last executing test programs: 4.959698925s ago: executing program 0 (id=916): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0x94, {0x94, 0x11, "cb9c96e14bd5e3a86e0129bc180ca8ea4639b0800a9a2766dc516292f28e5cc785cdd020d2ff966202b21cfb6cecdffc2d370abe18b79a02660f1bf9911e83d0a71bd1312fe3d88d04caea4b9e64c1f10a41167d6f6c0377800be65773f46c8021a905c52e62d6b16c4a5e039f9756ff4e2417ed8b29d472ef3e729bcf2799f29b4e26bce39d84e1175ab0382c91527d0484"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x31, 0x78, "ea0278ae5cc83fa6ed216bc5682001b846b9798a12bfa0f9d00b4182a2c85f5e97229188d31316ff867c02c64f0687b5da9b9dfe6d87923f48f93bf5b45ed5cb5caca20578a115c23100a0abcdac394a60d772478208b2e6868645163f3b28e4a0abfbe26139506978d7a2fa9324068e5639769b830bf93c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x200, 0x1, 0xfffffffe, 0x6, 0x8, 0x5, 0x8, 0x9, 0x1, 0x401, 0x8, 0x7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x91}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) close(r2) 2.770326861s ago: executing program 3 (id=968): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='measure #', 0x9) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.954277907s ago: executing program 0 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c9c0)={0xb0, 0x0, 0xffffff0000000000, [{{0x3, 0x2, 0x0, 0x5, 0x7, 0x400, {0x4, 0x3, 0x2, 0xf, 0x129ad5b, 0x5, 0x10001, 0x4df7, 0xffff, 0x6000, 0xd, r2, r3, 0x56a, 0x4}}, {0x6, 0xfffffffffffffff1, 0x5, 0x4, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='test\n', 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 1.953970766s ago: executing program 3 (id=973): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x40, 0x5, 0x22, {0x22, 0x3, "ccfd3b620c2a865da0ec81d3d4dd38e3ab4cdefaf576bec45a6aeb2137035de0"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x16, 0x90, "866c72862cce0e5c6b44bb904b3c5a460218b201e84238857f9ce940b2b43c531f2999cf474d82c7cc4084062309ae9a69f42f5563a52baa9b6f76ff1302ab1fd1376afa07858d6246216cdaa2efd0965c0517a1fe60d442654e55c84332dccc6a93f1f42f8d121632a315de259ec3f561ab2ba8c23409b9a72cd19185d0794571767a49c410fa3ed0705dca757969bd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x43ad}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.790730438s ago: executing program 0 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x200, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.699902992s ago: executing program 0 (id=979): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x5, [0x6, 0x200, 0x8, 0x2, 0x4]}, &(0x7f0000000100)=0x12) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x40, 0x7800, 0x2, 0x8, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x99, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x1b, 0x2f, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@delqdisc={0x1d0, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7}, {0xffe0, 0x6}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffb7a9, 0xfffff801, 0x8, 0x7, 0x5}, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x19, 0xa, 0x2, 0x1, {0x2, 0x4, 0x22d, 0x7ff, 0x7, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_netem={{0xa}, {0x124, 0x2, {{0x9, 0x9, 0xffffffff, 0x401, 0x0, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0xbbd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x1}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x5, 0x2000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa00, 0xfffffffe, 0x4, 0xbc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x4, 0x10c5, 0x80000000, 0x23a9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x2, 0x4, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1, 0x400, 0x101}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd, 0x1ff, 0xc6, 0x1}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff7, 0x2, 0x2, 0x2, 0x5, 0x9}}, @TCA_NETEM_DELAY_DIST={0x11, 0x2, "5d9cea832d887e905f8520cc9d"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffff50}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x5}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa982}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x1d0}}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r6, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1.639082023s ago: executing program 0 (id=980): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='del 1-', 0x6) 1.59070848s ago: executing program 0 (id=981): r0 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0x94, {0x94, 0x11, "cb9c96e14bd5e3a86e0129bc180ca8ea4639b0800a9a2766dc516292f28e5cc785cdd020d2ff966202b21cfb6cecdffc2d370abe18b79a02660f1bf9911e83d0a71bd1312fe3d88d04caea4b9e64c1f10a41167d6f6c0377800be65773f46c8021a905c52e62d6b16c4a5e039f9756ff4e2417ed8b29d472ef3e729bcf2799f29b4e26bce39d84e1175ab0382c91527d0484"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x31, 0x81, "ea0278ae5cc83fa6ed216bc5682001b846b9798a12bfa0f9d00b4182a2c85f5e97229188d31316ff867c02c64f0687b5da9b9dfe6d87923f48f93bf5b45ed5cb5caca20578a115c23100a0abcdac394a60d772478208b2e6868645163f3b28e4a0abfbe26139506978d7a2fa9324068e5639769b830bf93cbdbf1a37aac326d13e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x200, 0x1, 0xfffffffe, 0x6, 0x8, 0x5, 0x8, 0x9, 0x1, 0x401, 0x8, 0x7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x91}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) close(r2) 299.980727ms ago: executing program 2 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001600)='usbip-vudc.0', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r2, &(0x7f0000001900)='3\n', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r4 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/47, 0x2f}], 0x8) 297.710304ms ago: executing program 1 (id=997): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x5, [0x6, 0x200, 0x8, 0x2, 0x4]}, &(0x7f0000000100)=0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x40, 0x7800, 0x2, 0x8, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x99, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x1b, 