last executing test programs: 3m4.789927901s ago: executing program 0 (id=1438): ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000000)={0x1, 0x4, 0x329b, 0x823, 0x8, 0x80}) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) fcntl$getflags(r0, 0x401) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000005c0)={&(0x7f00000000c0)=0x7, 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000580)}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x400) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0xee01, 0xffffffffffffffff}, 0xc) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x40, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x50326601}}, './file0\x00'}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000780)={0xffffb767, 0x6}) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000007c0)={'wg0\x00', 0x8}) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x80000000) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000800)) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) ioctl$FITHAW(r6, 0xc0045878) (async) r7 = openat$cgroup_devices(r2, &(0x7f0000000880)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000008c0)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000900)=0x3ff, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000940)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f00000009c0)) (async) r9 = ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000a00)={0x0, 0x6, [{r2, 0x0, 0xfffffffefffff000, 0x100000000}, {r4, 0x0, 0x1000000}, {r2, 0x0, 0x8000, 0x10000}, {r2, 0x0, 0x0, 0x1000}, {r2, 0x0, 0x0, 0xfffff000}, {r3, 0x0, 0x1000000, 0xfffffffffeff6000}]}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000d40)={{&(0x7f0000000ac0)=[{0x7, 0x80000001, 0x13, {0x3, 0xc}, 0x6, 0x3, 0x7fffffff}, {0x1000, 0x16, 0x6, {0x5, 0x4}, 0xfffffffffffffd7f, 0xfffffffffffffffb, 0x7f}, {0x8001, 0x0, 0x8000000000000001, {0x40, 0x165}, 0x200000000000000, 0xe4d6, 0x9}, {0x7, 0x4, 0x1, {0x8, 0xb1e}, 0xd29, 0x1, 0x4}, {0x1e690b46, 0x8, 0x7, {0xf1, 0x8}, 0x7ff000000000000, 0x40400, 0x6}], 0x5, 0x40, 0x3, 0x4}, {&(0x7f0000000c00)=[{0x3, 0x7}, {0xfffffffffffffffd, 0x2}], 0x2, 0x10, 0x10, 0x7}, {&(0x7f0000000c40)=[0x40], 0x1, 0x8, 0x8, 0x46b}, {&(0x7f0000000c80)=[{0x4, 0x3, 0x81}, {0x3, 0x8, 0x40, 0x4}, {0x0, 0x10, 0x4, 0x6, 0x24}], 0x3, 0x28, 0x5, 0x3}, {&(0x7f0000000d00)=[0x3, 0x3, 0x80000000, 0x5], 0x4, 0x8, 0x1, 0x60}}) (async) syz_open_dev$vim2m(&(0x7f0000000dc0), 0x80000001, 0x2) (async) close(r2) (async) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000e00)={0x100, [0x100, 0xfffffffd], 0xfffc}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17a8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x739}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x79f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 3m4.789819062s ago: executing program 0 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a3000000000050004000000000a050005000a00000014000780050015000200000008001240", @ANYRESDEC], 0x64}}, 0x20040080) 3m4.740011687s ago: executing program 0 (id=1440): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x3, 0xfd}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, r4, 0x25, 0x0, @val=@tcx}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3m4.659821794s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x18}, 0x48) 3m4.659664832s ago: executing program 0 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="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"}], 0x1}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m4.320232526s ago: executing program 0 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000300000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 2m49.026414024s ago: executing program 32 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000300000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 2m40.539885392s ago: executing program 4 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x13, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 2m40.42811032s ago: executing program 4 (id=1761): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa1c3000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2m39.839864732s ago: executing program 4 (id=1767): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m39.668185706s ago: executing program 4 (id=1772): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 2m39.297818271s ago: executing program 4 (id=1778): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 2m39.089880439s ago: executing program 4 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x8915, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x22000800) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff2001fffffffffffffff5000000000002ff0500000000000000000000000000014f194e20"], 0x9e) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m39.044443375s ago: executing program 33 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x8915, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x22000800) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff2001fffffffffffffff5000000000002ff0500000000000000000000000000014f194e20"], 0x9e) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m10.848907636s ago: executing program 3 (id=2990): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000140)=0x4) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r4, 0xfe}, &(0x7f0000000780)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f0000000440)) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0x7}, {0x2, 0xfff1}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008848}, 0x24004004) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) r10 = openat$cgroup_devices(r9, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="63202b960cedc41f"], 0x8) 1m10.748403196s ago: executing program 3 (id=2992): r0 = socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62981) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000600029000000070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) 1m10.698749625s ago: executing program 3 (id=2994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003fc0)={@fd={0x73622a85, 0x0, r1}, @ptr={0x70742a85, 0x5800, 0x0, 0x0, 0x2, 0x28}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000004040)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1m10.632185237s ago: executing program 3 (id=2996): mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af27bd7000000000000e00002008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c754) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x70bd26, 0x0, "", [@generic="4015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed725c35ced379c91e5d395b09e24054fac066b0d60932a7fb2f4423642b16de2b91a996c389e0cb74f8f1dbe67149fdad4cbe11380128a4d403799666fbe091ac999b1c7ec800cbbf61d13ab1b9"]}, 0xe0}], 0x1}, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x470c8, 0x0) 1m10.268076126s ago: executing program 3 (id=2998): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x10c, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {}, 0xffffffff, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000}}]}, 0x10c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000000000ffffffffffffff80000000000000000000000a00"], 0xb8}}, 0x4000) 1m10.159909487s ago: executing program 3 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 1m10.054778583s ago: executing program 34 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 5.53694956s ago: executing program 1 (id=3641): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="260100009e173610ef3e737206de01020301380000000100000000"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7ff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x4ca6}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0xfff}, 0x1c) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) 4.733119143s ago: executing program 6 (id=3654): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x3f8f26, 0x27a5ff}) 4.652810343s ago: executing program 6 (id=3655): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.652552447s ago: executing program 6 (id=3656): r0 = socket$inet6(0x10, 0x3, 0x0) (async) close(0x3) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000005003200000000fecbc7745504eba770df15b966c8a431cc456599c0d5862d7878590c68eb55088a8bddcf1a4befd16e3cf9c3cdf5c52efd9c7b96c7094b6396bdbd8cc83f5270f27d65bb460441691ad61b08ee7ca3ad5b7931299e769223489f1bf7e0dc98a0829aad52c993b211428f7bbfb7f0ec41bac6b4cba758cf6b027aa0e93f39f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1, 0x2}, 0x20) (async) sendto$inet6(r1, &(0x7f0000000780)='#', 0x1, 0x50, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008811) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r8, 0x0, 0x400000008000f28, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r11}) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r16, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5b}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x4) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r11], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r14, r12, r13], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (async) r19 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r19, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) (async) socket$inet_sctp(0x2, 0x1, 0x84) 2.925113131s ago: executing program 2 (id=3667): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000c3ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.823949083s ago: executing program 2 (id=3668): unshare(0x6a040000) io_uring_setup(0x7d3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0xffff0084) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r4, 0xffffffffffffffff, 0x0) 2.48308099s ago: executing program 1 (id=3670): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000001800)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 2.479418421s ago: executing program 1 (id=3672): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r0], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.920897685s ago: executing program 2 (id=3673): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000061294", 0x2e}], 0x1}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1.568796342s ago: executing program 6 (id=3674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x13}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 1.56860509s ago: executing program 6 (id=3675): unshare(0x6a040000) io_uring_setup(0x7d3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0xffff0084) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r4, 0xffffffffffffffff, 0x0) 1.368285364s ago: executing program 2 (id=3676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.367919561s ago: executing program 2 (id=3677): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x131e699f38423558, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB="070001"], 0x38}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x4a8e) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 1.215904172s ago: executing program 1 (id=3680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400000000000000000005d600", @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0500070001"], 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) 1.147859186s ago: executing program 5 (id=3681): unshare(0x6a040000) io_uring_setup(0x7d3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$packet(0x11, 0x3, 0x300) close_range(r5, 0xffffffffffffffff, 0x0) 1.077432504s ago: executing program 1 (id=3682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 1.04919461s ago: executing program 1 (id=3683): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r3, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x14, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f00000007c0)={0x40, 0x8, 0x7, "98c0d1a2ab3fd4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) sendmsg$kcm(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) 685.161183ms ago: executing program 2 (id=3684): getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed00007a0300ff000000003f440000000000007a0a00fe00ffffffc30300ff41000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3b"], 0x0, 0xf}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x50906000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8e1dd10ccfa7d8fba84a6b32574f296b96caf7b246119d5d6ed2b4335c2a9786047050be7df0c04a", @ANYRES16=0x0, @ANYRESOCT=r6], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="40010900"], 0x87) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0) io_uring_setup(0x12df, 0x0) 684.12229ms ago: executing program 6 (id=3685): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) link(&(0x7f0000000000)='./dev/sda1\x00', &(0x7f0000000180)='./dev\x00') (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) creat(&(0x7f00000001c0)='./dev/sda1\x00', 0x40) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) (rerun: 32) 222.474733ms ago: executing program 5 (id=3686): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000001f000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 134.358556ms ago: executing program 5 (id=3687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 134.068458ms ago: executing program 5 (id=3688): r0 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/184) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) (async, rerun: 64) r2 = fanotify_init(0x0, 0x0) (rerun: 64) r3 = dup(r2) fanotify_mark(r2, 0x401, 0x1018, r3, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) r5 = dup(r4) syz_ublk_setup_queues(r5, r1, &(0x7f0000000880)={0x0, 0xfffffffe, 0x11, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.54233ms ago: executing program 5 (id=3689): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 5 (id=3690): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000140)={0xfff, {"28e8b66bd0367cb737445c15a03a18ab", "d2c942caadd081c53fce7db3b8fd5d84", "eed339e817abc3b117faf35a74f92f9f"}, 0x7, 0x5}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x11, 0x3, 0x1f4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x368}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040004, 0x390}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b29, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) write(r1, &(0x7f00000004c0)='\n', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='nfsd 127.0.0.1 999999999\n', 0x19) read(r5, &(0x7f0000000280)=""/19, 0x13) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl(r7, 0x3b92, &(0x7f0000000000)="10") kernel console output (not intermixed with test programs): idProduct=db1a, bcdDevice=61.23 [ 290.692539][ T5824] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.692603][ T5824] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.692626][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.895799][ T5824] usb 7-1: usb_control_msg returned -32 [ 290.895921][ T5824] usbtmc 7-1:16.0: can't read capabilities [ 290.903314][T15524] gadgetfs: bound to dummy_udc driver [ 290.956771][T15527] loop5: detected capacity change from 0 to 7 [ 290.960596][T15527] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 290.960662][T15527] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 290.961850][T15527] Dev loop5: unable to read RDB block 7 [ 290.961959][T15527] loop5: AHDI p2 [ 290.961978][T15527] loop5: partition table partially beyond EOD, truncated [ 291.141107][ T7543] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 291.141349][ C0] gadgetfs: connected [ 291.141626][ T7543] gadgetfs: disconnected [ 291.156253][T15545] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3079'. [ 291.291077][ T851] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 291.293270][T15551] netlink: 'syz.6.3081': attribute type 10 has an invalid length. [ 291.293551][ C0] gadgetfs: connected [ 291.296179][ T7543] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 291.300825][ T7543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.303229][ C0] gadgetfs: configuration #1 [ 291.421269][ T851] usb 6-1: device descriptor read/64, error -71 [ 291.671221][ T851] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 291.811056][ T851] usb 6-1: device descriptor read/64, error -71 [ 291.921206][ T851] usb usb6-port1: attempt power cycle [ 291.993120][T15411] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 291.993175][T15411] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 291.996251][T15392] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 292.071110][ T6390] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 292.221676][ T6390] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 292.222520][ T6390] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 292.222582][ T6390] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024 [ 292.223344][ T6390] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 292.223359][ T6390] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25610, setting to 1024 [ 292.225154][ T6390] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.225167][ T6390] usb 11-1: Product: syz [ 292.225174][ T6390] usb 11-1: Manufacturer: syz [ 292.225181][ T6390] usb 11-1: SerialNumber: syz [ 292.227532][T15553] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 292.229790][ T6390] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 292.234764][ T6390] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 292.237151][ T6390] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 292.263429][ T851] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 292.281846][ T851] usb 6-1: device descriptor read/8, error -71 [ 292.531105][ T851] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 292.551530][ T851] usb 6-1: device descriptor read/8, error -71 [ 292.621012][ T64] Bluetooth: hci3: command tx timeout [ 292.661246][ T851] usb usb6-port1: unable to enumerate USB device [ 292.712693][T15392] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 292.716632][ T5098] usb 10-1: USB disconnect, device number 25 [ 292.717414][T15553] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -19 [ 292.720302][ T5098] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 292.723695][ T5098] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 292.724350][ T5098] ti_usb_3410_5052 10-1:2.0: device disconnected [ 292.917590][T15560] loop5: detected capacity change from 0 to 7 [ 292.921605][T15560] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 292.923338][T15560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 292.923458][T15560] Dev loop5: unable to read RDB block 7 [ 292.923479][T15560] loop5: AHDI p2 [ 292.923496][T15560] loop5: partition table partially beyond EOD, truncated [ 293.201253][ T50] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 293.313998][T15525] gadgetfs: suspended from state 3 [ 293.314213][T15525] gadgetfs: disconnected [ 293.318610][ T7543] usb 5-1: can't set config #1, error -71 [ 293.321144][ T5098] usb 7-1: USB disconnect, device number 46 [ 293.325006][ T7543] usb 5-1: USB disconnect, device number 26 [ 293.342990][T15565] fuse: Unknown parameter 'fd0x0000000000000003' [ 293.351301][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 293.355920][ T50] usb 10-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 293.356993][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.357017][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.357047][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.360878][ T50] usb 10-1: config 0 descriptor?? [ 293.575599][T15562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.576063][T15562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.584130][T15562] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3085'. [ 293.646096][ T50] usbhid 10-1:0.0: can't add hid device: -71 [ 293.646194][ T50] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 293.648899][ T50] usb 10-1: USB disconnect, device number 26 [ 293.951122][ T1359] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 294.102232][ T1359] usb 7-1: Using ep0 maxpacket: 8 [ 294.103281][ T1359] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.104294][ T1359] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 294.104320][ T1359] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.104334][ T1359] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.104348][ T1359] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.104363][ T1359] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.104385][ T1359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.145595][T15586] loop5: detected capacity change from 0 to 7 [ 294.148641][T15586] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 294.148694][T15586] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 294.148758][T15586] Dev loop5: unable to read RDB block 7 [ 294.148787][T15586] loop5: AHDI p2 [ 294.148800][T15586] loop5: partition table partially beyond EOD, truncated [ 294.315147][ T1359] usb 7-1: usb_control_msg returned -32 [ 294.315214][ T1359] usbtmc 7-1:16.0: can't read capabilities [ 294.412638][T15601] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 294.701077][ T64] Bluetooth: hci3: command tx timeout [ 295.150705][T15613] loop6: detected capacity change from 0 to 2640 [ 295.160477][ T5983] buffer_io_error: 138 callbacks suppressed [ 295.160566][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.167376][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.167728][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.168916][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.169173][ T5983] Buffer I/O error on dev loop6, logical block 0, async page read [ 295.313336][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 295.313590][ T43] audit: type=1400 audit(1788046316.264:1033): avc: denied { write } for pid=15620 comm="syz.1.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.411119][ T851] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 295.541140][ T851] usb 10-1: device descriptor read/64, error -71 [ 295.632420][T11104] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 295.646921][ T5098] usb 11-1: USB disconnect, device number 2 [ 295.658754][ T5098] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 295.665348][ T5098] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 295.666827][ T5098] ti_usb_3410_5052 11-1:2.0: device disconnected [ 295.781054][T11104] usb 6-1: Using ep0 maxpacket: 8 [ 295.781909][T11104] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 295.787831][T11104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.787889][T11104] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.787958][T11104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.791088][ T851] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 295.806604][T11104] usb 6-1: config 0 descriptor?? [ 295.826378][ T43] audit: type=1400 audit(1788046316.774:1034): avc: denied { lock } for pid=15628 comm="syz.6.3105" path="/dev/video8" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 295.883760][T15632] bpf: Bad value for 'mode' [ 295.931040][ T851] usb 10-1: device descriptor read/64, error -71 [ 296.017442][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.017799][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.030337][T15627] netlink: 'syz.1.3104': attribute type 2 has an invalid length. [ 296.030459][T15627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3104'. [ 296.041492][ T851] usb usb10-port1: attempt power cycle [ 296.084539][T11104] usbhid 6-1:0.0: can't add hid device: -71 [ 296.084630][T11104] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.087020][T11104] usb 6-1: USB disconnect, device number 51 [ 296.401064][ T851] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 296.421773][ T851] usb 10-1: device descriptor read/8, error -71 [ 296.671036][ T851] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 296.691505][ T851] usb 10-1: device descriptor read/8, error -71 [ 296.726259][T11104] usb 7-1: USB disconnect, device number 47 [ 296.802364][ T851] usb usb10-port1: unable to enumerate USB device [ 296.805517][T15651] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 296.808862][ T43] audit: type=1400 audit(1788046317.754:1035): avc: denied { read } for pid=15648 comm="syz.2.3112" name="trace_pipe" dev="tracefs" ino=2292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 296.828500][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828549][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828650][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828659][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828731][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828740][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828810][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828819][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 296.828895][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'. [ 297.001103][ T5824] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 297.122239][T15658] random: crng reseeded on system resumption [ 297.162033][ T5824] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.163107][ T5824] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.163149][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.164175][ T5824] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.164198][ T5824] usb 6-1: Manufacturer: syz [ 297.168772][ T5824] usb 6-1: config 0 descriptor?? [ 297.251098][ T5824] rc_core: IR keymap rc-hauppauge not found [ 297.251158][ T5824] Registered IR keymap rc-empty [ 297.252100][ T5824] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 297.253776][ T5824] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 298.007350][T15670] loop5: detected capacity change from 0 to 7 [ 298.008294][T15670] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 298.008306][T15670] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 298.008340][T15670] Dev loop5: unable to read RDB block 7 [ 298.008352][T15670] loop5: AHDI p2 [ 298.008362][T15670] loop5: partition table partially beyond EOD, truncated [ 298.281108][T11104] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 298.341074][ T851] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 298.431158][T11104] usb 11-1: Using ep0 maxpacket: 8 [ 298.432039][T11104] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 298.433545][T11104] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.433569][T11104] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.433599][T11104] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.435302][T11104] usb 11-1: config 0 descriptor?? [ 298.510995][ T851] usb 7-1: Using ep0 maxpacket: 8 [ 298.511752][ T851] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.513279][ T851] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 298.513307][ T851] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.513321][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.513336][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.513350][ T851] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.513422][ T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.646713][T15674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.647280][T15674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.654787][T15674] netlink: 'syz.6.3119': attribute type 2 has an invalid length. [ 298.713722][T11104] usbhid 11-1:0.0: can't add hid device: -71 [ 298.713845][T11104] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 298.715248][T11104] usb 11-1: USB disconnect, device number 3 [ 298.721340][ T851] usb 7-1: usb_control_msg returned -32 [ 298.723425][ T851] usbtmc 7-1:16.0: can't read capabilities [ 299.103278][ T43] audit: type=1400 audit(1788046320.054:1036): avc: denied { read } for pid=15684 comm="syz.5.3123" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.183793][T15689] loop5: detected capacity change from 0 to 7 [ 299.186589][T15689] Dev loop5: unable to read RDB block 7 [ 299.188490][T15689] loop5: unable to read partition table [ 299.190549][T15689] loop5: partition table beyond EOD, truncated [ 299.190574][T15689] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.213833][ T43] audit: type=1804 audit(1788046320.164:1037): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3125" name="/newroot/367/file0" dev="tmpfs" ino=1927 res=1 errno=0 [ 299.251555][T15692] loop5: detected capacity change from 0 to 7 [ 299.257370][T15692] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 299.257410][T15692] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 299.257449][T15692] Dev loop5: unable to read RDB block 7 [ 299.257462][T15692] loop5: AHDI p2 [ 299.257471][T15692] loop5: partition table partially beyond EOD, truncated [ 299.259199][T15694] netlink: 'syz.6.3126': attribute type 10 has an invalid length. [ 299.561176][T11104] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 299.612641][ T43] audit: type=1800 audit(1788046320.564:1038): pid=15643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3109" name="file1" dev="fuse" ino=68719476738 res=0 errno=0 [ 299.691146][T11104] usb 10-1: device descriptor read/64, error -71 [ 299.726671][ T5824] usb 6-1: USB disconnect, device number 52 [ 299.796094][T15705] xt_hl: Unknown TTL match mode: 255 [ 299.806400][T15705] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 299.849218][T15708] ip6gre1: entered promiscuous mode [ 299.849323][T15708] ip6gre1: entered allmulticast mode [ 299.952207][T11104] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 299.959552][T15718] nbd: illegal input index 67111936 [ 300.016081][T15722] netlink: 'syz.6.3139': attribute type 10 has an invalid length. [ 300.091110][T11104] usb 10-1: device descriptor read/64, error -71 [ 300.181137][ T7543] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 300.201474][T11104] usb usb10-port1: attempt power cycle [ 300.351280][ T7543] usb 6-1: Using ep0 maxpacket: 8 [ 300.353547][ T7543] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 300.357354][ T7543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.361023][ T7543] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.361056][ T7543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.362711][ T7543] usb 6-1: config 0 descriptor?? [ 300.541094][T11104] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 300.561821][T11104] usb 10-1: device descriptor read/8, error -71 [ 300.573585][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.573954][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.660201][ T7543] usbhid 6-1:0.0: can't add hid device: -71 [ 300.660355][ T7543] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 300.664573][ T7543] usb 6-1: USB disconnect, device number 53 [ 300.821129][T11104] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 300.841512][T11104] usb 10-1: device descriptor read/8, error -71 [ 300.953527][T11104] usb usb10-port1: unable to enumerate USB device [ 301.018296][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.018682][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.099789][ T5824] usb 7-1: USB disconnect, device number 48 [ 301.152089][T15737] process '/newroot/228/file0' started with executable stack [ 301.237387][T15743] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 301.239642][T15736] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 301.252270][ T7543] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 301.273027][T15740] tipc: Started in network mode [ 301.273081][T15740] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.273350][T15740] tipc: New replicast peer: 172.20.20.187 [ 301.275199][T15740] tipc: Enabled bearer , priority 10 [ 301.282185][T15748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15748 comm=syz.6.3144 [ 301.283405][T15736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15736 comm=syz.6.3144 [ 301.351200][ T43] audit: type=1326 audit(1788046322.304:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15739 comm="syz.2.3146" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20f8f9e159 code=0x0 [ 301.381090][ T7543] usb 11-1: device descriptor read/64, error -71 [ 301.403117][T15751] loop5: detected capacity change from 0 to 