a/0x30 [ 135.197108][ T65] [ 135.199189][ T65] Kernel Offset: disabled [ 135.200842][ T65] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:45:28 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802ca5caf0 RCX=ffffffff89cf9982 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffc900049972b0 RSP=ffffc900049970c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff8880255f2000 R13=ffff888037fc1801 R14=ffff88802ca5cb48 R15=0000000000000001 RIP=ffffffff8206f8f0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f00db1ca6c0 ffffffff 00c00000 GS =0000 ffff8880d65dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000017000 CR3=000000002a5f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81ac9a60 ffffffff81760693 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff817606af ffffffff81760693 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0c577a46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0c577a46 00007fff0c577a4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aef4086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aef408728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aef40869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aef40871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6517eb46793bf00 000000000f00379e 458d02002500e375 001be750f4650111 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6793bf0000000000 0f00379e458d0200 2500e375001be750 f4650111768ef5e3 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc90000d37540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000062 R14=0000000000000010 R15=ffffffff85699f40 RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000c000 CR3=000000002dea7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0488000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e24b75a600 000055e24b75a600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdeee0750 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74746120676e6973 7261702072657466 61207265766f7466 656c207365747962 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33203a65756c6176 207327726f747069 7263736564206563 61667265746e6920 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656874206d6f7266 20746e6572656666 6964202c73726f74 7069726373656420 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e696f70646e65 2032207361682030 20676e6974746573 746c612030206563 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61667265746e6920 3631206769666e6f 63203a312d313120 627375205d383236 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f63f1 RBX=ffff88801e29c980 RCX=ffffffff8b76b4b5 RDX=0000000000000000 RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000 R12=ffffed1003c53930 R13=0000000000000002 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3141aff8 CR3=000000002a5f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00db14d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88e64e76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe88e64e76 00007ffe88e64e7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00da4086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00da408728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00da40869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00da40871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 192022c373ea531f 0a479c86e55ad372 7f0c148ce6d0db2c ad88d7476637122d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e8bb2f12117151a 5e9597432e75a1dc ea1fcb43b3d1d5d1 54b10b770bcb020e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00da5e4498 00007f00da5e4468 00007f00da5e44a0 00007f00da5e4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000f5573 RBX=ffff88801e2c0000 RCX=ffffffff8b76b4b5 RDX=0000000000000000 RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000003 RSP=ffffc90000197df0 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000000 R12=ffffed1003c58000 R13=0000000000000003 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000200 CR3=000000004f6f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6e710a46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6e710a46 00007fff6e710a4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f146fa086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f146fa08728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f146fa0869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f146fa0871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000