0x2f, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@delqdisc={0x1d0, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7}, {0xffe0, 0x6}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffb7a9, 0xfffff801, 0x8, 0x7, 0x5}, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x19, 0xa, 0x2, 0x1, {0x2, 0x4, 0x22d, 0x7ff, 0x7, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_netem={{0xa}, {0x124, 0x2, {{0x9, 0x9, 0xffffffff, 0x401, 0x0, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0xbbd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x1}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x5, 0x2000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa00, 0xfffffffe, 0x4, 0xbc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x4, 0x10c5, 0x80000000, 0x23a9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x2, 0x4, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1, 0x400, 0x101}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd, 0x1ff, 0xc6, 0x1}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff7, 0x2, 0x2, 0x2, 0x5, 0x9}}, @TCA_NETEM_DELAY_DIST={0x11, 0x2, "5d9cea832d887e905f8520cc9d"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffff50}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x5}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa982}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x1d0}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 263.919235ms ago: executing program 2 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x20000004) 258.962266ms ago: executing program 1 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x20000004) 200.513809ms ago: executing program 1 (id=993): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 200.194192ms ago: executing program 2 (id=994): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)}, 0x10) 199.297527ms ago: executing program 1 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x3, 0x6, {{0x34, 0x4, 0x1, 0x1, 0xd0, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@lsrr={0x83, 0xb, 0x59, [@empty, @multicast1]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x6, 0x8, "80fe333f7eaf"}]}, @generic={0x4, 0xc, "ac25a35e5e4766bd3167"}, @generic={0x7, 0xe, "58e5cc7ffcab8f2ca83c54c7"}, @generic={0x0, 0x2}, @cipso={0x86, 0x1d, 0x0, [{0x6, 0x12, "242243cfbd7bc490216e201feacdebd6"}, {0x2, 0x2}, {0x5, 0x3, "b4"}]}, @timestamp={0x44, 0x14, 0xd1, 0x0, 0xc, [0x56, 0xffff, 0x6, 0x4e9b]}, @timestamp_addr={0x44, 0x34, 0xa, 0x1, 0xd, [{@multicast1, 0x7fffffff}, {@private=0xa010102, 0xc33}, {@rand_addr=0x64010102, 0x5b43}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x8}]}, @rr={0x7, 0x1f, 0x9a, [@empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @empty, @multicast2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000500)={@loopback, 0x0}, &(0x7f0000000540)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xd}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000037c0)={0x0, @multicast2, @dev}, &(0x7f0000003800)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003840)={'vcan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="de82166334fda370febd005ec2378467a5bfb0c17b690dac7ba25fc1675313042769e70fd6af672cbf5cb26f386c878c8320cdecfbf6c0aee943950289450b5754d47702672f23e587ed6a9420dbbbc1543931ab3613350d5da8924180f47ec59a53279f1278d64587d70d4dc9a09b8afda0db3c5f69dc7f04aa2430ac56be150ce3c16f9efdc92ed93117d654c5f219a5b507d50c51925ba2629afbbe12a691e545c1ace6441dba8ca63ad4aa9aef6a01ae613727c975bffce7f241455da2e4c933c440a86fe57d89c025dde92392bef95422ddf4002b0f1e27fc7ecd740a572700589ab0", 0xe5}], 0x1, &(0x7f0000000600)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x3, [{@multicast2, 0x100}]}, @cipso={0x86, 0x19, 0x0, [{0x6, 0x2}, {0x1, 0xd, "29e003362c66ab96c74c9f"}, {0x0, 0x4, "f179"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6fe41df2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast1}}}], 0x118}}, {{&(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="b5c5d2f0c927153ff1c804d6fe2fd8a65e6db8f8ea722961b6d68a9181621662bce92928c9674ef795ec6556132dcdaf0cb949c7e64e20422c4671bef3be7c4634342c40e84d45536ac147e7f7abaa2f2f8e38fe66812320b01d3a2ac0e2460cd2a916dbbf019cccadf1f9becf64bcc137cd8431bf7ab224b0de3960250503ee58a7b9097e7cc744d54974f683ab8eb3ff69df2d0627e0d26eefe6195845e1aef35c334fc6eb0b694ab44a76526a25e1ded1e91c3cadc3f7e852d61508343bcd93315f10e6776b56e0af44f49fb64243dfb03115c869708ea55ad06958cc3a44c3bbbca3da5072ec927a1d02c0fc4f537586b2f52a8792871f3546d606404c38367aa6ce98e748963268796694f8e576234a1c6da0bf83e24af0a46b81a54fc6907231fd2f0fc858f08dd8ab3a4901458ba3950043477120f901282567d6c0514fe2a5593fd3872e116b0fcdfb2ec10468bff69f60c7fd46d9e9f79dde19e08e659d13150a9ffe655f2ddd38da7a31a2d5c4f426afad34f155843f78ae403d339860ee40db15bf7d78a00da753e430015e7683203f086e9efb29b1b40fd4b7318005e9e6bbae8c339c5a930e7c74b033b2da80d0095ff524e20ba4e9095e61bb7950d1379a19ac6111dd1a8a1ff95ac476de950b7bde419cb5691a63b122b4f69bc88f85a220c5c83b8e32e97bc6d7aee40b6c6ae7dc469dd71d2e771e20b8cca97fc498c4c96b6c2c2861bc52c4cef6eb83110ff5136006a6d76dac453e9679370947033072326d2d8e7bd0e63a3aea2336ab51cdeabf20a668c3cc28434cff30b92fa7b862a82153d44aecc304d4e16fc50c8a9979726b71acb2d36e699376c93bb0bfc77506ef0edec0f5cdb6c03ffc1e96fe883300b53ce9be5f9af0ddee8cfeecbe8dfea5caddbbdb52a67bf049ede127d58ffb57ebc4e95e0066cf2b64358bb66c6e845bd95f4310a960b903e6bfb8035067decf3d51d78553f0c38083ddc9b63fd1a52ba215dcc9734dc61f9988fe8190b24d3e5d3f4a3e3f8f23e8b26c30e71388422316e52a609d0f40d5b35f7bf595ad82f334b821a78a2e5d75ca0a185b3356f2469051229481e24401969d929b004588c054bf033d69f18e9161284a94f786616941b6eacc0d6288827529691f106ca101d8c7fdf7d49d217efda5e0d986a240d6519bc36b83c97897c285e2ae592e4ae9c75799aa502d103d0b5b1593a571e110a4d4eb1247cb53dfb7c0e5a9507e4b5750dfb349419a1c7d50b12d1bc50d518cf0421494f9a89c36699121ff3005ff1e9ecb06e0432966cd3f2c923b66a816296856d3b65a2e27d394232b2b17336bcb35c356e1efc341476883d3ce0def66432f6a2e0f5fce22655547d2ef66ed06968127545578b48afab7f9773e5ca671cab7fe4df29124bf254628ef50271cf6e01e4097df6f71c67156b84861b0433ab68f8f4b3024ffdf9028a58ae864934c16299cf60b9edf43ff7be76eca361af2e9d132d98d5d634b520840be560fd6c7fd1eaad04e7e2f177e1d3eb8efc231326a3c66fae6739a74cf6209124bc163e8deae6fca3b89a381444041497a73229ab716f0b856fd15fb07298e6c2489b8d2e8b67c4197588661cd17c108e9d9c3b1b885df5b84307bd507a1865d7fe9b0cd72335905e1bd3cf59b6623c0c8b793ad20727316f3a448fe473d05391dd4e01a819b1509a725c3c29e9dcfd3ebf28d395ad913834baea68480448719d15741f01c7f18298daa50ac10f25434907d6493d0743d03a7fbf4a4d4e799204ccd58fd5d8fa15d4d59614f245ad1de5bbeac77d0406251413f2875ac310fbb99c98f13770766149f20e780626ef15bcaba09bfee2c05656a5964ffdd887969ff7c835950291c70191d804bfebf3928d2de52f9dee3490b6d5dbe05cbdd98344d9c452466225e0d8515d0103fd97b6446a2b4a9782fd0034b1dcea518e2d3dd49bffbe3ee761a2d22478ba75d30742264abea22149ea1494efae008d7f680e119567bc5898082d72f2251fad2ac8160e42129861f0ef6c489aa36d3b72048d21af7027d75780b1d6720b58609a35298de8fb6f0bf558728507279a3795e8378246a3ee58a3a8d5dc5e6cb23d43271a3dfdfa9cde15f94ad2235468616a1145365967c83319c7a1e46d161c2e4017ad587f4e38266b46258b77b8035e34786fcf68f2a77ad94974440048170de3004dec98830d342e23676746e434dd6aa40e1c2b8c0a04116815ade1ee45fb7d6ffb8c5a5ee4e104e760f023edda59226af8a4feed533181e7b287adf24305c8326fae591d6fbb3f56e8e3284f46138e46463c9d9eecbd31525dca12a61ce20ff509d1464b2e5b42050a88a8593deb09eeeca323b72e841be6eefc77e125f2516ae70a34a88e501f07b684aca96205ddcbfcd21470907348ed8324e2d2c7b14f96ac2453d91b9946531611b7c1cbcaf970f772297619ea73b971f80d7d446ba3b676c52e81bf76a6995128e41bbd2c45b8ff18c8fad1b003a65766b5f2ae1ec3962dc0bf8439df5a4b26ec28fcfa8ffe93a97a9670f651d7bbd0a7d7b3e1ed2b31b72ef83c98451c118e2f3e68802b5654ad6360b794d535b0bc320c41b533f2adfd05f264b90157e192955d2c3b94651f64b861ea34cddb1abc468648e010063050a48fc65a6747a70bc67a354d1616c3fc0c374a54e031a0a0daf190557cf29402f1ed399ddf8d87a8f36062a3e569a68501a97bd020fd1916ac50bd1919de9c6c0a9843451cc8ac9db4d8683dd3cbe4afc0ce96eee085ffe007e1bdad6fad841056fd6f182370592234f1cd3445de7d7b38241208030ae9253a9a7237aec23ba74230db9753d4884e61960dfac3c3b1c80c2ceada578ec40c534df3b8e7f46bc7312b616cc29f7feee21a233e202340b7dd40d76b81501c2198e7715d84b528219266058cebba5a30e7cf61eb87d552c40dc2d6853bedf1eddc9be095d34270829b6dfd85aace8092ef8664a31f5537e4466dbaa7d2c909c60fab695a7bac0267d406aa0090040096340e99972498760fb9a7373133a0bbeb0c1e9143301664b0948f448e83039917e7cf267db010f0b02e8de73daf37a3259ae1b65e11456532ef609e6ce5086e093a8a2b163b84c7315af7eb84c7047b244bb71b6df6163b8308ee3e522e476ee3085727c13ba5e3c0adf5da1c4975de2334db0eaf443ae85eb183427d5a081561dd93c86d318dbeeecaf96f5fa34ab374c642bbf05c2ebabc0ca4bb3ae95f3558b8fcb00986a3e13debb1bbe4b5a01294c1c4d1d47db6cf751ba65c70a1e4763de96ab34c4705bc9a4b088ff000a52c424e6513dd9f3e4c27e28f725d2bc54f1ad1e8491ceb9c41895b963fbd995115e748d2348366a5830893daa799f22dffe5fefc95f9490f557d0e54fcfbe85be4a87de7e086c2565f9507f63f7c5d452eeb1974aebc9994b3d8114c2419b433cfdb1439746a606e1e06a29336e88580da3882b71d4ab320ba1d94c9955c47ffc4a49f837a4b2c6be57bc1215242cc7e0031ae80f42184ca0237ca43331e83def849d4a8aca4b3dfb8e5add783a999c12ed193a77ee418eacffa083d53737a631ec1b29aace24bdde9c9771e3e7c184fe8785d2e709fcc40ce8b8a9393abc0e93f3d3a66aa1fa70ab4483b4ac9ef651ed247969ef917b2fb2207a93dbe5f8b8b09a0d85b92520e82ad0edb169fe3c488e38dd85c6fd7a141065854cd69d9dbefd1a268c5a13111475382a4bd03024d193ff7f16c1054b6b76d50497b4638fa1e4f88dd704a2abe7120e7e303e1e8b6329cdc77efc3685c251a6d67ee7b6b6a5f330b770a1a820f0a175f361ed1ced834c6af5188dc83bfa84264746d3b09b19f56d9d3fc1198f6c5888e243eda35604895f8a3291a9ed3a27baf22f86285e378691c503fc43437e97aa6c71ed1b6222ce6d008fb166cb5b48fd763851522e13cf6b9c34a0590297e1daf5a969a388bd87c595bedb0d877130f44b1529305708364342f689c76a607d3d769b8f5c1f32fcc47845227d5c59adb623e0567035533321722953e3d529b59e38aebab0867a0fce73490b8d3efcd6177f83a76333e880db9c0945cbbf66c0d02fd0008533911388aaf18df37d4f2853f346091b8b26fbe01ccd3408e1b762c7906a5ebe81d605c28e380bc91206b1b7be062f3f28dd274db319bbd5296a84d0cecea3b9730b96a04f3c026f61e508372f575cc7b2fee2c1f71961c433942b0e63f1bf73d37a17545c679e55aa84c3296e3213ab28144f113d093afdce5334773955274bfcb12638280fefc6dc8fbb18be2fb2895f9e1f80b098d6586cac3cb226aaa7daab3bb758970e084b8b0e39bb278eff2d238408d1bdcc638ed445c8ec06603a55f8380c502b5238a1130b84fae2aacd779a0eb79a0e030f6ebb57e807939b1bef0d47414c5bea189472812855210ee6f156b8662bf81d182f4a1c986e88636a68e7316f05ad84134290cc4e787a690bbc94c684e62f149288632994ab08a0e4ff6c784b74490b5eaf3893d8dc5a6b4f577732701248485e2cb23dd69e6927046c87b71605d3791635ea39cf0a1da56b40787025bc2da94f1384d71d3282ff87819845fe61d8b91eac2fa96a2fa517544e14b773a42b610a493cbd934259ad509e0f52e2168f3a3fc0bf20f90af5200bddf0f0e1dda9cab70fb67e05af7aab4ca00cab0815993e601152f1d283f8fa5b43f3a0a95597582798b8e4961bff14315532ade493034f7551c8fbffba1c8d89998d7ecad15428967c1fabb5f16bcfc52f9a697bb82abf69dbca03555e40e5ee4a03ddb3dd81fb431b2c545b1dff8bb26eafde7efcead32b9fa07b11e484b294c2711e75b2fc364c7da20d09c51409c62aef918afd2c5292efe111dfb78c5e111953a099bd9e9def33d8ed32118b151bd6d18600e45b53d69c2889545621108b37540892b30f1845d69baa0affdb1d2a9ed18bf9cfaeba9ccd63ad2a11798c1b12a794261a2e0cc1ff649270fa9a04d6d625197a02dd362b1c50ed74514889ec797c36a0952f4a10692a44f1c8d899da7fe98790301aab3919f5bfb53406d773fe9eef6d002efa0294a57e003674b86d2ebe0af405bd36aed21c7c0d054d12c05a6a81be229c3e4d44a4fd73391043d8854ab3b6f3e143ef720cdbc473201d5824cdbae92c500017d58806b67b08e8bf9985bb354aec8947cf29650f83acffb9d5f3b8af3bc84d62ffe469681845be078cfb7e6ea10534d760882707eb6fe1816038a62b99003cc04d46ca187353a74e1e6195edf4a8b63162b50143531f7207728e38b1f902748221b9c1f7dcba8b797369c40e4037225ad5a3ea238569e6dabe65567229e4414200f6f75833b25d8c888af2096f268dbcfa933c6fcb66ea5b4e08962bc24b3b62dd5a278bdd794df57430923c730f4680fba3f94e0e6d44da52f00e44bdda69bebef013f237348e580c449d5046b94da7323d0fada54ec90782e531af2067c780eb8fafbe67b39eb1cfac4c984d5cdcff0d659e07695a1b20c9762c915fbd9953a6f1118b3e1f6dbd65d0d5d0836bb1126ac75b89af76632bb23a2e10cca31321ffb3c0800f97dd55eb82d74bb38b3e9e2afbe42484a5ce57950ac550c2ca9bb1f70b3d1972bb34101ccab45f56586a188b519b28595942f152fb14736ef0ebd15eb6101f43dfd1e0b6500c349bcd2d13239ccaa57b8e4e4eeb91de770a77849ffde3acaf378e2f10ca50f0549f7b76302411d6afe491c376df2824b0a70c16c195e7c54d", 