last executing test programs: 4.024560387s ago: executing program 0 (id=635): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40), 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 3.089106507s ago: executing program 1 (id=640): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="001122334455", 0x6) close(r0) 3.040507297s ago: executing program 1 (id=642): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.790838462s ago: executing program 2 (id=646): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(r0, 0x0, 0x0) 2.733712087s ago: executing program 2 (id=647): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xc4) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 2.732200971s ago: executing program 2 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x11f}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfffd, 0x0, 0x0, 0x0}}, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 995.769291ms ago: executing program 0 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r3) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e35e0009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff7}]}, 0x24}}, 0x4000044) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000314230c2ebd7000ffdbdf250900020073797a310000000008004100736977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) unshare(0x6e000000) 995.498639ms ago: executing program 1 (id=650): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0xffffffffffffffff], 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r1 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xa8}, 0x1, 0x0, 0x0, 0x30000800}, 0xc010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) 995.233549ms ago: executing program 2 (id=651): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='lzo-rle', 0x7) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000daffffffa2aa853d458f486e"], 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) close(r6) 950.182913ms ago: executing program 2 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20000004) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 936.029625ms ago: executing program 1 (id=655): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(r0, 0x0, 0x0) 903.971559ms ago: executing program 1 (id=656): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xc4) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 887.912037ms ago: executing program 1 (id=658): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x40, 0x5, 0x22, {0x22, 0x3, "ccfd3b620c2a865da0ec81d3d4dd38e3ab4cdefaf576bec45a6aeb2137035de0"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x16, 0x90, "866c72862cce0e5c6b44bb904b3c5a460218b201e84238857f9ce940b2b43c531f2999cf474d82c7cc4084062309ae9a69f42f5563a52baa9b6f76ff1302ab1fd1376afa07858d6246216cdaa2efd0965c0517a1fe60d442654e55c84332dccc6a93f1f42f8d121632a315de259ec3f561ab2ba8c23409b9a72cd19185d0794571767a49c410fa3ed0705dca757969bd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x43ad}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 854.228938ms ago: executing program 3 (id=659): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 798.22776ms ago: executing program 3 (id=660): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800573ad2e5ab8c181100000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000089b5bc72850000008200000085000000500000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1aef658c054e0eb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) fcntl$setlease(r6, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x7, 0x0, 0xfffff00c}]}, 0x8) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) msgctl$IPC_RMID(0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}}) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x12d8) 786.176209ms ago: executing program 2 (id=661): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0x94, {0x94, 0x11, "cb9c96e14bd5e3a86e0129bc180ca8ea4639b0800a9a2766dc516292f28e5cc785cdd020d2ff966202b21cfb6cecdffc2d370abe18b79a02660f1bf9911e83d0a71bd1312fe3d88d04caea4b9e64c1f10a41167d6f6c0377800be65773f46c8021a905c52e62d6b16c4a5e039f9756ff4e2417ed8b29d472ef3e729bcf2799f29b4e26bce39d84e1175ab0382c91527d0484"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x31, 0x81, "ea0278ae5cc83fa6ed216bc5682001b846b9798a12bfa0f9d00b4182a2c85f5e97229188d31316ff867c02c64f0687b5da9b9dfe6d87923f48f93bf5b45ed5cb5caca20578a115c23100a0abcdac394a60d772478208b2e6868645163f3b28e4a0abfbe26139506978d7a2fa9324068e5639769b830bf93cbdbf1a37aac326d13e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x200, 0x1, 0xfffffffe, 0x6, 0x8, 0x5, 0x8, 0x9, 0x1, 0x401, 0x8, 0x7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x91}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) close(r2) 708.245521ms ago: executing program 3 (id=662): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 705.046651ms ago: executing program 3 (id=670): socket$kcm(0x10, 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 88.9242ms ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x20000004) 88.585183ms ago: executing program 3 (id=664): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)}, 0x10) 83.081921ms ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="08009e0007380000"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) 44.20855ms ago: executing program 0 (id=666): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04f34120", @ANYRESDEC], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Midi1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 41.832861ms ago: executing program 3 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r1, 0x4bfb) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='8086 10d3 ffffffff ffffffff 0 0 8\x00', 0x22) 0s ago: executing program 0 (id=668): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x200000000000011, 0x2, 0xd) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) kernel console output (not intermixed with test programs): ][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.048409][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.052867][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.055831][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.066460][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.075206][ T5741] hsr_slave_0: entered promiscuous mode [ 49.077799][ T5741] hsr_slave_1: entered promiscuous mode [ 49.117840][ T5743] hsr_slave_0: entered promiscuous mode [ 49.120971][ T5743] hsr_slave_1: entered promiscuous mode [ 49.123915][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 49.126327][ T5743] Cannot create hsr debugfs directory [ 49.198006][ T5750] hsr_slave_0: entered promiscuous mode [ 49.201105][ T5750] hsr_slave_1: entered promiscuous mode [ 49.204185][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 49.206566][ T5750] Cannot create hsr debugfs directory [ 49.254319][ T5738] hsr_slave_0: entered promiscuous mode [ 49.257401][ T5738] hsr_slave_1: entered promiscuous mode [ 49.260365][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 49.262700][ T5738] Cannot create hsr debugfs directory [ 49.594260][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.605794][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.609760][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.617740][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.622192][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.628139][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.642939][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.650562][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.696035][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.702351][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.705996][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.712133][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.715343][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.720361][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.724140][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.728472][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.792755][ T5753] Bluetooth: hci2: command tx timeout [ 49.792794][ T5740] Bluetooth: hci0: command tx timeout [ 49.792813][ T5755] Bluetooth: hci3: command tx timeout [ 49.797719][ T5098] Bluetooth: hci1: command tx timeout [ 49.798043][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.809378][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.813167][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.817045][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.821382][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.825438][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.833625][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.837465][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.903255][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.909307][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.913000][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.918279][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.930672][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.934679][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.937840][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.941370][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.967889][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.004992][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.022006][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.024516][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.033833][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.053199][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.056320][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.088675][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.092550][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.120304][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.122672][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.142592][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.145406][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.150678][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.163226][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.165666][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.172158][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.187841][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.190097][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.215743][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.233074][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.235496][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.260297][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.263014][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.536074][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.574900][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.590216][ T5741] veth0_vlan: entered promiscuous mode [ 50.601858][ T5741] veth1_vlan: entered promiscuous mode [ 50.630705][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.641218][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.654188][ T5743] veth0_vlan: entered promiscuous mode [ 50.660135][ T5741] veth0_macvtap: entered promiscuous mode [ 50.673587][ T5741] veth1_macvtap: entered promiscuous mode [ 50.679922][ T5743] veth1_vlan: entered promiscuous mode [ 50.709510][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.727441][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.760324][ T5750] veth0_vlan: entered promiscuous mode [ 50.767372][ T5743] veth0_macvtap: entered promiscuous mode [ 50.772659][ T5738] veth0_vlan: entered promiscuous mode [ 50.782749][ T5743] veth1_macvtap: entered promiscuous mode [ 50.793104][ T5738] veth1_vlan: entered promiscuous mode [ 50.796706][ T5750] veth1_vlan: entered promiscuous mode [ 50.812584][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.829646][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.849097][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.882530][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.888818][ T5738] veth0_macvtap: entered promiscuous mode [ 50.894430][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.894861][ T5750] veth0_macvtap: entered promiscuous mode [ 50.898545][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.906414][ T5738] veth1_macvtap: entered promiscuous mode [ 50.926930][ T5750] veth1_macvtap: entered promiscuous mode [ 50.943784][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.948496][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.955751][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.968576][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.976867][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.994373][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.000802][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.004206][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.028471][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.032294][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.044086][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.046607][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.145652][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.148335][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.165529][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.186395][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.186917][ T5891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5891 comm=syz.3.4 [ 51.189262][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.348737][ T5891] veth3: entered allmulticast mode [ 51.509720][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.513473][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.536875][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.540942][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.541771][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.569148][ T5898] ISOFS: Unable to identify CD-ROM format. [ 51.615504][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.624710][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653483][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.657808][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.661928][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.665835][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.669492][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.674055][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.682867][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.686525][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.694053][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.697739][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.872234][ T5098] Bluetooth: hci2: command tx timeout [ 51.873179][ T5740] Bluetooth: hci0: command tx timeout [ 51.874152][ T5753] Bluetooth: hci3: command tx timeout [ 52.009554][ T5920] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 52.042268][ T5840] IPVS: starting estimator thread 0... [ 52.054008][ T5918] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11'. [ 52.124642][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 52.183569][ T5923] IPVS: using max 25 ests per chain, 60000 per kthread [ 52.376912][ T5925] veth3: entered allmulticast mode [ 52.710677][ T5930] ISOFS: Unable to identify CD-ROM format. [ 