7 [ 301.404632][T15751] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 301.404648][T15751] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 301.404687][T15751] Dev loop5: unable to read RDB block 7 [ 301.404700][T15751] loop5: AHDI p2 [ 301.404711][T15751] loop5: partition table partially beyond EOD, truncated [ 301.438674][T15753] autofs: Unknown parameter 'Ñé÷2( ¿' [ 301.621103][ T7543] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 301.751290][ T7543] usb 11-1: device descriptor read/64, error -71 [ 301.861240][ T7543] usb usb11-port1: attempt power cycle [ 302.162980][T15768] __nla_validate_parse: 111 callbacks suppressed [ 302.163048][T15768] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3153'. [ 302.163075][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 302.202198][ T7543] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 302.222499][ T7543] usb 11-1: device descriptor read/8, error -71 [ 302.391011][ T6390] tipc: Node number set to 2886997162 [ 302.461325][ T7543] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 302.484219][ T7543] usb 11-1: device descriptor read/8, error -71 [ 302.496195][T15782] loop5: detected capacity change from 0 to 7 [ 302.497463][T15782] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 302.497475][T15782] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 302.497510][T15782] Dev loop5: unable to read RDB block 7 [ 302.497522][T15782] loop5: AHDI p2 [ 302.497534][T15782] loop5: partition table partially beyond EOD, truncated [ 302.508832][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 302.591419][ T7543] usb usb11-port1: unable to enumerate USB device [ 302.651355][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 302.653504][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.657282][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 302.659916][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.663677][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.663702][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.663725][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.663768][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.881947][ T9] usb 7-1: usb_control_msg returned -32 [ 302.883989][ T9] usbtmc 7-1:16.0: can't read capabilities [ 302.891045][ T1359] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 302.936585][T15794] netlink: 'syz.5.3165': attribute type 4 has an invalid length. [ 302.936650][T15794] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3165'. [ 303.031230][ T1359] usb 6-1: device descriptor read/64, error -71 [ 303.110218][T15801] netlink: 'syz.5.3168': attribute type 11 has an invalid length. [ 303.110362][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 303.110622][T15801] netlink: 'syz.5.3168': attribute type 11 has an invalid length. [ 303.110634][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3168'. [ 303.217426][T15805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15805 comm=syz.5.3170 [ 303.217562][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3170'. [ 303.271256][ T1359] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 303.401130][ T1359] usb 6-1: device descriptor read/64, error -71 [ 303.511771][ T1359] usb usb6-port1: attempt power cycle [ 303.525529][T15811] loop5: detected capacity change from 0 to 7 [ 303.527038][T15811] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 303.527056][T15811] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 303.527123][T15811] Dev loop5: unable to read RDB block 7 [ 303.527142][T15811] loop5: AHDI p2 [ 303.527160][T15811] loop5: partition table partially beyond EOD, truncated [ 303.635376][ T43] audit: type=1400 audit(1788046324.574:1040): avc: denied { write } for pid=15815 comm="syz.5.3174" name="/" dev="9p" ino=73159527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.646073][ T43] audit: type=1400 audit(1788046324.594:1041): avc: denied { map } for pid=15815 comm="syz.5.3174" path="/384/file0/blkio.throttle.io_service_bytes" dev="9p" ino=73159565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 303.851169][ T1359] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 303.871815][ T1359] usb 6-1: device descriptor read/8, error -71 [ 304.111885][ T1359] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 304.133886][ T1359] usb 6-1: device descriptor read/8, error -71 [ 304.241518][ T1359] usb usb6-port1: unable to enumerate USB device [ 305.007120][T15827] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3178'. [ 305.761750][T15839] kvm: emulating exchange as write [ 305.764139][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'. [ 305.764454][T15839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3182'. [ 305.764466][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'. [ 306.221265][ T5824] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 306.331124][ T851] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 306.361288][ T5824] usb 6-1: device descriptor read/64, error -71 [ 306.501221][ T851] usb 10-1: Using ep0 maxpacket: 8 [ 306.502737][ T851] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 306.503976][ T851] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 306.504019][ T851] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.504040][ T851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.504059][ T851] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.504079][ T851] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.504112][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.613725][ T5824] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 306.701681][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.712013][ T851] usb 10-1: usb_control_msg returned -32 [ 306.712074][ T851] usbtmc 10-1:16.0: can't read capabilities [ 306.741389][ T5824] usb 6-1: device descriptor read/64, error -71 [ 306.784923][T15863] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 306.851455][ T5824] usb usb6-port1: attempt power cycle [ 307.191280][ T5824] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 307.212116][ T5824] usb 6-1: device descriptor read/8, error -71 [ 307.451236][ T5824] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 307.471543][ T5824] usb 6-1: device descriptor read/8, error -71 [ 307.581972][ T5824] usb usb6-port1: unable to enumerate USB device [ 308.941058][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 308.941124][ T5726] Bluetooth: hci4: command 0x1003 tx timeout [ 309.296683][T15880] syz.1.3195 (15880): drop_caches: 2 [ 309.511396][T15823] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 309.524626][T11104] usb 7-1: USB disconnect, device number 49 [ 309.524715][ T851] usb 10-1: USB disconnect, device number 35 [ 309.613241][ T5824] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 309.763117][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 309.763998][ T5824] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 309.765626][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.765659][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.765700][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.770793][ T5824] usb 6-1: config 0 descriptor?? [ 309.772417][T15918] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 309.881509][T15922] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 309.883078][T15922] netlink: 'syz.2.3211': attribute type 4 has an invalid length. [ 309.899414][T15922] netlink: 'syz.2.3211': attribute type 4 has an invalid length. [ 309.925744][ T43] audit: type=1807 audit(1788046330.864:1042): action=measure res=1 [ 309.927556][T15925] ima: policy update completed [ 309.930229][ T43] audit: type=1802 audit(1788046330.874:1043): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.5.3212" res=1 errno=0 [ 309.952187][ T43] audit: type=1800 audit(1788046330.904:1044): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3212" name="resource0" dev="sysfs" ino=2447 res=0 errno=0 [ 309.954899][ T43] audit: type=1800 audit(1788046330.904:1045): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 309.962943][ T43] audit: type=1800 audit(1788046330.914:1046): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 309.969626][ T43] audit: type=1800 audit(1788046330.914:1047): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 309.979829][ T43] audit: type=1800 audit(1788046330.924:1048): pid=15925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3212" name="new_id" dev="sysfs" ino=28401 res=0 errno=0 [ 310.008495][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.009195][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.013695][T15929] binder: 15928:15929 ioctl c0306201 200000000040 returned -14 [ 310.013753][T15895] netlink: 'syz.1.3201': attribute type 2 has an invalid length. [ 310.013771][T15895] __nla_validate_parse: 1 callbacks suppressed [ 310.013782][T15895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3201'. [ 310.020187][ T43] audit: type=1800 audit(1788046330.964:1049): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 310.020487][ T5824] usbhid 6-1:0.0: can't add hid device: -71 [ 310.020572][ T5824] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 310.025723][ T43] audit: type=1800 audit(1788046330.974:1050): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34825 res=0 errno=0 [ 310.029204][ T5824] usb 6-1: USB disconnect, device number 62 [ 310.044462][ T43] audit: type=1800 audit(1788046330.994:1051): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34848 res=0 errno=0 [ 310.331235][T11104] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 310.484067][T11104] usb 7-1: Using ep0 maxpacket: 8 [ 310.486816][T11104] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 310.487759][T11104] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.487787][T11104] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.487820][T11104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.493521][T11104] usb 7-1: config 0 descriptor?? [ 310.703009][T15931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.703435][T15931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.709142][T15931] netlink: 'syz.2.3216': attribute type 2 has an invalid length. [ 310.709168][T15931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3216'. [ 310.775046][T15950] loop5: detected capacity change from 0 to 7 [ 310.776041][T15950] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 310.776068][T15950] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 310.776138][T15950] Dev loop5: unable to read RDB block 7 [ 310.776162][T15950] loop5: AHDI p2 [ 310.776179][T15950] loop5: partition table partially beyond EOD, truncated [ 310.778472][T11104] usbhid 7-1:0.0: can't add hid device: -71 [ 310.778557][T11104] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 310.794404][T11104] usb 7-1: USB disconnect, device number 50 [ 310.902821][T15960] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3224'. [ 311.252508][T15982] loop5: detected capacity change from 0 to 7 [ 311.254171][T15982] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 311.254184][T15982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 311.254225][T15982] Dev loop5: unable to read RDB block 7 [ 311.254241][T15982] loop5: AHDI p2 [ 311.254260][T15982] loop5: partition table partially beyond EOD, truncated [ 311.322469][T15988] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3234'. [ 311.417135][T15995] IPVS: Unknown mcast interface: netpci0 [ 311.661881][ T1359] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 311.701079][ T5824] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 311.802606][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3239'. [ 311.803149][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3239'. [ 311.829948][ T1359] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 311.845813][ T1359] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.847571][ T1359] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.849080][ T1359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.849094][ T1359] usb 7-1: Product: syz [ 311.849102][ T1359] usb 7-1: Manufacturer: syz [ 311.849111][ T1359] usb 7-1: SerialNumber: syz [ 311.853058][ T5824] usb 10-1: Using ep0 maxpacket: 32 [ 311.855316][ T1359] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 311.855937][ T5824] usb 10-1: unable to get BOS descriptor or descriptor too short [ 311.855969][ T5824] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 311.856818][ T5824] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.857036][ T1359] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 311.858921][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.858941][ T5824] usb 10-1: Product: syz [ 311.858949][ T5824] usb 10-1: Manufacturer: syz [ 311.858956][ T5824] usb 10-1: SerialNumber: syz [ 311.859405][ T1359] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 311.916654][T16004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3240'. [ 312.068032][T15997] netlink: 'syz.5.3238': attribute type 11 has an invalid length. [ 312.074366][ T5824] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.074417][ T5824] usb 10-1: MIDIStreaming interface descriptor not found [ 312.100599][ T5824] usb 10-1: USB disconnect, device number 36 [ 312.145566][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.658736][T16013] loop5: detected capacity change from 0 to 7 [ 312.660016][T16013] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 312.660031][T16013] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 312.660090][T16013] Dev loop5: unable to read RDB block 7 [ 312.660104][T16013] loop5: AHDI p2 [ 312.660114][T16013] loop5: partition table partially beyond EOD, truncated [ 312.921066][ T5824] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 313.031244][T11104] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 313.071160][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 313.072132][ T5824] usb 10-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 313.073295][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.073321][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.077616][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.094213][ T5824] usb 10-1: config 0 descriptor?? [ 313.181256][T11104] usb 6-1: Using ep0 maxpacket: 16 [ 313.181926][T11104] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.182784][T11104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.182814][T11104] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.182848][T11104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.184923][T11104] usb 6-1: config 0 descriptor?? [ 313.226304][T15938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.306607][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.308939][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.313291][T16021] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3246'. [ 313.319331][T16015] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3243'. [ 313.378477][ T5824] usbhid 10-1:0.0: can't add hid device: -71 [ 313.381290][ T5824] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 313.383522][ T5824] usb 10-1: USB disconnect, device number 37 [ 313.585985][T15995] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 313.588247][ T5824] usb 7-1: USB disconnect, device number 51 [ 313.604336][ T5824] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 313.610214][ T5824] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 313.611149][ T5824] ti_usb_3410_5052 7-1:2.0: device disconnected [ 314.184040][T16039] loop5: detected capacity change from 0 to 7 [ 314.187071][T16039] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 314.187086][T16039] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 314.187120][T16039] Dev loop5: unable to read RDB block 7 [ 314.187132][T16039] loop5: AHDI p2 [ 314.187141][T16039] loop5: partition table partially beyond EOD, truncated [ 314.241333][T16041] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 314.242834][T16041] qnx6: wrong signature (magic) in superblock #1. [ 