0x1000}, {&(0x7f0000003000)="c02cd4097a871621d78b66ae7dadee04854a7cc3454b8b541c1ca6adf92a2c98e2acddeadef2777736216b1b256bc450a100a06ab87f527b4d0bc5ae0a48aa25a02c9c60348c5792e3d0d9040106f09f172d064ce2c8986d4529525666e002349b0a50065dab0af7b34865a6469216926b5c543ed5ff7d6d45b8e8c792fe67e391e9", 0x82}], 0x3, &(0x7f0000003100)=[@ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x80, [@multicast1, @rand_addr=0x64010100, @empty, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xb1, 0x1, 0x9, [{@multicast1, 0xb}, {@multicast1, 0xb}]}, @rr={0x7, 0xb, 0x9c, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x2, [{@broadcast, 0x5}, {@rand_addr=0x64010100, 0xf3e2}]}, @rr={0x7, 0x1b, 0x6f, [@loopback, @empty, @multicast2, @remote, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x24, 0xdb, 0x0, 0x1, [0xe9, 0x3, 0x101, 0x4, 0x5, 0x7, 0x4, 0x0]}, @noop, @rr={0x7, 0x7, 0x46, [@rand_addr=0x64010101]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x7, "f10f1968e9"}, {0x2, 0xa, "8b1995c43715c9b5"}]}]}}}], 0xd0}}, {{&(0x7f0000003200)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000003300)=[{&(0x7f0000003240)="25a083c8966de0c86f66771b6d509b94833c75ee3928796dd328e40d068e57c5f1e6e8e12fd87850e847cacfda2075ca595ffecf5e0dd0a74e7829b3a7374c6169db07fc1bb68e956dcb17a6", 0x4c}, {&(0x7f00000032c0)='s', 0x1}], 0x2}}, {{&(0x7f0000003340)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000003600)=[{&(0x7f0000003380)="5928ddb18888b8922ce50fb9c24a17f047ef653d5e5353292c5afdd0d2e1bff4c715121783a3457d31deebe78409442e9c2e87b66ef93f4e9e455b9922cfaa0fbcdf5bf1da1a86875308cd86957b010de20d6cb701c29121d1a73857ef8e3a63de8904c9a8e09a3f2f0150a350e6f5cea45ca695305af2f23248b23d4f38a19f45d6ec7512d07e", 0x87}, {&(0x7f0000003440)="0c058e4b462c360e961ccb906c06896375f7873bae4ceb21bf80c4a2cbc16f3f19b224d70a99306631d2df1806689b02d84ffaa72e7853157aef40181884002f30efcf27c40a1a383e4710dbacebf298d02c862b6c7da1c5a515f0246312aacd6789a6b5b9a721c4cf8e191e7226568946dbeb01535958b32f8013f784e158f26ba6a4a5adbfcb8197fbe550060c3475", 0x90}, {&(0x7f0000003500)="c80325ae1abe1677ee67ac07030ede8028520095581d2a48c4bc22f53e0f4a477c41ff2860f51b82b192e6220d45a3970bffd70748e43edc14b160d1bc084d02d5cbe63507f805d51ad2226a4223c1adcbcafedaccb34fcd34bf7d16a41769fcae246d453a87c0039e41e74198ceb5ba4bd1e430923478ad4b38f6c9401c1083fc3070ec3dd8ca7fdb97c44e8cb488bbbaf5267a05e50e588df2a3ed62e9f39132e67f7a789bab43111e79115ecbfacfc2619db64b7a5c6995ff2dcdc072f0e1de402df33ed9a21b34b832760b2d94649bf52221fd1e8491119302c1a472eb18f2da5a2be95b3d6fe28dd8", 0xeb}], 0x3}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003640)="90cf46ed57f980caadc565f8fafd699693a7acb16f7436384ed70450c73db62163247e79cce61f3ce0d6bbaa452ae2912e089174d4b8dd3188399c5d0d4cba96796ee3a4ca472b491611cec9f877d3935800e5f96dc695a6dd46e076cb9719c612d59b4556592943ff7c6812f5a36dc09214ede337f312b2f15b028c9c7340dcc19cccf1", 0x84}, {&(0x7f0000003700)="ece02c9c32f184655b8ec48b840e9233d28bff96c6b18c840a137e58f4d98c10fc686b86e4a317f51ed4af7fce8deef3cc22a53e063ad987008adc210ecc05360451", 0x42}], 0x2, &(0x7f0000003880)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0xf, 0x49, [@loopback, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x54, 0xf, 0x1, 0x8, [{@loopback, 0x6}, {@private=0xa010100, 0x2}, {@broadcast, 0x2}, {@loopback, 0x10}, {@remote}, {@loopback, 0x10}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x101}, {@local, 0x4}, {@rand_addr=0x64010102, 0x5}, {@local, 0x6}]}, @generic={0x89, 0xe, "fb4d52346cbc8a6bb9046d56"}, @generic={0x88, 0x7, "e229808a86"}, @generic={0x88, 0x2}, @generic={0x86, 0xc, "89e083927c66f69befde"}, @lsrr={0x83, 0xb, 0xaa, [@multicast1, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}], 0x150}}, {{&(0x7f0000003a00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003a40)="8c68516f5e7587ae738ac7a96dba8e0c62c7bd92bab71a9e52d30b20c12b915192165a3bf65fd8ac5a7dcc530095193d2432dabe96bec9dc5a15aa3494fd37ffaadea9dc53aa52cc5fe0a09d21af216a1bab4a8587f830afd95449ccd10562e3817f61ed83b45db07bd530fb24a566c642423f2cf7cb41c2226ef05583dcecd8d3d25db05148f3105c0957a3ae75edb9185473af1505eec76ea09afe67691ca0e48e5908f000d71a639108035d1d87fffa8268e4da6667dd140f0b02e5603e7c1dcc9ef10710eafba85c9a4f63699712a41bd3f1747c1a07fcb5c69c04b2", 0xde}, {&(0x7f0000003b40)="0886323425e6f857ed823eafb7f983b72513e4c89508bd73b758d15423800f8f3a832a5c48b64b546677509772878c148eb8ce66caafaaf0f86cec7630e8b80d3c3dd4df6ca28405e0651af1615f8dc7ea83431ae457fbdd507e985f97ff509f2a21cd6b580346cb1048dda94728b4ef313733016e695710ae3d8212e1e26c07c4ad5ed9b71a139b6a5cf3bc1a05a8b3715cef9a5c318bd96f17043a1709c2b49bdc4e75f78161f86064dbb8a3b2664c9b76d32d80b6e213ab85", 0xba}, {&(0x7f0000003c00)="f16adc788d9b982553f8a26295d572252e7ee4f4f3afabe50f5aa7d6b99b50ee4cc0acfee2cf573d9f5a97d766aa3434650fc2a1572116", 0x37}], 0x3}}, {{&(0x7f0000003c80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000003cc0)="a4bf3c0bf8680a563016bfa82d79fe4a3ee8fc325c0e321bca7479fe2312d5c27a39e93a87200661499874d4f1fee95c65baba6196f24fa00ec45f9c1e914e29fa729990ceba3bd50891620a061bd93607f6ac8971172aa40a0e9d140acad1855b17c055841ae6471a5102e86b3fefa325b51c41a196a8891ddde2d858aa3ca0ee4534c4576815f3566ce7a68b1e1e4e6c98bf0dad534e73088c08a5c2179a53542ef58f5a730d3ed4dc77a394f8d9f0a35d44f577c97d804d15c3b449a606f3a10d", 0xc2}, {&(0x7f0000003dc0)="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", 0xfd}, {&(0x7f0000003ec0)="7938e7d85dc400365b88e960a9d1c486d7cbaedd7097a9dfea81e07ebc215a357dd496946ffa47dc", 0x28}], 0x3}}], 0x7, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r12 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r12, &(0x7f0000000380)={0xa, 