52.780749][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 52.780767][ T42] audit: type=1400 audit(1785592068.701:230): avc: denied { map_read map_write } for pid=5931 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.806369][ T42] audit: type=1400 audit(1785592068.731:231): avc: denied { read write } for pid=5933 comm="syz.2.16" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.815970][ T42] audit: type=1400 audit(1785592068.731:232): avc: denied { open } for pid=5933 comm="syz.2.16" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.889740][ T42] audit: type=1400 audit(1785592068.811:233): avc: denied { read } for pid=5938 comm="syz.1.18" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.897199][ T42] audit: type=1400 audit(1785592068.811:234): avc: denied { open } for pid=5938 comm="syz.1.18" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 52.953913][ T5941] bridge1: entered promiscuous mode [ 52.956484][ T5941] bridge1: entered allmulticast mode [ 52.964501][ T42] audit: type=1400 audit(1785592068.891:235): avc: denied { create } for pid=5926 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.975279][ T42] audit: type=1400 audit(1785592068.901:236): avc: denied { getopt } for pid=5926 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.987746][ T42] audit: type=1400 audit(1785592068.911:237): avc: denied { write } for pid=5942 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.003655][ T5941] ======================================================= [ 53.003655][ T5941] WARNING: The mand mount option has been deprecated and [ 53.003655][ T5941] and is ignored by this kernel. Remove the mand [ 53.003655][ T5941] option from the mount to silence this warning. [ 53.003655][ T5941] ======================================================= [ 53.064538][ T42] audit: type=1400 audit(1785592068.991:238): avc: denied { read write } for pid=5944 comm="syz.1.20" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.072964][ T42] audit: type=1400 audit(1785592068.991:239): avc: denied { open } for pid=5944 comm="syz.1.20" path="/dev/raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.220548][ T5949] fuse: Bad value for 'fd' [ 53.254926][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 53.321837][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.481592][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 53.485791][ T24] usb 6-1: no configurations [ 53.488796][ T24] usb 6-1: can't read configurations, error -22 [ 53.633617][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.811570][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 53.817724][ T24] usb 6-1: no configurations [ 53.819111][ T24] usb 6-1: can't read configurations, error -22 [ 53.822513][ T24] usb usb6-port1: attempt power cycle [ 53.860016][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 53.952377][ T5740] Bluetooth: hci2: command tx timeout [ 53.961663][ T5740] Bluetooth: hci0: command tx timeout [ 54.017085][ T5972] fuse: Bad value for 'fd' [ 54.090989][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 54.181776][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.207177][ T5976] veth5: entered allmulticast mode [ 54.212307][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 54.215489][ T24] usb 6-1: no configurations [ 54.216962][ T24] usb 6-1: can't read configurations, error -22 [ 54.351645][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 54.372828][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 54.377873][ T24] usb 6-1: no configurations [ 54.381082][ T24] usb 6-1: can't read configurations, error -22 [ 54.385993][ T24] usb usb6-port1: unable to enumerate USB device [ 54.640020][ T5996] fuse: Invalid rootmode [ 54.666850][ T5998] Zero length message leads to an empty skb [ 54.674025][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 55.303185][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 55.447069][ T6005] veth7: entered allmulticast mode [ 55.457138][ T6006] bond0: (slave bond_slave_1): Releasing backup interface [ 55.715991][ T5740] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 55.718916][ T5740] Bluetooth: hci1: Injecting HCI hardware error event [ 55.722168][ T5098] Bluetooth: hci1: hardware error 0x00 [ 55.853528][ T5740] Bluetooth: hci1: unexpected event for opcode 0x080f [ 55.932617][ T6017] kvm: apic: phys broadcast and lowest prio [ 56.031779][ T5740] Bluetooth: hci2: command tx timeout [ 56.076208][ T6019] fuse: Invalid rootmode [ 56.194185][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 56.335851][ T6026] veth9: entered allmulticast mode [ 56.475081][ T6034] ISOFS: Unable to identify CD-ROM format. [ 56.587797][ T6040] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 56.824755][ T6052] fuse: Invalid rootmode [ 56.867029][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 56.892131][ T1045] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.911820][ T5740] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 56.916345][ T5740] Bluetooth: hci3: Injecting HCI hardware error event [ 56.920008][ T5740] Bluetooth: hci3: hardware error 0x00 [ 56.969146][ T6057] veth3: entered allmulticast mode [ 57.051599][ T1045] usb 8-1: Using ep0 maxpacket: 16 [ 57.054366][ T1045] usb 8-1: no configurations [ 57.055943][ T1045] usb 8-1: can't read configurations, error -22 [ 57.080486][ T6060] bond0: (slave bond_slave_0): Releasing backup interface [ 57.130673][ T6063] ISOFS: Unable to identify CD-ROM format. [ 57.192830][ T1045] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.202393][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 57.325573][ C0] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 57.329669][ C0] sr 2:0:0:0: [sr0] tag#5 CDB: Test Unit Ready [ 57.351686][ T1045] usb 8-1: Using ep0 maxpacket: 16 [ 57.360125][ T1045] usb 8-1: no configurations [ 57.362178][ T1045] usb 8-1: can't read configurations, error -22 [ 57.365183][ T1045] usb usb8-port1: attempt power cycle [ 57.712051][ T1045] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 57.732595][ T1045] usb 8-1: Using ep0 maxpacket: 16 [ 57.737473][ T1045] usb 8-1: no configurations [ 57.741553][ T1045] usb 8-1: can't read configurations, error -22 [ 57.792230][ T5098] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 57.871557][ T1045] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.892588][ T1045] usb 8-1: Using ep0 maxpacket: 16 [ 57.895358][ T1045] usb 8-1: no configurations [ 57.897298][ T1045] usb 8-1: can't read configurations, error -22 [ 57.901862][ T1045] usb usb8-port1: unable to enumerate USB device [ 58.034213][ T42] kauditd_printk_skb: 530 callbacks suppressed [ 58.034231][ T42] audit: type=1400 audit(1785592073.961:770): avc: denied { mount } for pid=6083 comm="syz.1.72" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.046162][ T42] audit: type=1400 audit(1785592073.961:771): avc: denied { search } for pid=6083 comm="syz.1.72" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.055012][ T42] audit: type=1400 audit(1785592073.961:772): avc: denied { search } for pid=6083 comm="syz.1.72" name="usb_gadget" dev="configfs" ino=5155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.063632][ T42] audit: type=1400 audit(1785592073.961:773): avc: denied { unmount } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.092002][ T6086] fuse: Bad value for 'rootmode' [ 58.237942][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.76'. [ 58.395478][ T6095] veth3: entered allmulticast mode [ 58.433758][ T5098] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.440072][ T5098] Bluetooth: hci0: Injecting HCI hardware error event [ 58.444283][ T5753] Bluetooth: hci0: hardware error 0x00 [ 58.561984][ T5846] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 58.732232][ T5846] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 58.737781][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.741318][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.749787][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.753692][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.757403][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.762074][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.765828][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.769458][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.776763][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.780573][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.784348][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.789034][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.792925][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.796551][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.800985][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.805047][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.808621][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.813258][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.816832][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.820027][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.825251][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.828726][ T5846] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.834361][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.838764][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 58.873788][ T5846] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 58.878066][ T5846] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 58.881423][ T5846] usb 6-1: Product: syz [ 58.883902][ T5846] usb 6-1: Manufacturer: syz [ 58.885819][ T5846] usb 6-1: SerialNumber: syz [ 58.920128][ T5846] usb 6-1: config 0 descriptor?? [ 58.924873][ C3] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 58.928899][ C3] sr 2:0:0:0: [sr0] tag#23 CDB: Test Unit Ready [ 58.992496][ T5740] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 59.095083][ T5846] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 59.177712][ T55] usb 6-1: USB disconnect, device number 6 [ 59.211770][ T55] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 59.476103][ T5740] Bluetooth: hci2: command tx timeout [ 59.695571][ T42] audit: type=1400 audit(1785592075.621:774): avc: denied { write } for pid=6113 comm="syz.3.81" name="usb_gadget" dev="configfs" ino=5155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.713017][ T42] audit: type=1400 audit(1785592075.621:775): avc: denied { add_name } for pid=6113 comm="syz.3.81" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.722022][ T42] audit: type=1400 audit(1785592075.621:776): avc: denied { create } for pid=6113 comm="syz.3.81" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 59.728365][ T42] audit: type=1400 audit(1785592075.621:777): avc: denied { write } for pid=6113 comm="syz.3.81" name="functions" dev="configfs" ino=11582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.735632][ T42] audit: type=1400 audit(1785592075.621:778): avc: denied { write } for pid=6113 comm="syz.3.81" name="p_chmask" dev="configfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.746184][ T42] audit: type=1400 audit(1785592075.621:779): avc: denied { open } for pid=6113 comm="syz.3.81" path="/25/config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask" dev="configfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 59.768167][ T6118] usbip-vudc usbip-vudc.0: gadget not bound [ 59.887532][ T6101] Set syz1 is full, maxelem 65536 reached [ 60.092121][ T6124] fuse: Bad value for 'rootmode' [ 60.216349][ T5527] IPVS: starting estimator thread 0... [ 60.218487][ T6127] netlink: 164 bytes leftover after parsing attributes in process `syz.3.85'. [ 60.267657][ T6131] ISOFS: Unable to identify CD-ROM format. [ 60.322371][ T6129] IPVS: using max 44 ests per chain, 105600 per kthread [ 60.339268][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 60.369372][ T6134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6134 comm=syz.3.87 [ 60.372611][ T6136] syzkaller0: entered promiscuous mode [ 60.376415][ T6136] syzkaller0: entered allmulticast mode [ 60.513131][ T5753] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.667056][ T6142] fuse: Bad value for 'rootmode' [ 60.723206][ T6148] netlink: 'syz.1.91': attribute type 7 has an invalid length. [ 60.726418][ T6148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.91'. [ 60.730036][ T6150] ISOFS: Unable to identify CD-ROM format. [ 60.763290][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 60.769293][ T6155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6155 comm=syz.2.97 [ 60.770374][ T6152] netlink: 164 bytes leftover after parsing attributes in process `syz.0.95'. [ 60.863470][ T6166] e1000e 0000:00:02.0 eth1: removed PHC [ 60.901585][ T848] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 60.991107][ T6166] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 61.010163][ T6178] fuse: Unknown parameter 'use00000000000000000000' [ 61.052853][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 61.055709][ T848] usb 8-1: no configurations [ 61.057721][ T848] usb 8-1: can't read configurations, error -22 [ 61.087479][ T6185] ISOFS: Unable to identify CD-ROM format. [ 61.181569][ T848] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 61.195566][ T6172] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 61.199799][ T6172] net2280 0000:00:02.0: irq 33, pci mem ffffc90005f60000, chip rev 0000 [ 61.205123][ T6172] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 61.304034][ T6210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.112'. [ 61.332927][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 61.334246][ T6213] fuse: Unknown parameter 'use00000000000000000000' [ 61.337366][ T848] usb 8-1: no configurations [ 61.339061][ T848] usb 8-1: can't read configurations, error -22 [ 61.352130][ T848] usb usb8-port1: attempt power cycle [ 61.387959][ T6218] ISOFS: Unable to identify CD-ROM format. [ 61.604389][ T6236] netlink: 56 bytes leftover after parsing attributes in process `syz.1.119'. [ 61.609480][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 61.691584][ T848] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 61.713055][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 61.715382][ T848] usb 8-1: no configurations [ 61.716978][ T848] usb 8-1: can't read configurations, error -22 [ 61.851662][ T848] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 61.872215][ T848] usb 8-1: Using ep0 maxpacket: 16 [ 61.875109][ T848] usb 8-1: no configurations [ 61.877263][ T848] usb 8-1: can't read configurations, error -22 [ 61.880241][ T848] usb usb8-port1: unable to enumerate USB device [ 62.041260][ T6256] fuse: Unknown parameter 'use00000000000000000000' [ 62.491822][ T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 62.618358][ T6283] fuse: Unknown parameter 'user_i00000000000000000000' [ 62.653730][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 62.656542][ T55] usb 8-1: no configurations [ 62.658459][ T55] usb 8-1: can't read configurations, error -22 [ 62.741125][ T6289] process 'syz.0.136' launched '/dev/fd/8' with NULL argv: empty string added [ 62.802587][ T55] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 63.441540][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 63.636423][ T55] usb 8-1: device descriptor read/all, error -71 [ 63.643486][ T55] usb usb8-port1: attempt power cycle [ 63.726588][ T6311] fuse: Bad value for 'fd' [ 