last executing test programs: 7m4.942736757s ago: executing program 2 (id=2336): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) 7m2.662610736s ago: executing program 32 (id=2332): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f0000000300)="e21bb75e165794c63d1b8ec8dd78752d2469ef19ad538364a4d9f8ba51483be8eea1eb38ea2199e668c1075ccda9fe8a5223", 0xfffffcf7) 6m56.77637998s ago: executing program 2 (id=2340): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) 6m50.832138234s ago: executing program 2 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x140) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) 6m47.491539979s ago: executing program 33 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 6m44.730853177s ago: executing program 34 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c00028008001400006f"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 6m42.719743535s ago: executing program 2 (id=2344): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) 6m37.783704213s ago: executing program 2 (id=2345): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 6m34.007853245s ago: executing program 2 (id=2346): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) 6m14.383473503s ago: executing program 35 (id=2346): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) 2m3.149660822s ago: executing program 7 (id=7099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 2m3.050612738s ago: executing program 7 (id=7101): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2m3.039919442s ago: executing program 7 (id=7103): syz_io_uring_setup(0x499, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x0, 0x26d}, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m2.943869287s ago: executing program 7 (id=7106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m2.941694964s ago: executing program 7 (id=7108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 2m2.884497711s ago: executing program 7 (id=7111): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x13, @time={0x65757100, 0x4}, 0x0, {}, 0xfe}) 1m45.853765962s ago: executing program 36 (id=7111): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x13, @time={0x65757100, 0x4}, 0x0, {}, 0xfe}) 1m37.382181183s ago: executing program 4 (id=7623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, r1, 0x815, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) 1m37.301286957s ago: executing program 4 (id=7625): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0xffffffff80000000, 0x0, 0x121, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m37.289663915s ago: executing program 4 (id=7634): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_user(r0, 0x0, 0x0) 1m36.550612582s ago: executing program 8 (id=7664): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m36.500768707s ago: executing program 8 (id=7665): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) 1m36.44088469s ago: executing program 8 (id=7668): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0xbe1, 0x4000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 1m36.40101822s ago: executing program 8 (id=7673): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1m36.399168655s ago: executing program 8 (id=7675): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m36.330240838s ago: executing program 8 (id=7676): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.774125561s ago: executing program 4 (id=7770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m31.77366795s ago: executing program 4 (id=7771): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1m31.303654988s ago: executing program 4 (id=7774): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) 1m31.268771903s ago: executing program 37 (id=7774): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) 1m20.282780208s ago: executing program 38 (id=7676): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.945065408s ago: executing program 3 (id=8450): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) 1m9.844079565s ago: executing program 3 (id=8452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m9.843821814s ago: executing program 3 (id=8453): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x800000000, 0xeeef0000, 0x0, 0xffffffffffffffff, 0x6}) 1m9.661296663s ago: executing program 3 (id=8456): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="080107a40d0200007c0200000a0018001003000000000000000000007b1c741b84c3f7f5eb7eb3a1e9635a00000000000000", @ANYRES32], 0x38) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x4, @buffer={0x0, 0x1004, &(0x7f00000018c0)=""/4100}, &(0x7f0000000440)="1518a7a093f1", 0x0, 0x84, 0x0, 0x1, 0x0}) 1m9.660681324s ago: executing program 3 (id=8457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) 1m9.641774015s ago: executing program 3 (id=8458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 53.552524076s ago: executing program 39 (id=8458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 34.499414531s ago: executing program 0 (id=9918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 34.414465635s ago: executing program 0 (id=9922): r0 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x2, 0x8000000, r0, 0x0) 34.41430743s ago: executing program 0 (id=9924): syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r0, &(0x7f0000000580)=ANY=[], 0x5ce) 33.171337927s ago: executing program 0 (id=9932): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 33.108339374s ago: executing program 0 (id=9934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000406030000000000000000000000000005000100070000000900020073797a31"], 0x5c}}, 0x0) 32.80529948s ago: executing program 0 (id=9935): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 32.676742685s ago: executing program 40 (id=9935): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.518505487s ago: executing program 9 (id=11274): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) getdents(r0, &(0x7f0000000000)=""/26, 0x1a) 1.518257044s ago: executing program 9 (id=11275): syz_usb_connect$rtl8150(0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="04050400c8005ec620abd4ed899a9e3bca24b2dd315a5b1b2b0939277e16c1e46221a744bfdfa62e417b812343e42298abf3f71a5ade86051e15e5c09b546ee9e6015afd7777e9a09ba27aeb38c9e6ea0300000000000000837dfe38fc7efcf7e41ff9f1216bb6328916"], 0x7) mkdirat(0xffffffffffffffff, 0x0, 0x138) 897.065543ms ago: executing program 9 (id=11301): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) 844.411964ms ago: executing program 9 (id=11307): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6710000000462f82fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 727.862779ms ago: executing program 9 (id=11313): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r0, &(0x7f0000000080)={0x10000000}) 727.711725ms ago: executing program 9 (id=11315): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x2) 310.209578ms ago: executing program 5 (id=11341): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x80102) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 310.072808ms ago: executing program 5 (id=11342): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 234.82198ms ago: executing program 1 (id=11343): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2329000, 0x800}, 0x20) 234.529366ms ago: executing program 6 (id=11344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x36}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) 234.435922ms ago: executing program 1 (id=11345): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1) write$binfmt_misc(r0, &(0x7f0000000100), 0xfef0) 234.354799ms ago: executing program 5 (id=11346): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) 171.472344ms ago: executing program 1 (id=11347): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') 171.198117ms ago: executing program 5 (id=11348): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) 171.083416ms ago: executing program 1 (id=11349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffcd, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) 170.959552ms ago: executing program 6 (id=11350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="019b1d35eb76c40f13002f"], 0x34}}, 0x0) 107.235971ms ago: executing program 1 (id=11351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000788"], 0x0) 107.051742ms ago: executing program 5 (id=11352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 106.983033ms ago: executing program 6 (id=11353): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) close(0x3) 78.556239ms ago: executing program 6 (id=11354): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 599.925µs ago: executing program 6 (id=11355): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ee0b", 0x2}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @dev={0xac, 0x14, 0x14, 0x20}}}}], 0x20}, 0x80) 247.247µs ago: executing program 1 (id=11356): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 110.157µs ago: executing program 5 (id=11357): r0 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000140)="5da7bd09e6c7ec8b0000000000008612a72f0000", 0x14) 0s ago: executing program 6 (id=11358): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r0, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 0s ago: executing program 6 (id=11361): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)}) kernel console output (not intermixed with test programs): ng): Released all slaves [ 445.151263][ T1150] bond1 (unregistering): Released all slaves [ 445.159664][ T1150] bond2 (unregistering): Released all slaves [ 445.166326][ T5318] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 445.206417][ T39] usb 10-1: USB disconnect, device number 2 [ 445.225509][T25764] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 445.231999][T25764] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.243661][T25764] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 445.254931][T25764] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 445.351689][T25764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.374022][T25764] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.414206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.416577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.424011][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.426354][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.450779][T25764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.455623][T25764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.699521][T25764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.711015][ T6058] Bluetooth: hci1: command tx timeout [ 445.965652][T25764] veth0_vlan: entered promiscuous mode [ 445.974132][T25764] veth1_vlan: entered promiscuous mode [ 445.990406][T25764] veth0_macvtap: entered promiscuous mode [ 445.994314][T25764] veth1_macvtap: entered promiscuous mode [ 446.005399][T25764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.055393][T25764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.075573][ T1150] hsr_slave_0: left promiscuous mode [ 446.078270][ T1150] hsr_slave_1: left promiscuous mode [ 446.080966][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.083867][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.087545][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.090564][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.098453][ T1150] veth0_macvtap: left promiscuous mode [ 446.100717][ T1150] veth1_vlan: left promiscuous mode [ 446.173265][ T1150] vlan0 (unregistering): left allmulticast mode [ 446.175317][ T1150] veth0_vlan (unregistering): left allmulticast mode [ 446.213106][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 446.225985][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 446.351272][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.355311][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.360081][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.363037][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.408062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.411600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.429763][T10715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.432533][T10715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.697081][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7805'. [ 446.773260][ T1150] IPVS: stop unused estimator thread 0... [ 446.792175][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7810'. [ 446.936317][ T40] audit: type=1400 audit(422.336:634): avc: denied { getopt } for pid=26265 comm="syz.6.7818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 447.012984][T26281] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7822'. [ 447.051885][T26284] tmpfs: Bad value for 'mpol' [ 447.193553][T26305] hub 6-0:1.0: USB hub found [ 447.198607][T26305] hub 6-0:1.0: 1 port detected [ 447.267180][ T40] audit: type=1800 audit(422.645:635): pid=26318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.7834" name="file0" dev="tmpfs" ino=88 res=0 errno=0 [ 447.516130][T23998] udevd[23998]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 447.702102][T26444] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 447.702102][T26444] program syz.9.7856 not setting count and/or reply_len properly [ 447.795257][T26454] trusted_key: encrypted_key: key trusted:syz not found [ 447.935799][ T6058] Bluetooth: hci1: command tx timeout [ 448.336259][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7869'. [ 448.449385][ T7262] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 448.493422][ T40] audit: type=1400 audit(423.795:636): avc: denied { write } for pid=26516 comm="syz.5.7876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 448.578784][T26530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7881'. [ 448.581635][T26530] netem: invalid attributes len -22 [ 448.583315][T26530] netem: change failed [ 448.623118][ T7262] usb 14-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 448.626924][ T7262] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.629442][ T7262] usb 14-1: Product: syz [ 448.630846][ T7262] usb 14-1: Manufacturer: syz [ 448.636485][ T7262] usb 14-1: SerialNumber: syz [ 448.645641][ T7262] usb 14-1: config 0 descriptor?? [ 448.654746][ T7262] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 448.658816][ T40] audit: type=1400 audit(423.944:637): avc: denied { mount } for pid=26541 comm="syz.6.7885" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 448.665322][ T7262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.669384][ T7262] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 448.672392][ T7262] usb 14-1: media controller created [ 448.680319][ T40] audit: type=1400 audit(423.954:638): avc: denied { unmount } for pid=10831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 448.687507][ T7262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.727364][ T7262] DVB: Unable to find symbol mt352_attach() [ 448.753835][ T7262] DVB: Unable to find symbol nxt6000_attach() [ 448.755972][ T7262] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 448.762409][ T7262] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input26 [ 448.771896][ T7262] dvb-usb: schedule remote query interval to 1000 msecs. [ 448.774687][ T7262] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 448.777986][ T7262] dvb-usb: bulk message failed: -22 (7/0) [ 448.780555][ T7262] dvb-usb: bulk message failed: -22 (7/0) [ 448.866818][T26483] dvb-usb: bulk message failed: -22 (7/0) [ 448.869524][ T7262] usb 14-1: USB disconnect, device number 2 [ 448.879191][ T40] audit: type=1400 audit(424.141:639): avc: denied { map } for pid=26580 comm="syz.6.7896" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 448.886464][ T40] audit: type=1400 audit(424.141:640): avc: denied { execute } for pid=26580 comm="syz.6.7896" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 448.916754][T26589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7898'. [ 448.967075][ T7262] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 