last executing test programs: 4.619529483s ago: executing program 2 (id=1411): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix_mp={0x9, 0x0, 0x56544943, 0x0, 0x2, [{0x1, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x8, 0x4}, {0x9, 0x1}, {0x85b, 0x8005}, {0x3}, {0xffff, 0x1}], 0x6, 0xcb, 0x1, 0x1, 0x4}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="039f352fe8", 0x5, 0x50, 0x0, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.229841705s ago: executing program 2 (id=1432): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 2.330528889s ago: executing program 2 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffa, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xd, 0x1b}}}, 0x24}, 0x1, 0xffffffffffff, 0x0, 0x10}, 0x0) 2.248268473s ago: executing program 2 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffdf}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x820, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1004}}}}}}, 0x0) 2.244685939s ago: executing program 2 (id=1452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x201, 0x0, 0x0) 2.186160313s ago: executing program 2 (id=1455): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="ae365ffe486d", 0x6}, {&(0x7f0000000140)="126d1575c61dd0515aa210e842f59495feb3ad0dd1afb78cdac7a30c6c3d64ed27ad034e2c562eb2d549bd9bd1260dd70b36b666e67c03f20a9a075ba797a8372ecc2c99af086d45d3", 0x49}, {&(0x7f0000000240)="f4c82996b2ef35513ffadaa9eb90498e3a2c1732f58563b764254d040ea1cc3352dcdc33cef8278b16ce98d9399371ade118f39bc8f29db58702edb79b55242d15f0f7b646ec90f6fa1cdf9db142bf8f3a9496990eb7f053028df49f0e49bb68022999a8d60b6c762923613afa8d44d1cb163fb1a6bc9653d6235c9c11b8171f243e5b310e77a96f0e483ba679c79d78c00ab5f0d8ac489e56fd1e4e36c2c097ab1e526d9e87e446b62d2c94bd609d7b9797eef4bac5a4c907310b92ce52f869225592c57083ace48c4e2b9cc1da1bd695620dd04f3db910502919", 0xdb}, {&(0x7f0000000340)="5095cccb90f1d43492d54adc04f27bb9d7f729be06110eabf5932c7339121cd0d394381801f2a59c92fa2d8911e48103da6314afe24d21bd0ae29b74c1f943b9fd976cf1f8d2338c25b3a9a7fff6ff4f473123bcf14255488bfb2f4c86322acd0eeb7c7ec4950f3e8c64e915365a5e0bbda2dad16fbcc56af8d0434dc800808ab7a6bd440f46", 0x86}], 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'veth0_macvtap\x00', @random="f88a555f094a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="039f352fe8", 0x5, 0x50, 0x0, 0x0) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.600202226s ago: executing program 0 (id=1459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000000c0)="a9c1dc794a4293444060dea10e61d49965b60db7fd5adbc7684530bbe408", 0x1e}], 0x1, 0x0, 0x0, 0x884}], 0x1, 0x4004) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0xfe5e0000, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) accept4$alg(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000000c0)="a9c1dc794a4293444060dea10e61d49965b60db7fd5adbc7684530bbe408", 0x1e}], 0x1, 0x0, 0x0, 0x884}], 0x1, 0x4004) (async) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0xfe5e0000, "bfd8a5dd2002c02142c4391145badd28fd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) (async) 1.460067281s ago: executing program 0 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x2, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.399040051s ago: executing program 0 (id=1461): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 1.140041473s ago: executing program 3 (id=1464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x201, 0x0, 0x0) 1.080402972s ago: executing program 1 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1}) 1.080121951s ago: executing program 1 (id=1467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffdf}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1004}}}}}}, 0x0) (fail_nth: 7) 960.528682ms ago: executing program 1 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffa, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xd, 0x1b}}}, 0x24}, 0x1, 0xffffffffffff0000, 0x0, 0x10}, 0x0) 900.198692ms ago: executing program 1 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000240)) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) syz_clone(0x37240400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x22, 0x1, 0x10, 0x25dfdbfd, {0x2}}, 0x14}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fstat(r1, &(0x7f0000000240)) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) (async) syz_clone(0x37240400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') (async) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x22, 0x1, 0x10, 0x25dfdbfd, {0x2}}, 0x14}}, 0x800) (async) 899.559571ms ago: executing program 1 (id=1470): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 840.095755ms ago: executing program 0 (id=1471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x1, 0xffff, 0x0, 0xffffffff, 0x75, 0x46b, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 730.198463ms ago: executing program 0 (id=1472): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000440)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x76, 0x0, 0x9}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000280)="ca0e808b257a0957f1", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0xc, 0x0, 0x0, 0x4e2e, 0x400000800}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000002a40)=0xd3a0, 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000300)) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200010400ffffffffffffffff00ffff", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000180)={0x20, r4, &(0x7f00000000c0)=[{0x0, 0x3}, {0x1}, {0x1}, {}, {0x0, 0x1}], 0xdeadbeef, 0x8, 0x5}) 630.002753ms ago: executing program 0 (id=1473): socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b0fb000e000000b8785d9600010000000000000000000000000000040000000000000000000000002900", "2809e8db5240f45f819e01177d3d0a8dd4992861ac0000000000000000000000000000000000000000000000000000000000000000001f00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x9) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/103, 0x67}], 0x1, &(0x7f0000000400)=""/90, 0x5a}, 0x1}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/208, 0xd0}], 0x2, &(0x7f0000000700)=""/192, 0xc0}, 0x8}, {{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/121, 0x79}, 0x6}], 0x3, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x800000000000b, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r7 = inotify_init() r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r9}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r9}, 0xc) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) 270.029475ms ago: executing program 3 (id=1474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f50014", @ANYBLOB], 0x0) 269.377151ms ago: executing program 3 (id=1475): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd8847", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x8000005, 0x2}, {0x4, 0x0, 0x200000000000}, 0x0, 0x6e6bb6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x28f, 0xfffffffb}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r8, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r8, 0xc0045405, &(0x7f0000001080)=0x8f) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaabdaa0180c200000008004500002a22903aa0d76213b4727e9b000000000006907864010101ac1414aa00004e22049f93bff27a8847724d0c148d125dc655e2cc7b3afe255187314adf3940c6e2a8019291faa7349af14fd771d06b5d44dc16f5b6a8d3cf902c1a3d8c0c0000000000000000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000090780000c516"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000c609000008009f000d000000080026006c090000d6f351ee1cb913b2fb50f99d824277d6601e26188d1c8d9f6569b2776584e0a1f8ce3bad902a00497b39337d051bd3c59be5ea6ec3fa05c855b77120c2812f2f686b0ce0843f2b4b66637ba6295dfe4aa1663bff5775556e6eb3f5ae116399f0e37f7eedb23e508b263465f8bf3be7796fe6018b49e566f788ea8e535fb5c7ee92caab1b89840d64"], 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x23, 0x80805, 0x0) listen(r12, 0x0) accept$ax25(r12, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x400481c) 149.503856ms ago: executing program 3 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1}) 148.822379ms ago: executing program 3 (id=1477): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488b0}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x1, 0xc1) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fd0004801300010262726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000f10000000100000000000000000000400000000005010000f8ffffff3d00000000000000"], 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r9, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000013c0)=@newtaction={0x1ca4, 0x30, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{0xc8, 0x1, [@m_vlan={0xc4, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x87, 0x6, "cf6b8169fa3036673cc64e8d1309b1ddad008f06c0654674040ea3ea0f9d5fcc563df910b952c483217f063626ec618fceb05c5c37c9b17f077ebf56380726f9cdc09ba1cd7ed4b8ee54b54e5c084de12ecf0a08da73b67cf83cd55049f5b985d2832d320f4ed876a17a3a77cfc835a9d5b845982dd646cf316a82b09cf317140fac63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x1880, 0x1, [@m_skbedit={0x1048, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc0000, 0xf22f, 0x20000000, 0x4, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xf0, 0x6, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '@[:\\%@!({:/\x00'}, @TCA_DEF_DATA={0x13, 0x3, 'broadcast-link\x00'}, @TCA_DEF_DATA={0x7, 0x3, '-]\x00'}, @TCA_DEF_DATA={0x6, 0x3, '\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x8, 0x7, 0xfffffff7}}, @TCA_DEF_DATA={0x8, 0x3, '(,$-'}, @TCA_DEF_DATA={0xe, 0x3, 'ns/cgroup\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0x20000000, 0x9, 0x2}}]}, {0x45, 0x6, "8d24c04b906e5ae6ecec6932288f6d25448a28f8867378fff78899c281f9626fe9cb132b4944cc4187a729b659212789228c8a3ce3f43791a8f573f1f61799c630"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x10000000, 0xffffff01, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0xffffffffffffffff, 0x7, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x33, 0x6, "c596df295d8eb61ce50e027e3dcd10a7438f3b28ebc6b8bd3373c0bbbffbaf54ff0160e50198bab45cd4ad356d5574"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x128, 0x17, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x8d81422da3ad93e3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xc, 0x5, 0x8, 0x7fe}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}]}, {0xa2, 0x6, "77d0c878dae8b4a2503864d3177b361a302999af8d0a6cd5016d35886a6770ff360d56f6c0330d360d15606864f614fb160bc34eb395e0889fa10820f36b2a9aaca82def9eb03255f0f59d8273cade7ea20a2f059c8dcc6664a0ecbda30377016724561df455588863de5e1c0527e5a76329b1a0fd139280832ed5a26e22d73ff78eb4d41b31d8f815a0e2e0b62fd4440e9dadab0a33d6fe508f8532c136"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x238, 0x11, 0x0, 0x0, {{0x7}, {0x1b4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xfe, 0x6, {0x401, 'filter\x00', 0x7f, 0x0, "d095d6626a89f85a4ca3aff2898a6141acccd025520a6d34707a79de4dd0e500fe1d7894c652f0ed4c4d655ee2a518828b8b51ce83d2cf8ff2c15a13563c3eb56b9a517b23f6f3aa196125578d3750c8b16bab44f586ed0f2ce54638e2dc7819810f498b797af4173200e0843923e50f3b03501cf9694ab290aeab851a514e0b238f358d149b52b9e8e8ac7ebbd0b1977c86d42ed3fdc6aab7b3289e1755bfabd74208a44f07bdac800c3d45e6f12a1d9f2ce8d7447d42e0cbae1d87ef3ed450141ef3fd4279c0d0adca2d5083562d9f0086ea49"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x95, 0x6, {0x800, 'mangle\x00', 0xeb, 0x944e, "92aa943db13900c9a70ab999fa92fec484a16438a1c30395c1f47390706ea2b5e54d73e0eb359e668a9c6df177683544ac6f8a0be4faa27e31ead768c76cf716fee37fda90168fcfa1ae899cab0516c10e478601b0457727d97963ce401254c036e8ab5826d492978025e7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x18e9}]}, {0x5d, 0x6, "ea497b169f6a4d7fbec80ebcf2fad6803afb161c85505fa501e3c342c421b0b3224ddfc07ad1db74e5301cb5b6729ecfcaaa1f5339c3feec9a75f23bfa40fd5b2ff4d61cc389fc59223bb9b53ea81e2e9d6eb1948956622b6d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x190, 0x1a, 0x0, 0x0, {{0x7}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x57, 0x6, {0x5, 'nat\x00', 0xb5, 0x0, "8593108032aa687a03cd89b3bed75dc5eb13897c946fd0e8e87c780eaee85c30035283af6283e5f084150dfe3b"}}, @TCA_IPT_TARG={0xa6, 0x6, {0x2, 'nat\x00', 0x5, 0x0, "b88a5153d9bd5bab5e0aefbe501fb7ffa650a85dbcb7edd80a0f97918ec189c941940e6d58c306ca3f525fe738b7ccc91548a56df8ca9a8ddf9174113ba482cab411e30230b1dc7ffbe3016cb5ef582f5b0f790f3fa998375d7258b31f895aaedd49f3cce6d76285bba39688e7d85f40079931ace2aa7efd65142b6c"}}]}, {0x3c, 0x6, "bde2c7d67ab89fe6e3b21ce3b7d3936d064e7cf8f2971f5f7434435aa1b6b5b8690a6a1abb29c87ea83a39f44057cdcf9b63a3f4996ad368"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x194, 0x6, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf83a, 0x1, 0x3, 0x3, 0x5}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x4, 0x865}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x1, 0xe08a, 0x6}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x2, 0x68d5, 0x800}, 0x5a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x5, 0x4, 0x4}, 0xd}}]}, {0xdb, 0x6, "8def57f603a89e33ac4d5e089263e0c8524b3e0fcb36d8232f754e24005926a73269c6b61b42e3f132e79d7bc206d999fe6c0f46da6c592065523cb38be1796b716583e1bd462c88cf9e9a3367bdc584705f46ec26a61f7d5fb342b0296459452369499e19bc74a3b1e5f0ae103ade5849b092d7a3d3cc1bf56142c574eed9055bd37cd73ba1e88d9b203f1d71d0a04a92f9a06cd64fbfcb29a0f56540e65cfa3a0c0000a2b3492ce09ea2f5c2aa04fc296f29b8fc4dbc99b47d6c2e5cc49b1d900ef477b7895179cbb2324fed67ee932233e3cf686533"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x348, 0x1, [@m_mpls={0x10c, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0xde, 0x6, "a9898010685b519d2f008f3b05118c5f6ce762404029bc1f31167251f17bb9b75c26844061c0d9df4c703418a8f71d9f612d37ff69ce5e372af10eb0e712bf4c36efd06f994cffde6cd15db538c4a72e12ce76c15e7c3929c8515740624846dd5c7ce91ea5b113f204ac420d56de761a2149bb8418e344738bc680c8a24363398a78a992d82a65de38fc567c5591346bf80a49c877d45b6419aa56887343937182e39409bd820dd531aaf4bc894b9eabf3fe5e12ef4adf33cc9410ca58b76e4c6cc8f7e1eec331ed46c9d791669a5a2338ee66bc657864a522b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0xb0, 0x1c, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb5, 0x1, 0x2, 0x100, 0x5}, 0x36}}]}, {0x65, 0x6, "1461f4b206ce481a865d0a8f98462ac1007e798dbee7ea165d32e6c070fb55065a7417fc1c47273c56d56f79fce9e4110536a431578ab1c8773994872f6391bd95025cd510c6d71ad9a920ef25ff89c51395e34f941e165053b96533dae90896a0"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xe4, 0xc, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x93}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x3}}]}, {0x75, 0x6, "5acbfe79bf57ac73653980225c4ed46efee444223b22a3954c736087508d84d57f27d85653d1019c6dfd76568e8ee8bcc686e05ca256b36e8f0c0b228ab7482fafe3f428657798c46c5664ab7f0d76437eed99e5728147d1fa8dabe678aa1d481abb869d36d0a0b6674ade39971d1d2926"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0xa4, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]]}, {0x60, 0x6, "8bae68817818857b0fdac784f6c489a713efbdde980d1e40070e4b62036edfc0da7bfaaec548515aeea363ed00c8449f2372d529468e1b06aa4931bade38bb52951b4fa603474fa1a950c9c6b910676b13a7ebb33cc6fa7c62e946db"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1ca4}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000040)) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000044) 328.999µs ago: executing program 1 (id=1478): socket(0x2, 0x2, 0x1) (async) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x690000, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x690000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x200, 0x40}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xbc, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xaa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"]}]}, 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000640)={0x11, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0x5, 0x0, 0x6}) (async) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0x5, 0x0, 