314.242846][T16041] qnx6: unable to read the first superblock [ 314.256792][T16047] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 314.304087][T16050] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3255'. [ 314.751120][ T5842] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 314.865668][T16060] tmpfs: Bad value for 'mpol' [ 314.901078][ T5842] usb 11-1: Using ep0 maxpacket: 8 [ 314.901826][ T5842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 314.902776][ T5842] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.902811][ T5842] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.902842][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.905333][ T5842] usb 11-1: config 0 descriptor?? [ 314.944884][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 314.948482][ T43] audit: type=1800 audit(1788046335.894:1168): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233926 res=0 errno=0 [ 315.129969][ T43] audit: type=1800 audit(1788046336.074:1169): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 315.130509][T16058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.130761][T16058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.145220][T16058] netlink: 'syz.6.3258': attribute type 2 has an invalid length. [ 315.145242][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3258'. [ 315.179001][ T43] audit: type=1800 audit(1788046336.124:1170): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 315.196857][ T5842] usbhid 11-1:0.0: can't add hid device: -71 [ 315.197005][ T5842] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 315.202197][ T5842] usb 11-1: USB disconnect, device number 8 [ 315.217886][ T43] audit: type=1800 audit(1788046336.164:1171): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234061 res=0 errno=0 [ 315.728196][ T43] audit: type=1800 audit(1788046336.674:1172): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 315.799534][ T43] audit: type=1800 audit(1788046336.744:1173): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 315.814092][T11104] usbhid 6-1:0.0: can't add hid device: -71 [ 315.814235][T11104] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 315.819556][T11104] usb 6-1: USB disconnect, device number 63 [ 315.834854][ T43] audit: type=1800 audit(1788046336.784:1174): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 315.848186][T16074] loop5: detected capacity change from 0 to 7 [ 315.848719][T16074] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 315.848972][T16074] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 315.849112][T16074] Dev loop5: unable to read RDB block 7 [ 315.849142][T16074] loop5: AHDI p2 [ 315.849168][T16074] loop5: partition table partially beyond EOD, truncated [ 315.872239][ T43] audit: type=1800 audit(1788046336.824:1175): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 315.971291][ T43] audit: type=1800 audit(1788046336.924:1176): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 316.000006][ T43] audit: type=1800 audit(1788046336.944:1177): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234121 res=0 errno=0 [ 316.159325][T16095] netlink: 'syz.1.3271': attribute type 1 has an invalid length. [ 316.169517][T16095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.184910][T16095] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 316.292506][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 316.302585][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.305366][T16100] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.381298][ T5842] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 316.541285][ T5842] usb 11-1: Using ep0 maxpacket: 8 [ 316.541816][ T5842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 316.542646][ T5842] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.542662][ T5842] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.542682][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.544068][ T5842] usb 11-1: config 0 descriptor?? [ 316.749427][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.749994][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.757259][T16091] netlink: 'syz.6.3270': attribute type 2 has an invalid length. [ 316.757316][T16091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3270'. [ 316.835084][ T5842] usbhid 11-1:0.0: can't add hid device: -71 [ 316.835185][ T5842] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 316.837351][ T5842] usb 11-1: USB disconnect, device number 9 [ 316.947090][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947191][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.236435][T16043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.309678][T16113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3278'. [ 317.466372][T16127] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 317.466455][T16127] bond1: entered allmulticast mode [ 317.470069][T16127] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 317.695246][T16133] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3284'. [ 317.711034][T16135] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.731222][ T5842] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 318.891145][ T5842] usb 11-1: Using ep0 maxpacket: 8 [ 318.891761][ T5842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 318.892749][ T5842] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.892770][ T5842] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.892789][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.894159][ T5842] usb 11-1: config 0 descriptor?? [ 319.105246][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.105569][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.113237][T16149] netlink: 'syz.6.3289': attribute type 2 has an invalid length. [ 319.113362][T16149] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3289'. [ 319.167820][ T5842] usbhid 11-1:0.0: can't add hid device: -71 [ 319.167928][ T5842] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 319.169046][ T5842] usb 11-1: USB disconnect, device number 10 [ 319.991728][T11104] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 320.161061][T11104] usb 11-1: Using ep0 maxpacket: 8 [ 320.164396][T11104] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 320.169899][T11104] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.176214][T11104] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.176259][T11104] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.178981][T11104] usb 11-1: config 0 descriptor?? [ 320.183411][ T43] kauditd_printk_skb: 53 callbacks suppressed [ 320.183428][ T43] audit: type=1800 audit(1788046341.134:1231): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235441 res=0 errno=0 [ 320.188195][ T43] audit: type=1800 audit(1788046341.134:1232): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=235470 res=0 errno=0 [ 320.189101][ T43] audit: type=1800 audit(1788046341.134:1233): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=235448 res=0 errno=0 [ 320.191798][ T43] audit: type=1800 audit(1788046341.144:1234): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=235449 res=0 errno=0 [ 320.194202][ T43] audit: type=1800 audit(1788046341.144:1235): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=235450 res=0 errno=0 [ 320.213883][ T43] audit: type=1800 audit(1788046341.164:1236): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235499 res=0 errno=0 [ 320.388415][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.388773][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.391893][T16153] netlink: 'syz.6.3291': attribute type 2 has an invalid length. [ 320.391915][T16153] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3291'. [ 320.397737][T11104] usbhid 11-1:0.0: can't add hid device: -71 [ 320.397800][T11104] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 320.399626][T11104] usb 11-1: USB disconnect, device number 11 [ 320.765035][T16138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.795589][ T43] audit: type=1800 audit(1788046341.744:1237): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 320.823875][ T43] audit: type=1800 audit(1788046341.774:1238): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 320.839566][ T43] audit: type=1800 audit(1788046341.784:1239): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 320.887350][ T43] audit: type=1800 audit(1788046341.834:1240): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 320.923097][T16161] tracefs: Unknown parameter 'trans' [ 320.946608][T16161] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20 [ 320.959994][T16165] vlan2: entered promiscuous mode [ 321.071052][ T5842] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 321.232402][ T5842] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 321.233570][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.240447][ T5842] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 052 [ 321.261222][ T7543] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 321.391265][ T25] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 321.431122][ T7543] usb 6-1: Using ep0 maxpacket: 8 [ 321.433834][ T7543] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 321.434780][ T7543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.434801][ T7543] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.434846][ T7543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.436271][ T7543] usb 6-1: config 0 descriptor?? [ 321.554141][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 321.554311][ T25] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=50.40 [ 321.554342][ T25] usb 11-1: too many configurations: 28, using maximum allowed: 8 [ 321.556059][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 321.556082][ T25] usb 11-1: can't read configurations, error -61 [ 321.643065][ T5842] (null): failure reading functionality [ 321.645021][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.645627][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.648119][ T5842] i2c i2c-2: failure reading functionality [ 321.650533][ T5842] i2c i2c-2: connected i2c-tiny-usb device [ 321.663760][T16169] netlink: 'syz.1.3299': attribute type 2 has an invalid length. [ 321.663840][T16169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3299'. [ 321.681510][ T25] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 321.712524][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.716412][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.725041][ T7543] usbhid 6-1:0.0: can't add hid device: -71 [ 321.725230][ T7543] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 321.730100][ T7543] usb 6-1: USB disconnect, device number 64 [ 321.843710][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 321.843793][ T25] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=50.40 [ 321.844197][ T25] usb 11-1: too many configurations: 28, using maximum allowed: 8 [ 321.845704][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 321.845735][ T25] usb 11-1: can't read configurations, error -61 [ 321.846070][ T25] usb usb11-port1: attempt power cycle [ 321.924284][T16155] i2c i2c-2: failure reading status [ 321.927399][T16155] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 321.928351][T16155] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 321.928868][T16155] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 322.062709][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.195662][ T25] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 322.218319][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 322.218382][ T25] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=50.40 [ 322.218423][ T25] usb 11-1: too many configurations: 28, using maximum allowed: 8 [ 322.219717][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 322.219736][ T25] usb 11-1: can't read configurations, error -61 [ 322.350686][ T25] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 322.374360][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 322.374452][ T25] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=50.40 [ 322.374486][ T25] usb 11-1: too many configurations: 28, using maximum allowed: 8 [ 322.375830][ T25] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 322.375857][ T25] usb 11-1: can't read configurations, error -61 [ 322.376234][ T25] usb usb11-port1: unable to enumerate USB device [ 323.883675][ T35] usb 7-1: USB disconnect, device number 52 [ 324.217083][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 324.231142][T16177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.331965][T16210] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3314'. [ 324.363784][T16211] tipc: Started in network mode [ 324.363843][T16211] tipc: Node identity ac1414aa, cluster identity 4711 [ 324.364095][T16211] tipc: New replicast peer: 172.20.20.187 [ 324.365360][T16211] tipc: Enabled bearer , priority 10 [ 324.465836][T16217] comedi comedi3: comedi_config --init_data is deprecated [ 324.508611][T16221] bond0: entered promiscuous mode [ 324.511375][T16221] bond_slave_0: entered promiscuous mode [ 324.514780][T16221] bond_slave_1: entered promiscuous mode [ 324.516149][T16221] batadv0: entered promiscuous mode [ 324.516917][T16221] debugfs: 'hsr1' already exists in 'hsr' [ 324.516930][T16221] Cannot create hsr debugfs directory [ 324.517195][T16221] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 324.644473][T16228] netlink: 'syz.6.3320': attribute type 10 has an invalid length. [ 324.760208][T16231] tipc: Started in network mode [ 324.760283][T16231] tipc: Node identity ac1414aa, cluster identity 4711 [ 324.760541][T16231] tipc: New replicast peer: 172.20.20.187 [ 324.766042][T16231] tipc: Enabled bearer , priority 10 [ 325.300371][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 325.303114][ T43] audit: type=1800 audit(1788570634.153:1307): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 325.351338][ T43] audit: type=1800 audit(1788570634.201:1308): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 325.363105][T16251] loop5: detected capacity change from 0 to 7 [ 325.363584][T16251] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 325.363601][T16251] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 325.363658][T16251] Dev loop5: unable to read RDB block 7 [ 325.363675][T16251] loop5: AHDI p2 [ 325.363690][T16251] loop5: partition table partially beyond EOD, truncated [ 325.388776][ T851] tipc: Node number set to 2886997162 [ 325.417726][T16253] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3328'. [ 325.423011][T16253] syzkaller1: entered promiscuous mode [ 325.423067][T16253] syzkaller1: entered allmulticast mode [ 325.449603][ T35] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 325.499213][ T43] audit: type=1800 audit(1788570634.338:1309): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 325.530338][ T43] audit: type=1800 audit(1788570634.377:1310): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 325.609576][ T43] audit: type=1800 audit(1788570634.455:1311): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 325.613791][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 325.616410][ T35] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 325.617551][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.617576][ T35] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.617609][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.620016][ T35] usb 11-1: config 0 descriptor?? [ 325.620613][ T43] audit: type=1800 audit(1788570634.464:1312): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239280 res=0 errno=0 [ 325.627153][ T43] audit: type=1800 audit(1788570634.474:1313): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239309 res=0 errno=0 [ 325.627195][ T43] audit: type=1800 audit(1788570634.474:1314): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=239287 res=0 errno=0 [ 325.627228][ T43] audit: type=1800 audit(1788570634.474:1315): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=239288 res=0 errno=0 [ 325.627257][ T43] audit: type=1800 