449.095122][T26618] sp0: Synchronizing with TNC [ 449.101077][T26617] [U] [ 449.278395][T26642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.442308][T26665] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 449.445138][T26665] SELinux: failed to load policy [ 449.451676][T26668] vivid-003: disconnect [ 449.456393][T26667] vivid-003: reconnect [ 449.501999][T26678] tmpfs: Cannot disable swap on remount [ 449.850984][T10726] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 450.014250][T10726] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 450.017185][T10726] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.019739][T10726] usb 11-1: Product: syz [ 450.021083][T10726] usb 11-1: Manufacturer: syz [ 450.022856][T10726] usb 11-1: SerialNumber: syz [ 450.025833][T10726] usb 11-1: config 0 descriptor?? [ 450.160879][ T6058] Bluetooth: hci1: command tx timeout [ 450.246912][T10726] usb 11-1: USB disconnect, device number 5 [ 450.412783][T26798] ucma_write: process 109 (syz.9.7951) changed security contexts after opening file descriptor, this is not allowed. [ 450.507091][T26807] bond1: option xmit_hash_policy: invalid value (6) [ 450.510240][T26807] bond1 (unregistering): Released all slaves [ 450.549682][T26873] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7954'. [ 450.552798][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7954'. [ 450.871289][T26902] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 450.876925][T26902] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 450.899130][ T40] audit: type=1400 audit(426.029:641): avc: denied { unlink } for pid=26903 comm="syz.6.7965" name="#1" dev="tmpfs" ino=7112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 450.914008][T26910] binder: 26907:26910 ioctl 40046205 0 returned -22 [ 450.916956][T26910] binder: 26907:26910 ioctl c0306201 200000002100 returned -11 [ 450.918890][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7966'. [ 451.027716][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.300280][T26960] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7985'. [ 451.305466][T10726] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 451.496184][T10726] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 451.499148][T10726] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 451.501708][T10726] usb 11-1: Product: syz [ 451.503107][T10726] usb 11-1: Manufacturer: syz [ 451.504601][T10726] usb 11-1: SerialNumber: syz [ 451.514008][T10726] usb 11-1: config 0 descriptor?? [ 451.521664][T10726] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 451.524336][T10726] dvb-usb: bulk message failed: -22 (2/0) [ 451.532294][T10726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.535685][T10726] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 451.538353][T10726] usb 11-1: media controller created [ 451.546707][T10726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.739703][T26928] cxusb: i2c rd: len=84 is too big! [ 451.739703][T26928] [ 451.745430][T10726] cxusb: set interface failed [ 451.746895][T10726] dvb-usb: bulk message failed: -22 (1/0) [ 451.779086][T10726] DVB: Unable to find symbol mt352_attach() [ 451.781077][T10726] dvb-usb: bulk message failed: -22 (5/0) [ 451.783181][T10726] zl10353_read_register: readreg error (reg=127, ret==-121) [ 451.785465][T10726] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 451.861837][T10726] rc_core: IR keymap rc-dvico-mce not found [ 451.863895][T10726] Registered IR keymap rc-empty [ 451.866613][T10726] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 451.874099][T10726] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input27 [ 451.885038][T10726] dvb-usb: schedule remote query interval to 100 msecs. [ 451.887249][T10726] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 451.894441][T10726] usb 11-1: USB disconnect, device number 6 [ 451.985607][T10726] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 452.374436][T27078] CIFS: Unable to determine destination address [ 452.387340][ T6058] Bluetooth: hci1: command tx timeout [ 452.494118][ T40] audit: type=1400 audit(427.534:642): avc: denied { map } for pid=27097 comm="syz.5.8021" path="socket:[71356]" dev="sockfs" ino=71356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 452.521414][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8023'. [ 452.543502][T27105] pim6reg: entered allmulticast mode [ 452.549529][T27105] pim6reg: left allmulticast mode [ 452.632258][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8027'. [ 452.635080][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8027'. [ 452.782107][T27143] tipc: Failed to obtain node identity [ 452.784150][T27143] tipc: Enabling of bearer rejected, failed to enable media [ 452.854390][T27155] netlink: 'syz.6.8043': attribute type 10 has an invalid length. [ 452.952951][T27172] F2FS-fs: Conflicting test_dummy_encryption options [ 453.299232][ T40] audit: type=1400 audit(428.282:643): avc: denied { write } for pid=27229 comm="syz.6.8071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 453.363494][T27240] xt_hashlimit: size too large, truncated to 1048576 [ 453.589840][T27269] pim6reg99999999: entered allmulticast mode [ 454.161665][T11184] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 454.282803][ T40] audit: type=1400 audit(429.198:644): avc: denied { set_context_mgr } for pid=27331 comm="syz.5.8110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 454.283796][T27332] binder: 27331:27332 ioctl c0306201 2000000005c0 returned -22 [ 454.323806][T11184] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.327549][T11184] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.331639][T11184] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 454.337556][T11184] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 454.341163][T11184] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.355706][T27304] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 454.368782][T11184] hub 11-1:1.0: bad descriptor, ignoring hub [ 454.370768][T11184] hub 11-1:1.0: probe with driver hub failed with error -5 [ 454.378521][T11184] cdc_wdm 11-1:1.0: skipping garbage [ 454.380646][T11184] cdc_wdm 11-1:1.0: skipping garbage [ 454.387827][T11184] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 454.390131][T11184] cdc_wdm 11-1:1.0: Unknown control protocol [ 454.491917][ T5285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.496857][ T5285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.499648][ T5285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.502589][ T5285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.511378][ T5285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.527585][T27370] autofs: Bad value for 'fd' [ 454.568664][T27380] __nla_validate_parse: 2 callbacks suppressed [ 454.568677][T27380] netlink: 596 bytes leftover after parsing attributes in process `syz.9.8124'. [ 454.659238][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 454.661493][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 454.663535][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 454.667318][T27363] chnl_net:caif_netlink_parms(): no params data found [ 454.741176][T27363] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.744401][T27363] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.746681][T27363] bridge_slave_0: entered allmulticast mode [ 454.749555][T27363] bridge_slave_0: entered promiscuous mode [ 454.753102][T27363] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.755347][T27363] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.757638][T27363] bridge_slave_1: entered allmulticast mode [ 454.760229][T27363] bridge_slave_1: entered promiscuous mode [ 454.776503][T27363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.780916][T27363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.805666][T27363] team0: Port device team_slave_0 added [ 454.809485][T27363] team0: Port device team_slave_1 added [ 454.823586][T27363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.826088][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.827513][ T39] usb 11-1: USB disconnect, device number 7 [ 454.834009][T27363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.834930][T27363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.844863][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.852855][T27363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.880557][T27363] hsr_slave_0: entered promiscuous mode [ 454.882845][T27363] hsr_slave_1: entered promiscuous mode [ 454.884908][T27363] debugfs: 'hsr0' already exists in 'hsr' [ 454.886813][T27363] Cannot create hsr debugfs directory [ 455.075172][T27636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 455.078209][T27636] overlayfs: missing 'lowerdir' [ 455.220358][T27662] netlink: 'syz.5.8144': attribute type 1 has an invalid length. [ 455.223240][T27662] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8144'. [ 455.226210][T27662] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8144'. [ 455.228987][T27662] netlink: 'syz.5.8144': attribute type 1 has an invalid length. [ 455.230175][ T1150] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.232177][T27662] netlink: 634 bytes leftover after parsing attributes in process `syz.5.8144'. [ 455.301750][ T1150] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.377308][ T1150] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.546834][ T1150] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.556060][T27749] bridge0: port 3(batadv0) entered disabled state [ 455.564327][T27749] bridge_slave_1: left allmulticast mode [ 455.566189][T27749] bridge_slave_1: left promiscuous mode [ 455.568066][T27749] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.584899][T27749] bridge_slave_0: left allmulticast mode [ 455.586837][T27749] bridge_slave_0: left promiscuous mode [ 455.588691][T27749] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.798099][T27793] netlink: 344 bytes leftover after parsing attributes in process `syz.9.8162'. [ 455.897269][ T6095] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 455.935845][ T1150] bridge_slave_1: left allmulticast mode [ 455.938193][ T1150] bridge_slave_1: left promiscuous mode [ 455.941070][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.944708][ T1150] bridge_slave_0: left allmulticast mode [ 455.946552][ T1150] bridge_slave_0: left promiscuous mode [ 455.949322][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.084677][ T6095] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 456.098113][ T6095] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.100912][ T6095] usb 11-1: Product: syz [ 456.102362][ T6095] usb 11-1: Manufacturer: syz [ 456.104175][ T6095] usb 11-1: SerialNumber: syz [ 456.122567][ T6095] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 456.136674][ T6132] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 456.307212][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.335364][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.409173][ T1150] bond0 (unregistering): Released all slaves [ 456.576540][T11184] usb 11-1: USB disconnect, device number 8 [ 456.752939][ T6058] Bluetooth: hci2: command tx timeout [ 457.296371][ T1150] hsr_slave_0: left promiscuous mode [ 457.300849][ T1150] hsr_slave_1: left promiscuous mode [ 457.302940][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.305390][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.316026][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.319589][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.327082][ T1150] veth1_macvtap: left promiscuous mode [ 457.330663][ T1150] veth0_macvtap: left promiscuous mode [ 457.332434][ T1150] veth1_vlan: left promiscuous mode [ 457.334088][ T1150] veth0_vlan: left promiscuous mode [ 457.435325][ T6132] usb 11-1: Service connection timeout for: 256 [ 457.437354][ T6132] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services [ 457.445982][ T6132] ath9k_htc: Failed to initialize the device [ 457.449240][T11184] usb 11-1: ath9k_htc: USB layer deinitialized [ 457.474658][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 457.481383][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 457.548993][T27912] rdma_op ffff888054cfd9f0 conn xmit_rdma 0000000000000000 [ 457.573457][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8177'. [ 457.576401][T27916] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8177'. [ 457.715742][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8182'. [ 457.919014][ T40] audit: type=1400 audit(432.601:645): avc: denied { connect } for pid=27965 comm="syz.6.8192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.928336][ T40] audit: type=1400 audit(432.601:646): avc: denied { write } for pid=27965 comm="syz.6.8192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.965114][T27969] syz.5.8193 (27969) used obsolete PPPIOCDETACH ioctl [ 457.983736][ T1150] IPVS: stop unused estimator thread 0... [ 458.062527][T27994] xt_hashlimit: size too large, truncated to 1048576 [ 458.164127][T28018] tipc: Started in network mode [ 458.166264][T28018] tipc: Node identity 84e, cluster identity 4711 [ 458.168370][T28018] tipc: Node number set to 2126 [ 458.174076][T27363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.182673][T27363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.205838][T27363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.228578][T27363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.291973][T27363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.307251][T27363] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.323020][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.325871][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.346456][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.348748][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.370369][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8210'. [ 458.420269][T28068] pimreg3: entered allmulticast mode [ 458.466740][T28081] sp0: Synchronizing with TNC [ 458.475439][T27363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.485650][T28079] [U] [ 458.498684][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.501221][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.502676][T27363] veth0_vlan: entered promiscuous mode [ 458.504024][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.508688][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.510876][T27363] veth1_vlan: entered promiscuous mode [ 458.511242][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.515418][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.517896][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.520437][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.522995][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.525393][ T39] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 458.531038][T27363] veth0_macvtap: entered promiscuous mode [ 458.534765][T27363] veth1_macvtap: entered promiscuous mode [ 458.542982][T27363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.549747][T27363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.555379][T10715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.556175][ T39] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 458.561527][T10715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.566348][T10715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.571827][T10715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.618428][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.618800][T28095] fido_id[28095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 458.625418][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.646691][T10715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.649952][T10715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.679751][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8220'. [ 458.976246][ T6058] Bluetooth: hci2: command tx timeout [ 