0x6}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) accept4$phonet_pipe(r6, &(0x7f0000000180), &(0x7f0000000300)=0x10, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0xee01, r13, r13) openat$cgroup_ro(r12, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}}}, 0x24}}, 0x800) 0s ago: executing program 3 (id=1479): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 0s ago: executing program 1 (id=1480): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x4000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) kernel console output (not intermixed with test programs): 0047 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.641963][ T40] audit: type=1400 audit(1759305262.473:627): avc: denied { ioctl } for pid=8198 comm="syz.0.645" path="socket:[20048]" dev="sockfs" ino=20048 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.655741][ T6001] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.828319][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.832858][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.836859][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.840289][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.845235][ T6001] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.850352][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.857008][ T6001] usb 5-1: config 0 descriptor?? [ 108.086253][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 108.102012][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.650'. [ 108.161272][ T8216] usb usb8: usbfs: process 8216 (syz.2.649) did not claim interface 0 before use [ 108.272008][ T6001] usbhid 5-1:0.0: can't add hid device: -71 [ 108.274129][ T6001] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.282836][ T6001] usb 5-1: USB disconnect, device number 8 [ 108.555743][ T72] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.720002][ T72] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 108.724308][ T72] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.728229][ T72] usb 8-1: Product: syz [ 108.730021][ T72] usb 8-1: Manufacturer: syz [ 108.732085][ T72] usb 8-1: SerialNumber: syz [ 108.738435][ T72] usb 8-1: config 0 descriptor?? [ 108.743974][ T72] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 108.787288][ T7078] usb 6-1: USB disconnect, device number 9 [ 108.886639][ T40] audit: type=1400 audit(1759305264.723:628): avc: denied { execmem } for pid=8229 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.747408][ T40] audit: type=1400 audit(1759305266.573:629): avc: denied { write } for pid=8249 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 110.762428][ T9] usb 8-1: USB disconnect, device number 13 [ 111.059307][ T8254] : renamed from bridge_slave_0 (while UP) [ 111.458939][ T8267] trusted_key: encrypted_key: insufficient parameters specified [ 111.605684][ T72] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 111.737115][ T40] audit: type=1400 audit(1759305267.573:630): avc: denied { ioctl } for pid=8272 comm="syz.0.672" path="/dev/usbmon1" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.767035][ T72] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.773351][ T72] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 111.777520][ T72] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 111.780540][ T72] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.784742][ T72] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.787807][ T72] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.793284][ T72] usb 8-1: config 0 descriptor?? [ 112.015781][ T55] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 112.165849][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 112.171241][ T55] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.173764][ T55] usb 6-1: config 0 has no interface number 0 [ 112.175909][ T55] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.179623][ T55] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.184806][ T55] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 112.188292][ T55] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.191417][ T55] usb 6-1: Product: syz [ 112.192968][ T55] usb 6-1: SerialNumber: syz [ 112.197105][ T55] usb 6-1: config 0 descriptor?? [ 112.205944][ T55] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 112.209925][ T55] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input9 [ 112.222923][ T72] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.256408][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 112.405359][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 112.410844][ T1460] usb 6-1: USB disconnect, device number 10 [ 112.410855][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 112.410877][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 112.429099][ T1460] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 113.021679][ T72] usb 8-1: USB disconnect, device number 14 [ 113.080947][ T40] audit: type=1400 audit(1759305268.913:631): avc: denied { create } for pid=8297 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.088268][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 113.093094][ T40] audit: type=1400 audit(1759305268.913:632): avc: denied { write } for pid=8297 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.114241][ T40] audit: type=1400 audit(1759305268.913:633): avc: denied { nlmsg_write } for pid=8297 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.143387][ T40] audit: type=1400 audit(1759305268.973:634): avc: denied { watch } for pid=8301 comm="syz.0.683" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 113.153399][ T40] audit: type=1400 audit(1759305268.983:635): avc: denied { create } for pid=8297 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.104099][ T40] audit: type=1400 audit(1759305269.933:636): avc: denied { getopt } for pid=8327 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.279711][ T40] audit: type=1326 audit(1759305270.113:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001d2af79 code=0x7ffc0000 [ 114.296415][ T40] audit: type=1326 audit(1759305270.123:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5001d8eec9 code=0x7ffc0000 [ 114.317047][ T40] audit: type=1326 audit(1759305270.123:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5001d8eec9 code=0x7ffc0000 [ 114.336709][ T40] audit: type=1326 audit(1759305270.123:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5001d8eec9 code=0x7ffc0000 [ 114.348383][ T40] audit: type=1326 audit(1759305270.123:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5001d8eec9 code=0x7ffc0000 [ 114.358113][ T40] audit: type=1326 audit(1759305270.123:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001d2af79 code=0x7ffc0000 [ 114.366649][ T40] audit: type=1326 audit(1759305270.123:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001d2af79 code=0x7ffc0000 [ 114.377486][ T40] audit: type=1326 audit(1759305270.123:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001d2af79 code=0x7ffc0000 [ 114.386879][ T40] audit: type=1326 audit(1759305270.123:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.0.696" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5001d2af79 code=0x7ffc0000 [ 114.800544][ T8358] syz_tun: refused to change device tx_queue_len [ 115.170936][ T8375] bridge_slave_1: left allmulticast mode [ 115.174336][ T8375] bridge_slave_1: left promiscuous mode [ 115.178207][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.192086][ T8375] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 115.655723][ T7078] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 115.661621][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.710'. [ 115.673193][ T8381] input: syz1 as /devices/virtual/input/input11 [ 115.815690][ T7078] usb 8-1: device descriptor read/64, error -71 [ 116.081105][ T55] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 116.145797][ T7078] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 116.258857][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 116.262187][ T55] usb 6-1: not running at top speed; connect to a high speed hub [ 116.266896][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.270638][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.279631][ T55] usb 6-1: string descriptor 0 read error: -22 [ 116.281867][ T55] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.284940][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.288068][ T7078] usb 8-1: device descriptor read/64, error -71 [ 116.299887][ T55] usb 6-1: 0:2 : does not exist [ 116.405915][ T7078] usb usb8-port1: attempt power cycle [ 116.765682][ T7078] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 116.796675][ T7078] usb 8-1: device descriptor read/8, error -71 [ 117.035678][ T7078] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 117.056224][ T7078] usb 8-1: device descriptor read/8, error -71 [ 117.166347][ T7078] usb usb8-port1: unable to enumerate USB device [ 117.726087][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 117.888521][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.893118][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 117.900739][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.904774][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.912996][ T10] usb 5-1: string descriptor 0 read error: -22 [ 117.915840][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.919118][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.925688][ T55] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 117.933966][ T55] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 117.955465][ T10] usb 5-1: 0:2 : does not exist [ 117.964056][ T55] usb 6-1: USB disconnect, device number 11 [ 118.129439][ T8423] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 118.133411][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.726'. [ 118.148441][ T8423] team0: Port device geneve0 added [ 118.153689][ T6001] usb 5-1: USB disconnect, device number 9 [ 118.285723][ T1460] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 118.481691][ T1460] usb 7-1: config 0 has no interfaces? [ 118.490034][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.733'. [ 118.494818][ T1460] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.498449][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.501667][ T1460] usb 7-1: Product: syz [ 118.503641][ T1460] usb 7-1: Manufacturer: syz [ 118.506200][ T1460] usb 7-1: SerialNumber: syz [ 118.510494][ T1460] usb 7-1: config 0 descriptor?? [ 118.687638][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 118.691629][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 119.127246][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 119.127264][ T40] audit: type=1326 audit(1759305274.963:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.141738][ T40] audit: type=1326 audit(1759305274.963:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.152554][ T40] audit: type=1326 audit(1759305274.963:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.161791][ T40] audit: type=1326 audit(1759305274.963:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.171469][ T40] audit: type=1326 audit(1759305274.963:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.180835][ T40] audit: type=1326 audit(1759305274.963:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.189990][ T40] audit: type=1326 audit(1759305274.963:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.199939][ T40] audit: type=1326 audit(1759305274.963:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.209375][ T40] audit: type=1326 audit(1759305274.963:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.220145][ T40] audit: type=1326 audit(1759305274.963:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.3.741" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 119.283529][ T8461] netlink: 'syz.0.738': attribute type 72 has an invalid length. [ 119.680553][ T8453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.958492][ T10] usb 7-1: USB disconnect, device number 11 [ 121.416450][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.565702][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 121.570720][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.579743][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 121.584527][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.589899][ T10] usb 7-1: Product: syz [ 121.592657][ T10] usb 7-1: Manufacturer: syz [ 121.594983][ T10] usb 7-1: SerialNumber: syz [ 121.600319][ T10] usb 7-1: config 0 descriptor?? [ 121.607347][ T10] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 121.808549][ T24] usb 7-1: USB disconnect, device number 12 [ 121.855733][ T7078] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 122.006057][ T7078] usb 6-1: Using ep0 maxpacket: 16 [ 122.010030][ T7078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.022502][ T7078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.027278][ T7078] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.032881][ T7078] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.036851][ T7078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.042789][ T7078] usb 6-1: config 0 descriptor?? [ 122.414446][ T8510] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 122.418063][ T8510] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 122.421429][ T8510] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 122.532562][ T8514] input: syz1 as /devices/virtual/input/input12 [ 122.655848][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 122.808673][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.812031][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.815787][ T10] usb 7-1: Product: syz [ 122.817290][ T10] usb 7-1: Manufacturer: syz [ 122.819005][ T10] usb 7-1: SerialNumber: syz [ 122.835742][ T7083] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.985669][ T7083] usb 5-1: Using ep0 maxpacket: 16 [ 122.991026][ T7083] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.996743][ T7083] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.004928][ T7083] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.008724][ T7083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.011276][ T7083] usb 5-1: Product: syz [ 123.012848][ T7083] usb 5-1: Manufacturer: syz [ 123.014872][ T7083] usb 5-1: SerialNumber: syz [ 123.229058][ T7083] usb 5-1: 0:2 : does not exist [ 123.238857][ T7083] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 123.266364][ T7083] usb 5-1: USB disconnect, device number 10 [ 123.295423][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.758965][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 123.769197][ T8534] @: renamed from vlan0 (while UP) [ 123.865892][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 123.865948][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 123.866970][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.870041][ T8536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.892363][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 123.916399][ T10] usb 7-1: USB disconnect, device number 13 [ 123.920587][ T7414] udevd[7414]: setting mode of /dev/bus/usb/007/013 to 020664 failed: No such file or directory [ 123.928498][ T7414] udevd[7414]: setting owner of /dev/bus/usb/007/013 to uid=0, gid=0 failed: No such file or directory [ 124.015388][ T8541] input: syz1 as /devices/virtual/input/input13 [ 124.196081][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 124.196106][ T40] audit: type=1400 audit(1759305280.013:770): avc: denied { getopt } for pid=8548 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.642764][ T7078] usbhid 6-1:0.0: can't add hid device: -71 [ 124.652697][ T7078] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.687494][ T7078] usb 6-1: USB disconnect, device number 12 [ 124.715689][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.868599][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 124.872353][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.875453][ T10] usb 5-1: Product: syz [ 124.877659][ T10] usb 5-1: Manufacturer: syz [ 124.879608][ T10] usb 5-1: SerialNumber: syz [ 124.883209][ T10] usb 5-1: config 0 