0x6e20, 0x0, @empty, 0x5}, 0x1c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x0) 127.633996ms ago: executing program 1 (id=996): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 127.232708ms ago: executing program 2 (id=998): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800573ad2e5ab8c181100000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000089b5bc72850000008200000085000000500000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1aef658c054e0eb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) fcntl$setlease(r6, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x7, 0x0, 0xfffff00c}]}, 0x8) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) msgctl$IPC_RMID(0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}}) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x12d8) 126.759777ms ago: executing program 1 (id=999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x200, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000002c0), 0x0, 0x4, &(0x7f00000000c0)={0x11, 0x15, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 126.351577ms ago: executing program 3 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="08009e0007380000"], 0x5c}, 0x1, 0x0, 0x0, 0x24014804}, 0x9590f6cc3aa711f2) 111.146255ms ago: executing program 2 (id=1001): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04f34120", @ANYRESDEC], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Midi1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 60.289784ms ago: executing program 2 (id=1002): r0 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_DISALLOCATE(r1, 0x4bfb) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='8086 10d3 ffffffff ffffffff 0 0 8\x00', 0x22) 60.206222ms ago: executing program 3 (id=1003): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x20000004) 574.445µs ago: executing program 3 (id=1004): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x5, [0x6, 0x200, 0x8, 0x2, 0x4]}, &(0x7f0000000100)=0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x40, 0x7800, 0x2, 0x8, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x99, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x1b, 0x2f, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@delqdisc={0x1d0, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7}, {0xffe0, 0x6}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffb7a9, 0xfffff801, 0x8, 0x7, 0x5}, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x19, 0xa, 0x2, 0x1, {0x2, 0x4, 0x22d, 0x7ff, 0x7, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_netem={{0xa}, {0x124, 0x2, {{0x9, 0x9, 0xffffffff, 0x401, 0x0, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0xbbd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x1}}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x5, 0x2000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa00, 0xfffffffe, 0x4, 0xbc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x4, 0x10c5, 0x80000000, 0x23a9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x2, 0x4, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1, 0x400, 0x101}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd, 0x1ff, 0xc6, 0x1}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff7, 0x2, 0x2, 0x2, 0x5, 0x9}}, @TCA_NETEM_DELAY_DIST={0x11, 0x2, "5d9cea832d887e905f8520cc9d"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffff50}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x5}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa982}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x1d0}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 0s ago: executing program 3 (id=1005): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000011660800000000000018"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987f", 0xbb}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x385, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='measure #', 0x9) bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): .029471][ T5745] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 91.032642][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.037764][ T5745] usb 6-1: config 0 descriptor?? [ 91.165970][ T6954] veth3: entered allmulticast mode [ 91.249597][ T34] usb 6-1: USB disconnect, device number 16 [ 91.740158][ T6982] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 91.742736][ T6982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.749353][ T6982] vhci_hcd vhci_hcd.0: Device attached [ 91.768980][ T6982] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 91.866265][ T6987] overlayfs: failed to resolve './file0': -2 [ 91.880458][ T41] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 92.030281][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 92.035550][ T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.038920][ T41] usb 8-1: config 0 has no interfaces? [ 92.041221][ T5510] usb 38-1: SetAddress Request (2) to port 0 [ 92.043708][ T5510] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 92.051547][ T41] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 92.054656][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.057374][ T41] usb 8-1: Product: syz [ 92.058864][ T41] usb 8-1: Manufacturer: syz [ 92.061508][ T41] usb 8-1: SerialNumber: syz [ 92.065319][ T41] usb 8-1: config 0 descriptor?? [ 92.308459][ T6983] vhci_hcd: connection reset by peer [ 92.313852][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 92.316432][ T5815] vhci_hcd vhci_hcd.0: release socket [ 92.320713][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 92.871011][ T6996] fuse: Bad value for 'fd' [ 93.082926][ T7005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7005 comm=syz.1.430 [ 94.040366][ T7005] veth3: entered allmulticast mode [ 94.202731][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 94.202743][ T42] audit: type=1400 audit(1785592087.437:542): avc: denied { unmount } for