458.996419][T28159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 459.180519][T28193] vxcan1: entered allmulticast mode [ 459.273900][T28210] netlink: 'syz.5.8244': attribute type 1 has an invalid length. [ 459.277810][T28210] netlink: 'syz.5.8244': attribute type 2 has an invalid length. [ 459.327669][ T40] audit: type=1400 audit(433.909:647): avc: denied { mounton } for pid=28218 comm="syz.9.8246" path="/170/file0" dev="hugetlbfs" ino=73341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 459.329183][T28219] overlayfs: maximum fs stacking depth exceeded [ 459.385716][T28226] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 459.390701][ T40] audit: type=1400 audit(433.975:648): avc: denied { relabelto } for pid=28225 comm="syz.5.8250" name="cpu.stat" dev="tmpfs" ino=7757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 459.404100][ T40] audit: type=1400 audit(433.975:649): avc: denied { associate } for pid=28225 comm="syz.5.8250" name="cpu.stat" dev="tmpfs" ino=7757 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 459.413046][ T40] audit: type=1400 audit(433.975:650): avc: denied { append } for pid=28225 comm="syz.5.8250" path="/1537/cpu.stat" dev="tmpfs" ino=7757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 459.429177][ T40] audit: type=1400 audit(434.012:651): avc: denied { unlink } for pid=10828 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=7757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 459.500265][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.630483][T28275] ptrace attach of "/syz-executor exec"[27363] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 459.659814][T28282] delete_channel: no stack [ 459.738190][ T40] audit: type=1400 audit(434.302:652): avc: denied { listen } for pid=28296 comm="syz.6.8275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.987974][T28347] sock: sock_set_timeout: `syz.9.8297' (pid 28347) tries to set negative timeout [ 460.114188][T28415] ip6gretap0: entered promiscuous mode [ 460.209501][T28431] netlink: 'syz.9.8298': attribute type 11 has an invalid length. [ 460.226815][T28435] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 460.352024][T28451] random: crng reseeded on system resumption [ 460.359774][T28451] Restarting kernel threads ... [ 460.362852][T28451] Done restarting kernel threads. [ 460.395794][T28456] trusted_key: encrypted_key: key trusted:syz not found [ 460.576909][T28479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.896029][T28518] __nla_validate_parse: 4 callbacks suppressed [ 460.896045][T28518] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8324'. [ 461.200671][ T6058] Bluetooth: hci2: command tx timeout [ 461.396291][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8337'. [ 461.398982][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8337'. [ 461.401697][T28551] netlink: 'syz.6.8337': attribute type 12 has an invalid length. [ 461.434962][T28558] SELinux: syz.6.8339 (28558) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 461.689262][T28561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8343'. [ 461.699051][T28563] veth1_macvtap: left promiscuous mode [ 461.701294][T28563] macsec0: entered promiscuous mode [ 461.703170][T28563] macsec0: entered allmulticast mode [ 461.710600][T28563] veth1_macvtap: entered promiscuous mode [ 461.712856][T28563] veth1_macvtap: entered allmulticast mode [ 461.715680][T28563] macsec0: left promiscuous mode [ 461.717740][T28563] macsec0: left allmulticast mode [ 461.719698][T28563] veth1_macvtap: left allmulticast mode [ 462.472755][T28655] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8375'. [ 462.812398][ T40] audit: type=1401 audit(437.172:653): op=fscreate invalid_context=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 463.374807][T28765] netlink: 'syz.5.8409': attribute type 11 has an invalid length. [ 463.416886][T28765] netlink: 199788 bytes leftover after parsing attributes in process `syz.5.8409'. [ 463.427798][ T6058] Bluetooth: hci2: command tx timeout [ 463.621705][T28774] syz.3.8412 (28774): drop_caches: 1 [ 463.640909][T28774] syz.3.8412 (28774): drop_caches: 1 [ 464.196018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.509015][T28835] 9p: p9: multiple sources not supported [ 464.799365][ C2] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 464.803461][ C2] sr 2:0:0:0: [sr0] tag#2 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 465.004587][T28904] sp0: Synchronizing with TNC [ 465.030617][T28913] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 465.030617][T28913] program syz.3.8456 not setting count and/or reply_len properly [ 465.352916][T28946] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 465.706515][T28968] program syz.9.8474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.857048][T28992] program syz.9.8485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.026244][T29015] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8492'. [ 466.029157][T29015] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8492'. [ 466.157088][T29032] xt_hashlimit: size too large, truncated to 1048576 [ 467.831744][T29122] mkiss: ax0: crc mode is auto. [ 467.840128][T29131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8527'. [ 467.843073][T29131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8527'. [ 467.876960][ T5285] Bluetooth: hci4: command 0x0406 tx timeout [ 468.636813][ T40] audit: type=1326 audit(442.622:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29217 comm="syz.9.8560" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cc7d9bf79 code=0x0 [ 470.744596][T29298] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 470.747751][T29298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.772483][T29302] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8581'. [ 470.811341][T29307] loop6: detected capacity change from 0 to 524288000 [ 471.131018][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.133057][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.451803][T29400] netlink: 'syz.5.8610': attribute type 6 has an invalid length. [ 471.455489][T29400] netlink: 'syz.5.8610': attribute type 6 has an invalid length. [ 472.134692][T29480] mkiss: ax0: crc mode is auto. [ 472.166871][T29489] program syz.9.8638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.207087][T29492] sp0: Synchronizing with TNC [ 472.218623][T29491] [U] [ 472.562447][ T40] audit: type=1326 audit(446.286:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29437 comm="syz.5.8624" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aec59bf79 code=0x7fc00000 [ 472.659033][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8659'. [ 472.690408][T29571] xt_l2tp: v2 tid > 0xffff: 2031748 [ 472.799385][ T40] audit: type=1800 audit(446.510:656): pid=29590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.8668" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 472.868349][ T10] IPVS: starting estimator thread 0... [ 472.874526][T29605] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 472.976459][T29603] IPVS: using max 48 ests per chain, 115200 per kthread [ 473.140359][T29640] Dead loop on virtual device ip6_vti0, fix it urgently! [ 473.182155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.245057][T29658] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 473.248015][T29658] SELinux: failed to load policy [ 473.331588][ T6132] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 473.498285][ T6132] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 473.501135][ T6132] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.503924][ T6132] usb 10-1: Product: syz [ 473.505285][ T6132] usb 10-1: Manufacturer: syz [ 473.507215][ T6132] usb 10-1: SerialNumber: syz [ 473.510105][ T6132] usb 10-1: config 0 descriptor?? [ 473.514350][ T6132] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 473.523487][ T6132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.535451][ T6132] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 473.538376][ T6132] usb 10-1: media controller created [ 473.544645][ T6132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.588300][ T6132] DVB: Unable to find symbol mt352_attach() [ 473.606371][ T6132] DVB: Unable to find symbol nxt6000_attach() [ 473.608476][ T6132] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 473.617049][ T6132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input28 [ 473.623669][ T6132] dvb-usb: schedule remote query interval to 1000 msecs. [ 473.625893][ T6132] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 473.628997][ T6132] dvb-usb: bulk message failed: -22 (7/0) [ 473.630839][ T6132] dvb-usb: bulk message failed: -22 (7/0) [ 473.731524][T29633] dvb-usb: bulk message failed: -22 (7/0) [ 473.733996][ T6132] usb 10-1: USB disconnect, device number 3 [ 473.837634][ T6132] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 473.878185][ T6108] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 474.042310][ T6108] usb 14-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 474.045236][ T6108] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 474.047607][ T6108] usb 14-1: Product: syz [ 474.049419][ T6108] usb 14-1: Manufacturer: syz [ 474.050787][ T6108] usb 14-1: SerialNumber: syz [ 474.054260][ T6108] usb 14-1: config 0 descriptor?? [ 474.058718][ T6108] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 474.061280][ T6108] dvb-usb: bulk message failed: -22 (2/0) [ 474.065282][ T6108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 474.068535][ T6108] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 474.071130][ T6108] usb 14-1: media controller created [ 474.077602][ T6108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.294056][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8706'. [ 474.313930][T29703] cxusb: i2c rd: len=84 is too big! [ 474.313930][T29703] [ 474.320155][ T6108] cxusb: set interface failed [ 474.325116][ T6108] dvb-usb: bulk message failed: -22 (1/0) [ 474.349946][ T6108] DVB: Unable to find symbol mt352_attach() [ 474.352135][ T6108] dvb-usb: bulk message failed: -22 (5/0) [ 474.353954][ T6108] zl10353_read_register: readreg error (reg=127, ret==-121) [ 474.356313][ T6108] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 474.402588][ T6108] rc_core: IR keymap rc-dvico-mce not found [ 474.404509][ T6108] Registered IR keymap rc-empty [ 474.406626][ T6108] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 474.410469][ T6108] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input29 [ 474.417946][ T6108] dvb-usb: schedule remote query interval to 100 msecs. [ 474.420172][ T6108] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 474.425416][ T6108] usb 14-1: USB disconnect, device number 3 [ 474.431641][T29761] tmpfs: Cannot disable swap on remount [ 474.501373][ T6108] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 474.576189][T29788] pim6reg: entered allmulticast mode [ 474.581846][T29788] pim6reg: left allmulticast mode [ 474.870737][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8725'. [ 474.955289][T29825] netlink: 'syz.5.8737': attribute type 10 has an invalid length. [ 475.271379][T29881] vivid-000: disconnect [ 475.274040][T29880] vivid-000: reconnect [ 475.337382][T29890] tipc: Failed to obtain node identity [ 475.339175][T29890] tipc: Enabling of bearer rejected, failed to enable media [ 475.498097][T29920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.561983][T29930] bond4: option xmit_hash_policy: invalid value (6) [ 475.566156][T29930] bond4 (unregistering): Released all slaves [ 475.590242][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8768'. [ 475.594076][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8768'. [ 475.920613][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.941780][T27917] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 476.117730][T27917] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 476.120655][T27917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.123247][T27917] usb 10-1: Product: syz [ 476.124711][T27917] usb 10-1: Manufacturer: syz [ 476.126230][T27917] usb 10-1: SerialNumber: syz [ 476.129061][T27917] usb 10-1: config 0 descriptor?? [ 476.350532][ T10] usb 10-1: USB disconnect, device number 4 [ 476.553296][T30050] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 476.708476][T30063] binder: 30061:30063 ioctl 40046205 0 returned -22 [ 476.719395][T30063] binder: 30061:30063 ioctl c0306201 200000002100 returned -11 [ 476.739866][T30068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8792'. [ 476.877228][T30083] tmpfs: Bad value for 'mpol' [ 477.323975][T30118] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8805'. [ 477.327603][T30118] netem: invalid attributes len -22 [ 477.329703][T30118] netem: change failed [ 477.488350][T30126] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8809'. [ 477.578526][T30133] sp0: Synchronizing with TNC [ 477.583405][T30132] [U] [ 478.488953][T30238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8845'. [ 478.518238][T30247] CIFS: Unable to determine destination address [ 478.760362][T30279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8861'. [ 478.763253][T30279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8861'. [ 478.973756][T30306] F2FS-fs: Conflicting test_dummy_encryption options [ 479.300498][T30348] xt_hashlimit: size too large, truncated to 1048576 [ 479.307449][T30350] pim6reg99999999: entered allmulticast mode [ 479.499544][T30376] binder: 30375:30376 ioctl c0306201 2000000005c0 returned -22 [ 480.018535][T30433] can0: slcan on ttynull. [ 480.105502][T30432] can0 (unregistered): slcan off ttynull. [ 480.181946][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8935'. [ 480.184770][T30459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8935'. [ 480.188918][T30459] netlink: 'syz.9.8935': attribute type 11 has an invalid length. [ 480.192067][T30459] netlink: 'syz.9.8935': attribute type 7 has an invalid length. [ 480.369595][ T40] audit: type=1326 audit(453.577:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30476 comm="syz.9.8941" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cc7d9bf79 code=0x0 [ 480.937517][ T6115] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 481.101954][ T6115] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 481.106457][ T6115] usb 10-1: config 0 has no interface number 0 [ 481.111044][ T6115] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.114857][ T6115] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 481.118714][ T6115] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 481.122920][ T6115] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 481.126642][ T6115] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 481.130539][ T6115] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.134824][ T6115] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 481.137810][ T6115] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.147342][ T6115] usb 10-1: config 0 descriptor?? [ 481.152288][T30499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 481.155141][T30499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 481.160708][ T6115] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 481.222230][ T5285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.226265][ T5285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.229333][ T5285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.233071][ T5285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.235546][ T5285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.347718][T30519] chnl_net:caif_netlink_parms(): no params data found [ 481.394643][ T24] usb 10-1: USB disconnect, device number 5 [ 481.402215][ T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 481.430933][T30519] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.433297][T30519] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.435579][T30519] bridge_slave_0: entered allmulticast mode [ 481.438199][T30519] bridge_slave_0: entered promiscuous mode [ 481.442392][T30519] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.444680][T30519] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.447034][T30519] bridge_slave_1: entered allmulticast mode [ 481.449650][T30519] bridge_slave_1: entered promiscuous mode [ 481.465393][T30519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.469675][T30519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.485060][T30519] team0: Port device team_slave_0 added [ 481.488055][T30519] team0: Port device team_slave_1 added [ 481.501050][T30519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.503330][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.511955][T30519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.516212][T30519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.518452][T30519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.526737][T30519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.549024][T30519] hsr_slave_0: entered promiscuous mode [ 481.551266][T30519] hsr_slave_1: entered promiscuous mode [ 481.568681][ T6115] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 481.729271][ T6115] usb 11-1: Using ep0 maxpacket: 32 [ 481.732204][ T6115] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 481.737133][ T6115] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 481.740235][ T6115] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 481.742990][ T6115] usb 11-1: Product: syz [ 481.744342][ T6115] usb 11-1: Manufacturer: syz [ 481.745920][ T6115] usb 11-1: SerialNumber: syz [ 481.749240][ T6115] usb 11-1: config 0 descriptor?? [ 481.751413][T30571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 481.917403][T10683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.944792][T30829] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 481.978788][T27917] usb 11-1: USB disconnect, device number 9 [ 482.052326][T10683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.173660][T10683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.275880][T10683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.434364][T30519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 482.451974][T30519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 482.456297][T30519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.471887][T30519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.545701][T10683] bridge_slave_1: left allmulticast mode [ 482.547635][T10683] bridge_slave_1: left promiscuous mode [ 482.549533][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.555336][T10683] bridge_slave_0: left allmulticast mode [ 482.557202][T10683] bridge_slave_0: left promiscuous mode [ 482.557319][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.790834][T10683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.832480][T10683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.874990][T10683] bond0 (unregistering): Released all slaves [ 482.905116][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9005'. [ 482.919177][T30519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.932609][T30519] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.939966][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.942395][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.954103][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.956480][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.989161][T30519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.141493][T31024] fuse: Invalid rootmode [ 483.147924][T30519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.214039][T30519] veth0_vlan: entered promiscuous mode [ 483.298368][T30519] veth1_vlan: entered promiscuous mode [ 483.427981][T10683] hsr_slave_0: left promiscuous mode [ 483.431061][T10683] hsr_slave_1: left promiscuous mode [ 483.433082][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.435477][T10683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.438455][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.440941][T10683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.446075][T10683] veth1_macvtap: left promiscuous mode [ 483.447840][T10683] veth0_macvtap: left promiscuous mode [ 483.449689][T10683] veth1_vlan: left promiscuous mode [ 483.451691][T10683] veth0_vlan: left promiscuous mode [ 483.462138][ T6058] Bluetooth: hci0: command tx timeout [ 483.580250][T10683] team0 (unregistering): Port device team_slave_1 removed [ 483.591140][T10683] team0 (unregistering): Port device team_slave_0 removed [ 483.708910][T30519] veth0_macvtap: entered promiscuous mode [ 483.712703][T30519] veth1_macvtap: entered promiscuous mode [ 483.720298][T30519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.722882][T31077] xt_time: unknown flags 0xf4 [ 483.724311][T30519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.736403][ T1218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.739506][ T1218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.739592][ T40] audit: type=1400 audit(456.728:658): avc: denied { map } for pid=31080 comm="syz.5.9036" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 483.742942][ T1218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.754325][ T1218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.819670][T31090] netlink: 504 bytes leftover after parsing attributes in process `syz.9.9040'. [ 483.825413][T10685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.837482][T10685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.852913][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.855478][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.927669][T31116] overlay: ./file0 is not a directory [ 484.353948][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9082'. [ 484.527280][ T40] audit: type=1400 audit(457.476:659): avc: denied { mount } for pid=31250 comm="syz.9.9100" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 484.542474][ T40] audit: type=1400 audit(457.476:660): avc: denied { remount } for pid=31250 comm="syz.9.9100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 484.548505][ T40] audit: type=1400 audit(457.485:661): avc: denied { unmount } for pid=25764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 484.571348][T31267] xt_hashlimit: size too large, truncated to 1048576 [ 484.715869][ T40] audit: type=1400 audit(457.653:662): avc: denied { remount } for pid=31296 comm="syz.5.9117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 484.724493][ T40] audit: type=1400 audit(457.653:663): avc: denied { unmount } for pid=10828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 484.782760][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9121'. [ 484.788591][ T10] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 484.820022][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9125'. [ 484.834931][T31321] hsr_slave_1 (unregistering): left promiscuous mode [ 484.947611][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9135'. [ 484.951738][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9135'. [ 484.953857][T31350] netlink: 'syz.9.9136': attribute type 11 has an invalid length. [ 484.954967][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9135'. [ 484.965153][ T10] usb 11-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 484.967973][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.971098][ T10] usb 11-1: Product: syz [ 484.972389][ T10] usb 11-1: Manufacturer: syz [ 484.974003][ T10] usb 11-1: SerialNumber: syz [ 484.978208][ T10] usb 11-1: config 0 descriptor?? [ 484.983617][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 484.990171][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.994282][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 484.997190][ T10] usb 11-1: media controller created [ 485.006588][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.025950][T31367] hugetlbfs: Bad value for 'uid' [ 485.027672][T31367] hugetlbfs: Bad value for 'uid' [ 485.033106][ T10] DVB: Unable to find symbol mt352_attach() [ 485.039522][T31369] tmpfs: Cannot change global quota limit on remount [ 485.052625][ T10] DVB: Unable to find symbol nxt6000_attach() [ 485.054671][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 485.059881][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input30 [ 485.065077][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 485.067667][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 485.071207][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 485.073329][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 485.126092][T31390] binder: 31389:31390 ioctl c00c620f 200000000500 returned -22 [ 485.196946][T31255] dvb-usb: bulk message failed: -22 (7/0) [ 485.199272][ T6108] usb 11-1: USB disconnect, device number 10 [ 485.277666][ T6108] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 485.412910][T31444] tipc: Enabling of bearer rejected, failed to enable media [ 485.496019][T31453] sp0: Synchronizing with TNC [ 485.499077][T31452] [U] [ 485.576549][T31461] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 485.631220][T31469] input: syz1 as /devices/virtual/input/input31 [ 485.809326][T31495] __nla_validate_parse: 4 callbacks suppressed [ 485.809343][T31495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9183'. [ 485.846243][T31499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9185'. [ 485.851115][T31499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9185'. [ 486.009523][ T40] audit: type=1400 audit(458.859:664): avc: denied { name_bind } for pid=31522 comm="syz.6.9197" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 486.019850][ T40] audit: type=1400 audit(458.859:665): avc: denied { node_bind } for pid=31522 comm="syz.6.9197" saddr=172.20.20.17 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 486.112103][ T40] audit: type=1400 audit(458.953:666): avc: denied { create } for pid=31535 comm="syz.6.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.121422][ T40] audit: type=1400 audit(458.953:667): avc: denied { setopt } for pid=31535 comm="syz.6.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.129186][ T40] audit: type=1400 audit(458.953:668): avc: denied { shutdown } for pid=31535 comm="syz.6.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.191565][ T6058] Bluetooth: hci0: command tx timeout [ 486.224686][ T40] audit: type=1400 audit(459.065:669): avc: denied { connect } for pid=31546 comm="syz.5.9208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 486.386929][T31555] can0: slcan on ttyS3. [ 486.411333][T31564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9212'. [ 486.458664][T31555] can0 (unregistered): slcan off ttyS3. [ 486.604564][ T40] audit: type=1400 audit(459.411:670): avc: denied { listen } for pid=31583 comm="syz.9.9218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.895713][ T40] audit: type=1400 audit(459.682:671): avc: denied { remount } for pid=31606 comm="syz.0.9226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 487.234856][T31631] xt_hashlimit: size too large, truncated to 1048576 [ 487.472399][ T40] audit: type=1400 audit(460.224:672): avc: denied { execheap } for pid=31656 comm="syz.5.9245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 487.680227][ T40] audit: type=1400 audit(460.420:673): avc: denied { ioctl } for pid=31701 comm="syz.6.9261" path="socket:[82756]" dev="sockfs" ino=82756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.751318][T31720] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 487.911976][T31749] openvswitch: netlink: Duplicate key (type 6). [ 488.029309][T31771] netlink: 'syz.5.9286': attribute type 13 has an invalid length. [ 488.055348][T31773] bridge_slave_0: entered promiscuous mode [ 488.135463][T31783] xt_limit: Overflow, try lower: 271964/0 [ 488.239428][T31792] option changes via remount are deprecated (pid=31790 comm=syz.9.9294) [ 488.278005][T31794] Bluetooth: MGMT ver 1.23 [ 488.338024][T31806] loop4: detected capacity change from 0 to 7 [ 488.351980][T23998] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 488.353754][T23998] loop4: partition table partially beyond EOD, truncated [ 488.356421][T23998] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 488.373218][T31806] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 488.375747][T31806] loop4: partition table partially beyond EOD, truncated [ 488.378818][T31806] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 488.399922][T31822] [U] V3Fپ"S/4:XTZWTLW= [ 488.402528][T31818] [U] J"E:" [ 488.408073][T23998] udevd[23998]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 488.415357][ T6058] Bluetooth: hci0: command tx timeout [ 488.419707][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9306'. [ 488.421584][T23998] udevd[23998]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 488.519316][T31842] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 488.519316][T31842] The task syz.5.9311 (31842) triggered the difference, watch for misbehavior. [ 488.602658][T31849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9318'. [ 488.631740][T31853] program syz.0.9320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.674560][T31859] netlink: 'syz.6.9323': attribute type 1 has an invalid length. [ 488.677437][T31859] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9323'. [ 489.063774][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9331'. [ 489.484760][T27917] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 489.657350][T27917] usb 11-1: config 0 has an invalid interface number: 251 but max is 0 [ 489.661202][T27917] usb 11-1: config 0 has no interface number 0 [ 489.664872][T27917] usb 11-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 489.669643][T27917] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.672276][T27917] usb 11-1: Product: syz [ 489.674197][T27917] usb 11-1: Manufacturer: syz [ 489.675932][T27917] usb 11-1: SerialNumber: syz [ 489.679203][T27917] usb 11-1: config 0 descriptor?? [ 489.927671][T31947] netlink: 'syz.5.9361': attribute type 1 has an invalid length. [ 489.991988][T31954] smc: net device bond0 applied user defined pnetid SYZ2 [ 490.374523][T32011] use of bytesused == 0 is deprecated and will be removed in the future, [ 490.377949][T32011] use the actual size instead. [ 490.747855][ T39] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 490.920362][ T39] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 490.923494][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.928714][ T39] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.933885][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.938380][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.944025][ T39] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 490.947151][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.951643][ T39] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.956412][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.961445][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.967477][ T39] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 490.970557][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 490.975044][ T39] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.979816][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 490.984566][ T39] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 490.991723][ T39] usb 5-1: string descriptor 0 read error: -22 [ 490.994816][ T39] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 490.998522][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.017170][ T39] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 491.226015][ T6095] usb 5-1: USB disconnect, device number 6 [ 491.553310][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 491.553326][ T40] audit: type=1400 audit(464.038:686): avc: denied { listen } for pid=32067 comm="syz.9.9409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 491.656527][ T10] hid_parser_main: 4086 callbacks suppressed [ 