audit(1788570634.474:1316): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=239289 res=0 errno=0 [ 325.680567][T16261] vlan2: entered promiscuous mode [ 325.688269][T16263] netlink: 'syz.5.3333': attribute type 10 has an invalid length. [ 325.692854][T16263] bond0: (slave netdevsim1): Releasing backup interface [ 325.699535][T16263] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 325.788551][ T851] tipc: Node number set to 2886997162 [ 325.830784][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.831134][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.838593][T16237] netlink: 'syz.6.3323': attribute type 2 has an invalid length. [ 325.838635][T16237] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3323'. [ 325.871875][T16267] befs: (nbd1): unable to read superblock [ 325.877658][T16267] befs: (nbd1): unable to read superblock [ 325.909070][ T35] usbhid 11-1:0.0: can't add hid device: -71 [ 325.909275][ T35] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 325.911709][ T35] usb 11-1: USB disconnect, device number 16 [ 326.552800][T16279] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3339'. [ 327.407656][T11104] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 327.418901][T16300] jffs2: notice: (16300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 8 of xref (0 dead, 7 orphan) found. [ 327.484009][T16303] netlink: 'syz.5.3349': attribute type 10 has an invalid length. [ 327.523565][T16310] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3351'. [ 327.571178][T11104] usb 6-1: Using ep0 maxpacket: 8 [ 327.572006][T11104] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 327.573202][T11104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.573232][T11104] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.573268][T11104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.575223][T11104] usb 6-1: config 0 descriptor?? [ 327.761933][ T1167] IPVS: starting estimator thread 0... [ 327.798418][T16295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.800756][T16295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.819083][T16295] netlink: 'syz.1.3347': attribute type 2 has an invalid length. [ 327.819157][T16295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3347'. [ 327.844967][T16295] : entered promiscuous mode [ 327.866010][T16315] netlink: 'syz.6.3352': attribute type 4 has an invalid length. [ 327.866156][T16315] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3352'. [ 327.867340][T16315] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.3352'. [ 327.867696][T16324] IPVS: using max 45 ests per chain, 108000 per kthread [ 327.880650][T16328] tipc: Enabling of bearer rejected, already enabled [ 327.912688][T11104] usbhid 6-1:0.0: can't add hid device: -71 [ 327.912816][T11104] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 327.923264][T11104] usb 6-1: USB disconnect, device number 65 [ 328.311214][T16336] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3360'. [ 328.816939][T16367] fuse: Bad value for 'fd' [ 328.889178][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3371'. [ 328.947299][T16386] program syz.5.3374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.580721][ T43] kauditd_printk_skb: 83 callbacks suppressed [ 330.580802][ T43] audit: type=1800 audit(1788570639.315:1400): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 330.607097][ T43] audit: type=1800 audit(1788570639.345:1401): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 331.522242][T16349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.549660][ T43] audit: type=1800 audit(1788570640.258:1402): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 331.569543][ T43] audit: type=1800 audit(1788570640.278:1403): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 331.578694][T16432] loop5: detected capacity change from 0 to 7 [ 331.582665][T16432] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 331.582727][T16432] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 331.583060][T16432] Dev loop5: unable to read RDB block 7 [ 331.583078][T16432] loop5: AHDI p2 [ 331.583093][T16432] loop5: partition table partially beyond EOD, truncated [ 331.590490][ T43] audit: type=1800 audit(1788570640.307:1404): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 331.608471][ T43] audit: type=1800 audit(1788570640.327:1405): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 331.615466][ T43] audit: type=1800 audit(1788570640.337:1406): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 331.629265][ T43] audit: type=1800 audit(1788570640.346:1407): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 331.640897][ T43] audit: type=1800 audit(1788570640.356:1408): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 331.663461][ T43] audit: type=1326 audit(1788570640.386:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16441 comm="syz.6.3384" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5294d9e159 code=0x0 [ 331.754006][T16455] netlink: 'syz.5.3389': attribute type 10 has an invalid length. [ 331.790534][T16459] loop5: detected capacity change from 0 to 7 [ 331.793447][T16459] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 331.793496][T16459] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 331.793561][T16459] Dev loop5: unable to read RDB block 7 [ 331.793589][T16459] loop5: AHDI p2 [ 331.793614][T16459] loop5: partition table partially beyond EOD, truncated [ 331.966105][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 331.969594][T16472] devtmpfs: Bad value for 'gid' [ 331.969633][T16472] devtmpfs: Bad value for 'gid' [ 331.970078][T16472] sd 0:0:0:0: PR command failed: 1026 [ 331.970100][T16472] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 331.970119][T16472] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 332.004455][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004527][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004598][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004640][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004668][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004695][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004722][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004748][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004774][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004799][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004825][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004851][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004876][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.004903][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024162][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024221][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024234][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024245][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024256][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024267][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.024277][T16477] ublk_ctrl_add_dev: invalid recovery flags 10 [ 332.375142][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 332.375276][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3401'. [ 332.383098][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 332.383129][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3401'. [ 332.439248][T16498] tipc: Started in network mode [ 332.439319][T16498] tipc: Node identity ac1414aa, cluster identity 4711 [ 332.439384][T16498] tipc: Enabling of bearer rejected, failed to enable media [ 332.571397][T16507] virt_wifi0: entered promiscuous mode [ 332.571456][T16507] virt_wifi0: entered allmulticast mode [ 332.607082][T16510] netlink: 'syz.1.3408': attribute type 2 has an invalid length. [ 332.612061][T16510] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 332.672722][T16519] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3411'. [ 332.915747][T16522] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3412'. [ 333.429675][ T5801] tipc: Left network mode [ 333.625665][T16541] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3419'. [ 333.667966][T16543] loop5: detected capacity change from 0 to 7 [ 333.668789][T16543] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 333.668801][T16543] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 333.668837][T16543] Dev loop5: unable to read RDB block 7 [ 333.668849][T16543] loop5: AHDI p2 [ 333.668859][T16543] loop5: partition table partially beyond EOD, truncated [ 333.684729][T16544] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.766169][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.766519][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.797124][ T35] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 333.811305][T16550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.813758][T16550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.854064][T16550] ip6gre2: left promiscuous mode [ 333.854117][T16550] ip6gre2: left allmulticast mode [ 333.864322][T16552] tipc: Enabling of bearer rejected, already enabled [ 333.879309][ T5801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.879397][ T5801] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.879493][ T5801] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.879550][ T5801] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.949335][ T35] usb 10-1: Using ep0 maxpacket: 8 [ 333.951766][ T35] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 333.955941][ T35] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 333.958986][ T35] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.962567][ T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.966091][ T35] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.970648][ T35] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.976385][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.187374][ T35] usb 10-1: usb_control_msg returned -32 [ 334.189410][ T35] usbtmc 10-1:16.0: can't read capabilities [ 334.206140][T16539] 8021q: VLANs not supported on ip6_vti0 [ 334.208925][T16565] netlink: 'syz.2.3426': attribute type 10 has an invalid length. [ 334.757024][T16593] netlink: 'syz.2.3432': attribute type 11 has an invalid length. [ 334.757068][T16593] netlink: 'syz.2.3432': attribute type 4 has an invalid length. [ 334.757120][T16593] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3432'. [ 334.864778][T16604] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3435'. [ 334.868712][T16604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.183705][T16624] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 335.719669][ T43] kauditd_printk_skb: 103 callbacks suppressed [ 335.719799][ T43] audit: type=1800 audit(1788570644.374:1513): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.039684][ T43] audit: type=1800 audit(1788570644.690:1514): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.075926][ T43] audit: type=1800 audit(1788570644.719:1515): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.102931][ T43] audit: type=1800 audit(1788570644.749:1516): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.137682][ T43] audit: type=1800 audit(1788570644.778:1517): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.182011][ T43] audit: type=1800 audit(1788570644.828:1518): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.216022][ T43] audit: type=1800 audit(1788570644.867:1519): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.297747][ T43] audit: type=1800 audit(1788570644.946:1520): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.317205][ T43] audit: type=1800 audit(1788570644.966:1521): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245813 res=0 errno=0 [ 336.501393][ T43] audit: type=1800 audit(1788570645.144:1522): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 336.707989][ T1359] usb 10-1: USB disconnect, device number 38 [ 337.061931][ T1359] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 337.216286][ T1359] usb 10-1: Using ep0 maxpacket: 8 [ 337.217457][ T1359] usb 10-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 337.218390][ T1359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.218409][ T1359] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.218430][ T1359] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.223068][ T1359] usb 10-1: config 0 descriptor?? [ 337.435099][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.437001][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.443566][T16656] netlink: 'syz.5.3451': attribute type 2 has an invalid length. [ 337.443618][T16656] __nla_validate_parse: 3 callbacks suppressed [ 337.443689][T16656] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3451'. [ 337.500914][ T1359] usbhid 10-1:0.0: can't add hid device: -71 [ 337.501058][ T1359] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 337.503223][ T1359] usb 10-1: USB disconnect, device number 39 [ 337.856608][T16604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.044250][T16683] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3452'. [ 338.072220][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 338.175977][T16697] FAULT_INJECTION: forcing a failure. [ 338.175977][T16697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.176935][T16696] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 338.176948][T16696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3462'. [ 338.186411][T16697] CPU: 3 UID: 0 PID: 16697 Comm: syz.6.3458 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.186441][T16697] Tainted: [L]=SOFTLOCKUP [ 338.186447][T16697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.186455][T16697] Call Trace: [ 338.186459][T16697] [ 338.186465][T16697] dump_stack_lvl+0x100/0x190 [ 338.186498][T16697] should_fail_ex.cold+0x5/0xa [ 338.186515][T16697] strncpy_from_user+0x3b/0x2d0 [ 338.186539][T16697] do_getname+0x78/0x390 [ 338.186556][T16697] do_fchownat+0xc6/0x1f0 [ 338.186572][T16697] ? __pfx_do_fchownat+0x10/0x10 [ 338.186584][T16697] ? ksys_write+0x1ac/0x250 [ 338.186595][T16697] ? __pfx_ksys_write+0x10/0x10 [ 338.186614][T16697] __x64_sys_chown+0x7b/0xc0 [ 338.186627][T16697] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.186645][T16697] do_syscall_64+0x123/0x790 [ 338.186659][T16697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.186672][T16697] RIP: 0033:0x7f5294d9e159 [ 338.186683][T16697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.186694][T16697] RSP: 002b:00007f5295be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 338.186706][T16697] RAX: ffffffffffffffda RBX: 00007f5295026180 RCX: 00007f5294d9e159 [ 338.186714][T16697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 338.186721][T16697] RBP: 00007f5295be6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.186728][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.186735][T16697] R13: 00007f5295026218 R14: 00007f5295026180 R15: 00007ffc5c56fea8 [ 338.186750][T16697] [ 338.276658][T16704] loop5: detected capacity change from 0 to 7 [ 338.277439][T16704] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 338.277457][T16704] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 338.277518][T16704] Dev loop5: unable to read RDB block 7 [ 338.277537][T16704] loop5: AHDI p2 [ 338.277554][T16704] loop5: partition table partially beyond EOD, truncated [ 338.316585][ T5824] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 338.478195][ T5824] usb 10-1: Using ep0 maxpacket: 8 [ 338.478826][ T5824] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.479737][ T5824] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 338.479761][ T5824] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.479774][ T5824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.479788][ T5824] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.479803][ T5824] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.479826][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.687436][ T5824] usb 10-1: usb_control_msg returned -32 [ 338.687496][ T5824] usbtmc 10-1:16.0: can't read