pid=5748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.240588][ T7016] mmap: syz.2.433 (7016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.424896][ T7022] fuse: Bad value for 'fd' [ 94.481027][ T61] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 94.634877][ T61] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.644027][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.648185][ T61] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 94.652867][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.664708][ T61] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 94.665923][ T34] usb 8-1: USB disconnect, device number 15 [ 94.668301][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.714860][ T61] opticon 7-1:1.0: opticon converter detected [ 94.725001][ T7031] ISOFS: Unable to identify CD-ROM format. [ 94.743236][ T61] usb 7-1: opticon converter now attached to ttyUSB0 [ 94.774166][ T7029] net2280 0000:00:02.0: unbind [ 94.826582][ T7032] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 94.829457][ T42] audit: type=1400 audit(1785592088.057:543): avc: denied { listen } for pid=7028 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.829690][ T7032] net2280 0000:00:02.0: irq 33, pci mem ffffc9000d020000, chip rev 0000 [ 94.838591][ T7032] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 94.898854][ T7039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7039 comm=syz.0.443 [ 94.950997][ T29] usb 7-1: USB disconnect, device number 14 [ 95.021367][ T29] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 95.027219][ T7047] fuse: Unknown parameter '0x0000000000000003' [ 95.030781][ T29] opticon 7-1:1.0: device disconnected [ 95.312527][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 95.480271][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 95.484100][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.487413][ T34] usb 8-1: config 0 has no interfaces? [ 95.490918][ T34] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 95.497901][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.501327][ T34] usb 8-1: Product: syz [ 95.503044][ T34] usb 8-1: Manufacturer: syz [ 95.505648][ T34] usb 8-1: SerialNumber: syz [ 95.509938][ T34] usb 8-1: config 0 descriptor?? [ 95.722777][ T7053] ISOFS: Unable to identify CD-ROM format. [ 95.734723][ T7056] iou-wrk-7055 (7056): drop_caches: 0 [ 95.749420][ T7039] veth3: entered allmulticast mode [ 95.815108][ T7066] fuse: Unknown parameter '0x0000000000000003' [ 96.048830][ T42] audit: type=1400 audit(1785592089.277:544): avc: denied { create } for pid=7069 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.062337][ T42] audit: type=1400 audit(1785592089.287:545): avc: denied { getopt } for pid=7069 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.121026][ T7078] ======================================================= [ 96.121026][ T7078] WARNING: The mand mount option has been deprecated and [ 96.121026][ T7078] and is ignored by this kernel. Remove the mand [ 96.121026][ T7078] option from the mount to silence this warning. [ 96.121026][ T7078] ======================================================= [ 96.954127][ T7087] ISOFS: Unable to identify CD-ROM format. [ 97.002232][ T42] audit: type=1400 audit(1785592090.237:546): avc: denied { getopt } for pid=7088 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.131792][ T5510] usb 38-1: device descriptor read/8, error -110 [ 97.203811][ T42] audit: type=1800 audit(1785592090.417:547): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.0.459" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 97.205131][ T7081] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 97.211893][ T42] audit: type=1400 audit(1785592090.437:548): avc: denied { firmware_load } for pid=7076 comm="syz.0.459" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 97.224254][ T7091] syzkaller0: entered promiscuous mode [ 97.228192][ T7091] syzkaller0: entered allmulticast mode [ 97.231422][ T7081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 97.237202][ T7081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 97.237232][ T42] audit: type=1400 audit(1785592090.467:549): avc: denied { firmware_load } for pid=7076 comm="syz.0.459" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.347325][ T7101] fuse: Unknown parameter '0x0000000000000003' [ 97.397486][ T7104] __nla_validate_parse: 1 callbacks suppressed [ 97.397500][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 97.500301][ T7110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7110 comm=syz.0.467 [ 97.524909][ T42] audit: type=1400 audit(1785592090.757:550): avc: denied { read write } for pid=7098 comm="syz.2.465" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.528771][ T7111] random: crng reseeded on system resumption [ 97.538465][ T5510] usb usb38-port1: attempt power cycle [ 97.542238][ T42] audit: type=1400 audit(1785592090.757:551): avc: denied { ioctl open } for pid=7098 comm="syz.2.465" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.071161][ T29] usb 8-1: USB disconnect, device number 16 [ 98.110088][ T7115] kernel read not supported for file /eth0 (pid: 7115 comm: syz.3.468) [ 98.138277][ T5510] usb usb38-port1: unable to enumerate USB device [ 98.242229][ T7119] ISOFS: Unable to identify CD-ROM format. [ 98.359624][ T7110] veth3: entered allmulticast mode [ 98.500488][ T7135] fuse: Unknown parameter '0x0000000000000003' [ 98.645594][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 98.780671][ T5843] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 98.952635][ T5843] usb 7-1: Using ep0 maxpacket: 16 [ 98.961732][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.966226][ T5843] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.972146][ T5843] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 98.975750][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.978858][ T5843] usb 7-1: Product: syz [ 98.980764][ T5843] usb 7-1: Manufacturer: syz [ 98.982599][ T5843] usb 7-1: SerialNumber: syz [ 98.991275][ T5843] usb 7-1: config 0 descriptor?? [ 99.144944][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 99.600550][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 99.600853][ T42] audit: type=1400 audit(1785592092.827:563): avc: denied { getopt } for pid=7148 comm="syz.3.481" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.622960][ T7154] Set syz0 is full, maxelem 0 reached [ 99.654969][ T7156] ISOFS: Unable to identify CD-ROM format. [ 99.715977][ T7159] fuse: Unknown parameter '0x0000000000000003' [ 99.760259][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 99.765254][ T7163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7163 comm=syz.0.486 [ 99.889707][ T7163] veth3: entered allmulticast mode [ 100.252883][ T42] audit: type=1400 audit(1785592093.487:564): avc: denied { read write } for pid=7169 comm="syz.0.488" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.274817][ T42] audit: type=1400 audit(1785592093.497:565): avc: denied { open } for pid=7169 comm="syz.0.488" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.299041][ T7172] fuse: Bad value for 'fd' [ 100.340303][ T5743] Bluetooth: hci3: command 0x0405 tx timeout [ 100.654185][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.656616][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.700586][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.705815][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.702046][ T5843] usb 7-1: USB disconnect, device number 15 [ 101.759131][ T7190] /dev/nullb0: Can't open blockdev [ 101.842472][ T42] audit: type=1400 audit(1785592095.077:566): avc: denied { read } for pid=7193 comm="syz.2.495" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.850548][ T42] audit: type=1400 audit(1785592095.077:567): avc: denied { open } for pid=7193 comm="syz.2.495" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.868074][ T42] audit: type=1400 audit(1785592095.097:568): avc: denied { ioctl } for pid=7193 comm="syz.2.495" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.980332][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.983047][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.985866][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.988443][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.056471][ T7197] fuse: Unknown parameter '0x0000000000000003' [ 102.225594][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 102.230637][ T7199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7199 comm=syz.1.497 [ 102.236573][ T42] audit: type=1400 audit(1785592095.467:569): avc: denied { ioctl } for pid=7200 comm="syz.3.498" path="/133/my_tracefs/events/sched/sched_switch/enable" dev="tracefs" ino=19680823 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 102.247363][ T42] audit: type=1400 audit(1785592095.467:570): avc: denied { create } for pid=7200 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.254518][ T42] audit: type=1400 audit(1785592095.467:571): avc: denied { connect } for pid=7200 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.289076][ T42] audit: type=1400 audit(1785592095.517:572): avc: denied { setopt } for pid=7200 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.368706][ T7199] veth3: entered allmulticast mode [ 102.500512][ T5746] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.504531][ T5746] Bluetooth: hci2: Injecting HCI hardware error event [ 102.508430][ T5746] Bluetooth: hci2: hardware error 0x00 [ 102.769658][ T7211] binder_alloc: 7209: binder_alloc_buf, no vma [ 102.800451][ T6308] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 102.843387][ T7215] /dev/nullb0: Can't open blockdev [ 102.950601][ T6308] usb 6-1: Using ep0 maxpacket: 16 [ 102.956998][ T6308] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.963656][ T6308] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.972077][ T6308] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 102.978129][ T6308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.981124][ T6308] usb 6-1: Product: syz [ 102.982487][ T6308] usb 6-1: Manufacturer: syz [ 102.983923][ T6308] usb 6-1: SerialNumber: syz [ 102.993790][ T6308] usb 6-1: config 0 descriptor?? [ 103.194404][ T7221] fuse: Unknown parameter 'fd0x0000000000000003' [ 103.348234][ T7229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7229 comm=syz.0.508 [ 104.008208][ T7241] fuse: Bad value for 'group_id' [ 104.012550][ T7241] fuse: Bad value for 'group_id' [ 104.019431][ T7229] veth3: entered allmulticast mode [ 104.066503][ T7243] ISOFS: Unable to identify CD-ROM format. [ 104.163312][ T7247] fuse: Unknown parameter 'fd0x0000000000000003' [ 104.402103][ T7264] fuse: Bad value for 'group_id' [ 104.404258][ T7264] fuse: Bad value for 'group_id' [ 104.447494][ T7266] ISOFS: Unable to identify CD-ROM format. [ 104.580791][ T61] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 104.586181][ T5746] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 104.715695][ T7271] bond1 (unregistering): Released all slaves [ 104.740250][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 104.743680][ T61] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.747102][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.750661][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.753827][ T61] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.756111][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 104.756122][ T42] audit: type=1400 audit(1785592097.987:594): avc: denied { bind } for pid=7267 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.758183][ T61] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.762831][ T42] audit: type=1400 audit(1785592097.987:595): avc: denied { name_bind } for pid=7267 comm="syz.3.524" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 