491.656546][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.661834][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.664218][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.666569][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.671460][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.673890][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.676227][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.678867][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.681183][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.683454][ T10] hid-generic 00A0:0086:0003.0003: unknown main item tag 0x0 [ 491.691751][ T10] hid-generic 00A0:0086:0003.0003: hidraw1: HID v0.05 Device [syz1] on syz0 [ 491.747136][T32087] fido_id[32087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 492.016525][ T40] audit: type=1400 audit(464.468:687): avc: denied { mount } for pid=32134 comm="syz.0.9436" name="/" dev="autofs" ino=83743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 492.027478][ T40] audit: type=1400 audit(464.487:688): avc: denied { unmount } for pid=30519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 492.099739][T32148] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 492.184931][T32159] program syz.0.9446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.216806][ T40] audit: type=1400 audit(464.664:689): avc: denied { bind } for pid=32161 comm="syz.5.9448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.221166][T32165] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9449'. [ 492.227323][T32165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9449'. [ 492.255123][T32168] hugetlbfs: Bad value '$' for mount option 'size' [ 492.255123][T32168] [ 492.374190][T32177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9453'. [ 492.377339][T32177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9453'. [ 492.450200][T32185] block nbd0: not configured, cannot reconfigure [ 492.450674][T27917] asix 11-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 492.455450][T27917] asix 11-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 492.462411][T27917] asix 11-1:0.251: probe with driver asix failed with error -5 [ 492.468249][T27917] usb 11-1: USB disconnect, device number 11 [ 492.489752][T32200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9459'. [ 492.674200][ T40] audit: type=1400 audit(465.094:690): avc: denied { watch watch_with_perm watch_reads } for pid=32225 comm="syz.6.9470" path="/1730/bus" dev="tmpfs" ino=8727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 492.710164][T32230] fuse: Bad value for 'group_id' [ 492.712144][T32230] fuse: Bad value for 'group_id' [ 492.933735][T32255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9482'. [ 492.957497][ T40] audit: type=1400 audit(465.356:691): avc: denied { accept } for pid=32256 comm="syz.6.9483" lport=39748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.016517][T32262] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 493.027229][ T40] audit: type=1400 audit(465.421:692): avc: denied { mount } for pid=32258 comm="syz.6.9484" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 493.044671][ T40] audit: type=1400 audit(465.431:693): avc: denied { unmount } for pid=10831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 493.136238][T32279] netlink: 252 bytes leftover after parsing attributes in process `syz.5.9493'. [ 493.229460][T32291] Bluetooth: MGMT ver 1.23 [ 493.496342][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9520'. [ 493.862280][T32404] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 493.867331][T32405] can0: slcan on ttynull. [ 493.935701][T32403] can0 (unregistered): slcan off ttynull. [ 494.053739][T32435] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 494.503588][T11184] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 494.556619][ T40] audit: type=1400 audit(466.852:694): avc: denied { read } for pid=32484 comm="syz.6.9576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.642212][ T40] audit: type=1400 audit(466.936:695): avc: denied { bind } for pid=32499 comm="syz.6.9583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 494.676104][T11184] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 494.679688][T11184] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 494.685077][T11184] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 494.689099][T11184] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.694112][T32455] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 494.704890][T11184] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.902946][T32553] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 494.905815][T32553] overlayfs: missing 'lowerdir' [ 494.941196][T32559] devtmpfs: Cannot change global quota limit on remount [ 494.945474][T27917] usb 14-1: USB disconnect, device number 4 [ 495.122451][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 495.293527][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 495.296418][ T10] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 495.299020][ T10] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 495.300076][T32602] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.9609'. [ 495.301663][ T10] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 495.308951][ T10] usb 5-1: config 250 has no interface number 0 [ 495.311412][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 495.315830][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 495.319101][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.322325][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.325675][ T10] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 495.329864][ T10] usb 5-1: config 250 interface 228 has no altsetting 0 [ 495.333290][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 495.336237][ T10] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 495.338835][ T10] usb 5-1: Product: syz [ 495.340182][ T10] usb 5-1: SerialNumber: syz [ 495.345122][ T10] hub 5-1:250.228: bad descriptor, ignoring hub [ 495.347203][ T10] hub 5-1:250.228: probe with driver hub failed with error -5 [ 495.567155][ T10] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 495.576651][T32636] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 495.579018][T32636] ALSA: mixer_oss: invalid index 1374389 [ 495.597220][T32640] usb usb8: usbfs: process 32640 (syz.5.9625) did not claim interface 0 before use [ 495.623114][T32645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9627'. [ 495.882771][ T10] usb 5-1: USB disconnect, device number 7 [ 495.888004][ T10] usblp0: removed [ 495.899615][T32693] netlink: 'syz.5.9646': attribute type 322 has an invalid length. [ 495.911366][T32695] bridge0: port 3(ipvlan2) entered blocking state [ 495.913564][T32695] bridge0: port 3(ipvlan2) entered disabled state [ 495.916061][T32695] ipvlan2: entered allmulticast mode [ 495.917753][T32695] bridge0: entered allmulticast mode [ 495.920427][T32695] ipvlan2: left allmulticast mode [ 495.922067][T32695] bridge0: left allmulticast mode [ 495.930080][T32699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.932885][T32699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 496.139405][T32735] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 496.828967][ T364] netlink: 'syz.9.9699': attribute type 18 has an invalid length. [ 496.915970][ T379] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 497.149578][ T418] mkiss: ax0: crc mode is auto. [ 497.350494][ T461] xt_hashlimit: size too large, truncated to 1048576 [ 497.685781][ T525] 9pnet_fd: p9_fd_create_unix (525): problem connecting socket: ./file0: -111 [ 497.712010][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 497.712021][ T40] audit: type=1400 audit(469.806:705): avc: denied { write } for pid=528 comm="syz.9.9760" path="socket:[87553]" dev="sockfs" ino=87553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 497.736910][ T531] __nla_validate_parse: 5 callbacks suppressed [ 497.736922][ T531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9761'. [ 497.873774][ T559] netlink: 212304 bytes leftover after parsing attributes in process `syz.9.9774'. [ 497.878471][ T559] openvswitch: netlink: Message has 6 unknown bytes. [ 497.905348][ T563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=563 comm=syz.9.9776 [ 497.963743][ T576] netlink: 'syz.5.9781': attribute type 178 has an invalid length. [ 497.990514][ T580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9783'. [ 497.993454][ T580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9783'. [ 498.084140][ T40] audit: type=1400 audit(470.142:706): avc: denied { create } for pid=588 comm="syz.9.9788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 498.163910][ T40] audit: type=1400 audit(470.226:707): avc: denied { execute } for pid=604 comm="syz.0.9796" path="/dev/comedi4" dev="devtmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 498.168973][ T607] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 498.174412][ T607] overlayfs: missing 'lowerdir' [ 498.188430][ T610] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 498.362483][ T634] sp0: Synchronizing with TNC [ 498.366152][ T634] sp0: Found TNC [ 498.368631][ T633] [U] ` [ 498.470927][ T1928] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 498.635762][ T1928] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 498.638786][ T1928] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.642194][ T1928] usb 14-1: Product: syz [ 498.643603][ T1928] usb 14-1: Manufacturer: syz [ 498.645196][ T1928] usb 14-1: SerialNumber: syz [ 498.648052][ T1928] usb 14-1: config 0 descriptor?? [ 498.854346][ T670] mkiss: ax0: crc mode is auto. [ 498.869438][ T1928] usb 14-1: USB disconnect, device number 5 [ 499.093871][ T708] nbd: must specify at least one socket [ 499.172684][ T6058] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 499.220078][ T731] SELinux: failed to load policy [ 499.271406][ T40] audit: type=1400 audit(471.255:708): avc: denied { mount } for pid=737 comm="syz.5.9840" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 499.278101][ T40] audit: type=1400 audit(471.255:709): avc: denied { remount } for pid=737 comm="syz.5.9840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 499.284528][ T40] audit: type=1400 audit(471.264:710): avc: denied { unmount } for pid=10828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 499.373204][ T759] sp0: Synchronizing with TNC [ 499.473504][ T778] team_slave_0: entered promiscuous mode [ 499.473722][ T40] audit: type=1400 audit(471.441:711): avc: denied { create } for pid=777 comm="syz.0.9857" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.475637][ T778] team_slave_1: entered promiscuous mode [ 499.484850][ T40] audit: type=1400 audit(471.451:712): avc: denied { write } for pid=777 comm="syz.0.9857" name="file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.488905][ T778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 499.505386][ T40] audit: type=1400 audit(471.451:713): avc: denied { open } for pid=777 comm="syz.0.9857" path="/214/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.512681][ T40] audit: type=1400 audit(471.451:714): avc: denied { ioctl } for pid=777 comm="syz.0.9857" path="/214/file0" dev="tmpfs" ino=1103 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.575391][ T798] program syz.6.9865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.714591][ T824] ptrace attach of "/syz-executor exec"[826] was attempted by "/syz-executor exec"[824] [ 499.793477][ T845] atomic_op ffff8880376ac198 conn xmit_atomic 0000000000000000 [ 499.844069][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9888'. [ 499.847739][ T856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9888'. [ 499.852069][ T856] netlink: 'syz.5.9888': attribute type 7 has an invalid length. [ 499.954131][ T879] netlink: 'syz.5.9897': attribute type 1 has an invalid length. [ 499.956618][ T879] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9897'. [ 499.963250][ T879] netlink: 'syz.5.9897': attribute type 1 has an invalid length. [ 499.965845][ T879] netlink: 'syz.5.9897': attribute type 8 has an invalid length. [ 499.971120][ T879] netlink: 606 bytes leftover after parsing attributes in process `syz.5.9897'. [ 499.973976][ T879] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9897'. [ 500.043878][ T896] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 500.076724][ T904] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 500.438960][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 500.578038][T11184] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 500.600940][ T34] usb 10-1: config 0 has no interfaces? [ 500.604501][ T34] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 500.607626][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.610370][ T34] usb 10-1: Product: syz [ 500.611816][ T34] usb 10-1: Manufacturer: syz [ 500.613359][ T34] usb 10-1: SerialNumber: syz [ 500.617433][ T34] usb 10-1: config 0 descriptor?? [ 500.740470][T11184] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 500.744355][T11184] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 9236, setting to 1024 [ 500.747955][T11184] usb 5-1: config 0 interface 0 has no altsetting 0 [ 500.752073][T11184] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 500.755033][T11184] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 500.757654][T11184] usb 5-1: Product: syz [ 500.759350][T11184] usb 5-1: Manufacturer: syz [ 500.761435][T11184] usb 5-1: SerialNumber: syz [ 500.766437][T11184] usb 5-1: config 0 descriptor?? [ 500.772433][T11184] usb 5-1: selecting invalid altsetting 0 [ 500.854749][ T34] usb 10-1: USB disconnect, device number 6 [ 500.993370][ T975] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 501.000344][T27917] usb 5-1: USB disconnect, device number 8 [ 501.797614][T11184] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 501.936135][ T1048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9944'. [ 501.979922][T11184] usb 11-1: Using ep0 maxpacket: 16 [ 501.991091][T11184] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 501.994919][T11184] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 501.998868][T11184] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 502.003023][T11184] usb 11-1: config 0 interface 0 has no altsetting 0 [ 502.007324][T11184] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 502.010940][T11184] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.014579][T11184] usb 11-1: Product: syz [ 502.016332][T11184] usb 11-1: Manufacturer: syz [ 502.018253][T11184] usb 11-1: SerialNumber: syz [ 502.022589][T11184] usb 11-1: config 0 descriptor?? [ 502.121748][ T5285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 502.127015][ T5285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 502.131217][ T5285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 502.134219][ T5285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 502.137737][ T5285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.191587][ T92] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.252051][T11184] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input32 [ 502.255932][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.286778][ T92] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.309828][ T1053] chnl_net:caif_netlink_parms(): no params data found [ 502.321904][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.344238][T24417] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.354834][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.364237][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.368119][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.370420][ T1053] bridge_slave_0: entered allmulticast mode [ 502.373038][ T1053] bridge_slave_0: entered promiscuous mode [ 502.384147][ T92] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.391612][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.393888][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.396229][ T1053] bridge_slave_1: entered allmulticast mode [ 502.399528][ T1053] bridge_slave_1: entered promiscuous mode [ 502.414803][ T1053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.420267][ T1053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.428966][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.435722][ T1053] team0: Port device team_slave_0 added [ 502.438842][ T1053] team0: Port device team_slave_1 added [ 502.469124][ T92] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.477832][ T1053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.480135][ T1053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.489833][ T1053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.494834][ T1053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.497032][ T1053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.505435][ T1053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.525198][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.531447][ T1053] hsr_slave_0: entered promiscuous mode [ 502.533681][ T1053] hsr_slave_1: entered promiscuous mode [ 502.537028][ T1053] debugfs: 'hsr0' already exists in 'hsr' [ 502.539657][ T1053] Cannot create hsr debugfs directory [ 502.567910][ T1034] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.611311][ T5318] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 502.699152][ T92] bridge_slave_1: left allmulticast mode [ 502.701207][ T92] bridge_slave_1: left promiscuous mode [ 502.704443][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.711056][ T92] bridge_slave_0: left allmulticast mode [ 502.713489][ T92] bridge_slave_0: left promiscuous mode [ 502.716087][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.720256][T10982] usb 11-1: USB disconnect, device number 12 [ 502.929569][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.986918][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.007598][ T92] bond0 (unregistering): Released all slaves [ 503.312432][ T1399] netlink: 344 bytes leftover after parsing attributes in process `syz.6.9937'. [ 503.682062][ T92] hsr_slave_0: left promiscuous mode [ 503.684388][ T92] hsr_slave_1: left promiscuous mode [ 503.686242][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.688303][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.691180][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.693195][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.698343][ T92] veth1_macvtap: left promiscuous mode [ 503.699932][ T92] veth0_macvtap: left promiscuous mode [ 503.702254][ T92] veth1_vlan: left promiscuous mode [ 503.704500][ T92] veth0_vlan: left promiscuous mode [ 503.843891][ T92] team0 (unregistering): Port device team_slave_1 removed [ 503.850551][ T92] team0 (unregistering): Port device team_slave_0 removed [ 504.326247][ T1479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9955'. [ 504.335475][ T5285] Bluetooth: hci0: command tx timeout [ 504.375815][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 504.375831][ T40] audit: type=1400 audit(476.022:717): avc: denied { write } for pid=1485 comm="syz.9.9956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 504.406287][ T1489] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9965'. [ 504.412635][ T1489] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9965'. [ 504.582458][ T1506] xt_hashlimit: size too large, truncated to 1048576 [ 505.581590][ T1053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.586261][ T1053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.590067][ T1053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.593953][ T1053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.637202][ T1053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.647012][ T1053] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.652115][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.655116][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.662049][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.664958][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.774886][ T1053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.802754][ T1053] veth0_vlan: entered promiscuous mode [ 505.808712][ T1053] veth1_vlan: entered promiscuous mode [ 505.825402][ T1053] veth0_macvtap: entered promiscuous mode [ 505.829256][ T1053] veth1_macvtap: entered promiscuous mode [ 505.837154][ T1053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.844856][ T1053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.850129][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.855851][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.860731][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.865491][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.904356][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.910251][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.923380][T10683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.925981][T10683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.988034][ T1640] bridge_slave_1: left allmulticast mode [ 505.990167][ T1640] bridge_slave_1: left promiscuous mode [ 505.993482][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.998897][ T1640] bridge_slave_0: left allmulticast mode [ 506.001222][ T1640] bridge_slave_0: left promiscuous mode [ 506.004141][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.476603][ T1702] netlink: 'syz.9.10005': attribute type 11 has an invalid length. [ 506.479418][ T1702] netlink: 199788 bytes leftover after parsing attributes in process `syz.9.10005'. [ 506.557979][ T5285] Bluetooth: hci0: command tx timeout [ 506.611350][ T1698] syz.5.10002 (1698): drop_caches: 1 [ 506.634116][ T1698] syz.5.10002 (1698): drop_caches: 1 [ 507.695251][ T1726] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10024'. [ 507.725323][ T1730] veth1_macvtap: left allmulticast mode [ 507.732461][ T1730] veth1_macvtap: entered allmulticast mode [ 507.735579][ T1730] macsec0: left promiscuous mode [ 507.737316][ T1730] macsec0: left allmulticast mode [ 507.738926][ T1730] veth1_macvtap: left allmulticast mode [ 507.771743][ T1736] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10019'. [ 508.098554][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.434811][ T1785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10048'. [ 508.453888][ T1785] vlan0 (unregistering): left allmulticast mode [ 508.456124][ T1785] veth0_vlan (unregistering): left allmulticast mode [ 508.572270][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10043'. [ 508.575116][ T1827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10043'. [ 508.579932][ T1827] netlink: 'syz.1.10043': attribute type 12 has an invalid length. [ 508.783555][ T5285] Bluetooth: hci0: command tx timeout [ 509.471149][ T1914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.671639][ T1947] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10089'. [ 509.733026][ T1958] hub 6-0:1.0: USB hub found [ 509.733832][ T40] audit: type=1800 audit(481.033:718): pid=1960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.10094" name="file0" dev="tmpfs" ino=10393 res=0 errno=0 [ 509.736176][ T1958] hub 6-0:1.0: 1 port detected [ 509.822734][ T40] audit: type=1400 audit(481.126:719): avc: denied { getopt } for pid=1971 comm="syz.5.10098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.905242][ T1993] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 509.905242][ T1993] program syz.5.10107 not setting count and/or reply_len properly [ 509.942904][ T2004] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10111'. [ 511.010206][ T5285] Bluetooth: hci0: command tx timeout [ 511.019319][ T2043] tmpfs: Cannot disable swap on remount [ 511.101340][ T2061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10132'. [ 511.311027][ T2090] bond4: option xmit_hash_policy: invalid value (6) [ 511.314250][ T2090] bond4 (unregistering): Released all slaves [ 511.342310][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10147'. [ 511.345160][ T2162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10147'. [ 511.719093][ T2204] pim6reg: entered allmulticast mode [ 511.724591][ T2204] pim6reg: left allmulticast mode [ 511.860163][ T2226] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10173'. [ 512.014421][ T2251] tmpfs: Bad value for 'mpol' [ 512.324071][ T2353] trusted_key: encrypted_key: key trusted:syz not found [ 512.725689][ T2389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10212'. [ 512.783834][T27918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 512.971018][T27918] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 512.974125][T27918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.976936][T27918] usb 6-1: Product: syz [ 512.978305][T27918] usb 6-1: Manufacturer: syz [ 512.979802][T27918] usb 6-1: SerialNumber: syz [ 512.982760][T27918] usb 6-1: config 0 descriptor?? [ 512.986198][T27918] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 512.990748][T27918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.994089][T27918] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 512.997085][T27918] usb 6-1: media controller created [ 513.003665][T27918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.026410][T27918] DVB: Unable to find symbol mt352_attach() [ 513.042790][T27918] DVB: Unable to find symbol nxt6000_attach() [ 513.044812][T27918] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 513.053266][T27918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input33 [ 513.058166][T27918] dvb-usb: schedule remote query interval to 1000 msecs. [ 513.060497][T27918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 513.068414][T27918] dvb-usb: bulk message failed: -22 (7/0) [ 513.070822][T27918] dvb-usb: bulk message failed: -22 (7/0) [ 513.205149][ T2383] dvb-usb: bulk message failed: -22 (7/0) [ 513.209915][ T9] usb 6-1: USB disconnect, device number 3 [ 513.212618][ T2433] autofs: Bad value for 'fd' [ 513.302085][ T40] audit: type=1400 audit(484.370:720): avc: denied { listen } for pid=2450 comm="syz.9.10225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.302276][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 513.411657][ T40] audit: type=1400 audit(484.473:721): avc: denied { mounton } for pid=2471 comm="syz.6.10232" path="/1945/file0" dev="hugetlbfs" ino=91752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 513.415716][ T2472] overlayfs: maximum fs stacking depth exceeded [ 513.459500][ T2474] netlink: 'syz.6.10235': attribute type 1 has an invalid length. [ 513.462238][ T2474] netlink: 'syz.6.10235': attribute type 2 has an invalid length. [ 513.532755][ T2483] delete_channel: no stack [ 513.589582][ T2494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10240'. [ 513.592531][ T2494] netem: invalid attributes len -22 [ 513.594174][ T2494] netem: change failed [ 513.818845][ T2521] ptrace attach of "/syz-executor exec"[1053] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 513.920768][ T2547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.995322][ T2563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10277'. [ 514.057819][ T2575] sp0: Synchronizing with TNC [ 514.062480][ T2574] [U] [ 514.175891][ T2605] vivid-002: disconnect [ 514.186373][ T2600] vivid-002: reconnect [ 514.234409][ T2616] sp0: Synchronizing with TNC [ 514.243860][ T2614] [U] [ 514.292240][ T2637] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 514.294956][ T2637] SELinux: failed to load policy [ 514.655877][T11005] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 514.830677][T11005] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 514.833615][T11005] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.836176][T11005] usb 14-1: Product: syz [ 514.837561][T11005] usb 14-1: Manufacturer: syz [ 514.839965][T11005] usb 14-1: SerialNumber: syz [ 514.842932][T11005] usb 14-1: config 0 descriptor?? [ 514.969021][ T2758] xt_hashlimit: size too large, truncated to 1048576 [ 515.066283][T10982] usb 14-1: USB disconnect, device number 6 [ 515.179873][ T2808] binder: 2806:2808 ioctl 40046205 0 returned -22 [ 515.182406][ T2808] binder: 2806:2808 ioctl c0306201 200000002100 returned -11 [ 515.292928][ T2833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10338'. [ 515.682878][T10982] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 515.771387][ T2879] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10361'. [ 515.847936][T10982] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 515.850818][T10982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 515.853402][T10982] usb 6-1: Product: syz [ 515.859688][T10982] usb 6-1: Manufacturer: syz [ 515.861522][T10982] usb 6-1: SerialNumber: syz [ 515.864363][T10982] usb 6-1: config 0 descriptor?? [ 515.868397][T10982] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 515.870783][T10982] dvb-usb: bulk message failed: -22 (2/0) [ 515.874287][T10982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.877782][T10982] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 515.880291][T10982] usb 6-1: media controller created [ 515.886626][T10982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.030688][ T2905] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10356'. [ 516.085975][ T2918] vxcan1: entered allmulticast mode [ 516.088341][ T2847] cxusb: i2c rd: len=84 is too big! [ 516.088341][ T2847] [ 516.092760][T10982] cxusb: set interface failed [ 516.094300][T10982] dvb-usb: bulk message failed: -22 (1/0) [ 516.111639][T10982] DVB: Unable to find symbol mt352_attach() [ 516.113600][T10982] dvb-usb: bulk message failed: -22 (5/0) [ 516.115416][T10982] zl10353_read_register: readreg error (reg=127, ret==-121) [ 516.117762][T10982] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 516.164351][T10982] rc_core: IR keymap rc-dvico-mce not found [ 516.166378][T10982] Registered IR keymap rc-empty [ 516.168749][T10982] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 516.173086][T10982] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input34 [ 516.177833][T10982] dvb-usb: schedule remote query interval to 100 msecs. [ 516.180113][T10982] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 516.184711][T10982] usb 6-1: USB disconnect, device number 4 [ 516.289916][T10982] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 516.349837][ T2969] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 516.658809][ T3019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10382'. [ 516.661698][ T3019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10382'. [ 516.702182][ T3026] pimreg3: entered allmulticast mode [ 516.814216][ T3048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10391'. [ 516.817305][ T3048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10391'. [ 516.947940][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10400'. [ 517.247320][T10982] hid_parser_main: 9 callbacks suppressed [ 517.247333][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.255647][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.258527][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.260886][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.263204][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.265533][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.270223][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.272624][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.275388][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.278040][T10982] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 517.286250][T10982] hid-generic 00A0:0086:0003.0004: hidraw1: HID v0.05 Device [syz1] on syz0 [ 517.348319][ T3121] fido_id[3121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.826188][ T3179] smc: net device bond0 applied user defined pnetid SYZ2 [ 517.849373][ T3181] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 517.875586][ T3185] netlink: 'syz.9.10446': attribute type 1 has an invalid length. [ 517.976695][ T40] audit: type=1400 audit(488.735:722): avc: denied { listen } for pid=3196 comm="syz.1.10450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 