capabilities [ 338.849568][T16724] cgroup: No subsys list or none specified [ 338.849608][T16725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16725 comm=syz.2.3473 [ 338.849944][T16724] cgroup: No subsys list or none specified [ 338.850171][T16724] cgroup: No subsys list or none specified [ 338.850393][T16724] cgroup: No subsys list or none specified [ 338.850612][T16724] cgroup: No subsys list or none specified [ 338.850819][T16724] cgroup: No subsys list or none specified [ 338.850995][T16724] cgroup: No subsys list or none specified [ 338.851193][T16724] cgroup: No subsys list or none specified [ 338.851412][T16724] cgroup: No subsys list or none specified [ 338.851625][T16724] cgroup: No subsys list or none specified [ 338.851840][T16724] cgroup: No subsys list or none specified [ 338.852054][T16724] cgroup: No subsys list or none specified [ 338.852456][T16724] cgroup: No subsys list or none specified [ 338.852811][T16724] cgroup: No subsys list or none specified [ 338.853232][T16724] cgroup: No subsys list or none specified [ 338.853529][T16724] cgroup: No subsys list or none specified [ 338.853914][T16724] cgroup: No subsys list or none specified [ 338.854139][T16724] cgroup: No subsys list or none specified [ 338.854468][T16724] cgroup: No subsys list or none specified [ 338.854764][T16724] cgroup: No subsys list or none specified [ 338.855060][T16724] cgroup: No subsys list or none specified [ 338.855432][T16724] cgroup: No subsys list or none specified [ 338.855733][T16724] cgroup: No subsys list or none specified [ 338.856053][T16724] cgroup: No subsys list or none specified [ 338.856349][T16724] cgroup: No subsys list or none specified [ 338.856576][T16724] cgroup: No subsys list or none specified [ 338.856805][T16724] cgroup: No subsys list or none specified [ 338.857049][T16724] cgroup: No subsys list or none specified [ 338.857321][T16724] cgroup: No subsys list or none specified [ 338.857661][T16724] cgroup: No subsys list or none specified [ 338.857953][T16724] cgroup: No subsys list or none specified [ 338.858241][T16724] cgroup: No subsys list or none specified [ 338.858978][T16724] cgroup: No subsys list or none specified [ 338.859273][T16724] cgroup: No subsys list or none specified [ 338.859552][T16724] cgroup: No subsys list or none specified [ 338.859994][T16724] cgroup: No subsys list or none specified [ 338.860296][T16724] cgroup: No subsys list or none specified [ 338.860658][T16724] cgroup: No subsys list or none specified [ 338.860962][T16724] cgroup: No subsys list or none specified [ 338.861462][T16724] cgroup: No subsys list or none specified [ 338.861737][T16724] cgroup: No subsys list or none specified [ 338.862083][T16724] cgroup: No subsys list or none specified [ 338.862718][T16724] cgroup: No subsys list or none specified [ 338.863077][T16724] cgroup: No subsys list or none specified [ 338.863541][T16724] cgroup: No subsys list or none specified [ 338.864040][T16724] cgroup: No subsys list or none specified [ 338.864378][T16724] cgroup: No subsys list or none specified [ 338.864851][T16724] cgroup: No subsys list or none specified [ 338.865311][T16724] cgroup: No subsys list or none specified [ 338.865760][T16724] cgroup: No subsys list or none specified [ 338.866094][T16724] cgroup: No subsys list or none specified [ 338.866442][T16724] cgroup: No subsys list or none specified [ 338.866877][T16724] cgroup: No subsys list or none specified [ 338.867189][T16724] cgroup: No subsys list or none specified [ 338.867500][T16724] cgroup: No subsys list or none specified [ 338.868179][T16724] cgroup: No subsys list or none specified [ 338.868432][T16724] cgroup: No subsys list or none specified [ 338.868754][T16724] cgroup: No subsys list or none specified [ 338.869004][T16724] cgroup: No subsys list or none specified [ 338.869651][T16724] cgroup: No subsys list or none specified [ 338.869867][T16724] cgroup: No subsys list or none specified [ 338.870124][T16724] cgroup: No subsys list or none specified [ 338.870342][T16724] cgroup: No subsys list or none specified [ 338.870557][T16724] cgroup: No subsys list or none specified [ 338.870769][T16724] cgroup: No subsys list or none specified [ 338.983041][T16730] loop5: detected capacity change from 0 to 7 [ 338.983453][T16730] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 338.983464][T16730] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 338.983500][T16730] Dev loop5: unable to read RDB block 7 [ 338.983511][T16730] loop5: AHDI p2 [ 338.983522][T16730] loop5: partition table partially beyond EOD, truncated [ 339.201349][T16742] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3482'. [ 339.284917][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3480'. [ 339.401403][T16761] loop5: detected capacity change from 0 to 7 [ 339.404619][T16761] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 339.404709][T16761] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 339.404781][T16761] Dev loop5: unable to read RDB block 7 [ 339.404800][T16761] loop5: AHDI p2 [ 339.404818][T16761] loop5: partition table partially beyond EOD, truncated [ 339.434507][T16763] FAULT_INJECTION: forcing a failure. [ 339.434507][T16763] name failslab, interval 1, probability 0, space 0, times 0 [ 339.434604][T16763] CPU: 3 UID: 0 PID: 16763 Comm: syz.6.3484 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.434643][T16763] Tainted: [L]=SOFTLOCKUP [ 339.434651][T16763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.434663][T16763] Call Trace: [ 339.434671][T16763] [ 339.434680][T16763] dump_stack_lvl+0x100/0x190 [ 339.434721][T16763] should_fail_ex.cold+0x5/0xa [ 339.434743][T16763] should_failslab+0xc2/0x120 [ 339.434759][T16763] __kmalloc_noprof+0xfc/0x840 [ 339.434771][T16763] ? rcu_is_watching+0x13/0xc0 [ 339.434786][T16763] ? tomoyo_realpath_from_path+0xb6/0x690 [ 339.434826][T16763] tomoyo_realpath_from_path+0xb6/0x690 [ 339.434845][T16763] tomoyo_path_number_perm+0x23c/0x580 [ 339.434862][T16763] ? tomoyo_path_number_perm+0x22e/0x580 [ 339.434901][T16763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 339.434918][T16763] ? avc_policy_seqno+0x9/0x20 [ 339.434937][T16763] ? look_up_lock_class+0x55/0x120 [ 339.434963][T16763] ? from_kuid+0x8d/0xd0 [ 339.434975][T16763] ? __pfx_from_kuid+0x10/0x10 [ 339.434991][T16763] tomoyo_path_chown+0x173/0x1b0 [ 339.435006][T16763] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 339.435021][T16763] ? from_vfsuid+0xea/0x140 [ 339.435033][T16763] ? __pfx_from_vfsuid+0x10/0x10 [ 339.435046][T16763] security_path_chown+0x12a/0x2d0 [ 339.435065][T16763] chown_common+0x3da/0x6e0 [ 339.435083][T16763] ? __pfx_chown_common+0x10/0x10 [ 339.435096][T16763] ? mnt_get_write_access+0x52/0x2f0 [ 339.435115][T16763] ? mnt_get_write_access+0x52/0x2f0 [ 339.435136][T16763] ? mnt_get_write_access+0x1ec/0x2f0 [ 339.435157][T16763] do_fchownat+0x18e/0x1f0 [ 339.435171][T16763] ? __pfx_do_fchownat+0x10/0x10 [ 339.435184][T16763] ? ksys_write+0x1ac/0x250 [ 339.435197][T16763] ? __pfx_ksys_write+0x10/0x10 [ 339.435211][T16763] __x64_sys_chown+0x7b/0xc0 [ 339.435224][T16763] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.435236][T16763] do_syscall_64+0x123/0x790 [ 339.435250][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.435263][T16763] RIP: 0033:0x7f5294d9e159 [ 339.435274][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.435286][T16763] RSP: 002b:00007f5295be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 339.435298][T16763] RAX: ffffffffffffffda RBX: 00007f5295026180 RCX: 00007f5294d9e159 [ 339.435306][T16763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 339.435313][T16763] RBP: 00007f5295be6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.435320][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.435327][T16763] R13: 00007f5295026218 R14: 00007f5295026180 R15: 00007ffc5c56fea8 [ 339.435342][T16763] [ 339.441283][T16763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 339.523049][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3490'. [ 339.523065][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3490'. [ 339.530161][ T851] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 339.674793][T16775] netlink: 'syz.6.3493': attribute type 10 has an invalid length. [ 339.676413][T16775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.677354][T16775] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 339.677814][T16775] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 339.682454][ T851] usb 6-1: not running at top speed; connect to a high speed hub [ 339.682482][ T851] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 339.683324][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 339.683342][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 339.683357][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 339.683372][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 339.683387][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 339.683401][ T851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 339.685003][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.685018][ T851] usb 6-1: Product: syz [ 339.685027][ T851] usb 6-1: Manufacturer: syz [ 339.685036][ T851] usb 6-1: SerialNumber: syz [ 339.690482][T16752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.690540][T16752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.690653][T16752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.690703][T16752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.690806][T16752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.694524][ T851] usb 6-1: USB2VGA dongle found at address 66 [ 339.703658][ T851] usb 6-1: Allocated 8 output buffers [ 339.703675][ T851] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 339.898094][T16752] team0: Device xfrm0 is of different type [ 339.903515][T16752] tipc: Enabled bearer , priority 0 [ 339.905717][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3480'. [ 339.906695][T16777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.906984][T16777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.908030][T16779] team0: Device xfrm0 is of different type [ 339.912171][T16780] tipc: Enabling of bearer rejected, already enabled [ 339.917273][ T7543] usb 6-1: USB disconnect, device number 66 [ 340.285664][T16787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3496'. [ 340.304145][T16788] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 340.304202][T16788] netlink: 'syz.6.3496': attribute type 4 has an invalid length. [ 340.304737][T16788] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 340.304795][T16788] netlink: 'syz.6.3496': attribute type 4 has an invalid length. [ 340.304978][T16788] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 340.304989][T16788] netlink: 'syz.6.3496': attribute type 4 has an invalid length. [ 340.305182][T16788] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 340.425554][T16794] loop5: detected capacity change from 0 to 7 [ 340.426204][T16794] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 340.426224][T16794] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 340.426330][T16794] Dev loop5: unable to read RDB block 7 [ 340.426351][T16794] loop5: AHDI p2 [ 340.426369][T16794] loop5: partition table partially beyond EOD, truncated [ 340.596818][T16811] jffs2: notice: (16811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 8 of xref (0 dead, 7 orphan) found. [ 340.617447][T16814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.618165][T16814] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 340.618592][T16814] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 340.903184][ T7543] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 341.066129][ T7543] usb 7-1: not running at top speed; connect to a high speed hub [ 341.066201][ T7543] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 341.067246][ T7543] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 341.068850][ T7543] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.068864][ T7543] usb 7-1: Product: syz [ 341.068873][ T7543] usb 7-1: Manufacturer: syz [ 341.068881][ T7543] usb 7-1: SerialNumber: syz [ 341.071112][ T43] kauditd_printk_skb: 111 callbacks suppressed [ 341.071127][ T43] audit: type=1800 audit(1788570649.663:1634): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248104 res=0 errno=0 [ 341.071911][ T7543] oti6858 7-1:1.0: oti6858 converter detected [ 341.075822][ T43] audit: type=1800 audit(1788570649.663:1635): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=248136 res=0 errno=0 [ 341.077352][ T43] audit: type=1800 audit(1788570649.673:1636): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=248111 res=0 errno=0 [ 341.079171][ T7543] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 341.081434][ T43] audit: type=1800 audit(1788570649.673:1637): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=248112 res=0 errno=0 [ 341.082667][ T43] audit: type=1800 audit(1788570649.673:1638): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=248133 res=0 errno=0 [ 341.083500][ T43] audit: type=1800 audit(1788570649.673:1639): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=248134 res=0 errno=0 [ 341.084401][ T43] audit: type=1800 audit(1788570649.673:1640): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=248113 res=0 errno=0 [ 341.085375][ T43] audit: type=1800 audit(1788570649.683:1641): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=248135 res=0 errno=0 [ 341.089504][ T43] audit: type=1800 audit(1788570649.683:1642): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248156 res=0 errno=0 [ 341.091859][ T43] audit: type=1800 audit(1788570649.683:1643): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=248172 res=0 errno=0 [ 341.134482][ T7543] usb 10-1: USB disconnect, device number 40 [ 341.178829][T16820] loop5: detected capacity change from 0 to 7 [ 341.181457][T16820] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 341.181474][T16820] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 341.181515][T16820] Dev loop5: unable to read RDB block 7 [ 341.181527][T16820] loop5: AHDI p2 [ 341.181537][T16820] loop5: partition table partially beyond EOD, truncated [ 341.280933][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.488370][T16841] tipc: Started in network mode [ 341.488427][T16841] tipc: Node identity ac1414aa, cluster identity 4711 [ 341.488765][T16841] tipc: New replicast peer: 172.20.20.187 [ 341.489250][T16841] tipc: Enabled bearer , priority 10 [ 341.659663][T16855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.661510][ T6390] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 341.666184][T16855] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 341.670588][T16855] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 341.756175][T16860] fuse: Bad value for 'fd' [ 341.832040][ T6390] usb 6-1: Using ep0 maxpacket: 8 [ 341.832915][ T6390] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.833910][ T6390] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 341.833937][ T6390] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.833950][ T6390] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.833964][ T6390] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.833977][ T6390] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.833998][ T6390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.044119][ T6390] usb 6-1: usb_control_msg returned -32 [ 342.044175][ T6390] usbtmc 6-1:16.0: can't read capabilities [ 342.323876][T16877] jffs2: notice: (16877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 8 of xref (0 dead, 7 orphan) found. [ 342.618812][ T5842] tipc: Node number set to 2886997162 [ 342.740071][T16890] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 342.759997][ T6390] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 342.784186][T16894] validate_nla: 61 callbacks suppressed [ 342.784301][T16894] netlink: 'syz.6.3532': attribute type 10 has an invalid length. [ 342.921324][ T6390] usb 10-1: Using ep0 maxpacket: 