descriptor?? [ 124.905646][ T55] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 125.008511][ T40] audit: type=1400 audit(1759305280.833:771): avc: denied { ioctl } for pid=8574 comm="syz.1.782" path="socket:[23999]" dev="sockfs" ino=23999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 125.065638][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 125.069295][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.073517][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.078134][ T55] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.081316][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.097984][ T10] hso 5-1:0.0: Failed to find INT IN ep [ 125.100767][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 125.106809][ T55] usb 7-1: config 0 descriptor?? [ 125.147064][ T55] hub 7-1:0.0: USB hub found [ 125.319878][ T8556] tipc: Enabled bearer , priority 0 [ 125.322971][ T8556] syzkaller0: entered promiscuous mode [ 125.325279][ T8556] syzkaller0: entered allmulticast mode [ 125.334665][ T8556] tipc: Resetting bearer [ 126.769089][ T5955] Bluetooth: hci2: Malformed LE Event: 0x1d [ 126.835181][ T40] audit: type=1400 audit(1759305282.663:772): avc: denied { map } for pid=8602 comm="syz.3.791" path="/dev/loop6" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.847128][ T40] audit: type=1400 audit(1759305282.683:773): avc: denied { execute } for pid=8602 comm="syz.3.791" path="/dev/loop6" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.349181][ T8554] tipc: Resetting bearer [ 127.363355][ T8554] tipc: Disabling bearer [ 127.418267][ T24] usb 5-1: USB disconnect, device number 11 [ 127.472520][ T55] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.485022][ T55] usbhid 7-1:0.0: can't add hid device: -71 [ 127.487635][ T55] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 127.538172][ T55] usb 7-1: USB disconnect, device number 14 [ 127.592232][ T40] audit: type=1400 audit(1759305283.423:774): avc: denied { setopt } for pid=8626 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.725658][ T1460] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 127.733468][ T40] audit: type=1326 audit(1759305283.563:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.2.800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0d98eec9 code=0x7ffc0000 [ 127.744025][ T40] audit: type=1326 audit(1759305283.563:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.2.800" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5b0d98eec9 code=0x7ffc0000 [ 127.753367][ T40] audit: type=1326 audit(1759305283.563:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.2.800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0d98eec9 code=0x7ffc0000 [ 127.763440][ T40] audit: type=1326 audit(1759305283.563:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.2.800" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b0d98d710 code=0x7ffc0000 [ 127.771618][ T40] audit: type=1326 audit(1759305283.563:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8628 comm="syz.2.800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b0d98eec9 code=0x7ffc0000 [ 127.919919][ T1460] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.924178][ T1460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.926897][ T1460] usb 6-1: Product: syz [ 127.928664][ T1460] usb 6-1: Manufacturer: syz [ 127.930647][ T1460] usb 6-1: SerialNumber: syz [ 129.641728][ T8656] netlink: 83 bytes leftover after parsing attributes in process `syz.0.806'. [ 129.923159][ T72] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.946189][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 129.946210][ T40] audit: type=1326 audit(1759305285.783:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 129.959100][ T40] audit: type=1326 audit(1759305285.783:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 129.969659][ T40] audit: type=1326 audit(1759305285.783:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 129.989162][ T40] audit: type=1326 audit(1759305285.783:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.000063][ T40] audit: type=1326 audit(1759305285.783:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.011268][ T40] audit: type=1326 audit(1759305285.783:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.022839][ T40] audit: type=1326 audit(1759305285.783:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.035225][ T40] audit: type=1326 audit(1759305285.783:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.049811][ T40] audit: type=1326 audit(1759305285.783:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.073518][ T40] audit: type=1326 audit(1759305285.793:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.3.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aefd8eec9 code=0x7ffc0000 [ 130.098118][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.102219][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.106076][ T72] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 130.110260][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.116845][ T72] usb 5-1: config 0 descriptor?? [ 130.496506][ T8668] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 130.506618][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.511722][ T8668] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.782282][ T8656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=155 sclass=netlink_route_socket pid=8656 comm=syz.0.806 [ 130.815855][ T10] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 60 sec [ 131.082466][ T8681] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.085405][ T8681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.089115][ T8681] IPv6: NLM_F_CREATE should be set when creating new route [ 131.145203][ T1460] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 131.149493][ T1460] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 131.152666][ T1460] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.156646][ T1460] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.162362][ T1460] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 131.189705][ T1460] usb 6-1: USB disconnect, device number 13 [ 131.308854][ T72] usbhid 5-1:0.0: can't add hid device: -71 [ 131.311626][ T72] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.315298][ T72] usb 5-1: USB disconnect, device number 12 [ 131.565108][ T8692] binder: 8689:8692 ioctl c0306201 200000000100 returned -11 [ 132.135875][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 132.213849][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 132.217910][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 132.221822][ T8713] netlink: 50 bytes leftover after parsing attributes in process `syz.3.825'. [ 132.305680][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 132.309605][ T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 132.313083][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.327474][ T10] usb 6-1: config 0 descriptor?? [ 132.345912][ T10] as10x_usb: device has been detected [ 132.360742][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 132.380599][ T10] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 132.406212][ T10] as10x_usb: error during firmware upload part1 [ 132.409931][ T10] Registered device nBox DVB-T Dongle [ 132.525671][ T1460] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 132.540950][ T10] usb 6-1: USB disconnect, device number 14 [ 132.580082][ T10] Unregistered device nBox DVB-T Dongle [ 132.586191][ T10] as10x_usb: device has been disconnected [ 132.695808][ T1460] usb 8-1: Using ep0 maxpacket: 8 [ 132.700797][ T1460] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.704592][ T1460] usb 8-1: config 0 has no interface number 0 [ 132.707195][ T1460] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.714522][ T1460] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.735036][ T1460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.743411][ T1460] usb 8-1: config 0 descriptor?? [ 132.748511][ T1460] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 133.140367][ T29] usb 8-1: USB disconnect, device number 19 [ 133.925847][ T55] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 134.112351][ T55] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 134.116594][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.120047][ T55] usb 8-1: Product: syz [ 134.122069][ T55] usb 8-1: Manufacturer: syz [ 134.124238][ T55] usb 8-1: SerialNumber: syz [ 134.136387][ T55] usb 8-1: config 0 descriptor?? [ 134.141236][ T55] ch341 8-1:0.0: ch341-uart converter detected [ 134.255798][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.278380][ T8752] netlink: 'syz.2.836': attribute type 4 has an invalid length. [ 134.290569][ T8752] netlink: 'syz.2.836': attribute type 17 has an invalid length. [ 134.415728][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 134.420258][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.422934][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.427487][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.431812][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.435308][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.440283][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.442951][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.446652][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.450967][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.454604][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.459524][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 134.462074][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.465741][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.469476][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.473778][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.480418][ T10] usb 6-1: string descriptor 0 read error: -22 [ 134.482473][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.485324][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.494484][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 134.665794][ T5957] Bluetooth: hci4: command 0x1003 tx timeout [ 134.665811][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 134.731955][ T8754] tipc: Can't bind to reserved service type 1 [ 134.802453][ T29] usb 6-1: USB disconnect, device number 15 [ 135.176698][ T8777] Invalid option length (64407) for dns_resolver key [ 135.356024][ T55] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 135.553814][ T1460] usb 8-1: USB disconnect, device number 20 [ 135.559577][ T1460] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 135.564787][ T1460] ch341 8-1:0.0: device disconnected [ 135.933245][ T8790] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 135.962041][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 135.962052][ T40] audit: type=1400 audit(1759305291.793:904): avc: denied { read } for pid=8789 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.001515][ T40] audit: type=1400 audit(1759305291.833:905): avc: denied { nlmsg_read } for pid=8793 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.002218][ T8794] netlink: 116 bytes leftover after parsing attributes in process `syz.2.852'. [ 136.027478][ T40] audit: type=1400 audit(1759305291.863:906): avc: denied { setattr } for pid=8795 comm="syz.0.853" name="rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.036131][ T8796] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 136.041083][ T40] audit: type=1400 audit(1759305291.873:907): avc: denied { ioctl } for pid=8795 comm="syz.0.853" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.132881][ T8805] syzkaller1: entered promiscuous mode [ 136.133759][ T5955] Bluetooth: hci2: ISO packet for unknown connection handle 14 [ 136.135424][ T8805] syzkaller1: entered allmulticast mode [ 136.272899][ T8810] openvswitch: netlink: Flow key attr not present in new flow. [ 137.391047][ T8840] fuse: Bad value for 'fd' [ 137.702822][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 137.735987][ T8845] Unsupported xt match [ 137.736008][ T8845] unable to load match [ 137.878595][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.881437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.994655][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 138.087136][ T8854] @: renamed from vlan0 (while UP) [ 139.345421][ T8889] random: crng reseeded on system resumption [ 139.356400][ T40] audit: type=1400 audit(1759305295.173:908): avc: denied { append } for pid=8888 comm="syz.2.879" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.364982][ T838] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 139.391578][ T40] audit: type=1400 audit(1759305295.223:909): avc: denied { name_bind } for pid=8890 comm="syz.2.880" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 139.444834][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 139.805818][ T29] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 139.985771][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 139.998270][ T34] IPVS: starting estimator thread 0... [ 140.085847][ T8897] IPVS: using max 47 ests per chain, 112800 per kthread [ 140.214969][ T5955] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 140.215030][ T5955] Bluetooth: hci0: Malformed LE Event: 0x0d [ 140.525784][ T838] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 140.677572][ T838] usb 5-1: config 0 has no interfaces? [ 140.681799][ T838] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 140.686904][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.690483][ T838] usb 5-1: Product: syz [ 140.692251][ T838] usb 5-1: Manufacturer: syz [ 140.694195][ T838] usb 5-1: SerialNumber: syz [ 140.698814][ T838] usb 5-1: config 0 descriptor?? [ 140.930650][ T8904] vlan2: entered promiscuous mode [ 141.023930][ T54] usb 5-1: USB disconnect, device number 13 [ 142.011968][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'. [ 142.086034][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 142.167560][ T8939] @: renamed from vlan0 (while UP) [ 142.235714][ T54] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 142.388679][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.392574][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.396960][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.400833][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 142.405317][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 142.412972][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.417812][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.421444][ T54] usb 6-1: Product: syz [ 142.423812][ T54] usb 6-1: Manufacturer: syz [ 142.448485][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 142.451233][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 142.461724][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 142.464378][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 142.484989][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 142.493776][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 142.496714][ T29] usb 8-1: can't read configurations, error -71 [ 142.662809][ T72] usb 6-1: USB disconnect, device number 16 [ 142.809189][ T5955] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 142.817657][ T40] audit: type=1400 audit(1759305298.653:910): avc: denied { accept } for pid=8950 comm="syz.0.900" path="socket:[25792]" dev="sockfs" ino=25792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.075818][ T8965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.125882][ T29] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 143.229519][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.911'. [ 143.230270][ T8975] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 143.232876][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 143.295915][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 143.299492][ T29] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 143.303464][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.312223][ T29] usb 8-1: config 0 descriptor?? [ 143.320469][ T29] as10x_usb: device has been detected [ 143.323526][ T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 143.342568][ T29] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 143.352734][ T29] as10x_usb: error during firmware upload part1 [ 143.356272][ T29] Registered device nBox DVB-T Dongle [ 143.502261][ T8995] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 143.519476][ T29] usb 8-1: USB disconnect, device number 22 [ 143.528296][ T8995] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.529186][ T29] Unregistered device nBox DVB-T Dongle [ 143.532436][ T8995] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 143.532788][ T29] as10x_usb: device has been disconnected [ 143.574464][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 143.584827][ T8997] macvlan2: entered promiscuous mode [ 143.586987][ T8997] macvlan2: entered allmulticast mode [ 143.589861][ T8997] bond2: entered promiscuous mode [ 143.592394][ T8997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.598266][ T8997] bond2: left promiscuous mode [ 143.625822][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 143.746914][ T40] audit: type=1400 audit(1759305299.583:911): avc: denied { read append } for pid=8998 comm="syz.0.918" name="cpuset.effective_cpus" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.758909][ T40] audit: type=1400 audit(1759305299.583:912): avc: denied { open } for pid=8998 comm="syz.0.918" path="/230/file0/cpuset.effective_cpus" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.767615][ T34] usb 6-1: device descriptor read/64, error -71 [ 143.771087][ T40] audit: type=1400 audit(1759305299.583:913): avc: denied { write } for pid=8998 comm="syz.0.918" name="cpuset.effective_cpus" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.783923][ T40] audit: type=1400 audit(1759305299.583:914): avc: denied { lock } for pid=8998 comm="syz.0.918" path="/230/file0/cpuset.effective_cpus" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.899284][ T9001] uprobe: syz.0.919:9001 failed to unregister, leaking uprobe [ 144.015739][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 144.145932][ T34] usb 6-1: device descriptor read/64, error -71 [ 144.240841][ T40] audit: type=1400 audit(1759305300.073:915): avc: denied { call } for pid=9019 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.247439][ T40] audit: type=1400 audit(1759305300.073:916): avc: denied { transfer } for pid=9019 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.256134][ T34] usb usb6-port1: attempt power cycle [ 144.301151][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 144.304618][ T9021] netlink: 'syz.0.926': attribute type 30 has an invalid length. [ 144.308616][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'. [ 144.415846][ T54] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 144.577966][ T54] usb 8-1: config 0 has no interfaces? [ 144.582788][ T54] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 144.586247][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.588760][ T54] usb 8-1: Product: syz [ 144.590295][ T54] usb 8-1: Manufacturer: syz [ 144.592174][ T54] usb 8-1: SerialNumber: syz [ 144.596413][ T54] usb 8-1: config 0 descriptor?? [ 144.605989][ T34] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 144.626373][ T34] usb 6-1: device descriptor read/8, error -71 [ 144.819334][ T9018] dummy0: entered promiscuous mode [ 144.821603][ T9018] vlan0: entered promiscuous mode [ 144.889446][ T55] usb 8-1: USB disconnect, device number 23 [ 144.895926][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 144.916321][ T34] usb 6-1: device descriptor read/8, error -71 [ 145.026343][ T34] usb usb6-port1: unable to enumerate USB device [ 145.109948][ T9030] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 145.138743][ T9030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.161650][ T9030] bond0: (slave wlan1): Releasing backup interface [ 145.165010][ T9030] bond3: (slave wlan1): Opening slave failed [ 145.245782][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 145.262196][ T9037] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 145.264795][ T9037] netlink: 208 bytes leftover after parsing attributes in process `syz.0.931'. [ 145.269539][ T9037] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 145.272895][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 145.395693][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 145.404180][ T10] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 145.408274][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.427244][ T10] usb 7-1: config 0 descriptor?? [ 145.441977][ T10] as10x_usb: device has been detected [ 145.446834][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 145.469550][ T10] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 145.494515][ T10] as10x_usb: error during firmware upload part1 [ 145.497827][ T10] Registered device nBox DVB-T Dongle [ 145.636419][ T10] usb 7-1: USB disconnect, device number 15 [ 145.656963][ T10] Unregistered device nBox DVB-T Dongle [ 145.659970][ T10] as10x_usb: device has been disconnected [ 145.687152][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 146.501131][ T40] audit: type=1400 audit(1759305302.333:917): avc: denied { mount } for pid=9104 comm="syz.1.950" name="/" dev="pstore" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 146.571797][ T40] audit: type=1400 audit(1759305302.403:918): avc: denied { mounton } for pid=9114 comm="syz.1.953" path="/syzcgroup/unified/syz1" dev="pstore" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 146.607159][ T9119] program syz.1.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.635728][ T55] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 146.666358][ T40] audit: type=1400 audit(1759305302.503:919): avc: denied { write } for pid=9124 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.713966][ T9127] : entered promiscuous mode [ 146.806129][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 146.809321][ T55] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.812599][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.817038][ T55] usb 7-1: config 0 descriptor?? [ 146.828193][ T55] as10x_usb: device has been detected [ 146.830722][ T55] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 146.843432][ T55] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 146.857389][ T55] as10x_usb: error during firmware upload part1 [ 146.859759][ T55] Registered device nBox DVB-T Dongle [ 147.022876][ T55] usb 7-1: USB disconnect, device number 16 [ 147.040956][ T55] Unregistered device nBox DVB-T Dongle [ 147.043236][ T55] as10x_usb: device has been disconnected [ 147.058071][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 147.566236][ T1460] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 147.727413][ T1460] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.729872][ T1460] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.733106][ T1460] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.737263][ T1460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 147.740725][ T1460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 147.745837][ T1460] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.748506][ T1460] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.750770][ T1460] usb 6-1: Product: syz [ 147.751973][ T1460] usb 6-1: Manufacturer: syz [ 147.758695][ T1460] cdc_wdm 6-1:1.0: skipping garbage [ 147.760369][ T1460] cdc_wdm 6-1:1.0: skipping garbage [ 147.764389][ T1460] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 147.766194][ T1460] cdc_wdm 6-1:1.0: Unknown control protocol [ 147.865866][ T54] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 147.975530][ T7078] usb 6-1: USB disconnect, device number 21 [ 148.016340][ T54] usb 7-1: Using ep0 maxpacket: 16 [ 148.020586][ T54] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 148.024603][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.031410][ T54] usb 7-1: config 0 descriptor?? [ 148.037325][ T54] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 148.237899][ T54] usb 7-1: Detected FT232B [ 148.444232][ T54] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 148.449478][ T54] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 148.452731][ T54] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.458318][ T54] usb 7-1: USB disconnect, device number 17 [ 148.464638][ T54] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.468898][ T54] ftdi_sio 7-1:0.0: device disconnected [ 148.552884][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'. [ 148.557272][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.970'. [ 148.812020][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 149.022663][ T40] audit: type=1400 audit(1759305304.853:920): avc: denied { bind } for pid=9184 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.080488][ T9194] wg1: entered promiscuous mode [ 149.082900][ T9194] wg1: entered allmulticast mode [ 149.388853][ T40] audit: type=1400 audit(1759305305.223:921): avc: denied { bind } for pid=9214 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.400111][ T9215] overlayfs: unescaped trailing colons in lowerdir mount option. [ 149.499494][ T9223] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 149.544307][ T40] audit: type=1400 audit(1759305305.373:922): avc: denied { mount } for pid=9224 comm="syz.2.992" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.545316][ T9226] overlay: Unknown parameter 'volatile:/' [ 149.547426][ T9225] overlay: Unknown parameter 'volatile:/' [ 149.555035][ T40] audit: type=1400 audit(1759305305.373:923): avc: denied { remount } for pid=9224 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.569071][ T40] audit: type=1400 audit(1759305305.373:924): avc: denied { mounton } for pid=9224 comm="syz.2.992" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 149.577108][ T9226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.992'. [ 149.606067][ T40] audit: type=1400 audit(1759305305.443:925): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 149.694138][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 149.712110][ T9236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.730517][ T40] audit: type=1400 audit(1759305305.563:926): avc: denied { mount } for pid=9234 comm="syz.3.997" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 149.859929][ T9251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1001'. [ 149.887559][ T40] audit: type=1400 audit(1759305305.723:927): avc: denied { write } for pid=9243 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.907372][ T9244] kvm: MONITOR instruction emulated as NOP! [ 150.280256][ T9277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1010'. [ 150.667327][ T40] audit: type=1400 audit(1759305306.503:928): avc: denied { setopt } for pid=9293 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.829485][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 150.833565][ T9300] netlink: 'syz.1.1018': attribute type 20 has an invalid length. [ 150.838521][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 150.842430][ T9300] netlink: 'syz.1.1018': attribute type 20 has an invalid length. [ 151.251404][ T9311] netlink: 'syz.0.1022': attribute type 32 has an invalid length. [ 151.255457][ T9311] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 151.281699][ T9311] tmpfs: Bad value for 'nr_blocks' [ 151.404277][ T40] audit: type=1400 audit(1759305307.233:929): avc: denied { getopt } for pid=9317 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.463105][ T9324] cgroup: Unknown subsys name 'dont_hash' [ 151.510151][ T9330] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 151.691202][ T9334] kvm: kvm [9333]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 151.696211][ T9334] kvm: kvm [9333]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 151.855935][ T838] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 152.016706][ T838] usb 8-1: Using ep0 maxpacket: 8 [ 152.021659][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.026625][ T838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.030569][ T838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.034894][ T838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.041113][ T838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.044176][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.260573][ T838] usb 8-1: GET_CAPABILITIES returned 0 [ 152.263046][ T838] usbtmc 8-1:16.0: can't read capabilities [ 152.311726][ T5955] Bluetooth: hci0: unexpected subevent 0x03 length: 232 > 9 [ 152.313704][ T9371] dummy0: left allmulticast mode [ 152.320597][ T9371] bridge0: port 3(dummy0) entered disabled state [ 152.327346][ T9371] batman_adv: batadv0: Adding interface: dummy0 [ 152.329565][ T9371] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.338144][ T9371] batman_adv: batadv0: Interface activated: dummy0 [ 152.470382][ T838] usb 8-1: USB disconnect, device number 24 [ 152.507714][ T9383] __nla_validate_parse: 3 callbacks suppressed [ 152.507727][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1048'. [ 153.016273][ T9405] Illegal XDP return value 66894901 on prog (id 90) dev N/A, expect packet loss! [ 153.108416][ T838] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 153.235894][ T838] usb 7-1: device descriptor read/64, error -71 [ 153.351687][ T9414] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.354395][ T9414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.356823][ T9414] IPv6: NLM_F_CREATE should be set when creating new route [ 153.493322][ T9429] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 153.497176][ T838] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 153.515240][ T9429] bond5: entered promiscuous mode [ 153.518381][ T9429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.625712][ T29] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 153.635902][ T838] usb 7-1: device descriptor read/64, error -71 [ 153.643625][ T9433] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 153.755747][ T29] usb 8-1: device descriptor read/64, error -71 [ 153.755907][ T838] usb usb7-port1: attempt power cycle [ 153.995730][ T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 154.115896][ T838] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 154.126669][ T29] usb 8-1: device descriptor read/64, error -71 [ 154.136546][ T838] usb 7-1: device descriptor read/8, error -71 [ 154.165817][ T72] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 154.237062][ T29] usb usb8-port1: attempt power cycle [ 154.318238][ T72] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.322091][ T72] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.326683][ T72] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.335365][ T72] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.339462][ T72] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.343081][ T72] usb 6-1: Product: syz [ 154.344866][ T72] usb 6-1: Manufacturer: syz [ 154.353606][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 154.356756][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 154.359330][ T72] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 154.385708][ T838] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 154.406535][ T838] usb 7-1: device descriptor read/8, error -71 [ 154.526615][ T838] usb usb7-port1: unable to enumerate USB device [ 154.567765][ T838] usb 6-1: USB disconnect, device number 22 [ 154.595925][ T29] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 154.616513][ T29] usb 8-1: device descriptor read/8, error -71 [ 154.876461][ T29] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 154.899533][ T29] usb 8-1: device descriptor read/8, error -71 [ 155.006297][ T29] usb usb8-port1: unable to enumerate USB device [ 155.637568][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 155.949824][ T9485] binder: 9480:9485 ioctl c0306201 200000000600 returned -22 [ 157.406812][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1094'. [ 157.464073][ T9516] syz_tun: entered allmulticast mode [ 157.556382][ T9515] syz_tun: left allmulticast mode [ 157.806480][ T9523] sch_tbf: burst 824 is lower than device lo mtu (11337746) ! [ 157.827068][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 157.827086][ T40] audit: type=1400 audit(1759305313.663:938): avc: denied { mounton } for pid=9522 comm="syz.3.1098" path="/file0" dev="ramfs" ino=28409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 157.833393][ T9523] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.845047][ T9523] overlayfs: failed to set xattr on upper [ 157.850485][ T9523] overlayfs: ...falling back to redirect_dir=nofollow. [ 157.860475][ T9523] overlayfs: ...falling back to index=off. [ 157.864171][ T9523] overlayfs: ...falling back to uuid=null. [ 157.962717][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1099'. [ 158.257216][ T9532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 158.261721][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 158.352919][ T40] audit: type=1400 audit(1759305314.183:939): avc: denied { append } for pid=9536 comm="syz.2.1103" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.415602][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1105'. [ 158.615819][ T9554] tipc: Enabling of bearer rejected, already enabled [ 158.725767][ T72] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 158.877573][ T72] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.881190][ T72] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.885225][ T72] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.913996][ T72] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.917835][ T72] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.922961][ T72] usb 7-1: Product: syz [ 158.926252][ T72] usb 7-1: Manufacturer: syz [ 158.933019][ T72] cdc_wdm 7-1:1.0: skipping garbage [ 158.935177][ T72] cdc_wdm 7-1:1.0: skipping garbage [ 158.944849][ T72] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 158.987707][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1115'. [ 159.200712][ T72] usb 7-1: USB disconnect, device number 22 [ 159.528152][ T9578] tipc: Enabled bearer , priority 0 [ 159.530896][ T9578] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 159.533275][ T9578] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 159.546812][ T9578] tipc: Resetting bearer [ 159.694721][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1124'. [ 159.742654][ T40] audit: type=1400 audit(1759305315.573:940): avc: denied { getopt } for pid=9585 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.871171][ T9596] tipc: Started in network mode [ 159.873128][ T9596] tipc: Node identity 8ecfe99d9554, cluster identity 4711 [ 159.878108][ T9596] tipc: Enabled bearer , priority 0 [ 159.881226][ T9596] syzkaller0: entered promiscuous mode [ 159.883303][ T9596] syzkaller0: entered allmulticast mode [ 159.894993][ T9596] tipc: Resetting bearer [ 159.899483][ T9595] tipc: Resetting bearer [ 159.910172][ T9595] tipc: Disabling bearer [ 160.539380][ T838] tipc: Node number set to 4026141201 [ 160.731522][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 160.775451][ T9629] syz_tun: entered allmulticast mode [ 160.858710][ T9628] syz_tun: left allmulticast mode [ 160.890736][ T9634] dlm: non-version read from control device 0 [ 160.967492][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 161.016720][ T9652] block nbd3: Unsupported socket: shutdown callout must be supported. [ 161.061474][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 161.106062][ T10] usb 6-1: device descriptor read/64, error -71 [ 161.144794][ T9665] syz_tun: entered allmulticast mode [ 161.196486][ T9663] syz_tun: left allmulticast mode [ 161.233015][ T72] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.346167][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 161.401403][ T72] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.406405][ T72] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 161.410664][ T72] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.413834][ T72] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.416746][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 161.419999][ T72] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.425787][ T72] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.429745][ T72] usb 5-1: Product: syz [ 161.431495][ T72] usb 5-1: Manufacturer: syz [ 161.442690][ T72] cdc_wdm 5-1:1.0: skipping garbage [ 161.444892][ T72] cdc_wdm 5-1:1.0: skipping garbage [ 161.448176][ T72] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 161.475883][ T10] usb 6-1: device descriptor read/64, error -71 [ 161.586750][ T10] usb usb6-port1: attempt power cycle [ 161.654293][ T9700] syz_tun: entered allmulticast mode [ 161.670178][ T6033] usb 5-1: USB disconnect, device number 14 [ 161.717749][ T9699] syz_tun: left allmulticast mode [ 161.862707][ T9706] bond_slave_0: entered promiscuous mode [ 161.865305][ T9706] bond_slave_1: entered promiscuous mode [ 161.930901][ T9711] tmpfs: Unknown parameter 'usrquotaidi#' [ 161.936766][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 161.957627][ T10] usb 6-1: device descriptor read/8, error -71 [ 162.195794][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 162.217133][ T10] usb 6-1: device descriptor read/8, error -71 [ 162.273592][ T9725] syz_tun: entered allmulticast mode [ 162.279127][ T9724] syz_tun: left allmulticast mode [ 162.326252][ T10] usb usb6-port1: unable to enumerate USB device [ 162.359623][ T9729] tipc: Enabled bearer , priority 0 [ 162.367628][ T9729] syzkaller0: entered promiscuous mode [ 162.369785][ T9729] syzkaller0: entered allmulticast mode [ 162.387671][ T9729] tipc: Resetting bearer [ 162.393030][ T9728] tipc: Resetting bearer [ 162.403085][ T9728] tipc: Disabling bearer [ 162.411865][ T9731] tipc: Enabled bearer , priority 0 [ 162.416302][ T9731] syzkaller0: entered promiscuous mode [ 162.418592][ T9731] syzkaller0: entered allmulticast mode [ 162.429374][ T9731] tipc: Resetting bearer [ 162.435154][ T9730] tipc: Resetting bearer [ 162.449266][ T9730] tipc: Disabling bearer [ 162.716951][ T9746] syz_tun: entered allmulticast mode [ 162.721917][ T9745] syz_tun: left allmulticast mode [ 162.806996][ T9750] tipc: Enabled bearer , priority 0 [ 162.809871][ T9750] syzkaller0: entered promiscuous mode [ 162.811687][ T9750] syzkaller0: entered allmulticast mode [ 162.819957][ T9750] tipc: Resetting bearer [ 162.824131][ T9749] tipc: Resetting bearer [ 162.835024][ T9749] tipc: Disabling bearer [ 162.905997][ T55] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 162.935866][ T9754] netlink: 908 bytes leftover after parsing attributes in process `syz.0.1190'. [ 163.073203][ T55] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.077059][ T55] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 163.081977][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.086322][ T55] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.093826][ T55] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.098233][ T55] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.102878][ T55] usb 7-1: Product: syz [ 163.106050][ T55] usb 7-1: Manufacturer: syz [ 163.115486][ T55] cdc_wdm 7-1:1.0: skipping garbage [ 163.117874][ T55] cdc_wdm 7-1:1.0: skipping garbage [ 163.120020][ T55] cdc_wdm 7-1:1.0: skipping garbage [ 163.122213][ T55] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 163.325841][ T55] usb 7-1: USB disconnect, device number 23 [ 163.780808][ T9771] syz_tun: entered allmulticast mode [ 163.784868][ T9770] syz_tun: left allmulticast mode [ 163.831090][ T9775] tipc: Enabling of bearer rejected, already enabled [ 164.022643][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 164.195674][ T7078] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.205781][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 164.299314][ T9811] program syz.2.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.305823][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 164.325732][ T7078] usb 5-1: device descriptor read/64, error -71 [ 164.366268][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 164.370176][ T1112] ata1.00: irq_stat 0x40000000 [ 164.372175][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 164.374616][ T1112] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 164.374616][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 164.379342][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.380167][ T1112] ata1.00: status: { DRDY ERR } [ 164.383686][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.385770][ T1112] ata1.00: error: { ABRT } [ 164.385805][ T1112] ata1.00: device reported invalid CHS sector 0 [ 164.392143][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.397701][ T40] audit: type=1400 audit(1759305320.233:941): avc: denied { map } for pid=9810 comm="syz.2.1211" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.412713][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.418201][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.425212][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.429670][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.433142][ T10] usb 8-1: Product: syz [ 164.434981][ T10] usb 8-1: Manufacturer: syz [ 164.442071][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 164.445295][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 164.450162][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 164.452526][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 164.499190][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.502481][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.508159][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.512787][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.520531][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.524466][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.528291][ T9] usb 6-1: Product: syz [ 164.530405][ T9] usb 6-1: Manufacturer: syz [ 164.538475][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 164.540760][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 164.543121][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 164.545517][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.575833][ T7078] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.650768][ T72] usb 8-1: USB disconnect, device number 29 [ 164.686457][ T1460] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 164.726030][ T7078] usb 5-1: device descriptor read/64, error -71 [ 164.748632][ T9] usb 6-1: USB disconnect, device number 27 [ 164.837540][ T1460] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 164.840947][ T1460] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.846457][ T1460] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.848076][ T7078] usb usb5-port1: attempt power cycle [ 164.850431][ T1460] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.850458][ T1460] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.850500][ T1460] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.865114][ T1460] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.869426][ T1460] usb 7-1: config 0 descriptor?? [ 164.871632][ T9811] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 165.185726][ T7078] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 165.210998][ T7078] usb 5-1: device descriptor read/8, error -71 [ 165.279557][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.282090][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.284614][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.288949][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.292276][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.295465][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.299230][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.302535][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.306664][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.310504][ T1460] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.329947][ T1460] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 165.367497][ T9827] tipc: Enabling of bearer rejected, already enabled [ 165.455642][ T7078] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 165.482100][ T1460] usb 7-1: USB disconnect, device number 24 [ 165.486787][ T7078] usb 5-1: device descriptor read/8, error -71 [ 165.605942][ T7078] usb usb5-port1: unable to enumerate USB device [ 165.720538][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 165.877767][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.880651][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.884380][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.888753][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.893439][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.900150][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.903572][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.908219][ T9] usb 6-1: Product: syz [ 165.910504][ T9] usb 6-1: Manufacturer: syz [ 165.925161][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 165.927711][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 165.932723][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 165.935180][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 166.082792][ T40] audit: type=1400 audit(1759305321.913:942): avc: denied { append } for pid=9835 comm="syz.2.1221" name="loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.140362][ T9] usb 6-1: USB disconnect, device number 28 [ 166.430924][ T9854] syz_tun: entered allmulticast mode [ 166.434397][ T9853] syz_tun: left allmulticast mode [ 166.685199][ T9861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 167.059747][ C2] ata1: illegal qc_active transition (00000000->00000020) [ 167.084764][ T9872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.089600][ T9872] overlayfs: failed to set xattr on upper [ 167.091669][ T9872] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.094213][ T9872] overlayfs: ...falling back to index=off. [ 167.097320][ T9872] overlayfs: ...falling back to uuid=null. [ 167.403417][ T1112] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 167.410458][ T1112] ata1.00: configured for UDMA/100 [ 167.847050][ T9887] cgroup: Need name or subsystem set [ 167.945776][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 168.146234][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.150811][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.155071][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.165731][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.170667][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.187405][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.190477][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.192979][ T9] usb 6-1: Product: syz [ 168.194326][ T9] usb 6-1: Manufacturer: syz [ 168.252729][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 168.257671][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 168.262067][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 168.264547][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 168.350068][ T9896] qnx4: unable to read the superblock [ 168.456111][ T7078] usb 6-1: USB disconnect, device number 29 [ 168.701449][ T9908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.945762][ T1460] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 169.107831][ T1460] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 169.112099][ T1460] usb 7-1: config 0 has no interface number 0 [ 169.114451][ T1460] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 169.118132][ T1460] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 169.125362][ T1460] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 169.130958][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.134518][ T1460] usb 7-1: Product: syz [ 169.136812][ T1460] usb 7-1: Manufacturer: syz [ 169.138830][ T1460] usb 7-1: SerialNumber: syz [ 169.142820][ T1460] usb 7-1: config 0 descriptor?? [ 169.171881][ T40] audit: type=1400 audit(1759305325.003:943): avc: denied { watch } for pid=9919 comm="syz.1.1252" path="/syzcgroup/unified/syz1" dev="pstore" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 169.367275][ T1460] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 169.369589][ T1460] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 169.375550][ T1460] usb 7-1: USB disconnect, device number 25 [ 169.448221][ T40] audit: type=1800 audit(1759305325.283:944): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1253" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 169.462495][ T9922] netlink: 'syz.0.1253': attribute type 4 has an invalid length. [ 169.727216][ T9937] tipc: Enabling of bearer rejected, already enabled [ 170.100767][ T9964] tipc: Enabled bearer , priority 0 [ 170.104548][ T9964] syzkaller0: entered promiscuous mode [ 170.107629][ T9964] syzkaller0: entered allmulticast mode [ 170.128948][ T9963] tipc: Resetting bearer [ 170.145193][ T9963] tipc: Disabling bearer [ 170.292093][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.546151][ T54] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 170.707689][ T54] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 170.711605][ T54] usb 7-1: config 0 has no interface number 0 [ 170.714220][ T54] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 170.719258][ T54] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 170.726675][ T54] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 170.732157][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.735688][ T54] usb 7-1: Product: syz [ 170.737461][ T54] usb 7-1: Manufacturer: syz [ 170.739606][ T54] usb 7-1: SerialNumber: syz [ 170.744019][ T54] usb 7-1: config 0 descriptor?? [ 170.956304][ T54] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 170.961303][ T54] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 170.966698][ T54] usb 7-1: USB disconnect, device number 26 [ 171.463795][ T40] audit: type=1400 audit(1759305327.293:945): avc: denied { mounton } for pid=9986 comm="syz.1.1279" path="/295/file0" dev="tmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 171.464120][ T9988] Invalid ELF header type: 0 != 1 [ 171.475334][ T40] audit: type=1400 audit(1759305327.293:946): avc: denied { module_load } for pid=9986 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 171.480836][ T9988] fuse: Bad value for 'fd' [ 171.755839][ T40] audit: type=1400 audit(1759305327.593:947): avc: denied { write } for pid=10003 comm="syz.2.1286" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 171.756167][T10006] orangefs_devreq_open: device cannot be opened in blocking mode [ 171.762959][ T40] audit: type=1400 audit(1759305327.593:948): avc: denied { open } for pid=10003 comm="syz.2.1286" path="/333/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 171.815931][ T6033] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 171.862541][ T40] audit: type=1400 audit(1759305327.693:949): avc: denied { connect } for pid=10010 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.914541][ T40] audit: type=1400 audit(1759305327.743:950): avc: denied { write } for pid=10010 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.968249][ T6033] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.971826][ T6033] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.976612][ T6033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.981594][ T6033] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 171.986272][ T6033] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 171.992201][ T6033] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 171.996433][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.000416][ T6033] usb 6-1: Product: syz [ 172.002360][ T6033] usb 6-1: Manufacturer: syz [ 172.008857][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 172.010530][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 172.012466][ T6033] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 172.123983][T10014] FAULT_INJECTION: forcing a failure. [ 172.123983][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 172.128965][T10014] CPU: 3 UID: 0 PID: 10014 Comm: syz.3.1289 Not tainted syzkaller #0 PREEMPT(full) [ 172.128987][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.128996][T10014] Call Trace: [ 172.129003][T10014] [ 172.129009][T10014] dump_stack_lvl+0x16c/0x1f0 [ 172.129061][T10014] should_fail_ex+0x512/0x640 [ 172.129085][T10014] ? __kmalloc_noprof+0xbf/0x510 [ 172.129105][T10014] ? do_handle_open+0x564/0xc90 [ 172.129125][T10014] should_failslab+0xc2/0x120 [ 172.129145][T10014] __kmalloc_noprof+0xd2/0x510 [ 172.129167][T10014] do_handle_open+0x564/0xc90 [ 172.129188][T10014] ? __pfx_do_handle_open+0x10/0x10 [ 172.129211][T10014] ? ksys_write+0x1ac/0x250 [ 172.129241][T10014] ? do_syscall_64+0xcd/0x4e0 [ 172.129256][T10014] do_syscall_64+0xcd/0x4e0 [ 172.129273][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.129288][T10014] RIP: 0033:0x7f2aefd8eec9 [ 172.129301][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.129317][T10014] RSP: 002b:00007f2af0b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 172.129334][T10014] RAX: ffffffffffffffda RBX: 00007f2aeffe5fa0 RCX: 00007f2aefd8eec9 [ 172.129343][T10014] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.129351][T10014] RBP: 00007f2af0b64090 R08: 0000000000000000 R09: 0000000000000000 [ 172.129359][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.129368][T10014] R13: 00007f2aeffe6038 R14: 00007f2aeffe5fa0 R15: 00007ffc0b2e7e38 [ 172.129386][T10014] [ 172.221391][ T6033] usb 6-1: USB disconnect, device number 30 [ 172.225110][T10020] overlayfs: missing 'lowerdir' [ 172.406089][ T1460] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 172.565927][ T1460] usb 7-1: Using ep0 maxpacket: 8 [ 172.570105][ T1460] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.574336][ T1460] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.578188][ T1460] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.580842][ T1460] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 172.584499][ T1460] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.591090][ T1460] usb 7-1: config 0 descriptor?? [ 172.784420][T10038] tipc: Enabling of bearer rejected, already enabled [ 172.837190][T10040] FAULT_INJECTION: forcing a failure. [ 172.837190][T10040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.844260][T10040] CPU: 3 UID: 0 PID: 10040 Comm: syz.1.1298 Not tainted syzkaller #0 PREEMPT(full) [ 172.844286][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 172.844297][T10040] Call Trace: [ 172.844304][T10040] [ 172.844312][T10040] dump_stack_lvl+0x16c/0x1f0 [ 172.844338][T10040] should_fail_ex+0x512/0x640 [ 172.844359][T10040] _copy_to_user+0x32/0xd0 [ 172.844381][T10040] simple_read_from_buffer+0xcb/0x170 [ 172.844406][T10040] proc_fail_nth_read+0x197/0x240 [ 172.844432][T10040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.844458][T10040] ? rw_verify_area+0xcf/0x6c0 [ 172.844478][T10040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.844503][T10040] vfs_read+0x1e1/0xcf0 [ 172.844529][T10040] ? __pfx___mutex_lock+0x10/0x10 [ 172.844550][T10040] ? __pfx_vfs_read+0x10/0x10 [ 172.844578][T10040] ? __fget_files+0x20e/0x3c0 [ 172.844609][T10040] ksys_read+0x12a/0x250 [ 172.844630][T10040] ? __pfx_ksys_read+0x10/0x10 [ 172.844659][T10040] do_syscall_64+0xcd/0x4e0 [ 172.844680][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.844699][T10040] RIP: 0033:0x7f84e1d8d8dc [ 172.844714][T10040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.844730][T10040] RSP: 002b:00007f84e2be9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.844748][T10040] RAX: ffffffffffffffda RBX: 00007f84e1fe5fa0 RCX: 00007f84e1d8d8dc [ 172.844759][T10040] RDX: 000000000000000f RSI: 00007f84e2be90a0 RDI: 0000000000000005 [ 172.844769][T10040] RBP: 00007f84e2be9090 R08: 0000000000000000 R09: 0000000000000000 [ 172.844779][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.844789][T10040] R13: 00007f84e1fe6038 R14: 00007f84e1fe5fa0 R15: 00007ffdd3344858 [ 172.844813][T10040] [ 173.023181][ T1460] usbhid 7-1:0.0: can't add hid device: -71 [ 173.025705][ T1460] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 173.030494][ T1460] usb 7-1: USB disconnect, device number 27 [ 173.066628][ T40] audit: type=1400 audit(1759305328.893:951): avc: denied { write } for pid=10046 comm="syz.2.1300" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.298211][T10053] FAULT_INJECTION: forcing a failure. [ 174.298211][T10053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.302833][T10053] CPU: 2 UID: 0 PID: 10053 Comm: syz.2.1301 Not tainted syzkaller #0 PREEMPT(full) [ 174.302853][T10053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.302862][T10053] Call Trace: [ 174.302867][T10053] [ 174.302873][T10053] dump_stack_lvl+0x16c/0x1f0 [ 174.302894][T10053] should_fail_ex+0x512/0x640 [ 174.302911][T10053] _copy_from_user+0x2e/0xd0 [ 174.302926][T10053] do_handle_open+0x5e9/0xc90 [ 174.302947][T10053] ? __pfx_do_handle_open+0x10/0x10 [ 174.302969][T10053] ? ksys_write+0x1ac/0x250 [ 174.302993][T10053] ? do_syscall_64+0xcd/0x4e0 [ 174.303006][T10053] do_syscall_64+0xcd/0x4e0 [ 174.303020][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.303035][T10053] RIP: 0033:0x7f5b0d98eec9 [ 174.303046][T10053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.303059][T10053] RSP: 002b:00007f5b0e81b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 174.303073][T10053] RAX: ffffffffffffffda RBX: 00007f5b0dbe5fa0 RCX: 00007f5b0d98eec9 [ 174.303082][T10053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.303090][T10053] RBP: 00007f5b0e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 174.303098][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.303105][T10053] R13: 00007f5b0dbe6038 R14: 00007f5b0dbe5fa0 R15: 00007ffc1bcb8878 [ 174.303123][T10053] [ 174.430495][T10066] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 174.430495][T10066] The task syz.2.1305 (10066) triggered the difference, watch for misbehavior. [ 174.448983][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 174.463268][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1310'. [ 174.463786][ T40] audit: type=1800 audit(1759305330.293:952): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1309" name="bus" dev="9p" ino=71827971 res=0 errno=0 [ 174.505176][T10072] syz_tun: entered allmulticast mode [ 174.595735][ T72] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 174.661646][T10080] FAULT_INJECTION: forcing a failure. [ 174.661646][T10080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.666680][T10080] CPU: 2 UID: 0 PID: 10080 Comm: syz.0.1314 Not tainted syzkaller #0 PREEMPT(full) [ 174.666695][T10080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.666702][T10080] Call Trace: [ 174.666706][T10080] [ 174.666711][T10080] dump_stack_lvl+0x16c/0x1f0 [ 174.666740][T10080] should_fail_ex+0x512/0x640 [ 174.666754][T10080] _copy_to_user+0x32/0xd0 [ 174.666767][T10080] simple_read_from_buffer+0xcb/0x170 [ 174.666783][T10080] proc_fail_nth_read+0x197/0x240 [ 174.666799][T10080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.666815][T10080] ? rw_verify_area+0xcf/0x6c0 [ 174.666827][T10080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.666842][T10080] vfs_read+0x1e1/0xcf0 [ 174.666858][T10080] ? __pfx___mutex_lock+0x10/0x10 [ 174.666870][T10080] ? __pfx_vfs_read+0x10/0x10 [ 174.666886][T10080] ? __fget_files+0x20e/0x3c0 [ 174.666904][T10080] ksys_read+0x12a/0x250 [ 174.666917][T10080] ? __pfx_ksys_read+0x10/0x10 [ 174.666934][T10080] do_syscall_64+0xcd/0x4e0 [ 174.666946][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.666957][T10080] RIP: 0033:0x7f5001d8d8dc [ 174.666966][T10080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.666976][T10080] RSP: 002b:00007f5002d0d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.666987][T10080] RAX: ffffffffffffffda RBX: 00007f5001fe5fa0 RCX: 00007f5001d8d8dc [ 174.666993][T10080] RDX: 000000000000000f RSI: 00007f5002d0d0a0 RDI: 0000000000000004 [ 174.666999][T10080] RBP: 00007f5002d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 174.667005][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.667011][T10080] R13: 00007f5001fe6038 R14: 00007f5001fe5fa0 R15: 00007ffed8f28f68 [ 174.667024][T10080] [ 174.779752][ T72] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 174.783448][ T72] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 174.794251][ T72] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 174.798427][ T72] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 174.802201][ T72] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 174.815716][ T72] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.819897][ T72] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.823528][ T72] usb 6-1: Product: syz [ 174.829150][ T72] usb 6-1: Manufacturer: syz [ 174.840457][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 174.843214][ T72] cdc_wdm 6-1:1.0: skipping garbage [ 174.850916][ T72] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 174.854107][ T72] cdc_wdm 6-1:1.0: Unknown control protocol [ 175.051437][ T10] usb 6-1: USB disconnect, device number 31 [ 175.388484][T10090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.645817][ T1460] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 175.723424][ T40] audit: type=1400 audit(1759305331.553:953): avc: denied { shutdown } for pid=10107 comm="syz.1.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.775828][ T5960] Bluetooth: hci0: command 0x0406 tx timeout [ 175.778805][ T5960] Bluetooth: hci1: command 0x0406 tx timeout [ 175.781503][ T5960] Bluetooth: hci2: command 0x0406 tx timeout [ 175.800222][ T1460] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 175.804137][ T1460] usb 7-1: config 0 has no interface number 0 [ 175.807444][ T1460] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 175.812430][ T1460] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.817945][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1329'. [ 175.821437][ T1460] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 175.825832][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.829317][ T1460] usb 7-1: Product: syz [ 175.831069][ T1460] usb 7-1: Manufacturer: syz [ 175.833232][ T1460] usb 7-1: SerialNumber: syz [ 175.840054][ T1460] usb 7-1: config 0 descriptor?? [ 175.995653][ T7078] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.049350][ T1460] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 176.054346][ T1460] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 176.063745][ T1460] usb 7-1: USB disconnect, device number 28 [ 176.156187][T10136] tipc: Enabling of bearer rejected, already enabled [ 176.157441][ T7078] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.162959][ T7078] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.167214][ T7078] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.170685][ T7078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 176.174284][ T7078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 176.179749][ T7078] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.183339][ T7078] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.186008][ T7078] usb 5-1: Product: syz [ 176.187380][ T7078] usb 5-1: Manufacturer: syz [ 176.194419][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 176.197714][ T7078] cdc_wdm 5-1:1.0: skipping garbage [ 176.200898][ T7078] cdc_wdm 5-1:1.0: skipping garbage [ 176.204389][ T7078] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 176.206394][ T7078] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.249934][T10140] netlink: 'syz.1.1339': attribute type 12 has an invalid length. [ 176.252902][T10140] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1339'. [ 176.362849][ T40] audit: type=1400 audit(1759305332.193:954): avc: denied { remount } for pid=10144 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.370915][ T40] audit: type=1400 audit(1759305332.193:955): avc: denied { create } for pid=10144 comm="syz.1.