518.231489][ T40] audit: type=1326 audit(488.978:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3236 comm="syz.9.10464" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cc7d9bf79 code=0x0 [ 519.165733][ T3263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10473'. [ 519.304066][ T3279] netlink: 'syz.5.10480': attribute type 1 has an invalid length. [ 519.306599][ T3279] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10480'. [ 519.347516][ T3283] program syz.9.10483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.531982][ T3313] [U] V3Fپ"S/4:XTZWTLW= [ 519.539347][ T3312] [U] J"E:" [ 519.560247][ T3318] loop4: detected capacity change from 0 to 7 [ 519.569886][T23998] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 519.571784][T23998] loop4: partition table partially beyond EOD, truncated [ 519.574680][T23998] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 519.586437][ T3318] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 519.588576][ T3318] loop4: partition table partially beyond EOD, truncated [ 519.591155][ T3318] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 519.617718][T23998] udevd[23998]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 519.625204][ T3336] Bluetooth: MGMT ver 1.23 [ 519.632924][T23998] udevd[23998]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 519.676143][ T3343] xt_limit: Overflow, try lower: 271964/0 [ 519.681774][ T3346] option changes via remount are deprecated (pid=3344 comm=syz.1.10504) [ 519.834635][ T3372] netlink: 'syz.9.10515': attribute type 13 has an invalid length. [ 519.935004][ T3388] openvswitch: netlink: Duplicate key (type 6). [ 520.092117][ T3423] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 520.116636][ T3427] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 520.449113][ T3494] xt_hashlimit: size too large, truncated to 1048576 [ 520.993916][ T3571] __nla_validate_parse: 2 callbacks suppressed [ 520.993932][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10587'. [ 521.012013][ T3573] can0: slcan on ttyS3. [ 521.064586][ T3573] can0 (unregistered): slcan off ttyS3. [ 521.673560][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10612'. [ 521.688171][ T3635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10612'. [ 521.689305][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10614'. [ 521.874945][ T3669] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 521.898600][ T3674] input: syz1 as /devices/virtual/input/input35 [ 522.042787][ T3695] sp0: Synchronizing with TNC [ 522.047860][ T56] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 522.051673][ T3694] [U] [ 522.107121][ T3710] tipc: Started in network mode [ 522.108735][ T3710] tipc: Node identity ff010000000000000000000000000001, cluster identity 3865 [ 522.111560][ T3710] tipc: Enabling of bearer rejected, failed to enable media [ 522.150665][ T3715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10638'. [ 522.233358][ T56] usb 14-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 522.238949][ T56] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.243141][ T56] usb 14-1: Product: syz [ 522.244483][ T56] usb 14-1: Manufacturer: syz [ 522.245955][ T56] usb 14-1: SerialNumber: syz [ 522.255235][ T56] usb 14-1: config 0 descriptor?? [ 522.259355][ T56] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 522.264161][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.268255][ T56] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 522.271177][ T56] usb 14-1: media controller created [ 522.284444][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.317145][ T56] DVB: Unable to find symbol mt352_attach() [ 522.373332][ T56] DVB: Unable to find symbol nxt6000_attach() [ 522.376053][ T56] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 522.381181][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input36 [ 522.386746][ T56] dvb-usb: schedule remote query interval to 1000 msecs. [ 522.397450][ T56] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 522.400680][ T56] dvb-usb: bulk message failed: -22 (7/0) [ 522.405763][ T56] dvb-usb: bulk message failed: -22 (7/0) [ 522.459651][ T3770] binder: 3769:3770 ioctl c00c620f 200000000500 returned -22 [ 522.491041][ T3656] dvb-usb: bulk message failed: -22 (7/0) [ 522.493616][T11005] usb 14-1: USB disconnect, device number 7 [ 522.577894][T11005] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 522.586471][ T3796] tmpfs: Cannot change global quota limit on remount [ 522.592999][ T3801] hugetlbfs: Bad value for 'uid' [ 522.596540][ T3801] hugetlbfs: Bad value for 'uid' [ 522.635260][ T3804] netlink: 'syz.5.10661': attribute type 11 has an invalid length. [ 522.638699][ T3804] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10661'. [ 522.645767][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10662'. [ 522.650245][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10662'. [ 522.653222][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10662'. [ 522.660540][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10662'. [ 522.738454][ T3823] hsr_slave_1 (unregistering): left promiscuous mode [ 522.988123][ T3881] xt_hashlimit: size too large, truncated to 1048576 [ 523.681623][ T4028] overlay: ./file0 is not a directory [ 523.772596][ T4047] xt_time: unknown flags 0xf4 [ 524.016434][ T4095] fuse: Invalid rootmode [ 524.487042][T10982] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 524.647457][T10982] usb 14-1: Using ep0 maxpacket: 32 [ 524.650423][T10982] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 524.659781][T10982] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 524.662680][T10982] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 524.665244][T10982] usb 14-1: Product: syz [ 524.666618][T10982] usb 14-1: Manufacturer: syz [ 524.668541][T10982] usb 14-1: SerialNumber: syz [ 524.672074][T10982] usb 14-1: config 0 descriptor?? [ 524.674223][ T4137] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 524.899541][T24937] usb 14-1: USB disconnect, device number 8 [ 525.000399][ T829] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 525.118410][ T40] audit: type=1326 audit(495.410:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.6.10834" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7893d9bf79 code=0x0 [ 525.174257][ T829] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 525.177561][ T829] usb 6-1: config 0 has no interface number 0 [ 525.180171][ T829] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 525.184951][ T829] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 525.189594][ T829] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 525.194819][ T829] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 525.199419][ T829] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 525.204345][ T829] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 525.209843][ T829] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 525.214931][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.221022][ T829] usb 6-1: config 0 descriptor?? [ 525.224005][ T4219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 525.227494][ T4219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 525.234633][ T829] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 525.403892][ T4275] netlink: 'syz.5.10848': attribute type 11 has an invalid length. [ 525.406485][ T4275] netlink: 'syz.5.10848': attribute type 7 has an invalid length. [ 525.451178][T24866] usb 6-1: USB disconnect, device number 5 [ 525.456835][T24866] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 525.587728][ T4294] can0: slcan on ttynull. [ 525.666830][ T4293] can0 (unregistered): slcan off ttynull. [ 526.176816][ T4374] netlink: 'syz.1.10871': attribute type 1 has an invalid length. [ 526.179622][ T4374] netlink: 'syz.1.10871': attribute type 1 has an invalid length. [ 526.279512][ T4393] binder: 4392:4393 ioctl c0306201 2000000005c0 returned -22 [ 526.434834][ T4420] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 526.437588][ T4420] overlayfs: missing 'lowerdir' [ 526.585455][ T4441] pim6reg99999999: entered allmulticast mode [ 526.703257][T10939] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 526.880298][T10939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.884392][T10939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 526.887740][T10939] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 526.891520][T10939] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 526.895130][T10939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.900257][ T4425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 526.910099][T10939] hub 6-1:1.0: bad descriptor, ignoring hub [ 526.912187][T10939] hub 6-1:1.0: probe with driver hub failed with error -5 [ 526.914954][T10939] cdc_wdm 6-1:1.0: skipping garbage [ 526.917233][T10939] cdc_wdm 6-1:1.0: skipping garbage [ 526.920165][T10939] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 526.922164][T10939] cdc_wdm 6-1:1.0: Unknown control protocol [ 526.928730][ T4493] xt_hashlimit: size too large, truncated to 1048576 [ 527.237041][ T4538] F2FS-fs: Conflicting test_dummy_encryption options [ 527.295629][ T4544] netlink: 'syz.9.10937': attribute type 10 has an invalid length. [ 527.311646][ T4546] tipc: Enabled bearer , priority 0 [ 527.343350][ T829] usb 6-1: USB disconnect, device number 6 [ 527.447544][ T4572] __nla_validate_parse: 12 callbacks suppressed [ 527.447557][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10948'. [ 527.453271][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10948'. [ 527.531741][ T4580] rdma_op ffff888025a249f0 conn xmit_rdma 0000000000000000 [ 527.582161][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10954'. [ 527.777138][ T4604] CIFS: Unable to determine destination address [ 527.871014][ T4610] tipc: Started in network mode [ 527.872739][ T4610] tipc: Node identity 84e, cluster identity 4711 [ 527.875429][ T4610] tipc: Node number set to 2126 [ 528.398626][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11008'. [ 528.401531][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11008'. [ 528.433578][ T4700] program syz.5.11005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.458150][ T4704] netlink: 136 bytes leftover after parsing attributes in process `syz.9.11007'. [ 528.461959][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11007'. [ 528.515988][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11013'. [ 528.720946][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11027'. [ 528.771063][ T4769] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 529.214060][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11052'. [ 529.574352][ T4892] can0: slcan on ttynull. [ 529.608801][ T4903] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 529.645547][ T4891] can0 (unregistered): slcan off ttynull. [ 529.944934][ T4968] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 529.948574][ T4968] overlayfs: missing 'lowerdir' [ 530.005480][ T4975] devtmpfs: Cannot change global quota limit on remount [ 530.559041][ T5058] bridge0: port 1(ipvlan2) entered blocking state [ 530.561422][ T5058] bridge0: port 1(ipvlan2) entered disabled state [ 530.573993][ T5058] ipvlan2: entered allmulticast mode [ 530.575651][ T5058] bridge0: entered allmulticast mode [ 530.578234][ T5058] ipvlan2: left allmulticast mode [ 530.579805][ T5058] bridge0: left allmulticast mode [ 530.813070][ T5098] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 531.195121][T11005] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 531.249641][ T5170] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 531.368899][T11005] usb 10-1: Using ep0 maxpacket: 8 [ 531.374186][T11005] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 531.376884][T11005] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 531.379549][T11005] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 531.382441][T11005] usb 10-1: config 250 has no interface number 0 [ 531.384469][T11005] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 531.388712][T11005] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 531.392067][T11005] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.395349][T11005] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 531.399116][T11005] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 531.403345][T11005] usb 10-1: config 250 interface 228 has no altsetting 0 [ 531.406952][T11005] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 531.415768][T11005] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 531.418509][T11005] usb 10-1: Product: syz [ 531.421690][T11005] usb 10-1: SerialNumber: syz [ 531.426656][T11005] hub 10-1:250.228: bad descriptor, ignoring hub [ 531.428721][T11005] hub 10-1:250.228: probe with driver hub failed with error -5 [ 531.490145][ T5205] mkiss: ax0: crc mode is auto. [ 531.646172][T11005] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 531.652044][ T5223] xt_hashlimit: size too large, truncated to 1048576 [ 531.954186][ T829] usb 10-1: USB disconnect, device number 7 [ 531.959715][ T829] usblp0: removed [ 531.974147][ T5273] openvswitch: netlink: Message has 6 unknown bytes. [ 532.014125][ T5286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=5286 comm=syz.1.11204 [ 532.314455][ T5343] mkiss: ax0: crc mode is auto. [ 532.384359][ T5356] SELinux: failed to load policy [ 532.411706][ T5361] nbd: must specify at least one socket [ 532.601271][ T5403] team_slave_0: entered promiscuous mode [ 532.603884][ T5403] team_slave_1: entered promiscuous mode [ 532.610493][ T5403] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.805025][ T5420] program syz.9.11249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.822918][T10939] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 532.906275][ T5436] atomic_op ffff88805334b198 conn xmit_atomic 0000000000000000 [ 532.977106][ T5447] __nla_validate_parse: 6 callbacks suppressed [ 532.977117][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11260'. [ 532.983892][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11260'. [ 532.987525][ T5447] netlink: 'syz.1.11260': attribute type 7 has an invalid length. [ 532.994654][T10939] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 532.997561][T10939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.000127][T10939] usb 10-1: Product: syz [ 533.001877][T10939] usb 10-1: Manufacturer: syz [ 533.010917][T10939] usb 10-1: SerialNumber: syz [ 533.032254][T10939] usb 10-1: config 0 descriptor?? [ 533.058562][ T5468] netlink: 'syz.9.11265': attribute type 1 has an invalid length. [ 533.061255][ T5468] netlink: 96 bytes leftover after parsing attributes in process `syz.9.11265'. [ 533.064103][ T5468] netlink: 'syz.9.11265': attribute type 1 has an invalid length. [ 533.066960][ T5468] netlink: 'syz.9.11265': attribute type 8 has an invalid length. [ 533.069535][ T5468] netlink: 606 bytes leftover after parsing attributes in process `syz.9.11265'. [ 533.072477][ T5468] netlink: 1 bytes leftover after parsing attributes in process `syz.9.11265'. [ 533.122519][ T5482] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 533.136164][ T5485] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 533.235840][ T12] netdevsim netdevsim6 : set [0, 0] type 1 family 0 port 8472 - 0 [ 533.240619][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.246909][T10715] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.254699][T10715] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.257009][T11005] usb 10-1: USB disconnect, device number 8 [ 533.619445][ T5561] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.11294'. [ 533.623609][ T5561] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 533.730839][ T5570] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.11297' resets device [ 533.764307][ T40] audit: type=1400 audit(503.505:725): avc: denied { write } for pid=5573 comm="syz.6.11299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 