8 [ 342.924269][ T6390] usb 10-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 342.925628][ T6390] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.925653][ T6390] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.925683][ T6390] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.927527][ T6390] usb 10-1: config 0 descriptor?? [ 343.136489][T16888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.137073][T16888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.142661][T16888] netlink: 'syz.5.3530': attribute type 2 has an invalid length. [ 343.142723][T16888] __nla_validate_parse: 35 callbacks suppressed [ 343.142731][T16888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3530'. [ 343.196700][ T6390] usbhid 10-1:0.0: can't add hid device: -71 [ 343.196779][ T6390] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 343.198194][ T6390] usb 10-1: USB disconnect, device number 41 [ 343.669974][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3538'. [ 343.674488][T16910] erspan0: entered promiscuous mode [ 343.705768][T11104] usb 7-1: USB disconnect, device number 53 [ 343.741224][T11104] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 343.741578][T11104] oti6858 7-1:1.0: device disconnected [ 343.830700][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3541'. [ 343.975571][T16927] netlink: 'syz.6.3542': attribute type 10 has an invalid length. [ 344.149966][T16933] IPVS: length: 225 != 24 [ 344.189554][T16937] ovs-system: entered promiscuous mode [ 344.439438][ T7543] usb 6-1: USB disconnect, device number 67 [ 344.487696][T16945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3550'. [ 344.567809][T16953] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3555'. [ 344.611783][T16954] tipc: Enabling of bearer rejected, already enabled [ 344.674985][T16961] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3557'. [ 344.675035][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3557'. [ 344.715658][ T5842] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 344.738468][T16963] loop5: detected capacity change from 0 to 7 [ 344.738954][T16963] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 344.738966][T16963] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 344.739061][T16963] Dev loop5: unable to read RDB block 7 [ 344.739074][T16963] loop5: AHDI p2 [ 344.739083][T16963] loop5: partition table partially beyond EOD, truncated [ 344.776047][T16967] netlink: 'syz.5.3560': attribute type 10 has an invalid length. [ 344.877498][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 344.878389][ T5842] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 344.879228][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.879245][ T5842] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.879266][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.880625][ T5842] usb 7-1: config 0 descriptor?? [ 345.088788][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.089079][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.098052][T16943] netlink: 'syz.2.3549': attribute type 2 has an invalid length. [ 345.098116][T16943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3549'. [ 345.142724][ T5842] usbhid 7-1:0.0: can't add hid device: -71 [ 345.142832][ T5842] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 345.144470][ T5842] usb 7-1: USB disconnect, device number 54 [ 345.328511][T16975] vlan2: entered allmulticast mode [ 345.328574][T16975] bond0: entered allmulticast mode [ 345.328615][T16975] bond_slave_0: entered allmulticast mode [ 345.328646][T16975] bond_slave_1: entered allmulticast mode [ 345.328661][T16975] veth0_to_bond: entered allmulticast mode [ 345.328677][T16975] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 345.367017][T16979] 9pnet_virtio: no channels available for device syz [ 345.495198][T16983] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3567'. [ 345.520120][T16985] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 345.520526][T16985] fuse: Bad value for 'user_id' [ 345.520541][T16985] fuse: Bad value for 'user_id' [ 345.553583][T16985] fuse: fd is not a fuse device [ 345.668244][T16990] loop5: detected capacity change from 0 to 7 [ 345.669236][T16990] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 345.669249][T16990] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 345.669283][T16990] Dev loop5: unable to read RDB block 7 [ 345.669295][T16990] loop5: AHDI p2 [ 345.669304][T16990] loop5: partition table partially beyond EOD, truncated [ 345.786095][T16996] jffs2: notice: (16996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 8 of xref (0 dead, 7 orphan) found. [ 345.866231][T17005] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3577'. [ 345.927949][T17014] tipc: Enabling of bearer rejected, already enabled [ 346.276721][ T43] kauditd_printk_skb: 135 callbacks suppressed [ 346.276784][ T43] audit: type=1800 audit(1788570654.831:1779): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 346.304799][ T43] audit: type=1800 audit(1788570654.851:1780): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 346.321331][T17028] loop5: detected capacity change from 0 to 7 [ 346.326370][T17028] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 346.326439][T17028] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 346.326499][T17028] Dev loop5: unable to read RDB block 7 [ 346.326518][T17028] loop5: AHDI p2 [ 346.326534][T17028] loop5: partition table partially beyond EOD, truncated [ 346.347168][ T6390] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 346.358170][ T43] audit: type=1800 audit(1788570654.911:1781): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 346.436532][ T43] audit: type=1800 audit(1788570654.980:1782): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 346.461820][ T43] audit: type=1800 audit(1788570655.010:1783): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16398 res=0 errno=0 [ 346.508225][ T6390] usb 7-1: Using ep0 maxpacket: 8 [ 346.511573][ T6390] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 346.516309][ T6390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.520889][ T6390] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.526067][ T6390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.528525][ T6390] usb 7-1: config 0 descriptor?? [ 346.529481][ T43] audit: type=1800 audit(1788570655.080:1784): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252704 res=0 errno=0 [ 346.533802][ T43] audit: type=1800 audit(1788570655.080:1785): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252733 res=0 errno=0 [ 346.533843][ T43] audit: type=1800 audit(1788570655.080:1786): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252711 res=0 errno=0 [ 346.533878][ T43] audit: type=1800 audit(1788570655.080:1787): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=252712 res=0 errno=0 [ 346.534876][ T43] audit: type=1800 audit(1788570655.080:1788): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=252713 res=0 errno=0 [ 346.688327][T17038] tipc: Started in network mode [ 346.688395][T17038] tipc: Node identity ac1414aa, cluster identity 4711 [ 346.688426][T17038] tipc: Enabling of bearer rejected, failed to enable media [ 346.741544][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.745998][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.758403][T17019] netlink: 'syz.2.3581': attribute type 2 has an invalid length. [ 346.781892][T17041] tipc: Enabled bearer , priority 0 [ 346.788189][T17041] syzkaller0: entered promiscuous mode [ 346.788278][T17041] syzkaller0: entered allmulticast mode [ 346.824487][ T6390] usbhid 7-1:0.0: can't add hid device: -71 [ 346.824619][ T6390] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 346.826190][ T6390] usb 7-1: USB disconnect, device number 55 [ 346.887003][T17041] tipc: Resetting bearer [ 346.889143][T17040] tipc: Resetting bearer [ 346.902991][T17040] tipc: Disabling bearer [ 347.065508][ T5774] tipc: Left network mode [ 347.065626][T17052] tipc: Enabling of bearer rejected, already enabled [ 347.181789][T17059] loop5: detected capacity change from 0 to 7 [ 347.182372][T17059] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 347.182384][T17059] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 347.182420][T17059] Dev loop5: unable to read RDB block 7 [ 347.183524][T17059] loop5: AHDI p2 [ 347.183536][T17059] loop5: partition table partially beyond EOD, truncated [ 347.368128][T17068] vlan2: entered promiscuous mode [ 347.513973][T17070] tipc: Started in network mode [ 347.514054][T17070] tipc: Node identity ac1414aa, cluster identity 4711 [ 347.514117][T17070] tipc: Enabling of bearer rejected, failed to enable media [ 347.952954][ T13] tipc: Left network mode [ 348.394830][T17101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17101 comm=syz.5.3609 [ 348.500971][ T5842] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 348.651595][ T5842] usb 11-1: Using ep0 maxpacket: 8 [ 348.656722][ T5842] usb 11-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 348.663434][ T5842] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.668213][ T5842] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.668266][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.677421][ T5842] usb 11-1: config 0 descriptor?? [ 348.886898][T17098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.890521][T17098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.900952][T17098] netlink: 'syz.6.3607': attribute type 2 has an invalid length. [ 348.901095][T17098] __nla_validate_parse: 4 callbacks suppressed [ 348.901109][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3607'. [ 348.909847][T17098] : entered promiscuous mode [ 348.969505][ T5842] usbhid 11-1:0.0: can't add hid device: -71 [ 348.969609][ T5842] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 348.970944][ T5842] usb 11-1: USB disconnect, device number 17 [ 349.194659][ T5726] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 349.554045][T17135] netlink: 'syz.6.3619': attribute type 3 has an invalid length. [ 349.561453][T17136] tipc: Enabling of bearer rejected, already enabled [ 349.760359][T17150] netlink: 'syz.6.3623': attribute type 10 has an invalid length. [ 349.907223][T17159] loop5: detected capacity change from 0 to 7 [ 349.907864][T17159] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 349.907878][T17159] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 349.907917][T17159] Dev loop5: unable to read RDB block 7 [ 349.907936][T17159] loop5: AHDI p2 [ 349.907946][T17159] loop5: partition table partially beyond EOD, truncated [ 350.237899][T17170] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 350.245772][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3631'. [ 350.419087][T17176] tipc: Started in network mode [ 350.419134][T17176] tipc: Node identity ac1414aa, cluster identity 4711 [ 350.419196][T17176] tipc: Enabling of bearer rejected, failed to enable media [ 350.427979][T17179] syzkaller0: entered promiscuous mode [ 350.430215][T17179] syzkaller0: entered allmulticast mode [ 350.491619][T17183] loop4: detected capacity change from 0 to 10832 [ 350.503110][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503810][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503832][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503849][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503866][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503890][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503913][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503928][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503937][T17183] ldm_validate_partition_table(): Disk read failed. [ 350.503951][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503967][T17183] Buffer I/O error on dev loop4, logical block 0, async page read [ 350.503991][T17183] Dev loop4: unable to read RDB block 0 [ 350.504057][T17183] loop4: unable to read partition table [ 350.504167][T17183] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 350.679351][T17192] loop5: detected capacity change from 0 to 7 [ 350.680035][T17192] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 350.680049][T17192] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 350.680092][T17192] Dev loop5: unable to read RDB block 7 [ 350.680105][T17192] loop5: AHDI p2 [ 350.680115][T17192] loop5: partition table partially beyond EOD, truncated [ 350.769996][T17198] netlink: 'syz.2.3640': attribute type 10 has an invalid length. [ 350.806157][T17198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.806887][T17198] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 350.807191][T17198] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 350.837475][T12615] tipc: Left network mode [ 351.005442][T17210] vlan3: entered promiscuous mode [ 351.034331][ T1359] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 351.083068][T17212] loop5: detected capacity change from 0 to 7 [ 351.084530][T17212] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 351.084555][T17212] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 351.084595][T17212] Dev loop5: unable to read RDB block 7 [ 351.084609][T17212] loop5: AHDI p2 [ 351.084619][T17212] loop5: partition table partially beyond EOD, truncated [ 351.185204][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 351.186035][ T1359] usb 6-1: New USB device found, idVendor=3eef, idProduct=7273, bcdDevice=de.06 [ 351.187496][ T1359] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 351.187524][ T1359] usb 6-1: can't read configurations, error -61 [ 351.315940][ T1359] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 351.322439][ T43] kauditd_printk_skb: 128 callbacks suppressed [ 351.325843][ T43] audit: type=1800 audit(1788570659.842:1917): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259873 res=0 errno=0 [ 351.338503][ T43] audit: type=1800 audit(1788570659.842:1918): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=259877 res=0 errno=0 [ 351.348251][ T43] audit: type=1800 audit(1788570659.852:1919): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=259881 res=0 errno=0 [ 351.357516][ T43] audit: type=1800 audit(1788570659.852:1920): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=259880 res=0 errno=0 [ 351.367096][ T43] audit: type=1800 audit(1788570659.852:1921): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=259883 res=0 errno=0 [ 351.372618][ T43] audit: type=1800 audit(1788570659.862:1922): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259950 res=0 errno=0 [ 351.372668][ T43] audit: type=1800 audit(1788570659.862:1923): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=259954 res=0 errno=0 [ 351.372719][ T43] audit: type=1800 audit(1788570659.882:1924): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16011 res=0 errno=0 [ 351.486740][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 351.487835][ T1359] usb 6-1: New USB device found, idVendor=3eef, idProduct=7273, bcdDevice=de.06 [ 351.491206][ T1359] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 351.491239][ T1359] usb 6-1: can't read configurations, error -61 [ 351.491449][ T1359] usb usb6-port1: attempt power cycle [ 351.497596][ T43] audit: type=1800 audit(1788570660.021:1925): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=260057 res=0 errno=0 [ 351.530957][ T43] audit: type=1800 audit(1788570660.051:1926): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16527 res=0 errno=0 [ 351.828168][ T1359] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 351.849784][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 351.852615][ T1359] usb 6-1: New USB device found, idVendor=3eef, idProduct=7273, bcdDevice=de.06 [ 351.857791][ T1359] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 351.861278][ T1359] usb 6-1: can't read configurations, error -61 [ 351.988860][ T1359] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 352.012939][ T1359] usb 6-1: Using ep0 maxpacket: 16 [ 352.016055][ T1359] usb 6-1: New USB device