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 176.412479][ T7078] usb 5-1: USB disconnect, device number 19 [ 176.538427][T10156] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 176.541042][T10156] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 176.670982][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 176.770960][ T40] audit: type=1400 audit(1759305332.593:956): avc: denied { view } for pid=10169 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 176.809082][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'. [ 176.838523][T10172] FAULT_INJECTION: forcing a failure. [ 176.838523][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.847870][T10172] CPU: 3 UID: 0 PID: 10172 Comm: syz.2.1352 Not tainted syzkaller #0 PREEMPT(full) [ 176.847910][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.847924][T10172] Call Trace: [ 176.847939][T10172] [ 176.847948][T10172] dump_stack_lvl+0x16c/0x1f0 [ 176.847999][T10172] should_fail_ex+0x512/0x640 [ 176.848032][T10172] _copy_from_user+0x2e/0xd0 [ 176.848052][T10172] copy_msghdr_from_user+0x98/0x160 [ 176.848071][T10172] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 176.848102][T10172] ___sys_sendmsg+0xfe/0x1d0 [ 176.848132][T10172] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.848181][T10172] __sys_sendmsg+0x16d/0x220 [ 176.848200][T10172] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.848234][T10172] do_syscall_64+0xcd/0x4e0 [ 176.848256][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.848274][T10172] RIP: 0033:0x7f5b0d98eec9 [ 176.848289][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.848305][T10172] RSP: 002b:00007f5b0e81b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.848322][T10172] RAX: ffffffffffffffda RBX: 00007f5b0dbe5fa0 RCX: 00007f5b0d98eec9 [ 176.848334][T10172] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 176.848344][T10172] RBP: 00007f5b0e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.848354][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.848364][T10172] R13: 00007f5b0dbe6038 R14: 00007f5b0dbe5fa0 R15: 00007ffc1bcb8878 [ 176.848387][T10172] [ 176.925866][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.930923][ T40] audit: type=1400 audit(1759305332.733:957): avc: denied { bind } for pid=10174 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.939653][ T40] audit: type=1400 audit(1759305332.733:958): avc: denied { name_bind } for pid=10174 comm="syz.2.1353" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.947822][ T40] audit: type=1400 audit(1759305332.733:959): avc: denied { node_bind } for pid=10174 comm="syz.2.1353" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 177.122272][T10189] FAULT_INJECTION: forcing a failure. [ 177.122272][T10189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.129875][T10189] CPU: 3 UID: 0 PID: 10189 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT(full) [ 177.129895][T10189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.129905][T10189] Call Trace: [ 177.129912][T10189] [ 177.129919][T10189] dump_stack_lvl+0x16c/0x1f0 [ 177.129941][T10189] should_fail_ex+0x512/0x640 [ 177.129961][T10189] _copy_from_iter+0x29f/0x1720 [ 177.129979][T10189] ? __lock_acquire+0x62e/0x1ce0 [ 177.129999][T10189] ? __pfx__copy_from_iter+0x10/0x10 [ 177.130015][T10189] ? __lock_acquire+0x62e/0x1ce0 [ 177.130054][T10189] copy_page_from_iter+0xde/0x180 [ 177.130076][T10189] tun_build_skb.constprop.0+0x2e8/0x1500 [ 177.130108][T10189] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 177.130128][T10189] ? unwind_get_return_address+0x59/0xa0 [ 177.130157][T10189] ? arch_stack_walk+0xa6/0x100 [ 177.130190][T10189] ? _kstrtoull+0x145/0x200 [ 177.130215][T10189] tun_get_user+0x14a5/0x3cd0 [ 177.130247][T10189] ? __pfx_tun_get_user+0x10/0x10 [ 177.130269][T10189] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.130295][T10189] ? find_held_lock+0x2b/0x80 [ 177.130317][T10189] ? tun_get+0x191/0x370 [ 177.130343][T10189] tun_chr_write_iter+0xdc/0x210 [ 177.130367][T10189] vfs_write+0x7d3/0x11d0 [ 177.130388][T10189] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.130411][T10189] ? __pfx_vfs_write+0x10/0x10 [ 177.130430][T10189] ? find_held_lock+0x2b/0x80 [ 177.130466][T10189] ksys_write+0x12a/0x250 [ 177.130486][T10189] ? __pfx_ksys_write+0x10/0x10 [ 177.130512][T10189] do_syscall_64+0xcd/0x4e0 [ 177.130533][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.130551][T10189] RIP: 0033:0x7f5b0d98d97f [ 177.130565][T10189] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 177.130578][T10189] RSP: 002b:00007f5b0e81b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 177.130594][T10189] RAX: ffffffffffffffda RBX: 00007f5b0dbe5fa0 RCX: 00007f5b0d98d97f [ 177.130604][T10189] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 177.130613][T10189] RBP: 00007f5b0e81b090 R08: 0000000000000000 R09: 0000000000000000 [ 177.130621][T10189] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 177.130630][T10189] R13: 00007f5b0dbe6038 R14: 00007f5b0dbe5fa0 R15: 00007ffc1bcb8878 [ 177.130649][T10189] [ 177.227252][ C3] vkms_vblank_simulate: vblank timer overrun [ 177.302938][ T40] audit: type=1400 audit(1759305333.123:960): avc: denied { accept } for pid=10190 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.338292][T10202] FAULT_INJECTION: forcing a failure. [ 177.338292][T10202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.344222][T10202] CPU: 2 UID: 0 PID: 10202 Comm: syz.3.1364 Not tainted syzkaller #0 PREEMPT(full) [ 177.344245][T10202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.344255][T10202] Call Trace: [ 177.344260][T10202] [ 177.344268][T10202] dump_stack_lvl+0x16c/0x1f0 [ 177.344293][T10202] should_fail_ex+0x512/0x640 [ 177.344313][T10202] _copy_from_user+0x2e/0xd0 [ 177.344333][T10202] copy_msghdr_from_user+0x98/0x160 [ 177.344353][T10202] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.344389][T10202] ___sys_sendmsg+0xfe/0x1d0 [ 177.344408][T10202] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.344455][T10202] __sys_sendmsg+0x16d/0x220 [ 177.344472][T10202] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.344505][T10202] do_syscall_64+0xcd/0x4e0 [ 177.344526][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.344544][T10202] RIP: 0033:0x7f2aefd8eec9 [ 177.344558][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.344573][T10202] RSP: 002b:00007f2af0b64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.344589][T10202] RAX: ffffffffffffffda RBX: 00007f2aeffe5fa0 RCX: 00007f2aefd8eec9 [ 177.344600][T10202] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 177.344611][T10202] RBP: 00007f2af0b64090 R08: 0000000000000000 R09: 0000000000000000 [ 177.344623][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.344634][T10202] R13: 00007f2aeffe6038 R14: 00007f2aeffe5fa0 R15: 00007ffc0b2e7e38 [ 177.344656][T10202] [ 177.664589][T10220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=10220 comm=syz.1.1368 [ 177.671771][ T40] audit: type=1400 audit(1759305333.503:961): avc: denied { listen } for pid=10219 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.715732][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 177.787148][T10220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10220 comm=syz.1.1368 [ 177.878489][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.881422][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.881520][T10222] ipip0: entered promiscuous mode [ 177.885500][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.891431][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 177.894910][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 177.901820][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.904731][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.907463][ T10] usb 8-1: Product: syz [ 177.909450][ T10] usb 8-1: Manufacturer: syz [ 177.915201][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 177.917102][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 177.920893][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 177.923769][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 178.029237][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 178.126245][T10234] program syz.0.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.133287][ T7078] usb 8-1: USB disconnect, device number 30 [ 178.227338][T10238] syz_tun: entered allmulticast mode [ 178.231496][T10237] syz_tun: left allmulticast mode [ 178.280709][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 178.369678][T10244] netlink: 'syz.2.1379': attribute type 15 has an invalid length. [ 178.375157][ T5955] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 178.380430][T10244] pim6reg13: entered allmulticast mode [ 178.484654][T10246] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 178.488049][T10246] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 178.724725][T10258] syz_tun: entered allmulticast mode [ 178.729246][T10257] syz_tun: left allmulticast mode [ 178.765835][ T54] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 178.896111][ T54] usb 7-1: device descriptor read/64, error -71 [ 179.145865][ T54] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 179.241810][T10266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1389'. [ 179.275801][ T54] usb 7-1: device descriptor read/64, error -71 [ 179.396295][ T54] usb usb7-port1: attempt power cycle [ 179.638769][T10275] 9pnet: Unknown protocol version 9 [ 179.745720][ T54] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 179.767064][ T54] usb 7-1: device descriptor read/8, error -71 [ 179.856112][ T34] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 179.902875][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1398'. [ 180.010200][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.013952][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.015789][ T54] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 180.019654][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.028652][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 180.033392][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 180.040309][ T54] usb 7-1: device descriptor read/8, error -71 [ 180.040913][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.049171][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.052616][ T34] usb 8-1: Product: syz [ 180.054517][ T34] usb 8-1: Manufacturer: syz [ 180.062784][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 180.065018][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 180.071103][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 180.073759][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 180.189261][ T54] usb usb7-port1: unable to enumerate USB device [ 180.277234][ T6033] usb 8-1: USB disconnect, device number 31 [ 180.657874][T10296] FAULT_INJECTION: forcing a failure. [ 180.657874][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 180.663322][T10296] CPU: 3 UID: 0 PID: 10296 Comm: syz.1.1401 Not tainted syzkaller #0 PREEMPT(full) [ 180.663346][T10296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.663356][T10296] Call Trace: [ 180.663364][T10296] [ 180.663373][T10296] dump_stack_lvl+0x16c/0x1f0 [ 180.663397][T10296] should_fail_ex+0x512/0x640 [ 180.663419][T10296] should_failslab+0xc2/0x120 [ 180.663443][T10296] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 180.663467][T10296] ? dst_alloc+0x99/0x1a0 [ 180.663495][T10296] dst_alloc+0x99/0x1a0 [ 180.663523][T10296] rt_dst_alloc+0x35/0x3a0 [ 180.663544][T10296] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 180.663579][T10296] ip_route_output_key_hash+0x137/0x2e0 [ 180.663603][T10296] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 180.663631][T10296] ? lock_acquire+0x179/0x350 [ 180.663657][T10296] ip_route_output_flow+0x27/0x150 [ 180.663683][T10296] inet_csk_route_req+0x72e/0xd60 [ 180.663710][T10296] tcp_v4_send_synack+0x5da/0x670 [ 180.663734][T10296] ? __pfx_tcp_v4_send_synack+0x10/0x10 [ 180.663760][T10296] ? __pfx_get_random_u32+0x10/0x10 [ 180.663790][T10296] tcp_rtx_synack+0x137/0x620 [ 180.663809][T10296] ? __pfx_tcp_rtx_synack+0x10/0x10 [ 180.663834][T10296] ? find_held_lock+0x2b/0x80 [ 180.663862][T10296] tcp_check_req+0x97b/0x1f80 [ 180.663892][T10296] ? __pfx_tcp_check_req+0x10/0x10 [ 180.663917][T10296] ? bpf_skb_get_tunnel_key+0xa20/0xab0 [ 180.663940][T10296] ? __lock_acquire+0x62e/0x1ce0 [ 180.663958][T10296] ? __asan_memmove+0x3c/0x60 [ 180.663981][T10296] tcp_v4_rcv+0x19ab/0x4640 [ 180.664018][T10296] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 180.664046][T10296] ? __pfx_raw_local_deliver+0x10/0x10 [ 180.664074][T10296] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 180.664098][T10296] ip_protocol_deliver_rcu+0xba/0x4c0 [ 180.664128][T10296] ip_local_deliver_finish+0x3f2/0x720 [ 180.664159][T10296] ip_local_deliver+0x18e/0x1f0 [ 180.664187][T10296] ip_rcv+0x2e0/0x600 [ 180.664202][T10296] ? __pfx_ip_rcv+0x10/0x10 [ 180.664217][T10296] __netif_receive_skb_one_core+0x197/0x1e0 [ 180.664243][T10296] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 180.664269][T10296] ? lock_acquire+0x179/0x350 [ 180.664288][T10296] ? __phys_addr+0xe8/0x180 [ 180.664322][T10296] __netif_receive_skb+0x1d/0x160 [ 180.664347][T10296] netif_receive_skb+0x137/0x7b0 [ 180.664371][T10296] ? __pfx_netif_receive_skb+0x10/0x10 [ 180.664405][T10296] tun_rx_batched.isra.0+0x3ee/0x740 [ 180.664431][T10296] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 180.664460][T10296] ? tun_get_user+0x1df6/0x3cd0 [ 180.664481][T10296] ? rcu_is_watching+0x12/0xc0 [ 180.664509][T10296] tun_get_user+0x28bb/0x3cd0 [ 180.664544][T10296] ? __pfx_tun_get_user+0x10/0x10 [ 180.664568][T10296] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 180.664598][T10296] ? find_held_lock+0x2b/0x80 [ 180.664620][T10296] ? tun_get+0x191/0x370 [ 180.664647][T10296] tun_chr_write_iter+0xdc/0x210 [ 180.664669][T10296] vfs_write+0x7d3/0x11d0 [ 180.664693][T10296] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 180.664719][T10296] ? __pfx_vfs_write+0x10/0x10 [ 180.664738][T10296] ? find_held_lock+0x2b/0x80 [ 180.664776][T10296] ksys_write+0x12a/0x250 [ 180.664797][T10296] ? __pfx_ksys_write+0x10/0x10 [ 180.664825][T10296] do_syscall_64+0xcd/0x4e0 [ 180.664847][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.664864][T10296] RIP: 0033:0x7f84e1d8d97f [ 180.664878][T10296] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 180.664894][T10296] RSP: 002b:00007f84e2be9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 180.664911][T10296] RAX: ffffffffffffffda RBX: 00007f84e1fe5fa0 RCX: 00007f84e1d8d97f [ 180.664924][T10296] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00000000000000c8 [ 180.664934][T10296] RBP: 00007f84e2be9090 R08: 0000000000000000 R09: 0000000000000000 [ 180.664943][T10296] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 180.664953][T10296] R13: 00007f84e1fe6038 R14: 00007f84e1fe5fa0 R15: 00007ffdd3344858 [ 180.664976][T10296] [ 180.862693][T10300] 9pnet: Unknown protocol version 9 [ 180.900741][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 180.924380][T10305] comedi comedi0: Minor 3 could not be opened [ 180.931761][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 180.960408][T10309] syz_tun: entered allmulticast mode [ 180.964941][T10308] syz_tun: left allmulticast mode [ 181.955928][ T1460] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 181.990296][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 182.017206][T10337] syz_tun: entered allmulticast mode [ 182.022577][T10336] syz_tun: left allmulticast mode [ 182.137079][ T1460] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.141662][ T1460] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.144846][ T1460] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.145356][T10348] 9pnet: Unknown protocol version 9p200 [ 182.165836][ T1460] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 182.169313][ T1460] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 182.174434][ T1460] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.177960][ T1460] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.181181][ T1460] usb 7-1: Product: syz [ 182.182769][ T1460] usb 7-1: Manufacturer: syz [ 182.199514][ T1460] cdc_wdm 7-1:1.0: skipping garbage [ 182.201246][ T1460] cdc_wdm 7-1:1.0: skipping garbage [ 182.203725][ T1460] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 182.205919][ T1460] cdc_wdm 7-1:1.0: Unknown control protocol [ 182.412294][ T1460] usb 7-1: USB disconnect, device number 33 [ 182.650199][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 182.650214][ T40] audit: type=1400 audit(1759305338.483:963): avc: denied { append } for pid=10360 comm="syz.3.1425" name="card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 182.761598][T10365] openvswitch: netlink: Unknown key attributes 2 [ 182.810971][T10367] tipc: Enabled bearer , priority 0 [ 182.856793][T10369] PM: Enabling pm_trace changes system date and time during resume. [ 182.856793][T10369] PM: Correct system time has to be restored manually after resume. [ 182.948304][T10373] 9pnet: Unknown protocol version 9p200 [ 183.400230][ T40] audit: type=1400 audit(1759305339.233:964): avc: denied { map } for pid=10393 comm="syz.0.1439" path="socket:[32693]" dev="sockfs" ino=32693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.406894][T10395] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 183.877704][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1448'. [ 184.285768][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 184.415851][ T10] usb 7-1: device descriptor read/64, error -71 [ 184.656040][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 184.728662][T10450] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 184.736087][T10450] batman_adv: batadv0: Adding interface: team0 [ 184.738401][T10450] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.747556][T10450] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 184.795774][ T10] usb 7-1: device descriptor read/64, error -71 [ 184.906541][ T10] usb usb7-port1: attempt power cycle [ 185.107249][T10462] 9pnet: Unknown protocol version 9p2000. [ 185.131637][T10465] FAULT_INJECTION: forcing a failure. [ 185.131637][T10465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.136021][T10465] CPU: 3 UID: 0 PID: 10465 Comm: syz.1.1467 Not tainted syzkaller #0 PREEMPT(full) [ 185.136038][T10465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.136045][T10465] Call Trace: [ 185.136050][T10465] [ 185.136055][T10465] dump_stack_lvl+0x16c/0x1f0 [ 185.136071][T10465] should_fail_ex+0x512/0x640 [ 185.136086][T10465] _copy_to_user+0x32/0xd0 [ 185.136101][T10465] simple_read_from_buffer+0xcb/0x170 [ 185.136128][T10465] proc_fail_nth_read+0x197/0x240 [ 185.136151][T10465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.136173][T10465] ? rw_verify_area+0xcf/0x6c0 [ 185.136189][T10465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.136212][T10465] vfs_read+0x1e1/0xcf0 [ 185.136235][T10465] ? __pfx___mutex_lock+0x10/0x10 [ 185.136251][T10465] ? __pfx_vfs_read+0x10/0x10 [ 185.136275][T10465] ? __fget_files+0x20e/0x3c0 [ 185.136303][T10465] ksys_read+0x12a/0x250 [ 185.136321][T10465] ? __pfx_ksys_read+0x10/0x10 [ 185.136346][T10465] do_syscall_64+0xcd/0x4e0 [ 185.136363][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.136379][T10465] RIP: 0033:0x7f84e1d8d8dc [ 185.136392][T10465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.136406][T10465] RSP: 002b:00007f84e2be9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.136422][T10465] RAX: ffffffffffffffda RBX: 00007f84e1fe5fa0 RCX: 00007f84e1d8d8dc [ 185.136432][T10465] RDX: 000000000000000f RSI: 00007f84e2be90a0 RDI: 0000000000000004 [ 185.136442][T10465] RBP: 00007f84e2be9090 R08: 0000000000000000 R09: 0000000000000000 [ 185.136452][T10465] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 185.136460][T10465] R13: 00007f84e1fe6038 R14: 00007f84e1fe5fa0 R15: 00007ffdd3344858 [ 185.136483][T10465] [ 185.232383][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 185.246005][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 185.266470][ T10] usb 7-1: device descriptor read/8, error -71 [ 185.292794][T10469] efs: cannot read volume header [ 185.349194][T10476] tipc: Enabled bearer , priority 0 [ 185.352840][T10476] syzkaller0: entered promiscuous mode [ 185.355171][T10476] syzkaller0: entered allmulticast mode [ 185.371288][T10476] tipc: Resetting bearer [ 185.375529][T10475] tipc: Resetting bearer [ 185.386772][T10475] tipc: Disabling bearer [ 185.472726][ T40] audit: type=1400 audit(1759305341.303:965): avc: denied { mount } for pid=10478 comm="syz.0.1472" name="/" dev="autofs" ino=33980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 185.506502][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 185.526376][ T10] usb 7-1: device descriptor read/8, error -71 [ 185.536410][ T40] audit: type=1400 audit(1759305341.373:966): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 185.635911][ T10] usb usb7-port1: unable to enumerate USB device [ 185.965657][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1475'. [ 185.991005][ T40] audit: type=1400 audit(1759305341.823:967): avc: denied { listen } for pid=10486 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.000486][ T40] audit: type=1400 audit(1759305341.833:968): avc: denied { accept } for pid=10486 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.009186][ T40] audit: type=1400 audit(1759305341.833:969): avc: denied { write } for pid=10486 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.042756][T10490] 9pnet: Unknown protocol version 9p2000. [ 186.096742][T10492] netlink: 'syz.3.1477': attribute type 29 has an invalid length. [ 186.101327][T10492] netlink: 'syz.3.1477': attribute type 29 has an invalid length. [ 186.157807][T10496] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1477'. [ 186.382092][T10503] ------------[ cut here ]------------ [ 186.384159][T10503] WARNING: CPU: 2 PID: 10503 at fs/nsfs.c:493 nsfs_fh_to_dentry+0x9de/0xe10 [ 186.387196][T10503] Modules linked in: [ 186.389338][T10503] CPU: 2 UID: 0 PID: 10503 Comm: syz.1.1480 Not tainted syzkaller #0 PREEMPT(full) [ 186.396299][T10503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.400635][T10503] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 186.402880][T10503] Code: 92 50 ff e9 63 fe ff ff e8 1f b6 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 11 b6 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 03 b6 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 f5 b5 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 186.411616][T10503] RSP: 0018:ffffc900239c7b38 EFLAGS: 00010287 [ 186.414480][T10503] RAX: 000000000000007d RBX: 0000000000000000 RCX: ffffc90004752000 [ 186.417915][T10503] RDX: 0000000000080000 RSI: ffffffff82465edd RDI: 0000000000000004 [ 186.421063][T10503] RBP: ffff888053ebdf08 R08: 0000000000000004 R09: 00000000effffffe [ 186.424183][T10503] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92004738f68 [ 186.427647][T10503] R13: ffffffff90444a58 R14: 00000000effffffe R15: 0000000000000001 [ 186.430882][T10503] FS: 00007f84e2be96c0(0000) GS:ffff8880d7076000(0000) knlGS:0000000000000000 [ 186.435365][T10503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.438696][T10503] CR2: 00007f84e2be8f98 CR3: 0000000039433000 CR4: 0000000000352ef0 [ 186.441857][T10503] Call Trace: [ 186.443208][T10503] [ 186.444543][T10503] ? do_handle_open+0x564/0xc90 [ 186.446790][T10503] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 186.449057][T10503] ? __kasan_kmalloc+0xaa/0xb0 [ 186.451077][T10503] ? __kmalloc_noprof+0x223/0x510 [ 186.453118][T10503] ? do_handle_open+0x564/0xc90 [ 186.455185][T10503] ? do_syscall_64+0xcd/0x4e0 [ 186.457627][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.460157][T10503] exportfs_decode_fh_raw+0x167/0x7d0 [ 186.462489][T10503] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 186.464871][T10503] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 186.467228][T10503] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 186.469707][T10503] do_handle_open+0x702/0xc90 [ 186.471611][T10503] ? __pfx_do_handle_open+0x10/0x10 [ 186.473752][T10503] ? __x64_sys_futex+0x1e0/0x4c0 [ 186.476346][T10503] ? xfd_validate_state+0x61/0x180 [ 186.478905][T10503] ? do_syscall_64+0xcd/0x4e0 [ 186.481121][T10503] do_syscall_64+0xcd/0x4e0 [ 186.483119][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.485483][T10503] RIP: 0033:0x7f84e1d8eec9 [ 186.487569][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.496628][T10503] RSP: 002b:00007f84e2be9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 186.500374][T10503] RAX: ffffffffffffffda RBX: 00007f84e1fe5fa0 RCX: 00007f84e1d8eec9 [ 186.503622][T10503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.507077][T10503] RBP: 00007f84e1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.509832][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.512347][T10503] R13: 00007f84e1fe6038 R14: 00007f84e1fe5fa0 R15: 00007ffdd3344858 [ 186.514891][T10503] [ 186.516252][T10503] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.519255][T10503] CPU: 2 UID: 0 PID: 10503 Comm: syz.1.1480 Not tainted syzkaller #0 PREEMPT(full) [ 186.522602][T10503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.525905][T10503] Call Trace: [ 186.527021][T10503] [ 186.528020][T10503] dump_stack_lvl+0x3d/0x1f0 [ 186.529424][T10503] vpanic+0x6e8/0x7a0 [ 186.530685][T10503] ? __pfx_vpanic+0x10/0x10 [ 186.532144][T10503] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 186.533753][T10503] panic+0xca/0xd0 [ 186.534983][T10503] ? __pfx_panic+0x10/0x10 [ 186.536484][T10503] check_panic_on_warn+0xab/0xb0 [ 186.538180][T10503] __warn+0xf6/0x3c0 [ 186.539672][T10503] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 186.541599][T10503] report_bug+0x3c3/0x580 [ 186.543232][T10503] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 186.544942][T10503] handle_bug+0x184/0x210 [ 186.546360][T10503] exc_invalid_op+0x17/0x50 [ 186.547824][T10503] asm_exc_invalid_op+0x1a/0x20 [ 186.549374][T10503] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 186.551155][T10503] Code: 92 50 ff e9 63 fe ff ff e8 1f b6 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 11 b6 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 03 b6 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 f5 b5 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 186.557074][T10503] RSP: 0018:ffffc900239c7b38 EFLAGS: 00010287 [ 186.559056][T10503] RAX: 000000000000007d RBX: 0000000000000000 RCX: ffffc90004752000 [ 186.561752][T10503] RDX: 0000000000080000 RSI: ffffffff82465edd RDI: 0000000000000004 [ 186.564252][T10503] RBP: ffff888053ebdf08 R08: 0000000000000004 R09: 00000000effffffe [ 186.566739][T10503] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92004738f68 [ 186.569356][T10503] R13: ffffffff90444a58 R14: 00000000effffffe R15: 0000000000000001 [ 186.571983][T10503] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 186.574063][T10503] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 186.576428][T10503] ? do_handle_open+0x564/0xc90 [ 186.578238][T10503] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 186.580136][T10503] ? __kasan_kmalloc+0xaa/0xb0 [ 186.581795][T10503] ? __kmalloc_noprof+0x223/0x510 [ 186.583382][T10503] ? do_handle_open+0x564/0xc90 [ 186.585030][T10503] ? do_syscall_64+0xcd/0x4e0 [ 186.586601][T10503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.588494][T10503] exportfs_decode_fh_raw+0x167/0x7d0 [ 186.590169][T10503] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 186.591996][T10503] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 186.593744][T10503] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 186.595624][T10503] do_handle_open+0x702/0xc90 [ 186.597103][T10503] ? __pfx_do_handle_open+0x10/0x10 [ 186.599132][T10503] ? __x64_sys_futex+0x1e0/0x4c0 [ 186.601777][T10503] ? xfd_validate_state+0x61/0x180 [ 186.604836][T10503] ? do_syscall_64+0xcd/0x4e0 [ 186.607269][T10503] do_syscall_64+0xcd/0x4e0 [ 186.609139][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.611566][T10503] RIP: 0033:0x7f84e1d8eec9 [ 186.613385][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.619586][T10503] RSP: 002b:00007f84e2be9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 186.622230][T10503] RAX: ffffffffffffffda RBX: 00007f84e1fe5fa0 RCX: 00007f84e1d8eec9 [ 186.625031][T10503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.628378][T10503] RBP: 00007f84e1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.631589][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.634827][T10503] R13: 00007f84e1fe6038 R14: 00007f84e1fe5fa0 R15: 00007ffdd3344858 [ 186.638132][T10503] [ 186.640360][T10503] Kernel Offset: disabled [ 186.642359][T10503] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:55:41 Registers: info registers vcpu 0 CPU#0 RAX=000000000033cdb3 RBX=0000000000000000 RCX=ffffffff8b4fbf49 RDX=0000000000000000 RSI=ffffffff8d9b85f6 RDI=ffffffff8bcffd40 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff905f4d90 R15=0000000000000000 RIP=ffffffff8b4faa8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f84e1fe7dac CR3=0000000039433000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd3344d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd3344d66 00007ffdd3344d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1fb74a8 00007f84e1fb74a0 00007f84e1fb7498 00007f84e1fb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e2b1d100 00007f84e1fb7460 00007f84e1fb7478 00007f84e1fb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1fb74b8 00007f84e1fb74b0 00007f84e1fb74a8 00007f84e1fb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000003b3d1b RBX=0000000000000001 RCX=ffffffff8b4fbf49 RDX=0000000000000000 RSI=ffffffff8d9b85f6 RDI=ffffffff8bcffd40 RBP=ffffed1003b52490 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801da92480 R14=ffffffff905f4d90 R15=0000000000000000 RIP=ffffffff8b4faa8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000004fb78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b2e81c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b2e8346 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b2e8346 00007ffc0b2e834c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2aefe1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff851f8030 RDI=ffffffff9ab4eae0 RBP=ffffffff9ab4eaa0 RSP=ffffc900239c7448 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3569dae R15=dffffc0000000000 RIP=ffffffff851f8057 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f84e2be96c0 ffffffff 00c00000 GS =0000 ffff8880d7076000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f84e2be8f98 CR3=0000000039433000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e2be8f90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd3344d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd3344d66 00007ffdd3344d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84e1e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000845e9794 RBX=00007f5002b15720 RCX=ffffffff845e9794 RDX=0000000000001794 RSI=ffffffff845e9794 RDI=0000000000000004 RBP=ffffffff845e9794 RSP=00007ffed8f28fe8 R8 =00007f5001fd0000 R9 =00007f5001fd2000 R10=00000000845e9798 R11=0000000000000004 R12=0000000000000004 R13=0000000000000000 R14=ffffffff845e9794 R15=00000000000665e2 RIP=00007f5001c4da20 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558b662500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558b226808 CR3=0000000012095000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306d616574 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed8f29476 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed8f29476 00007ffed8f2947c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5002b1d100 00007f5001fb7460 00007f5001fb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5001fb74b8 00007f5001fb74b0 00007f5001fb74a8 00007f5001fb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000