533.806680][ T5585] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 533.846717][ T5591] xt_hashlimit: size too large, truncated to 1048576 [ 533.967259][ T40] audit: type=1400 audit(503.692:726): avc: denied { map } for pid=5607 comm="syz.5.11314" path="socket:[102210]" dev="sockfs" ino=102210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 533.977051][ T40] audit: type=1400 audit(503.692:727): avc: denied { read accept } for pid=5607 comm="syz.5.11314" path="socket:[102210]" dev="sockfs" ino=102210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 533.982312][ T5610] mkiss: ax0: crc mode is auto. [ 534.005343][ T40] audit: type=1400 audit(503.720:728): avc: denied { setopt } for pid=5618 comm="syz.5.11316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 534.111742][ T5644] [U]  [ 534.143187][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11325'. [ 534.177373][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11327'. [ 534.181569][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11327'. [ 534.549808][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11349'. [ 534.593967][ T5723] xt_hashlimit: size too large, truncated to 1048576 [ 534.652439][ T40] audit: type=1400 audit(504.328:729): avc: denied { append } for pid=5734 comm="syz.6.11354" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 534.758255][ T5751] ================================================================== [ 534.760848][ T5751] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 534.763292][ T5751] Read of size 8 at addr ffff88802d929018 by task syz.6.11361/5751 [ 534.767045][ T5751] [ 534.768220][ T5751] CPU: 1 UID: 0 PID: 5751 Comm: syz.6.11361 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.768245][ T5751] Tainted: [L]=SOFTLOCKUP [ 534.768251][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.768262][ T5751] Call Trace: [ 534.768269][ T5751] [ 534.768276][ T5751] dump_stack_lvl+0x100/0x190 [ 534.768305][ T5751] print_report+0x156/0x4c9 [ 534.768325][ T5751] ? __virt_addr_valid+0x81/0x620 [ 534.768349][ T5751] ? __phys_addr+0xe8/0x180 [ 534.768372][ T5751] ? dvb_device_open+0x33f/0x3b0 [ 534.768397][ T5751] kasan_report+0xdf/0x1e0 [ 534.768416][ T5751] ? dvb_device_open+0x33f/0x3b0 [ 534.768442][ T5751] ? __pfx_dvb_device_open+0x10/0x10 [ 534.768465][ T5751] dvb_device_open+0x33f/0x3b0 [ 534.768486][ T5751] ? __pfx_dvb_device_open+0x10/0x10 [ 534.768509][ T5751] chrdev_open+0x234/0x6a0 [ 534.768533][ T5751] ? __pfx_chrdev_open+0x10/0x10 [ 534.768558][ T5751] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 534.768582][ T5751] do_dentry_open+0x6d8/0x1660 [ 534.768604][ T5751] ? __pfx_chrdev_open+0x10/0x10 [ 534.768630][ T5751] vfs_open+0x82/0x3f0 [ 534.768647][ T5751] path_openat+0x208c/0x31a0 [ 534.768670][ T5751] ? __pfx_path_openat+0x10/0x10 [ 534.768698][ T5751] do_file_open+0x20e/0x430 [ 534.768722][ T5751] ? __pfx_do_file_open+0x10/0x10 [ 534.768755][ T5751] ? alloc_fd+0x476/0x790 [ 534.768782][ T5751] ? do_getname+0x191/0x390 [ 534.768802][ T5751] do_sys_openat2+0x10d/0x1e0 [ 534.768819][ T5751] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.768837][ T5751] __x64_sys_openat+0x12d/0x210 [ 534.768856][ T5751] ? __pfx___x64_sys_openat+0x10/0x10 [ 534.768876][ T5751] ? do_user_addr_fault+0x8d6/0x12f0 [ 534.768896][ T5751] do_syscall_64+0x106/0xf80 [ 534.768913][ T5751] ? clear_bhb_loop+0x40/0x90 [ 534.768932][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.768949][ T5751] RIP: 0033:0x7f7893d5c84e [ 534.768963][ T5751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.768979][ T5751] RSP: 002b:00007f7894b98b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.768994][ T5751] RAX: ffffffffffffffda RBX: 00007f7894b996c0 RCX: 00007f7893d5c84e [ 534.769003][ T5751] RDX: 0000000000000002 RSI: 00007f7894b98c00 RDI: ffffffffffffff9c [ 534.769014][ T5751] RBP: 00007f7894b98c00 R08: 0000000000000000 R09: 0000000000000000 [ 534.769025][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 534.769035][ T5751] R13: 00007f7894016038 R14: 00007f7894015fa0 R15: 00007ffe6d1018e8 [ 534.769053][ T5751] [ 534.769058][ T5751] [ 534.856971][ T5751] Allocated by task 23998: [ 534.858418][ T5751] kasan_save_stack+0x30/0x50 [ 534.859920][ T5751] kasan_save_track+0x14/0x30 [ 534.861441][ T5751] __kasan_kmalloc+0xaa/0xb0 [ 534.862921][ T5751] inode_doinit_use_xattr+0x54/0x330 [ 534.864713][ T5751] inode_doinit_with_dentry+0x10e6/0x1320 [ 534.866535][ T5751] selinux_d_instantiate+0x26/0x40 [ 534.868194][ T5751] security_d_instantiate+0x14c/0x1b0 [ 534.869914][ T5751] d_splice_alias_ops+0xd7/0x1320 [ 534.871556][ T5751] kernfs_iop_lookup+0x23f/0x2d0 [ 534.873246][ T5751] __lookup_slow+0x251/0x460 [ 534.874776][ T5751] lookup_slow+0x50/0x70 [ 534.876138][ T5751] link_path_walk+0x1377/0x1cc0 [ 534.877705][ T5751] path_openat+0x1be/0x31a0 [ 534.879168][ T5751] do_file_open+0x20e/0x430 [ 534.880618][ T5751] do_sys_openat2+0x10d/0x1e0 [ 534.882142][ T5751] __x64_sys_openat+0x12d/0x210 [ 534.883698][ T5751] do_syscall_64+0x106/0xf80 [ 534.885189][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.887065][ T5751] [ 534.887840][ T5751] Freed by task 23998: [ 534.889141][ T5751] kasan_save_stack+0x30/0x50 [ 534.890655][ T5751] kasan_save_track+0x14/0x30 [ 534.892154][ T5751] kasan_save_free_info+0x3b/0x70 [ 534.893767][ T5751] __kasan_slab_free+0x5f/0x80 [ 534.895317][ T5751] kfree+0x1f6/0x6b0 [ 534.896570][ T5751] inode_doinit_use_xattr+0x1e4/0x330 [ 534.898259][ T5751] inode_doinit_with_dentry+0x10e6/0x1320 [ 534.900068][ T5751] selinux_d_instantiate+0x26/0x40 [ 534.901727][ T5751] security_d_instantiate+0x14c/0x1b0 [ 534.903431][ T5751] d_splice_alias_ops+0xd7/0x1320 [ 534.905067][ T5751] kernfs_iop_lookup+0x23f/0x2d0 [ 534.906657][ T5751] __lookup_slow+0x251/0x460 [ 534.908137][ T5751] lookup_slow+0x50/0x70 [ 534.909497][ T5751] link_path_walk+0x1377/0x1cc0 [ 534.911172][ T5751] path_openat+0x1be/0x31a0 [ 534.912900][ T5751] do_file_open+0x20e/0x430 [ 534.914740][ T5751] do_sys_openat2+0x10d/0x1e0 [ 534.916612][ T5751] __x64_sys_openat+0x12d/0x210 [ 534.918569][ T5751] do_syscall_64+0x106/0xf80 [ 534.920419][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.922797][ T5751] [ 534.923734][ T5751] The buggy address belongs to the object at ffff88802d929000 [ 534.923734][ T5751] which belongs to the cache kmalloc-256 of size 256 [ 534.928873][ T5751] The buggy address is located 24 bytes inside of [ 534.928873][ T5751] freed 256-byte region [ffff88802d929000, ffff88802d929100) [ 534.933132][ T5751] [ 534.933941][ T5751] The buggy address belongs to the physical page: [ 534.935975][ T5751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d929000 pfn:0x2d928 [ 534.939150][ T5751] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 534.941844][ T5751] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 534.944526][ T5751] page_type: f5(slab) [ 534.945839][ T5751] raw: 00fff00000000240 ffff88801b842b40 ffffea0000b92290 ffffea0000a05e10 [ 534.948533][ T5751] raw: ffff88802d929000 000000000010000b 00000000f5000000 0000000000000000 [ 534.951245][ T5751] head: 00fff00000000240 ffff88801b842b40 ffffea0000b92290 ffffea0000a05e10 [ 534.953981][ T5751] head: ffff88802d929000 000000000010000b 00000000f5000000 0000000000000000 [ 534.956756][ T5751] head: 00fff00000000001 ffffea0000b64a01 00000000ffffffff 00000000ffffffff [ 534.959597][ T5751] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 534.962370][ T5751] page dumped because: kasan: bad access detected [ 534.964717][ T5751] page_owner tracks the page as allocated [ 534.966532][ T5751] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17809277911, free_ts 0 [ 534.972594][ T5751] post_alloc_hook+0x153/0x170 [ 534.974113][ T5751] get_page_from_freelist+0x111d/0x3140 [ 534.975844][ T5751] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 534.977733][ T5751] new_slab+0xa6/0x6d0 [ 534.979048][ T5751] refill_objects+0x26b/0x400 [ 534.980527][ T5751] __pcs_replace_empty_main+0x19f/0x600 [ 534.982266][ T5751] __kmalloc_cache_noprof+0x493/0x6f0 [ 534.983961][ T5751] bus_add_driver+0x92/0x5b0 [ 534.985451][ T5751] driver_register+0x1e2/0x360 [ 534.986976][ T5751] usb_register_driver+0x21c/0x3e0 [ 534.988602][ T5751] do_one_initcall+0x11d/0x760 [ 534.990135][ T5751] kernel_init_freeable+0x6e5/0x7a0 [ 534.991801][ T5751] kernel_init+0x1f/0x1e0 [ 534.993177][ T5751] ret_from_fork+0x754/0xd80 [ 534.994683][ T5751] ret_from_fork_asm+0x1a/0x30 [ 534.996209][ T5751] page_owner free stack trace missing [ 534.997905][ T5751] [ 534.998690][ T5751] Memory state around the buggy address: [ 535.000466][ T5751] ffff88802d928f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.003009][ T5751] ffff88802d928f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.005532][ T5751] >ffff88802d929000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.008049][ T5751] ^ [ 535.009614][ T5751] ffff88802d929080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.012139][ T5751] ffff88802d929100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.014665][ T5751] ================================================================== [ 535.020637][ T5751] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.023236][ T5751] CPU: 2 UID: 0 PID: 5751 Comm: syz.6.11361 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.026640][ T5751] Tainted: [L]=SOFTLOCKUP [ 535.028122][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 535.031339][ T5751] Call Trace: [ 535.032419][ T5751] [ 535.033369][ T5751] dump_stack_lvl+0x100/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 535.034967][ T5751] vpanic+0x552/0x970 [ 535.036255][ T5751] ? __pfx_vpanic+0x10/0x10 [ 535.037727][ T5751] ? dvb_device_open+0x33f/0x3b0 [ 535.039414][ T5751] panic+0xd1/0xe0 [ 535.040618][ T5751] ? __pfx_panic+0x10/0x10 [ 535.042060][ T5751] ? dvb_device_open+0x33f/0x3b0 [ 535.043615][ T5751] ? preempt_schedule_common+0x42/0xc0 [ 535.045354][ T5751] check_panic_on_warn.cold+0x19/0x34 [ 535.047059][ T5751] end_report.part.0+0x3a/0x90 [ 535.048585][ T5751] kasan_report.cold+0xe/0x18 [ 535.050086][ T5751] ? dvb_device_open+0x33f/0x3b0 [ 535.051665][ T5751] ? __pfx_dvb_device_open+0x10/0x10 [ 535.053338][ T5751] dvb_device_open+0x33f/0x3b0 [ 535.054874][ T5751] ? __pfx_dvb_device_open+0x10/0x10 [ 535.056537][ T5751] chrdev_open+0x234/0x6a0 [ 535.057957][ T5751] ? __pfx_chrdev_open+0x10/0x10 [ 535.059534][ T5751] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 535.061543][ T5751] do_dentry_open+0x6d8/0x1660 [ 535.063061][ T5751] ? __pfx_chrdev_open+0x10/0x10 [ 535.064637][ T5751] vfs_open+0x82/0x3f0 [ 535.065937][ T5751] path_openat+0x208c/0x31a0 [ 535.067472][ T5751] ? __pfx_path_openat+0x10/0x10 [ 535.069038][ T5751] do_file_open+0x20e/0x430 [ 535.070488][ T5751] ? __pfx_do_file_open+0x10/0x10 [ 535.072081][ T5751] ? alloc_fd+0x476/0x790 [ 535.073465][ T5751] ? do_getname+0x191/0x390 [ 535.074912][ T5751] do_sys_openat2+0x10d/0x1e0 [ 535.076482][ T5751] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.078123][ T5751] __x64_sys_openat+0x12d/0x210 [ 535.079662][ T5751] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.081355][ T5751] ? do_user_addr_fault+0x8d6/0x12f0 [ 535.083035][ T5751] do_syscall_64+0x106/0xf80 [ 535.084580][ T5751] ? clear_bhb_loop+0x40/0x90 [ 535.086102][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.087983][ T5751] RIP: 0033:0x7f7893d5c84e [ 535.089426][ T5751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.095421][ T5751] RSP: 002b:00007f7894b98b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.098225][ T5751] RAX: ffffffffffffffda RBX: 00007f7894b996c0 RCX: 00007f7893d5c84e [ 535.100752][ T5751] RDX: 0000000000000002 RSI: 00007f7894b98c00 RDI: ffffffffffffff9c [ 535.103289][ T5751] RBP: 00007f7894b98c00 R08: 0000000000000000 R09: 0000000000000000 [ 535.105802][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 535.108290][ T5751] R13: 00007f7894016038 R14: 00007f7894015fa0 R15: 00007ffe6d1018e8 [ 535.110794][ T5751] [ 535.112517][ T5751] Kernel Offset: disabled [ 535.113912][ T5751] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:50:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff81f5c92f RCX=ffffffff81f5c7ab RDX=ffff8880402fa480 RSI=0000000000000001 RDI=ffffffff81f5c92f RBP=ffffc900055d6eb0 RSP=ffffc900055d6e30 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000000 R12=0000000000000200 R13=1ffff92000abaddf R14=fffff52000abadde R15=ffffc900055d6ef8 RIP=ffffffff8b8edb5f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1aed44c6c0 ffffffff 00c00000 GS =0000 ffff8880d634d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c0374da08 CR3=000000005862b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca331c0e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca331c0e6 00007ffca331c0ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c02a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c02a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c02a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c02a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85789ee5 RDI=ffffffff9b498940 RBP=ffffffff9b498900 RSP=ffffc900058572e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000005 R14=0000000000000010 R15=0000000000000000 RIP=ffffffff85789f0f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7894b996c0 ffffffff 00c00000 GS =0000 ffff8880d644d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7893d85640 CR3=000000004898d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6d101dd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6d101dd6 00007ffe6d101ddc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893fea498 00007f7893fea468 00007f7893fea4a0 00007f7893fea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d8b73 RBX=ffff88801ee94900 RCX=ffffffff8b8eec75 RDX=0000000000000000 RSI=ffffffff8de6e8d1 RDI=ffffffff8c1ae9a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=ffffed1003dd2920 R13=0000000000000002 R14=ffffffff90d95b10 R15=0000000000000000 RIP=ffffffff8b8ed5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d654d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c02a4e661 CR3=0000000037f21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f746961 775f70756f72672e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6d101dd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6d101dd6 00007ffe6d101ddc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7893e32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9186b17c RBX=ffffffff90fb36b4 RCX=dffffc0000000000 RDX=1ffffffff21f66d6 RSI=0000000000000000 RDI=ffffffff90fb3674 RBP=ffffffff90fb36b4 RSP=ffffc90022d4eac8 R8 =ffffffff9186b1f4 R9 =0000000000000007 R10=0000000000000200 R11=00000000000174b4 R12=ffffffff90fb36b4 R13=ffffffff8274b4d3 R14=ffffffff90fb3674 R15=ffffffff90fb36b0 RIP=ffffffff81b7f2b0 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1c037846c0 ffffffff 00c00000 GS =0000 ffff8880d664d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000000000 CR3=000000004197b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 741b67c4775a6622 741b67c4775a6622 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7cba41f6ce143a3c 68381c268686d8af ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 457670e95e637045 2ba7c25c725e1d13 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c69c412ab12c94ec 6a281833c988d209 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb56644b6b230f62 160eadf5df431359 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe2b2412c41c3453 8065528c7399039f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ada9eed2b860c22b 030dbbb12dc45d8a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 725e1d132ba7c25c 8686d8af68381c26 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b66c9549322beb4c 8ef5531634df3713 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1506ffb6995923a 2d376f6068d42828 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c02bea498 00007f1c02bea468 00007f1c02bea4a0 00007f1c02bea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000