found, idVendor=3eef, idProduct=7273, bcdDevice=de.06 [ 352.021683][ T1359] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 352.025234][ T1359] usb 6-1: can't read configurations, error -61 [ 352.028623][ T1359] usb usb6-port1: unable to enumerate USB device [ 352.037273][T17238] tipc: Started in network mode [ 352.037326][T17238] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.037383][T17238] tipc: Enabling of bearer rejected, failed to enable media [ 352.414727][T17242] vlan2: entered promiscuous mode [ 352.442657][ T13] tipc: Left network mode [ 352.562111][T17245] tipc: Enabling of bearer rejected, already enabled [ 353.019240][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3664'. [ 353.019299][T17258] openvswitch: netlink: EtherType 0 is less than min 600 [ 353.411150][T17264] vlan2: entered promiscuous mode [ 353.561432][T17266] tipc: Started in network mode [ 353.561480][T17266] tipc: Node identity ac1414aa, cluster identity 4711 [ 353.561526][T17266] tipc: Enabling of bearer rejected, failed to enable media [ 353.848757][T17272] syz_tun: entered allmulticast mode [ 353.858679][T17272] dvmrp8: entered allmulticast mode [ 353.860353][T17271] syz_tun: left allmulticast mode [ 354.046983][T12615] tipc: Left network mode [ 354.158509][ T851] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 354.238720][T11104] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 354.309381][ T851] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 354.310236][ T851] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.310260][ T851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.311526][ T851] usb 10-1: config 0 descriptor?? [ 354.316249][ T851] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 354.389719][T11104] usb 6-1: Using ep0 maxpacket: 8 [ 354.390253][T11104] usb 6-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 354.391565][T11104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.391585][T11104] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.391606][T11104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.392964][T11104] usb 6-1: config 0 descriptor?? [ 354.421715][T17279] netlink: 'syz.2.3673': attribute type 10 has an invalid length. [ 354.519295][ T5098] usb 10-1: USB disconnect, device number 42 [ 354.600302][T17277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.600740][T17277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.601518][T17277] netlink: 'syz.1.3672': attribute type 2 has an invalid length. [ 354.601529][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3672'. [ 354.604925][T11104] usbhid 6-1:0.0: can't add hid device: -71 [ 354.604979][T11104] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 354.607156][T11104] usb 6-1: USB disconnect, device number 72 [ 354.840637][T17283] tipc: Started in network mode [ 354.840683][T17283] tipc: Node identity ac1414aa, cluster identity 4711 [ 354.840733][T17283] tipc: Enabling of bearer rejected, failed to enable media [ 355.121389][T17293] Bluetooth: MGMT ver 1.23 [ 355.240277][T12615] tipc: Left network mode [ 355.248223][T17300] tipc: Enabling of bearer rejected, already enabled [ 355.308669][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 355.594005][ T1359] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 355.774663][ T1359] usb 6-1: Using ep0 maxpacket: 8 [ 355.775464][ T1359] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.776274][ T1359] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 355.776302][ T1359] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.776316][ T1359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.776331][ T1359] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.776345][ T1359] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.776367][ T1359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.842029][T17321] sch_fq: defrate 0 ignored. [ 355.983918][ T1359] usb 6-1: usb_control_msg returned -32 [ 355.983987][ T1359] usbtmc 6-1:16.0: can't read capabilities [ 356.111642][T17324] vlan3: entered promiscuous mode [ 356.339676][T17333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.340451][T17333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.358596][ T43] kauditd_printk_skb: 102 callbacks suppressed [ 356.361357][ T43] audit: type=1800 audit(1788570664.861:2029): pid=17335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed c ** replaying previous printk message ** [ 356.361357][ T43] audit: type=1800 audit(1788570664.861:2029): pid=17335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3690" name="UDC" dev="configfs" ino=68388 res=0 errno=0 [ 356.365919][T17335] ================================================================== [ 356.365932][T17335] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 356.365974][T17335] Read of size 128 at addr ffffffff9bcacc60 by task syz.5.3690/17335 [ 356.365989][T17335] [ 356.366000][T17335] CPU: 2 UID: 0 PID: 17335 Comm: syz.5.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.366033][T17335] Tainted: [L]=SOFTLOCKUP [ 356.366040][T17335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.366051][T17335] Call Trace: [ 356.366058][T17335] [ 356.366065][T17335] dump_stack_lvl+0x100/0x190 [ 356.366092][T17335] print_report+0x13d/0x4b0 [ 356.366120][T17335] ? __virt_addr_valid+0x239/0x430 [ 356.366137][T17335] ? usb_copy_descriptors+0x18d/0x320 [ 356.366155][T17335] kasan_report+0xdf/0x1c0 [ 356.366180][T17335] ? usb_copy_descriptors+0x18d/0x320 [ 356.366202][T17335] kasan_check_range+0x10f/0x1e0 [ 356.366225][T17335] __asan_memcpy+0x23/0x60 [ 356.366248][T17335] usb_copy_descriptors+0x18d/0x320 [ 356.366267][T17335] usb_assign_descriptors+0xd2/0x470 [ 356.366286][T17335] f_audio_bind+0x243a/0x3950 [ 356.366312][T17335] ? __pfx_f_audio_bind+0x10/0x10 [ 356.366333][T17335] usb_add_function+0x219/0x890 [ 356.366354][T17335] configfs_composite_bind+0xd83/0x1960 [ 356.366378][T17335] gadget_bind_driver+0x28c/0xbf0 [ 356.366402][T17335] ? __pfx_gadget_bind_driver+0x10/0x10 [ 356.366425][T17335] really_probe+0x241/0xa60 [ 356.366451][T17335] __driver_probe_device+0x210/0x460 [ 356.366475][T17335] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 356.366510][T17335] driver_probe_device+0x4a/0x140 [ 356.366535][T17335] __driver_attach+0x21f/0x5b0 [ 356.366560][T17335] ? __pfx___driver_attach+0x10/0x10 [ 356.366607][T17335] bus_for_each_dev+0x13e/0x1d0 [ 356.366631][T17335] ? __pfx_bus_for_each_dev+0x10/0x10 [ 356.366651][T17335] ? bus_add_driver+0x2b5/0x5b0 [ 356.366676][T17335] bus_add_driver+0x305/0x5b0 [ 356.366698][T17335] driver_register+0x1e2/0x360 [ 356.366715][T17335] usb_gadget_register_driver_owner+0x132/0x210 [ 356.366739][T17335] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 356.366759][T17335] configfs_write_iter+0x302/0x4e0 [ 356.366783][T17335] vfs_write+0x6af/0x1050 [ 356.366808][T17335] ? __pfx_configfs_write_iter+0x10/0x10 [ 356.366831][T17335] ? __pfx_vfs_write+0x10/0x10 [ 356.366854][T17335] ? find_held_lock+0x2b/0x80 [ 356.366883][T17335] ksys_write+0x12a/0x250 [ 356.366898][T17335] ? __pfx_ksys_write+0x10/0x10 [ 356.366915][T17335] do_syscall_64+0x123/0x790 [ 356.366933][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.366950][T17335] RIP: 0033:0x7f330299e159 [ 356.366963][T17335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.366979][T17335] RSP: 002b:00007f33038cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.366997][T17335] RAX: ffffffffffffffda RBX: 00007f3302c25fa0 RCX: 00007f330299e159 [ 356.367010][T17335] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 356.367029][T17335] RBP: 00007f3302a35024 R08: 0000000000000000 R09: 0000000000000000 [ 356.367040][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.367052][T17335] R13: 00007f3302c26038 R14: 00007f3302c25fa0 R15: 00007ffe5a930f38 [ 356.367070][T17335] [ 356.367076][T17335] [ 356.367080][T17335] The buggy address belongs to the variable: [ 356.367085][T17335] ac_header_desc+0x0/0x40 [ 356.367100][T17335] [ 356.367104][T17335] The buggy address belongs to the physical page: [ 356.367111][T17335] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcac [ 356.367126][T17335] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 356.367148][T17335] raw: 00fff00000002000 ffffea00006f2b08 ffffea00006f2b08 0000000000000000 [ 356.367163][T17335] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 356.367174][T17335] page dumped because: kasan: bad access detected [ 356.367182][T17335] page_owner info is not present (never set?) [ 356.367188][T17335] [ 356.367192][T17335] Memory state around the buggy address: [ 356.367199][T17335] ffffffff9bcacb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 356.367210][T17335] ffffffff9bcacb80: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 356.367221][T17335] >ffffffff9bcacc00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 356.367230][T17335] ^ [ 356.367239][T17335] ffffffff9bcacc80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 356.367250][T17335] ffffffff9bcacd00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 356.367258][T17335] ================================================================== [ 356.367467][T17335] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 356.561903][T17335] CPU: 2 UID: 0 PID: 17335 Comm: syz.5.3690 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.566281][T17335] Tainted: [L]=SOFTLOCKUP [ 356.568029][T17335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.572049][T17335] Call Trace: [ 356.573352][T17335] [ 356.574191][T17335] dump_stack_lvl+0x100/0x190 [ 356.575988][T17335] vpanic+0x553/0x970 [ 356.577739][T17335] ? __pfx_vpanic+0x10/0x10 [ 356.579701][T17335] ? mark_held_locks+0x40/0x70 [ 356.581682][T17335] ? usb_copy_descriptors+0x18d/0x320 [ 356.583492][T17335] panic+0xd1/0xe0 [ 356.584979][T17335] ? __pfx_panic+0x10/0x10 [ 356.586816][T17335] ? usb_copy_descriptors+0x18d/0x320 [ 356.589008][T17335] ? preempt_schedule_common+0x3c/0xb0 [ 356.590919][T17335] check_panic_on_warn.cold+0x19/0x34 [ 356.592943][T17335] end_report.part.0+0x3a/0x90 [ 356.594929][T17335] kasan_report.cold+0xe/0x18 [ 356.596865][T17335] ? usb_copy_descriptors+0x18d/0x320 [ 356.599043][T17335] kasan_check_range+0x10f/0x1e0 [ 356.601054][T17335] __asan_memcpy+0x23/0x60 [ 356.602774][T17335] usb_copy_descriptors+0x18d/0x320 [ 356.604554][T17335] usb_assign_descriptors+0xd2/0x470 [ 356.606920][T17335] f_audio_bind+0x243a/0x3950 [ 356.609202][T17335] ? __pfx_f_audio_bind+0x10/0x10 [ 356.611391][T17335] usb_add_function+0x219/0x890 [ 356.613410][T17335] configfs_composite_bind+0xd83/0x1960 [ 356.615339][T17335] gadget_bind_driver+0x28c/0xbf0 [ 356.617297][T17335] ? __pfx_gadget_bind_driver+0x10/0x10 [ 356.619618][T17335] really_probe+0x241/0xa60 [ 356.621500][T17335] __driver_probe_device+0x210/0x460 [ 356.623788][T17335] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 356.626234][T17335] driver_probe_device+0x4a/0x140 [ 356.627956][T17335] __driver_attach+0x21f/0x5b0 [ 356.629923][T17335] ? __pfx___driver_attach+0x10/0x10 [ 356.632125][T17335] bus_for_each_dev+0x13e/0x1d0 [ 356.634233][T17335] ? __pfx_bus_for_each_dev+0x10/0x10 [ 356.636262][T17335] ? bus_add_driver+0x2b5/0x5b0 [ 356.638007][T17335] bus_add_driver+0x305/0x5b0 [ 356.639556][T17335] driver_register+0x1e2/0x360 [ 356.641094][T17335] usb_gadget_register_driver_owner+0x132/0x210 [ 356.643074][T17335] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 356.644860][T17335] configfs_write_iter+0x302/0x4e0 [ 356.646479][T17335] vfs_write+0x6af/0x1050 [ 356.647849][T17335] ? __pfx_configfs_write_iter+0x10/0x10 [ 356.649708][T17335] ? __pfx_vfs_write+0x10/0x10 [ 356.651291][T17335] ? find_held_lock+0x2b/0x80 [ 356.652895][T17335] ksys_write+0x12a/0x250 [ 356.654416][T17335] ? __pfx_ksys_write+0x10/0x10 [ 356.656046][T17335] do_syscall_64+0x123/0x790 [ 356.657510][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.659345][T17335] RIP: 0033:0x7f330299e159 [ 356.660784][T17335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.666754][T17335] RSP: 002b:00007f33038cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.669392][T17335] RAX: ffffffffffffffda RBX: 00007f3302c25fa0 RCX: 00007f330299e159 [ 356.672139][T17335] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 356.674853][T17335] RBP: 00007f3302a35024 R08: 0000000000000000 R09: 0000000000000000 [ 356.677442][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.679897][T17335] R13: 00007f3302c26038 R14: 00007f3302c25fa0 R15: 00007ffe5a930f38 [ 356.682359][T17335] [ 356.683980][T17335] Kernel Offset: disabled [ 356.685371][T17335] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:32:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888024600000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff88806a541900 RSP=ffffc90000fc7898 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10048c02b3 R13=0000000000000003 R14=ffffed100d4a8321 R15=0000000000000001 RIP=ffffffff820be1a0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c309105 CR3=000000005cdb0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=ffff88801eee8000 RSI=ffffffff81ea1563 RDI=ffff88801eee8000 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=74203a7469647561 R12=ffffffff8fbd3bc0 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff820be79b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f33038cbff8 CR3=0000000026ef9000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004344552f31672f 7465676461675f62 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5a931426 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5a931426 00007ffe5a93142c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302bf2600 00007f3302bf25e0 00007f3302bf25e8 00007f3302bf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302bf25f8 00007f3302bf25c8 00007f3302bf2600 00007f3302bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afc6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc90003b1ef40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666552 R12=0000000000000000 R13=0000000000000036 R14=0000000000000005 R15=ffffc90003b1f258 RIP=ffffffff85afc6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f33038cc6c0 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f330375da08 CR3=0000000026ef9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000045 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fcf802fe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5a931426 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5a931426 00007ffe5a93142c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3302a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000003fbcb9 RBX=ffff88801f698000 RCX=ffffffff8bcf3115 RDX=0000000000000001 RSI=ffffffff8e3eaa9b RDI=ffffffff8c620c80 RBP=ffffed1003ed3000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d4e67bd R10=ffff88806a733deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bcf16bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2cc217 CR3=0000000038280000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00b85cf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe00b85cf6 00007ffe00b85cfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f9035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f9035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f90357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f9035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f91f2600 00007f20f91f25e0 00007f20f91f25e8 00007f20f91f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20f91f25f8 00007f20f91f25c8 00007f20f91f2600 00007f20f91f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b7f2e0093a6b68d d5e410a764a8f135 2491a3f43ab641a0 dfc61181b565c03b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 9500000000000000 b500000041ff0003 c3ffffff00fe000a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a00000000000044 3f00000000ff0003 7a0000ed01000004 4700000000000540 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d00000000000204 5d00000000fff0a4 71fffffff8fff00a 72ffff8000000003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000