64.011571][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.191558][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 64.194944][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.203886][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 64.206769][ T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 64.209474][ T9] usb 5-1: config 14 has no interface number 0 [ 64.211419][ T9] usb 5-1: config 14 has no interface number 1 [ 64.213538][ T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 64.217657][ T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 64.221340][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 64.226554][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 64.230348][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 64.234143][ T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.238291][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 64.240387][ T9] usb 5-1: config 14 interface 228 has no altsetting 0 [ 64.244810][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 64.247777][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.250326][ T9] usb 5-1: Product: syz [ 64.251844][ T9] usb 5-1: Manufacturer: syz [ 64.253357][ T9] usb 5-1: SerialNumber: syz [ 64.637662][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 64.637679][ T42] audit: type=1400 audit(1785592080.561:836): avc: denied { setopt } for pid=6326 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.665578][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 64.671576][ T5753] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 64.674958][ T5753] Bluetooth: hci2: Injecting HCI hardware error event [ 64.678112][ T5740] Bluetooth: hci2: hardware error 0x00 [ 64.691373][ T42] audit: type=1400 audit(1785592080.611:837): avc: denied { create } for pid=6330 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.730505][ T42] audit: type=1400 audit(1785592080.651:838): avc: denied { create } for pid=6326 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.769212][ T42] audit: type=1400 audit(1785592080.691:839): avc: denied { ioctl } for pid=6326 comm="syz.3.151" path="socket:[10995]" dev="sockfs" ino=10995 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.946271][ T6336] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 64.948537][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 64.953705][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 64.963663][ T42] audit: type=1400 audit(1785592080.881:840): avc: denied { cmd } for pid=6330 comm="syz.2.153" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 65.066278][ T9] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 65.075789][ T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 65.231737][ T2331] usb 42-1: SetAddress Request (2) to port 0 [ 65.235329][ T2331] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.274080][ T42] audit: type=1400 audit(1785592081.201:841): avc: denied { write } for pid=6341 comm="syz.3.155" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 65.281829][ T42] audit: type=1400 audit(1785592081.201:842): avc: denied { open } for pid=6341 comm="syz.3.155" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 65.331807][ T42] audit: type=1400 audit(1785592081.261:843): avc: denied { ioctl } for pid=6344 comm="syz.1.156" path="socket:[11834]" dev="sockfs" ino=11834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.341782][ T42] audit: type=1400 audit(1785592081.261:844): avc: denied { bind } for pid=6344 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.349431][ T42] audit: type=1400 audit(1785592081.271:845): avc: denied { write } for pid=6344 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.399091][ T6343] usb 2-1: USB disconnect, device number 2 [ 65.526354][ T6337] vhci_hcd: connection reset by peer [ 65.530704][ T13] vhci_hcd vhci_hcd.2: stop threads [ 65.533383][ T13] vhci_hcd vhci_hcd.2: release socket [ 65.537293][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 66.279318][ T6358] zram0: detected capacity change from 0 to 8 [ 66.454247][ T6364] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.467081][ T6364] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 66.524317][ T6370] Bluetooth: MGMT ver 1.23 [ 66.718947][ T6381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.169'. [ 66.757185][ T5740] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 67.029645][ T848] usb 5-1: USB disconnect, device number 2 [ 67.052196][ T848] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 67.438349][ T6408] netlink: 164 bytes leftover after parsing attributes in process `syz.1.178'. [ 67.618508][ T6418] syz.1.182 uses obsolete (PF_INET,SOCK_PACKET) [ 67.623538][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 67.722614][ T848] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 67.871627][ T848] usb 8-1: Using ep0 maxpacket: 32 [ 67.875312][ T848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.878859][ T848] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 67.881952][ T848] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 67.884569][ T848] usb 8-1: config 14 has no interface number 0 [ 67.886497][ T848] usb 8-1: config 14 has no interface number 1 [ 67.888514][ T848] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 67.892300][ T848] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 67.896071][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 67.899564][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 67.903355][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 67.906979][ T848] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.911096][ T848] usb 8-1: config 14 interface 57 has no altsetting 0 [ 67.913393][ T848] usb 8-1: config 14 interface 228 has no altsetting 0 [ 67.919925][ T848] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 67.922950][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.925534][ T848] usb 8-1: Product: syz [ 67.926882][ T848] usb 8-1: Manufacturer: syz [ 67.928398][ T848] usb 8-1: SerialNumber: syz [ 68.278271][ T6433] netlink: 164 bytes leftover after parsing attributes in process `syz.2.189'. [ 68.322896][ T6440] fuse: Bad value for 'fd' [ 68.337620][ T848] legousbtower 8-1:14.57: interrupt endpoints not found [ 68.375435][ T6445] netlink: 3 bytes leftover after parsing attributes in process `syz.2.193'. [ 68.446536][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 68.514023][ T5846] e1000 0000:00:06.0 eth0: Reset adapter [ 68.739971][ T848] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 68.744357][ T848] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 68.863614][ T5846] e1000 0000:00:06.0 eth0: Reset adapter [ 69.207257][ T24] usb 8-1: USB disconnect, device number 14 [ 69.252028][ T24] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 69.530850][ T6483] netlink: 164 bytes leftover after parsing attributes in process `syz.0.201'. [ 69.591574][ T1359] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.751597][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 69.755555][ T1359] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 69.763693][ T1359] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 69.767618][ T1359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.770968][ T1359] usb 6-1: Product: syz [ 69.772778][ T1359] usb 6-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 69.786689][ T1359] usb 6-1: SerialNumber: syz [ 69.996071][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 69.996083][ T42] audit: type=1400 audit(1785592085.921:886): avc: denied { map } for pid=6478 comm="syz.1.200" path="socket:[12310]" dev="sockfs" ino=12310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.005352][ T42] audit: type=1400 audit(1785592085.921:887): avc: denied { read } for pid=6478 comm="syz.1.200" path="socket:[12310]" dev="sockfs" ino=12310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.005395][ T42] audit: type=1400 audit(1785592085.921:888): avc: denied { setopt } for pid=6478 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.005430][ T42] audit: type=1400 audit(1785592085.921:889): avc: denied { write } for pid=6478 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.005463][ T42] audit: type=1400 audit(1785592085.921:890): avc: denied { read } for pid=6478 comm="syz.1.200" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.005498][ T42] audit: type=1400 audit(1785592085.921:891): avc: denied { ioctl } for pid=6478 comm="syz.1.200" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.047256][ T6479] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 70.049850][ T6479] netlink: 128 bytes leftover after parsing attributes in process `syz.1.200'. [ 70.053127][ T6479] netlink: 3 bytes leftover after parsing attributes in process `syz.1.200'. [ 70.063014][ T1359] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 70.089855][ T1359] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.097077][ T1359] usb 6-1: USB disconnect, device number 7 [ 70.106793][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 70.271687][ T2331] usb 42-1: device descriptor read/8, error -110 [ 70.662055][ T2331] usb usb42-port1: attempt power cycle [ 71.152714][ T5825] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 71.234885][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238230][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.241913][ T2331] usb usb42-port1: unable to enumerate USB device [ 76.978582][ T42] audit: type=1400 audit(1785592092.901:892): avc: denied { write } for pid=6488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.016508][ T42] audit: type=1400 audit(1785592092.941:893): avc: denied { write } for pid=6491 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.810926][ T6497] net2280 0000:00:02.0: unbind [ 78.819143][ T42] audit: type=1400 audit(1785592094.741:894): avc: denied { getopt } for pid=6494 comm="syz.1.203" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.824943][ T6500] Set syz0 is full, maxelem 0 reached [ 78.871571][ T6497] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 78.874729][ T6497] net2280 0000:00:02.0: irq 33, pci mem ffffc90007480000, chip rev 0000 [ 78.878147][ T6497] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 78.882481][ T42] audit: type=1400 audit(1785592094.811:895): avc: denied { listen } for pid=6495 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.483796][ T60] cfg80211: failed to load regulatory.db [ 85.333729][ T42] audit: type=1400 audit(1785592101.261:896): avc: denied { search } for pid=6503 comm="syz.2.206" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 85.339903][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 85.398435][ T42] audit: type=1400 audit(1785592101.321:897): avc: denied { setopt } for pid=6514 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.412801][ T42] audit: type=1400 audit(1785592101.331:898): avc: denied { ioctl } for pid=6514 comm="syz.0.209" path="socket:[10071]" dev="sockfs" ino=10071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.522922][ T6522] netlink: 164 bytes leftover after parsing attributes in process `syz.0.211'. [ 85.700097][ T42] audit: type=1400 audit(1785592101.621:899): avc: denied { write } for pid=6529 comm="syz.0.214" name="functions" dev="configfs" ino=11705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.711758][ T848] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.831568][ T42] audit: type=1400 audit(1785592101.631:900): avc: denied { write } for pid=6529 comm="syz.0.214" name="c.1" dev="configfs" ino=11850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.838591][ T42] audit: type=1400 audit(1785592101.631:901): avc: denied { write } for pid=6529 comm="syz.0.214" name="c.1" dev="configfs" ino=11850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.891587][ T848] usb 7-1: Using ep0 maxpacket: 32 [ 85.895029][ T848] usb 7-1: unable to get BOS descriptor or descriptor too short [ 85.898337][ T848] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 85.900967][ T848] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 85.904131][ T848] usb 7-1: config 14 has no interface number 0 [ 85.906097][ T848] usb 7-1: config 14 has no interface number 1 [ 85.908174][ T848] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 85.911697][ T848] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 85.915340][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 85.919064][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 85.922735][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 85.926782][ T848] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.930954][ T848] usb 7-1: config 14 interface 57 has no altsetting 0 [ 85.933154][ T848] usb 7-1: config 14 interface 228 has no altsetting 0 [ 85.937491][ T848] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 85.940225][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.943344][ T848] usb 7-1: Product: syz [ 85.944765][ T848] usb 7-1: Manufacturer: syz [ 85.946384][ T848] usb 7-1: SerialNumber: syz [ 86.007874][ T42] audit: type=1400 audit(1785592101.931:902): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.304124][ T6545] netlink: 164 bytes leftover after parsing attributes in process `syz.3.221'. [ 86.357481][ T848] legousbtower 7-1:14.57: interrupt endpoints not found [ 86.417692][ T42] audit: type=1400 audit(1785592102.341:903): avc: denied { mounton } for pid=6559 comm="syz.0.225" path="/78/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.424723][ T42] audit: type=1400 audit(1785592102.351:904): avc: denied { mount } for pid=6559 comm="syz.0.225" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.469958][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.474285][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.475656][ T42] audit: type=1400 audit(1785592102.401:905): avc: denied { write } for pid=6551 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.676924][ T6539] syz.1.217 (6539): drop_caches: 2 [ 86.759485][ T848] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 44.206 build 23566 [ 86.765483][ T848] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 86.866673][ T6576] netlink: 164 bytes leftover after parsing attributes in process `syz.1.231'. [ 86.960633][ T1359] usb 7-1: USB disconnect, device number 2 [ 86.970904][ T1359] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 87.224894][ T6600] netlink: 164 bytes leftover after parsing attributes in process `syz.1.240'. [ 87.351119][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.359078][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.560020][ T6630] netlink: 164 bytes leftover after parsing attributes in process `syz.3.250'. [ 87.660654][ T6628] syz.2.249 (6628): drop_caches: 2 [ 88.043868][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.211634][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 88.216336][ T5825] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.220730][ T5825] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 88.224306][ T5825] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 88.227821][ T5825] usb 7-1: config 14 has no interface number 0 [ 88.230540][ T5825] usb 7-1: config 14 has no interface number 1 [ 88.233339][ T5825] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 88.237980][ T5825] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 88.245189][ T5825] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 88.249203][ T5825] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 88.253640][ T5825] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 88.257720][ T5825] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.264462][ T5825] usb 7-1: config 14 interface 57 has no altsetting 0 [ 88.267354][ T5825] usb 7-1: config 14 interface 228 has no altsetting 0 [ 88.274485][ T5825] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 88.279084][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.282540][ T5825] usb 7-1: Product: syz [ 88.284416][ T5825] usb 7-1: Manufacturer: syz [ 88.286383][ T5825] usb 7-1: SerialNumber: syz [ 88.698167][ T5825] legousbtower 7-1:14.57: interrupt endpoints not found [ 89.041628][ T1359] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 89.112704][ T5825] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 44.206 build 23566 [ 89.120325][ T5825] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 89.213589][ T1359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.218358][ T1359] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.226894][ T1359] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.230934][ T1359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.234516][ T1359] usb 8-1: Product: syz [ 89.236327][ T1359] usb 8-1: Manufacturer: syz [ 89.238354][ T1359] usb 8-1: SerialNumber: syz [ 89.253553][ T1359] cdc_mbim 8-1:1.0: skipping garbage [ 89.307298][ T1045] usb 7-1: USB disconnect, device number 3 [ 89.318385][ T1045] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 89.386658][ T6688] ISOFS: Unable to identify CD-ROM format. [ 89.454333][ T6675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.662225][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.667056][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.034204][ T6712] netlink: 164 bytes leftover after parsing attributes in process `syz.2.277'. [ 90.060648][ T6675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.063641][ T1359] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 90.066709][ T1359] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 90.069676][ T6716] ISOFS: Unable to identify CD-ROM format. [ 90.075514][ T1359] wwan wwan0: port wwan0mbim0 attached [ 90.089959][ T1359] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ca:0c:37:a1:06:ac [ 90.274203][ T5450] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 90.357779][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 90.357796][ T42] audit: type=1400 audit(1785592106.281:921): avc: denied { write } for pid=6742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.409346][ T42] audit: type=1400 audit(1785592106.331:922): avc: denied { write } for pid=6747 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.470468][ T6752] netlink: 164 bytes leftover after parsing attributes in process `syz.1.286'. [ 90.501599][ T6757] ISOFS: Unable to identify CD-ROM format. [ 90.501594][ T1045] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 90.565970][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.290'. [ 90.622658][ T42] audit: type=1400 audit(1785592106.551:923): avc: denied { read write } for pid=6674 comm="syz.3.266" name="cdc-wdm0" dev="devtmpfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.624655][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 90.632298][ T42] audit: type=1400 audit(1785592106.551:924): avc: denied { open } for pid=6674 comm="syz.3.266" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.634939][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 90.635952][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 90.649484][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 90.652565][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 90.663150][ T1045] usb 7-1: Using ep0 maxpacket: 32 [ 90.664902][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 90.667432][ T1045] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.673897][ T1045] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 90.677104][ T1045] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 90.680461][ T1045] usb 7-1: config 14 has no interface number 0 [ 90.683095][ T1045] usb 7-1: config 14 has no interface number 1 [ 90.685807][ T1045] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.687331][ T6770] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6770 comm=syz.1.293 [ 90.690157][ T1045] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 90.690181][ T1045] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 90.708160][ T1045] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 90.713108][ T1045] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 90.717724][ T1045] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.723405][ T1045] usb 7-1: config 14 interface 57 has no altsetting 0 [ 90.726230][ T1045] usb 7-1: config 14 interface 228 has no altsetting 0 [ 90.731083][ T1045] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 90.735279][ T1045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.739407][ T1045] usb 7-1: Product: syz [ 90.741174][ T1045] usb 7-1: Manufacturer: syz [ 90.743689][ T1045] usb 7-1: SerialNumber: syz [ 90.781380][ T6770] veth3: entered allmulticast mode [ 90.787208][ T6770] bond1: (slave veth3): Enslaving as an active interface with an up link [ 90.794360][ T6774] bond1 (unregistering): (slave veth3): Releasing backup interface [ 90.798293][ T6774] bond1 (unregistering): Released all slaves [ 91.154599][ T1045] legousbtower 7-1:14.57: interrupt endpoints not found [ 91.361714][ T6037] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 91.511612][ T6037] usb 6-1: Using ep0 maxpacket: 16 [ 91.515481][ T6037] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.521118][ T6037] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 91.524894][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.528069][ T6037] usb 6-1: Product: syz [ 91.529729][ T6037] usb 6-1: Manufacturer: syz [ 91.531620][ T6037] usb 6-1: SerialNumber: syz [ 91.535836][ T6037] usb 6-1: config 0 descriptor?? [ 91.556599][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.558645][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.560675][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.562787][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.564955][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.567136][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.569296][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.571852][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.574591][ T1045] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 44.206 build 23566 [ 91.578003][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.578016][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.580711][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.580722][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.582759][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.582770][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.584908][ C0] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 91.584918][ C0] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 91.597108][ T1045] legousbtower 7-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 91.773476][ T1045] usb 7-1: USB disconnect, device number 4 [ 91.781806][ T1045] legousbtower 7-1:14.228: LEGO USB Tower #-159 now disconnected [ 91.822878][ T55] usb 8-1: USB disconnect, device number 15 [ 91.826539][ T55] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 91.858784][ T6794] ISOFS: Unable to identify CD-ROM format. [ 91.859004][ T42] audit: type=1400 audit(1785592107.781:925): avc: denied { write } for pid=6791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.919877][ T42] audit: type=1400 audit(1785592107.841:926): avc: denied { write } for pid=6797 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.940227][ T6801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6801 comm=syz.3.300 [ 91.943213][ T55] wwan wwan0: port wwan0mbim0 disconnected [ 91.993861][ T42] audit: type=1400 audit(1785592107.921:927): avc: denied { write } for pid=6804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.063893][ T42] audit: type=1400 audit(1785592107.991:928): avc: denied { write } for pid=6809 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.087179][ T6811] netlink: 164 bytes leftover after parsing attributes in process `syz.3.303'. [ 92.133948][ T42] audit: type=1400 audit(1785592108.061:929): avc: denied { write } for pid=6815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.191154][ T42] audit: type=1400 audit(1785592108.111:930): avc: denied { write } for pid=6823 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.313883][ T6836] FAULT_INJECTION: forcing a failure. [ 92.313883][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.319010][ T6836] CPU: 3 UID: 0 PID: 6836 Comm: syz.3.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.319028][ T6836] Tainted: [L]=SOFTLOCKUP [ 92.319032][ T6836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.319038][ T6836] Call Trace: [ 92.319055][ T6836] [ 92.319061][ T6836] dump_stack_lvl+0x100/0x190 [ 92.319082][ T6836] should_fail_ex.cold+0x5/0xa [ 92.319097][ T6836] _copy_from_user+0x2e/0xd0 [ 92.319115][ T6836] copy_msghdr_from_user+0x9f/0x4c0 [ 92.319128][ T6836] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.319144][ T6836] ___sys_sendmsg+0x106/0x1e0 [ 92.319155][ T6836] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.319165][ T6836] ? __lock_acquire+0x49f/0x1a40 [ 92.319180][ T6836] ? get_pid_task+0x106/0x250 [ 92.319205][ T6836] __sys_sendmsg+0x160/0x210 [ 92.319219][ T6836] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.319272][ T6836] do_syscall_64+0x115/0x870 [ 92.319291][ T6836] ? clear_bhb_loop+0x40/0x90 [ 92.319309][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.319320][ T6836] RIP: 0033:0x7f1ef239e019 [ 92.319330][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.319340][ T6836] RSP: 002b:00007f1ef3295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.319365][ T6836] RAX: ffffffffffffffda RBX: 00007f1ef2625fa0 RCX: 00007f1ef239e019 [ 92.319372][ T6836] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 92.319378][ T6836] RBP: 00007f1ef3295090 R08: 0000000000000000 R09: 0000000000000000 [ 92.319384][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.319390][ T6836] R13: 00007f1ef2626038 R14: 00007f1ef2625fa0 R15: 00007fffd90f09e8 [ 92.319403][ T6836] [ 92.569122][ T6855] netlink: 164 bytes leftover after parsing attributes in process `syz.3.312'. [ 92.701639][ T5825] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.758226][ T6866] fuse: Unknown parameter 'group_id00000000000000000000' [ 92.851583][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 92.856215][ T5825] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.859903][ T5825] usb 7-1: config 179 has no interface number 0 [ 92.863099][ T5825] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 92.867938][ T5825] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 92.873047][ T5825] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.877814][ T5825] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 92.882891][ T5825] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.889019][ T5825] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 92.893370][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.902037][ T6845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.051620][ T1045] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 93.119550][ T5825] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input6 [ 93.221563][ T1045] usb 8-1: Using ep0 maxpacket: 32 [ 93.225377][ T1045] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.228827][ T1045] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 93.231532][ T1045] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 93.234159][ T1045] usb 8-1: config 14 has no interface number 0 [ 93.236087][ T1045] usb 8-1: config 14 has no interface number 1 [ 93.238045][ T1045] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 93.241668][ T1045] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 93.245473][ T1045] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 93.248985][ T1045] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 93.252683][ T1045] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 93.256133][ T1045] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.260158][ T1045] usb 8-1: config 14 interface 57 has no altsetting 0 [ 93.262461][ T1045] usb 8-1: config 14 interface 228 has no altsetting 0 [ 93.266778][ T1045] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 93.269670][ T1045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.272445][ T1045] usb 8-1: Product: syz [ 93.274142][ T1045] usb 8-1: Manufacturer: syz [ 93.275626][ T1045] usb 8-1: SerialNumber: syz [ 93.311218][ T10] usb 7-1: USB disconnect, device number 5 [ 93.311277][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 93.313812][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 93.684470][ T1045] legousbtower 8-1:14.57: interrupt endpoints not found [ 93.712497][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 93.733604][ T6870] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6870 comm=syz.0.316 [ 93.877693][ T6874] ISOFS: Unable to identify CD-ROM format. [ 93.893566][ T6870] veth3: entered allmulticast mode [ 93.900399][ T6870] bond1: (slave veth3): Enslaving as an active interface with an up link [ 93.912439][ T6872] bond1 (unregistering): (slave veth3): Releasing backup interface [ 93.925250][ T6872] bond1 (unregistering): Released all slaves [ 94.082150][ T6882] netlink: 164 bytes leftover after parsing attributes in process `syz.0.321'. [ 94.085290][ T1045] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 94.090207][ T1045] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 94.143023][ T55] usb 6-1: USB disconnect, device number 8 [ 94.176589][ T6891] fuse: Bad value for 'user_id' [ 94.178203][ T6891] fuse: Bad value for 'user_id' [ 94.215643][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.1.324'. [ 94.229501][ T6894] use of bytesused == 0 is deprecated and will be removed in the future, [ 94.233153][ T6894] use the actual size instead. [ 94.305891][ T6901] ISOFS: Unable to identify CD-ROM format. [ 94.435391][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 94.462708][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.465186][ T6911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6911 comm=syz.1.330 [ 94.466760][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.544620][ T5825] usb 8-1: USB disconnect, device number 16 [ 94.557958][ T5825] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 94.638519][ T6911] veth5: entered allmulticast mode [ 94.644072][ T6911] bond1: (slave veth5): Enslaving as an active interface with an up link [ 94.650273][ T6915] bond1 (unregistering): (slave veth5): Releasing backup interface [ 94.656886][ T6915] bond1 (unregistering): Released all slaves [ 94.827288][ T6921] netlink: 'syz.1.334': attribute type 17 has an invalid length. [ 94.830611][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 96.050573][ T6945] ISOFS: Unable to identify CD-ROM format. [ 96.159748][ T6956] fuse: Bad value for 'user_id' [ 96.161354][ T6956] fuse: Bad value for 'user_id' [ 96.194202][ T6960] __nla_validate_parse: 2 callbacks suppressed [ 96.194214][ T6960] netlink: 72 bytes leftover after parsing attributes in process `syz.3.351'. [ 96.302412][ T5825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 96.461550][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 96.468146][ T5825] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 96.472746][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.476206][ T5825] usb 6-1: Product: syz [ 96.478549][ T5825] usb 6-1: Manufacturer: syz [ 96.480528][ T5825] usb 6-1: SerialNumber: syz [ 96.487942][ T5825] usb 6-1: config 0 descriptor?? [ 96.898614][ T5825] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 96.911829][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.918784][ T5825] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 96.923326][ T5825] usb 6-1: media controller created [ 96.959450][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.102984][ T5825] zl10353_read_register: readreg error (reg=127, ret==0) [ 97.105995][ T5825] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 97.108705][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 97.115069][ T5825] usb 6-1: USB disconnect, device number 9 [ 97.216993][ T5825] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 97.369272][ T6975] fuse: Bad value for 'fd' [ 97.371130][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 97.371139][ T42] audit: type=1400 audit(1785592113.291:939): avc: denied { prog_load } for pid=6974 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 97.422029][ T6980] netlink: 72 bytes leftover after parsing attributes in process `syz.0.361'. [ 97.513510][ T6988] netlink: 164 bytes leftover after parsing attributes in process `syz.3.366'. [ 97.590134][ T6994] fuse: Bad value for 'fd' [ 97.618394][ T6998] ISOFS: Unable to identify CD-ROM format. [ 97.744705][ T7011] netlink: 72 bytes leftover after parsing attributes in process `syz.2.375'. [ 97.789205][ T7013] fuse: Bad value for 'fd' [ 97.859414][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 97.911005][ T7018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7018 comm=syz.3.376 [ 98.081634][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 98.241565][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 98.248123][ T10] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 98.252132][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.255561][ T10] usb 7-1: Product: syz [ 98.257486][ T10] usb 7-1: Manufacturer: syz [ 98.259536][ T10] usb 7-1: SerialNumber: syz [ 98.266602][ T10] usb 7-1: config 0 descriptor?? [ 98.423743][ T7023] ISOFS: Unable to identify CD-ROM format. [ 98.680565][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 98.695541][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.699031][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 98.702118][ T10] usb 7-1: media controller created [ 98.709364][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.792020][ T7017] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.881413][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 98.888050][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 98.890684][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 98.894922][ T10] usb 7-1: USB disconnect, device number 6 [ 98.925130][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 98.931918][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 98.944233][ T7018] veth9: entered allmulticast mode [ 99.149494][ T7039] fuse: Bad value for 'fd' [ 99.375971][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 99.598572][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 99.649789][ T7062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7062 comm=syz.2.395 [ 100.018477][ T7065] fuse: Bad value for 'fd' [ 100.062293][ T7067] ISOFS: Unable to identify CD-ROM format. [ 100.395314][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.399051][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.408801][ T7062] veth3: entered allmulticast mode [ 100.412401][ T7062] bond1: (slave veth3): Enslaving as an active interface with an up link [ 100.417455][ T7080] FAULT_INJECTION: forcing a failure. [ 100.417455][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.421763][ T7080] CPU: 2 UID: 0 PID: 7080 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.421780][ T7080] Tainted: [L]=SOFTLOCKUP [ 100.421784][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.421790][ T7080] Call Trace: [ 100.421795][ T7080] [ 100.421799][ T7080] dump_stack_lvl+0x100/0x190 [ 100.421821][ T7080] should_fail_ex.cold+0x5/0xa [ 100.421838][ T7080] _copy_to_user+0x32/0xd0 [ 100.421854][ T7080] simple_read_from_buffer+0xcb/0x170 [ 100.421869][ T7080] proc_fail_nth_read+0x1af/0x230 [ 100.421888][ T7080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.421906][ T7080] ? rw_verify_area+0xce/0x6d0 [ 100.421921][ T7080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.421937][ T7080] vfs_read+0x1e4/0xb40 [ 100.421955][ T7080] ? __pfx_vfs_read+0x10/0x10 [ 100.421971][ T7080] ? __fget_files+0x215/0x3d0 [ 100.421985][ T7080] ? __fget_files+0x21f/0x3d0 [ 100.421999][ T7080] ksys_read+0x12a/0x250 [ 100.422015][ T7080] ? __pfx_ksys_read+0x10/0x10 [ 100.422035][ T7080] do_syscall_64+0x115/0x870 [ 100.422049][ T7080] ? clear_bhb_loop+0x40/0x90 [ 100.422063][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.422078][ T7080] RIP: 0033:0x7fb3bed5e84e [ 100.422088][ T7080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.422098][ T7080] RSP: 002b:00007fb3bfb90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.422110][ T7080] RAX: ffffffffffffffda RBX: 00007fb3bfb916c0 RCX: 00007fb3bed5e84e [ 100.422117][ T7080] RDX: 000000000000000f RSI: 00007fb3bfb910a0 RDI: 0000000000000005 [ 100.422123][ T7080] RBP: 00007fb3bfb91090 R08: 0000000000000000 R09: 0000000000000000 [ 100.422129][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.422135][ T7080] R13: 00007fb3bf026218 R14: 00007fb3bf026180 R15: 00007fff70a156c8 [ 100.422148][ T7080] [ 100.423084][ T7063] bond1 (unregistering): (slave veth3): Releasing backup interface [ 100.487928][ T7063] bond1 (unregistering): Released all slaves [ 100.566890][ T42] audit: type=1400 audit(1785592116.491:940): avc: denied { write } for pid=7084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.574635][ T42] audit: type=1400 audit(1785592116.491:941): avc: denied { map_create } for pid=7086 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 100.598394][ T7087] netlink: 164 bytes leftover after parsing attributes in process `syz.2.404'. [ 100.601335][ T7092] fuse: Bad value for 'fd' [ 100.606100][ T42] audit: type=1400 audit(1785592116.531:942): avc: denied { write } for pid=7090 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.641689][ T7098] ISOFS: Unable to identify CD-ROM format. [ 100.663555][ T42] audit: type=1400 audit(1785592116.591:943): avc: denied { write } for pid=7097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.714208][ T42] audit: type=1400 audit(1785592116.641:944): avc: denied { write } for pid=7105 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.914116][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 100.954725][ T42] audit: type=1400 audit(1785592116.881:945): avc: denied { write } for pid=7115 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.966237][ T7117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7117 comm=syz.3.412 [ 101.705896][ T7121] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 101.748857][ T7123] fuse: Invalid rootmode [ 101.801018][ T7127] netlink: 164 bytes leftover after parsing attributes in process `syz.1.417'. [ 101.811874][ T7117] veth9: entered allmulticast mode [ 101.816622][ T7117] bond1: (slave veth9): Enslaving as an active interface with an up link [ 101.820129][ T7116] warning: `syz.0.413' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.834253][ T7118] bond1 (unregistering): (slave veth9): Releasing backup interface [ 101.840271][ T7118] bond1 (unregistering): Released all slaves [ 102.109244][ T7144] fuse: Invalid rootmode [ 102.142053][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 102.181594][ T848] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 102.312085][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 102.323977][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 102.327459][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.330596][ T10] usb 6-1: Product: syz [ 102.332298][ T10] usb 6-1: Manufacturer: syz [ 102.334179][ T10] usb 6-1: SerialNumber: syz [ 102.338295][ T10] usb 6-1: config 0 descriptor?? [ 102.352494][ T848] usb 8-1: Using ep0 maxpacket: 32 [ 102.356296][ T848] usb 8-1: unable to get BOS descriptor or descriptor too short [ 102.359772][ T848] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 102.362608][ T848] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 102.365208][ T848] usb 8-1: config 14 has no interface number 0 [ 102.367196][ T848] usb 8-1: config 14 has no interface number 1 [ 102.369182][ T848] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 102.373585][ T848] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 102.377418][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 102.380926][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 102.384641][ T848] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 102.388162][ T848] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.392176][ T848] usb 8-1: config 14 interface 57 has no altsetting 0 [ 102.394292][ T848] usb 8-1: config 14 interface 228 has no altsetting 0 [ 102.397944][ T848] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 102.400821][ T848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.403342][ T848] usb 8-1: Product: syz [ 102.404644][ T848] usb 8-1: Manufacturer: syz [ 102.406092][ T848] usb 8-1: SerialNumber: syz [ 102.762666][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 102.770118][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.775488][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 102.778007][ T10] usb 6-1: media controller created [ 102.784433][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.815444][ T848] legousbtower 8-1:14.57: interrupt endpoints not found [ 102.980525][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 102.983067][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 102.985527][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 102.992067][ T10] usb 6-1: USB disconnect, device number 10 [ 103.029878][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 103.217126][ T848] legousbtower 8-1:14.228: get version request failed: -71 [ 103.220325][ T848] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 103.227768][ T7148] netlink: 164 bytes leftover after parsing attributes in process `syz.0.427'. [ 103.230409][ T848] usb 8-1: USB disconnect, device number 17 [ 103.338725][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 103.354729][ T7155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7155 comm=syz.0.430 [ 103.436563][ T7155] veth5: entered allmulticast mode [ 103.439936][ T7155] bond1: (slave veth5): Enslaving as an active interface with an up link [ 103.444859][ T7157] bond1 (unregistering): (slave veth5): Releasing backup interface [ 103.448853][ T7157] bond1 (unregistering): Released all slaves [ 103.575447][ T7163] fuse: Invalid rootmode [ 103.602466][ T42] audit: type=1400 audit(1785592119.531:946): avc: denied { call } for pid=7164 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 103.638184][ T7165] syz.0.435 (7165): drop_caches: 2 [ 103.696650][ T7171] netlink: 164 bytes leftover after parsing attributes in process `syz.0.437'. [ 104.003403][ T5840] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 104.061995][ T7187] netlink: 'syz.0.440': attribute type 5 has an invalid length. [ 104.151716][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 104.156930][ T5840] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 104.159972][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.162724][ T5840] usb 8-1: Product: syz [ 104.164197][ T5840] usb 8-1: Manufacturer: syz [ 104.165779][ T5840] usb 8-1: SerialNumber: syz [ 104.168727][ T5840] usb 8-1: config 0 descriptor?? [ 104.584316][ T5840] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 104.589702][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.595003][ T5840] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 104.597621][ T5840] usb 8-1: media controller created [ 104.605785][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.647665][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 104.665111][ T7192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7192 comm=syz.0.441 [ 104.783537][ T5840] zl10353_read_register: readreg error (reg=127, ret==0) [ 104.787082][ T5840] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 104.789685][ T5840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 104.794606][ T5840] usb 8-1: USB disconnect, device number 18 [ 104.809564][ T6532] udevd[6532]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 104.815508][ T6532] udevd[6532]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 104.815851][ T5840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 104.842768][ T7192] veth7: entered allmulticast mode [ 104.856197][ T7192] bond1: (slave veth7): Enslaving as an active interface with an up link [ 104.861897][ T7200] fuse: Bad value for 'rootmode' [ 104.868169][ T7196] bond1 (unregistering): (slave veth7): Releasing backup interface [ 104.879028][ T7196] bond1 (unregistering): Released all slaves [ 104.938889][ T7204] netlink: 164 bytes leftover after parsing attributes in process `syz.1.446'. [ 105.002347][ T7211] ISOFS: Unable to identify CD-ROM format. [ 105.164353][ T848] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.311559][ T848] usb 7-1: Using ep0 maxpacket: 32 [ 105.318130][ T848] usb 7-1: unable to get BOS descriptor or descriptor too short [ 105.321546][ T848] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 105.324201][ T848] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 105.327812][ T848] usb 7-1: config 14 has no interface number 0 [ 105.329814][ T848] usb 7-1: config 14 has no interface number 1 [ 105.331893][ T848] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 105.336003][ T848] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 105.339778][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 105.344032][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 105.348790][ T848] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 105.353906][ T848] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.359313][ T848] usb 7-1: config 14 interface 57 has no altsetting 0 [ 105.362296][ T848] usb 7-1: config 14 interface 228 has no altsetting 0 [ 105.367734][ T848] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 105.371679][ T848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.375017][ T848] usb 7-1: Product: syz [ 105.376863][ T848] usb 7-1: Manufacturer: syz [ 105.377144][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 105.378847][ T848] usb 7-1: SerialNumber: syz [ 105.790264][ T848] legousbtower 7-1:14.57: interrupt endpoints not found [ 106.046307][ T7223] fuse: Bad value for 'rootmode' [ 106.090390][ T7225] netlink: 164 bytes leftover after parsing attributes in process `syz.3.456'. [ 106.166159][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 106.190041][ T7232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7232 comm=syz.3.459 [ 106.198623][ T848] legousbtower 7-1:14.228: get version request failed: -71 [ 106.203508][ T848] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 106.210818][ T848] usb 7-1: USB disconnect, device number 7 [ 106.272269][ T7238] ISOFS: Unable to identify CD-ROM format. [ 106.373314][ T7232] veth11: entered allmulticast mode [ 106.376672][ T7232] bond1: (slave veth11): Enslaving as an active interface with an up link [ 106.380984][ T7236] bond1 (unregistering): (slave veth11): Releasing backup interface [ 106.384981][ T7236] bond1 (unregistering): Released all slaves [ 106.494758][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 106.572021][ T1359] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.735672][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 106.742161][ T1359] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.745201][ T1359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.747748][ T1359] usb 6-1: Product: syz [ 106.749184][ T1359] usb 6-1: Manufacturer: syz [ 106.750849][ T1359] usb 6-1: SerialNumber: syz [ 106.760766][ T1359] usb 6-1: config 0 descriptor?? [ 106.936139][ T7257] ISOFS: Unable to identify CD-ROM format. [ 106.990675][ T7259] __nla_validate_parse: 1 callbacks suppressed [ 106.990693][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 107.042990][ T7260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7260 comm=syz.2.470 [ 107.170278][ T1359] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 107.174468][ T1359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.177988][ T1359] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 107.180617][ T1359] usb 6-1: media controller created [ 107.190466][ T1359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.378174][ T1359] zl10353_read_register: readreg error (reg=127, ret==0) [ 107.382118][ T1359] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 107.384689][ T1359] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 107.388347][ T1359] usb 6-1: USB disconnect, device number 11 [ 107.406384][ T1359] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 107.713934][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.471'. [ 107.722389][ T7260] veth5: entered allmulticast mode [ 107.725781][ T7260] bond1: (slave veth5): Enslaving as an active interface with an up link [ 107.735317][ T7261] bond1 (unregistering): (slave veth5): Releasing backup interface [ 107.740634][ T7261] bond1 (unregistering): Released all slaves [ 107.858358][ T7270] netlink: 164 bytes leftover after parsing attributes in process `syz.3.474'. [ 107.932867][ T7279] fuse: Unknown parameter 'use00000000000000000000' [ 107.937254][ T7280] ISOFS: Unable to identify CD-ROM format. [ 107.998142][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.480'. [ 108.101724][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 108.130569][ T7287] FAULT_INJECTION: forcing a failure. [ 108.130569][ T7287] name failslab, interval 1, probability 0, space 0, times 1 [ 108.139577][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.0.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.139607][ T7287] Tainted: [L]=SOFTLOCKUP [ 108.139614][ T7287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.139626][ T7287] Call Trace: [ 108.139632][ T7287] [ 108.139638][ T7287] dump_stack_lvl+0x100/0x190 [ 108.139666][ T7287] should_fail_ex.cold+0x5/0xa [ 108.139688][ T7287] should_failslab+0xc2/0x120 [ 108.139711][ T7287] __kmalloc_noprof+0xfc/0x820 [ 108.139731][ T7287] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 108.139761][ T7287] kernfs_fop_write_iter+0x26a/0x5f0 [ 108.139787][ T7287] vfs_write+0x6ac/0x1050 [ 108.139814][ T7287] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 108.139851][ T7287] ? __pfx_vfs_write+0x10/0x10 [ 108.139891][ T7287] ksys_write+0x12a/0x250 [ 108.139919][ T7287] ? __pfx_ksys_write+0x10/0x10 [ 108.139950][ T7287] do_syscall_64+0x115/0x870 [ 108.139970][ T7287] ? clear_bhb_loop+0x40/0x90 [ 108.139989][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.140010][ T7287] RIP: 0033:0x7f6de959e019 [ 108.140024][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.140042][ T7287] RSP: 002b:00007f6dea4ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.140062][ T7287] RAX: ffffffffffffffda RBX: 00007f6de9825fa0 RCX: 00007f6de959e019 [ 108.140075][ T7287] RDX: 000000000000004a RSI: 0000200000001440 RDI: 0000000000000003 [ 108.140087][ T7287] RBP: 00007f6dea4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 108.140096][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.140105][ T7287] R13: 00007f6de9826038 R14: 00007f6de9825fa0 R15: 00007ffea05240e8 [ 108.140127][ T7287] [ 108.256109][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 108.271561][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 108.275301][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 108.278600][ T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 108.281179][ T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 108.284743][ T9] usb 7-1: config 14 has no interface number 0 [ 108.286732][ T9] usb 7-1: config 14 has no interface number 1 [ 108.288694][ T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 108.292209][ T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 108.296135][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 108.299708][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 108.303378][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 108.306951][ T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.308277][ T7290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7290 comm=syz.0.482 [ 108.311093][ T9] usb 7-1: config 14 interface 57 has no altsetting 0 [ 108.311106][ T9] usb 7-1: config 14 interface 228 has no altsetting 0 [ 108.322475][ T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 108.325345][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.327852][ T9] usb 7-1: Product: syz [ 108.329208][ T9] usb 7-1: Manufacturer: syz [ 108.330667][ T9] usb 7-1: SerialNumber: syz [ 108.746604][ T9] legousbtower 7-1:14.57: interrupt endpoints not found [ 109.052806][ T7294] netlink: 164 bytes leftover after parsing attributes in process `syz.3.483'. [ 109.080408][ T42] audit: type=1400 audit(1785592125.001:947): avc: denied { prog_run } for pid=7296 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 109.127808][ T7297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.151017][ T7297] net2280 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 109.154576][ T9] legousbtower 7-1:14.228: get version request failed: -71 [ 109.156815][ T9] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 109.170849][ T9] usb 7-1: USB disconnect, device number 8 [ 109.190090][ T7290] veth9: entered allmulticast mode [ 109.194711][ T7290] bond1: (slave veth9): Enslaving as an active interface with an up link [ 109.199887][ T7291] bond1 (unregistering): (slave veth9): Releasing backup interface [ 109.205258][ T7291] bond1 (unregistering): Released all slaves [ 109.275066][ T7306] ISOFS: Unable to identify CD-ROM format. [ 109.446565][ T7316] netlink: 96 bytes leftover after parsing attributes in process `syz.3.488'. [ 109.695558][ T7318] No source specified [ 109.742250][ T7320] netlink: 164 bytes leftover after parsing attributes in process `syz.2.494'. [ 110.433779][ T7328] ISOFS: Unable to identify CD-ROM format. [ 110.465793][ T7330] FAULT_INJECTION: forcing a failure. [ 110.465793][ T7330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.471214][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.0.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.471244][ T7330] Tainted: [L]=SOFTLOCKUP [ 110.471250][ T7330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.471261][ T7330] Call Trace: [ 110.471269][ T7330] [ 110.471277][ T7330] dump_stack_lvl+0x100/0x190 [ 110.471368][ T7330] should_fail_ex.cold+0x5/0xa [ 110.471412][ T7330] _copy_from_user+0x2e/0xd0 [ 110.471478][ T7330] copy_msghdr_from_user+0x9f/0x4c0 [ 110.471508][ T7330] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.471564][ T7330] ___sys_sendmsg+0x106/0x1e0 [ 110.471587][ T7330] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.471602][ T7330] ? __lock_acquire+0x49f/0x1a40 [ 110.471653][ T7330] ? get_pid_task+0x106/0x250 [ 110.471704][ T7330] __sys_sendmsg+0x160/0x210 [ 110.471729][ T7330] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.471764][ T7330] do_syscall_64+0x115/0x870 [ 110.471794][ T7330] ? clear_bhb_loop+0x40/0x90 [ 110.471818][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.471837][ T7330] RIP: 0033:0x7f6de959e019 [ 110.471855][ T7330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.471871][ T7330] RSP: 002b:00007f6dea4ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.471900][ T7330] RAX: ffffffffffffffda RBX: 00007f6de9825fa0 RCX: 00007f6de959e019 [ 110.471912][ T7330] RDX: 0000000000048040 RSI: 0000200000000140 RDI: 0000000000000003 [ 110.471923][ T7330] RBP: 00007f6dea4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 110.471933][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.471944][ T7330] R13: 00007f6de9826038 R14: 00007f6de9825fa0 R15: 00007ffea05240e8 [ 110.471969][ T7330] [ 110.550584][ T7332] fuse: Unknown parameter 'user_i00000000000000000000' [ 110.645869][ T7338] netlink: 164 bytes leftover after parsing attributes in process `syz.0.503'. [ 110.676366][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.680017][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.714983][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 110.729227][ T7346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7346 comm=syz.3.498 [ 110.831829][ T7346] veth13: entered allmulticast mode [ 110.835104][ T7346] bond1: (slave veth13): Enslaving as an active interface with an up link [ 110.839657][ T7348] bond1 (unregistering): (slave veth13): Releasing backup interface [ 110.845136][ T7348] bond1 (unregistering): Released all slaves [ 111.223715][ T7356] ISOFS: Unable to identify CD-ROM format. [ 112.232370][ T7351] Set syz1 is full, maxelem 65536 reached [ 112.305470][ T7362] fuse: Unknown parameter 'user_i00000000000000000000' [ 112.363395][ T7364] netlink: set zone limit has 4 unknown bytes [ 112.366509][ T7364] openvswitch: netlink: Flow key attribute not present in set flow. [ 112.451656][ T7371] __nla_validate_parse: 1 callbacks suppressed [ 112.451676][ T7371] netlink: 164 bytes leftover after parsing attributes in process `syz.1.513'. [ 112.496129][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 112.549917][ T7374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7374 comm=syz.1.515 [ 112.627364][ T7386] ISOFS: Unable to identify CD-ROM format. [ 112.679057][ T7388] usbip-vudc usbip-vudc.0: failed to lookup sock [ 112.691666][ T7374] veth7: entered allmulticast mode [ 112.694794][ T7374] bond1: (slave veth7): Enslaving as an active interface with an up link [ 112.699545][ T7383] bond1 (unregistering): (slave veth7): Releasing backup interface [ 112.712716][ T7383] bond1 (unregistering): Released all slaves [ 112.737682][ T7391] fuse: Unknown parameter 'user_id00000000000000000000' [ 112.790397][ T7393] netlink: 164 bytes leftover after parsing attributes in process `syz.0.523'. [ 112.840384][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 112.947192][ T7410] fuse: Unknown parameter 'user_id00000000000000000000' [ 113.940967][ T7416] usbip-vudc usbip-vudc.0: failed to lookup sock [ 114.015206][ T7418] netlink: 164 bytes leftover after parsing attributes in process `syz.1.534'. [ 114.173739][ T5825] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 114.261279][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 114.312762][ T7425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7425 comm=syz.1.536 [ 114.322218][ T5825] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 114.325506][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.328354][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.331807][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.334524][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.337374][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.340686][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.344048][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.346801][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.350137][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.353530][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.356879][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.360667][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.364007][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.366875][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.370161][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.376526][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.379364][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.383164][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.393182][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.396071][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.399441][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.408820][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.411660][ T5825] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.414994][ T5825] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.418638][ T5825] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 114.421554][ T5825] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 114.424212][ T5825] usb 8-1: Product: syz [ 114.425502][ T5825] usb 8-1: Manufacturer: syz [ 114.427006][ T5825] usb 8-1: SerialNumber: syz [ 114.431154][ T5825] usb 8-1: config 0 descriptor?? [ 114.438776][ T5825] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 114.663115][ T1045] usb 8-1: USB disconnect, device number 19 [ 114.669820][ T1045] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 115.063064][ T7429] netlink: 96 bytes leftover after parsing attributes in process `syz.0.537'. [ 115.096086][ T7425] veth9: entered allmulticast mode [ 115.100325][ T7425] bond1: (slave veth9): Enslaving as an active interface with an up link [ 115.105645][ T7426] bond1 (unregistering): (slave veth9): Releasing backup interface [ 115.109292][ T7426] bond1 (unregistering): Released all slaves [ 115.150175][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 115.224110][ T7437] fuse: Unknown parameter 'user_id00000000000000000000' [ 115.246117][ T7439] ISOFS: Unable to identify CD-ROM format. [ 115.314560][ T7444] netlink: 164 bytes leftover after parsing attributes in process `syz.1.544'. [ 115.698045][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 116.376290][ T7456] syzkaller0: entered promiscuous mode [ 116.378487][ T7456] syzkaller0: entered allmulticast mode [ 116.474662][ T7473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7473 comm=syz.0.552 [ 116.495608][ T7476] fuse: Bad value for 'fd' [ 116.528076][ T7478] ISOFS: Unable to identify CD-ROM format. [ 116.615657][ T7473] veth11: entered allmulticast mode [ 116.620233][ T7473] bond1: (slave veth11): Enslaving as an active interface with an up link [ 116.625271][ T7480] bond1 (unregistering): (slave veth11): Releasing backup interface [ 116.629783][ T7480] bond1 (unregistering): Released all slaves [ 116.663928][ T2331] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 116.812394][ T2331] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 116.815898][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.818785][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.822323][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.825349][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.828223][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.833282][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.836495][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.839398][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.843106][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.846027][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.849070][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.853356][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.856375][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.859314][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.863829][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.866789][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.869725][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.873762][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.880948][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.885258][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.889663][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.893938][ T2331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.897456][ T7502] syzkaller0: entered promiscuous mode [ 116.897598][ T2331] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.899193][ T7502] syzkaller0: entered allmulticast mode [ 116.904574][ T2331] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.908135][ T2331] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.911030][ T2331] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.913736][ T2331] usb 8-1: Product: syz [ 116.915085][ T2331] usb 8-1: Manufacturer: syz [ 116.916562][ T2331] usb 8-1: SerialNumber: syz [ 116.920032][ T2331] usb 8-1: config 0 descriptor?? [ 116.928950][ T2331] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.975792][ T7504] fuse: Bad value for 'fd' [ 117.028270][ T7507] ISOFS: Unable to identify CD-ROM format. [ 117.093997][ T7513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7513 comm=syz.1.568 [ 117.117680][ T42] audit: type=1400 audit(1785592133.041:948): avc: denied { ioctl } for pid=7515 comm="syz.0.569" path="socket:[16579]" dev="sockfs" ino=16579 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.130154][ T2331] usb 8-1: USB disconnect, device number 20 [ 117.139502][ T2331] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 117.184997][ T42] audit: type=1400 audit(1785592133.111:949): avc: denied { listen } for pid=7515 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.203692][ T7513] veth11: entered allmulticast mode [ 117.208064][ T7513] bond1: (slave veth11): Enslaving as an active interface with an up link [ 117.216133][ T7517] bond1 (unregistering): (slave veth11): Releasing backup interface [ 117.221290][ T7517] bond1 (unregistering): Released all slaves [ 117.352609][ T7526] fuse: Bad value for 'fd' [ 117.407812][ T7528] syzkaller0: entered promiscuous mode [ 117.409733][ T7528] syzkaller0: entered allmulticast mode [ 117.509503][ T7530] __nla_validate_parse: 9 callbacks suppressed [ 117.509523][ T7530] netlink: 164 bytes leftover after parsing attributes in process `syz.0.575'. [ 117.510335][ T7533] ISOFS: Unable to identify CD-ROM format. [ 117.551262][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 117.603679][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.580'. [ 117.607536][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'. [ 117.644864][ T7547] fuse: Unknown parameter '0x0000000000000003' [ 117.671771][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 117.720345][ T7549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7549 comm=syz.3.584 [ 117.724182][ T7551] syzkaller0: entered promiscuous mode [ 117.726632][ T7551] syzkaller0: entered allmulticast mode [ 117.799583][ T7555] netlink: 164 bytes leftover after parsing attributes in process `syz.0.586'. [ 117.821104][ T7549] veth15: entered allmulticast mode [ 117.824530][ T7549] bond1: (slave veth15): Enslaving as an active interface with an up link [ 117.834829][ T7553] bond1 (unregistering): (slave veth15): Releasing backup interface [ 117.838591][ T7553] bond1 (unregistering): Released all slaves [ 117.851884][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 118.204587][ T42] audit: type=1400 audit(1785592134.131:950): avc: denied { watch watch_reads } for pid=7568 comm="syz.1.591" path="/136" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.351596][ T6037] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 118.502379][ T6037] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 118.507133][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.510303][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.514088][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.517279][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.520091][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.523653][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.526629][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.529605][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.533070][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.536108][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.538812][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.542496][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.546118][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.548795][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.552128][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.554977][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.557720][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.561074][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.564152][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.567307][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.570771][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.574530][ T6037] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 118.577383][ T6037] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.580686][ T6037] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.584630][ T6037] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 118.587501][ T6037] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 118.590061][ T6037] usb 8-1: Product: syz [ 118.591373][ T6037] usb 8-1: Manufacturer: syz [ 118.594527][ T6037] usb 8-1: SerialNumber: syz [ 118.601999][ T6037] usb 8-1: config 0 descriptor?? [ 118.613909][ T6037] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 118.809768][ T6037] usb 8-1: USB disconnect, device number 21 [ 118.816140][ T6037] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 118.919127][ T7575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.593'. [ 118.922508][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 118.991369][ T7577] zram: Can't change algorithm for initialized device [ 118.996048][ T7577] zram: Cannot change disksize for initialized device [ 119.037387][ T7581] fuse: Unknown parameter '0x0000000000000003' [ 119.087824][ T7583] netlink: 164 bytes leftover after parsing attributes in process `syz.1.597'. [ 119.138750][ T7586] syzkaller0: entered promiscuous mode [ 119.141058][ T7586] syzkaller0: entered allmulticast mode [ 119.312387][ T7592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7592 comm=syz.1.601 [ 119.368901][ T7600] zram: Can't change algorithm for initialized device [ 119.373815][ T7600] zram: Cannot change disksize for initialized device [ 119.459401][ T7592] veth13: entered allmulticast mode [ 119.465438][ T7592] bond1: (slave veth13): Enslaving as an active interface with an up link [ 119.474200][ T7601] bond1 (unregistering): (slave veth13): Releasing backup interface [ 119.486726][ T7601] bond1 (unregistering): Released all slaves [ 119.521969][ T7606] fuse: Unknown parameter '0x0000000000000003' [ 119.653206][ T7614] syzkaller0: entered promiscuous mode [ 119.655043][ T7614] syzkaller0: entered allmulticast mode [ 119.784051][ T42] audit: type=1400 audit(1785592135.711:951): avc: denied { bind } for pid=7615 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.953640][ T7632] fuse: Unknown parameter '0x0000000000000003' [ 120.071575][ T2331] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 120.222010][ T2331] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 120.225326][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.228348][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.232148][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.234840][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.237831][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.241192][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.244039][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.246886][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.250812][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.254691][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.258391][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.262766][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.266513][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.270107][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.274474][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.278491][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.282140][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.286410][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.290392][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.294077][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.298444][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.302229][ T2331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.306295][ T2331] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.310923][ T2331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.316355][ T2331] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.320227][ T2331] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.323347][ T2331] usb 6-1: Product: syz [ 120.324744][ T2331] usb 6-1: Manufacturer: syz [ 120.326244][ T2331] usb 6-1: SerialNumber: syz [ 120.330499][ T2331] usb 6-1: config 0 descriptor?? [ 120.336549][ T2331] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 120.536894][ T5825] usb 6-1: USB disconnect, device number 12 [ 120.540872][ T5825] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 120.566318][ T7641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7641 comm=syz.0.620 [ 120.692425][ T7641] veth13: entered allmulticast mode [ 120.695947][ T7641] bond1: (slave veth13): Enslaving as an active interface with an up link [ 120.704403][ T7645] bond1 (unregistering): (slave veth13): Releasing backup interface [ 120.710684][ T7645] bond1 (unregistering): Released all slaves [ 120.721671][ T7644] syzkaller0: entered promiscuous mode [ 120.723908][ T7644] syzkaller0: entered allmulticast mode [ 120.932337][ T7655] fuse: Unknown parameter '0x0000000000000003' [ 123.021957][ T7664] __nla_validate_parse: 9 callbacks suppressed [ 123.021980][ T7664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 123.028303][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 123.030491][ T7660] netlink: 164 bytes leftover after parsing attributes in process `syz.3.628'. [ 123.088688][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 123.110163][ T7670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7670 comm=syz.3.631 [ 123.217027][ T7670] veth17: entered allmulticast mode [ 123.221925][ T7670] bond1: (slave veth17): Enslaving as an active interface with an up link [ 123.234812][ T7676] bond1 (unregistering): (slave veth17): Releasing backup interface [ 123.246770][ T7676] bond1 (unregistering): Released all slaves [ 123.386762][ T7679] syzkaller0: entered promiscuous mode [ 123.389146][ T7679] syzkaller0: entered allmulticast mode [ 123.586965][ T7683] fuse: Unknown parameter '0x0000000000000003' [ 123.905645][ T7692] netlink: 164 bytes leftover after parsing attributes in process `syz.3.639'. [ 124.007424][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 124.011626][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.641'. [ 124.014394][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 124.038662][ T7699] syzkaller0: entered promiscuous mode [ 124.041059][ T7699] syzkaller0: entered allmulticast mode [ 124.044119][ T7701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7701 comm=syz.1.642 [ 124.048001][ T7704] fuse: Unknown parameter 'fd0x0000000000000003' [ 124.148834][ T7701] veth15: entered allmulticast mode [ 124.153480][ T7701] bond1: (slave veth15): Enslaving as an active interface with an up link [ 124.174520][ T7707] bond1 (unregistering): (slave veth15): Releasing backup interface [ 124.178607][ T7707] bond1 (unregistering): Released all slaves [ 126.048164][ T7719] zram: Can't change algorithm for initialized device [ 126.053487][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.652'. [ 126.055730][ T7719] zram: Cannot change disksize for initialized device [ 126.070737][ T7723] netlink: 164 bytes leftover after parsing attributes in process `syz.1.650'. [ 126.098668][ T7728] fuse: Unknown parameter 'fd0x0000000000000003' [ 126.123010][ T7732] syzkaller0: entered promiscuous mode [ 126.125788][ T7732] syzkaller0: entered allmulticast mode [ 126.251243][ T42] audit: type=1400 audit(1785592142.171:952): avc: denied { map_read map_write } for pid=7744 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.411594][ T5840] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 126.502067][ T2331] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 126.561534][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 126.564788][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.569084][ T5840] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 126.571902][ T5840] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 126.574495][ T5840] usb 6-1: config 14 has no interface number 0 [ 126.576736][ T5840] usb 6-1: config 14 has no interface number 1 [ 126.578742][ T5840] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 126.582296][ T5840] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 126.585961][ T5840] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 126.589503][ T5840] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 126.593351][ T5840] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 126.596907][ T5840] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.600989][ T5840] usb 6-1: config 14 interface 57 has no altsetting 0 [ 126.603346][ T5840] usb 6-1: config 14 interface 228 has no altsetting 0 [ 126.607194][ T5840] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 126.610271][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.612902][ T5840] usb 6-1: Product: syz [ 126.614236][ T5840] usb 6-1: Manufacturer: syz [ 126.615724][ T5840] usb 6-1: SerialNumber: syz [ 126.653166][ T2331] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.657355][ T2331] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 126.663627][ T2331] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.667522][ T2331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.670791][ T2331] usb 7-1: Product: syz [ 126.672703][ T2331] usb 7-1: Manufacturer: syz [ 126.674475][ T2331] usb 7-1: SerialNumber: syz [ 126.684398][ T2331] cdc_mbim 7-1:1.0: skipping garbage [ 126.886880][ T7747] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.031843][ T5840] legousbtower 6-1:14.57: interrupt endpoints not found [ 127.061113][ T7761] net2280 0000:00:02.0: unbind [ 127.067723][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.072023][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.117177][ T7763] net2280 0000:00:02.0: Failed to enable MSI mode [ 127.121570][ T7763] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 127.124839][ T7763] net2280 0000:00:02.0: irq 22, pci mem ffffc900065a0000, chip rev 0000 [ 127.128084][ T7763] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 127.164887][ C1] BUG: kernel NULL pointer dereference, address: 000000000000000c [ 127.167356][ C1] #PF: supervisor read access in kernel mode [ 127.169284][ C1] #PF: error_code(0x0000) - not-present page [ 127.171911][ C1] PGD 0 P4D 0 [ 127.173647][ C1] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 127.175341][ C1] CPU: 1 UID: 0 PID: 5678 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 127.178941][ C1] Tainted: [L]=SOFTLOCKUP [ 127.180484][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.183651][ C1] RIP: 0010:handle_ep_small+0x84/0x1ca0 [ 127.185428][ C1] Code: 37 fa 48 8d 43 50 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 28 18 00 00 48 8b 43 50 <44> 8b 68 0c 48 8d 7b 78 44 89 6c 24 20 48 b8 00 00 00 00 00 fc ff [ 127.191563][ C1] RSP: 0018:ffffc900006a0948 EFLAGS: 00010046 [ 127.193478][ C1] RAX: 0000000000000000 RBX: ffff888035cea928 RCX: ffffffff87d2b586 [ 127.195949][ C1] RDX: 1ffff11006b9d52f RSI: ffffffff87d2965c RDI: ffff888035cea928 [ 127.198547][ C1] RBP: ffff888035cea9a8 R08: 0000000000000005 R09: 0000000000000000 [ 127.201221][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffffffffffffff88 [ 127.203886][ C1] R13: 0000000000000040 R14: ffff888035cea000 R15: 0000000000000020 [ 127.206257][ C1] FS: 0000555569b9d540(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 127.209109][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.211740][ C1] CR2: 000000000000000c CR3: 0000000036470000 CR4: 0000000000352ef0 [ 127.215046][ C1] Call Trace: [ 127.216146][ C1] [ 127.217088][ C1] ? rcu_is_watching+0x12/0xc0 [ 127.218611][ C1] net2280_irq+0x854/0x4ea0 [ 127.220288][ C1] ? __pfx_net2280_irq+0x10/0x10 [ 127.221865][ C1] ? ____napi_schedule+0x2b3/0x3b0 [ 127.223493][ C1] ? __napi_schedule+0x9d/0x180 [ 127.225066][ C1] ? __pfx_net2280_irq+0x10/0x10 [ 127.226617][ C1] __handle_irq_event_percpu+0x232/0x880 [ 127.228418][ C1] handle_irq_event+0xab/0x1e0 [ 127.230108][ C1] handle_fasteoi_irq+0x323/0xb60 [ 127.231702][ C1] __common_interrupt+0xd8/0x2f0 [ 127.233296][ C1] common_interrupt+0x60/0xe0 [ 127.234803][ C1] asm_common_interrupt+0x26/0x40 [ 127.236416][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 127.238272][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 da 4f 27 f6 48 89 df e8 62 9f 27 f6 e8 1d 08 54 f6 fb bf 01 00 00 00 72 ae 16 f6 65 8b 05 bb d7 a5 08 85 c0 74 06 5b c3 cc cc cc cc [ 127.244667][ C1] RSP: 0018:ffffc900006a0ca8 EFLAGS: 00000206 [ 127.246598][ C1] RAX: 0000000000109784 RBX: ffff88806a53d2b8 RCX: 0000000000000004 [ 127.249081][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a80b8 RDI: 0000000000000001 [ 127.251708][ C1] RBP: ffff88806a53d0e8 R08: 0000000000000001 R09: 0000000000000000 [ 127.254191][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff9b73f600 [ 127.256680][ C1] R13: ffff88806a53d2f8 R14: ffff88806a53d110 R15: ffff88806a53d110 [ 127.259162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.261133][ C1] process_backlog+0xcb1/0x1580 [ 127.262680][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 127.264360][ C1] net_rx_action+0xa40/0xf20 [ 127.265848][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 127.267476][ C1] ? clockevents_shutdown+0x1d0/0x1f0 [ 127.269164][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 127.270890][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 127.272523][ C1] ? sched_clock+0x38/0x60 [ 127.273952][ C1] ? sched_clock_cpu+0x6c/0x570 [ 127.275513][ C1] ? mark_held_locks+0x40/0x70 [ 127.277054][ C1] handle_softirqs+0x1ea/0x9b0 [ 127.278570][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 127.280322][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 127.282021][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 127.283794][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 127.285433][ C1] do_softirq+0xac/0xe0 [ 127.286770][ C1] [ 127.287741][ C1] [ 127.288675][ C1] __local_bh_enable_ip+0xf8/0x120 [ 127.290318][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 127.291975][ C1] __dev_queue_xmit+0xa27/0x4970 [ 127.293551][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 127.295235][ C1] ? __lock_acquire+0x49f/0x1a40 [ 127.296821][ C1] ? find_held_lock+0x2b/0x80 [ 127.298311][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 127.300033][ C1] ? find_held_lock+0x2b/0x80 [ 127.301545][ C1] ip_finish_output2+0xf4a/0x2400 [ 127.303147][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 127.304841][ C1] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 127.306665][ C1] __ip_finish_output.part.0+0x444/0x6f0 [ 127.308444][ C1] ip_output+0x39b/0xc10 [ 127.309849][ C1] ? __pfx_ip_output+0x10/0x10 [ 127.311435][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 127.313110][ C1] ? __pfx_ip_output+0x10/0x10 [ 127.314600][ C1] ip_local_out+0x193/0x1f0 [ 127.316305][ C1] __ip_queue_xmit+0x885/0x1e90 [ 127.317888][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 127.319491][ C1] __tcp_transmit_skb+0x3506/0x4f20 [ 127.321628][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 127.323948][ C1] ? kmalloc_reserve+0xf9/0x350 [ 127.325683][ C1] tcp_write_xmit+0x1130/0x8470 [ 127.327276][ C1] __tcp_push_pending_frames+0xaf/0x3b0 [ 127.328990][ C1] tcp_rcv_established+0xc34/0x3990 [ 127.330652][ C1] ? find_held_lock+0x2b/0x80 [ 127.332136][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 127.333889][ C1] tcp_v4_do_rcv+0xbb6/0x1260 [ 127.335417][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 127.337058][ C1] __release_sock+0x35a/0x440 [ 127.338528][ C1] release_sock+0x1e5/0x280 [ 127.340075][ C1] tcp_sendmsg+0x38/0x50 [ 127.341518][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 127.343087][ C1] inet_sendmsg+0xb9/0x140 [ 127.344481][ C1] sock_write_iter+0x4ea/0x5b0 [ 127.346018][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 127.347665][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 127.349312][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 127.351039][ C1] ? security_file_permission+0x76/0x210 [ 127.352803][ C1] ? rw_verify_area+0xce/0x6d0 [ 127.354326][ C1] vfs_write+0x6ac/0x1050 [ 127.355726][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 127.357435][ C1] ? __pfx_vfs_write+0x10/0x10 [ 127.358929][ C1] ? find_held_lock+0x2b/0x80 [ 127.360518][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 127.362511][ C1] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 127.364496][ C1] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 127.366540][ C1] ksys_write+0x1f8/0x250 [ 127.367986][ C1] ? __pfx_ksys_write+0x10/0x10 [ 127.369510][ C1] do_syscall_64+0x115/0x870 [ 127.371055][ C1] ? clear_bhb_loop+0x40/0x90 [ 127.372542][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.374506][ C1] RIP: 0033:0x7eff58f59197 [ 127.375967][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 127.382639][ C1] RSP: 002b:00007ffc6921e4a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 127.386074][ C1] RAX: ffffffffffffffda RBX: 0000555569b9d540 RCX: 00007eff58f59197 [ 127.389352][ C1] RDX: 0000000000032040 RSI: 00007eff52bcdfc0 RDI: 0000000000000003 [ 127.392614][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.395908][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000032040 [ 127.399184][ C1] R13: 0000555569bb1270 R14: 00007ffc6921ea40 R15: 00007eff52bcdfc0 [ 127.402402][ C1] [ 127.403700][ C1] Modules linked in: [ 127.405308][ C1] CR2: 000000000000000c [ 127.407054][ C1] ---[ end trace 0000000000000000 ]--- [ 127.409303][ C1] RIP: 0010:handle_ep_small+0x84/0x1ca0 [ 127.411610][ C1] Code: 37 fa 48 8d 43 50 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 28 18 00 00 48 8b 43 50 <44> 8b 68 0c 48 8d 7b 78 44 89 6c 24 20 48 b8 00 00 00 00 00 fc ff [ 127.419502][ C1] RSP: 0018:ffffc900006a0948 EFLAGS: 00010046 [ 127.422017][ C1] RAX: 0000000000000000 RBX: ffff888035cea928 RCX: ffffffff87d2b586 [ 127.425279][ C1] RDX: 1ffff11006b9d52f RSI: ffffffff87d2965c RDI: ffff888035cea928 [ 127.428607][ C1] RBP: ffff888035cea9a8 R08: 0000000000000005 R09: 0000000000000000 [ 127.428943][ T5840] legousbtower 6-1:14.228: get version request failed: -71 [ 127.431888][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffffffffffffff88 [ 127.431906][ C1] R13: 0000000000000040 R14: ffff888035cea000 R15: 0000000000000020 [ 127.431918][ C1] FS: 0000555569b9d540(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 127.436959][ T5840] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 127.437507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.443703][ T5840] usb 6-1: USB disconnect, device number 13 [ 127.447266][ C1] CR2: 000000000000000c CR3: 0000000036470000 CR4: 0000000000352ef0 [ 127.447285][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 127.449914][ C1] Kernel Offset: disabled VM DIAGNOSIS: 13:49:03 Registers: info registers vcpu 0 CPU#0 RAX=00000000001a310d RBX=ffffffff8e891480 RCX=ffffffff8bbbc2d5 RDX=0000000000000000 RSI=ffffffff8e1a80b8 RDI=ffffffff8c402680 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bbba89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33af2ff8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813855de ffffffff814015ae ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813855de ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd90f0ed6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd90f0ed6 00007fffd90f0edc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef24355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef243562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef2435793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ef2435621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81401768 ffffffff814016fb ffffffff8140163b ffffffff81401604 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81401768 ffffffff814016fb ffffffff8140163b ffffffff81401604 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000070 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc900006a01d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000070 R14=ffffffff9b6fe215 R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555569b9d540 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000000000c CR3=0000000036470000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff591f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007eff591f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555569bb8858 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000081 0f240d0000002405 01a3f949d64757f4 a301000004090000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0403800401dc10 00081000080179c4 0203050900000000 000282050900000d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0105800402d09e08 0001000000080606 0129c61a08000410 0004808080808080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80a21000060173fe 00100002e8100018 1000060078cc0fff ffffffffff040480 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 045a100000100008 0179c00fffffffff ffff0403800401dc 1000081000080179 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c402030509000000 0000028205090000 0d02020101040900 000d020000010409 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6963702f737562 2f7379732f2e01ff ffffffffffffffb5 0814800301000004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ed96c RBX=ffff88801eecca80 RCX=ffffffff8bbbc2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dd9950 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbba89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1ef3273ff8 CR3=0000000034070000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e8ae03ffff ffff81e8af38ffff ffff81e8b054ffff ffff81e82e8cffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e86ebdffff ffff81e86ee2ffff ffff81e8667affff ffff81e8ade7ffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e967f6ffff ffff81e9683dffff ffff81e86ab7ffff ffff81e86abfffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e9467bffff ffff81e94695ffff ffff81e946b3ffff ffff81e946cdffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e94701ffff ffff81e9605cffff ffff81e96570ffff ffff81e9657affff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e967a9ffff ffff81e96420ffff ffff81e96315ffff ffff81e96364ffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff81e963acffff ffff81e963ecffff ffff81e9642affff ffff81e967e1ffff ZMM24=85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a 85fcb34a85fcb34a ZMM25=fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 fbbdb0f3fbbdb0f3 ZMM26=04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 04a869d404a869d4 ZMM27=53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 53ee70c553ee70c5 ZMM28=000001e0000001df 000001de000001dd 000001dc000001db 000001da000001d9 000001d8000001d7 000001d6000001d5 000001d4000001d3 000001d2000001d1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9608000096080000 9608000096080000 9608000096080000 9608000096080000 9608000096080000 9608000096080000 9608000096080000 9608000096080000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff888028fe0000 RCX=ffffffff82968a24 RDX=0000000000000000 RSI=ffffffff8c402600 RDI=ffff888028fe04c4 RBP=0000000000000000 RSP=ffffc9000d96fc00 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88803aaba988 R13=dffffc0000000000 R14=1ffff92001b2df98 R15=ffffc9000d96fce0 RIP=ffffffff81ef59d2 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6e67387880 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1ef25ed158 CR3=000000005c7de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec2fc00 Opmask01=00000000000000ff Opmask02=00000000ffbffeff Opmask03=0000000082000020 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd37722380 00007ffd37722380 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd377222d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c4d2073e70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c4d207e768 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e66df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f7aebfd29906f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f7aebfd28762f 7c64616663796a6b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 676170656775685f 72003078756d6564 2f31726574706100 33706f6f6c2f2e2e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c4d20627d0 000055c4d20732b0 000055c4d206cdf0 000055c4d2062b10 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000020 0000000000000000 00004e4f49544341 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d766564752d30e4 2f642e73656c7552 2f766564752f6269 6c2f4e3c2c383633 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f767fffff6fffff 7f7f7f7b7fff7d7f 7ffffffffd7ffffb 6e7f7ffdef7fffb7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000000 0000312f71067340 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 0000000000000000 0000312f49061840 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000