104.766828][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.772848][ T42] audit: type=1400 audit(1785592097.987:596): avc: denied { node_bind } for pid=7267 comm="syz.3.524" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 104.987197][ T61] usb 7-1: GET_CAPABILITIES returned 0 [ 104.989164][ T61] usbtmc 7-1:16.0: can't read capabilities [ 105.104278][ T7275] fuse: Unknown parameter 'fd0x0000000000000003' [ 105.144202][ T7277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7277 comm=syz.0.526 [ 105.196262][ T6308] usb 7-1: USB disconnect, device number 16 [ 105.245375][ T7277] veth3: entered allmulticast mode [ 105.502136][ T42] audit: type=1400 audit(1785592098.737:597): avc: denied { write } for pid=7281 comm="syz.3.528" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.573584][ T5843] usb 6-1: USB disconnect, device number 17 [ 105.601319][ T7286] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.809885][ T7294] fuse: Bad value for 'group_id' [ 105.813769][ T7294] fuse: Bad value for 'group_id' [ 105.846416][ T42] audit: type=1400 audit(1785592099.077:598): avc: denied { read write } for pid=7295 comm="syz.0.533" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 105.861290][ T42] audit: type=1400 audit(1785592099.077:599): avc: denied { open } for pid=7295 comm="syz.0.533" path="/147/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 105.870955][ T42] audit: type=1400 audit(1785592099.087:600): avc: denied { ioctl } for pid=7295 comm="syz.0.533" path="/147/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 105.894596][ T42] audit: type=1400 audit(1785592099.107:601): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.909232][ T42] audit: type=1400 audit(1785592099.137:602): avc: denied { create } for pid=7301 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.909836][ T42] audit: type=1400 audit(1785592099.137:603): avc: denied { ioctl } for pid=7301 comm="syz.0.536" path="socket:[13764]" dev="sockfs" ino=13764 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.100276][ T5888] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 106.217546][ T7306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7306 comm=syz.0.537 [ 106.254543][ T5888] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.258197][ T5888] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 106.263448][ T5888] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.269888][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.274299][ T5888] usb 7-1: Product: syz [ 106.275697][ T5888] usb 7-1: Manufacturer: syz [ 106.277786][ T5888] usb 7-1: SerialNumber: syz [ 106.294203][ T5888] cdc_mbim 7-1:1.0: skipping garbage [ 106.429315][ T7306] veth3: entered allmulticast mode [ 106.491638][ T7298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.540391][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 106.645298][ T7311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'. [ 106.690333][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 106.698605][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.702136][ T29] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.706646][ T29] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.718025][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.721245][ T29] usb 8-1: Product: syz [ 106.722606][ T29] usb 8-1: Manufacturer: syz [ 106.724105][ T29] usb 8-1: SerialNumber: syz [ 106.727083][ T29] usb 8-1: config 0 descriptor?? [ 107.100543][ T7298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.103892][ T5888] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 107.107690][ T5888] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 107.112939][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 107.115991][ T5888] wwan wwan0: port wwan0mbim0 attached [ 107.135588][ T5888] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 1e:c6:ed:87:3a:76 [ 107.136641][ T7334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7334 comm=syz.0.547 [ 107.240026][ T7334] veth3: entered allmulticast mode [ 107.445487][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 107.460817][ T7347] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7347 comm=syz.0.557 [ 107.477239][ T5450] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 107.569622][ T7347] veth3: entered allmulticast mode [ 107.660368][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.663246][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.665939][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.668439][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.670608][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.672744][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.674831][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.677007][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.679208][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.681520][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.684071][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.686153][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.688237][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 107.690321][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 107.692950][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 107.896221][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.550'. [ 108.629690][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 108.648943][ T7389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7389 comm=syz.1.560 [ 108.796591][ T7389] veth3: entered allmulticast mode [ 108.869249][ T24] usb 7-1: USB disconnect, device number 17 [ 108.878005][ T24] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 108.907697][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 109.009054][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 109.062727][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 109.077075][ T7413] loop4: detected capacity change from 0 to 7 [ 109.095944][ T7413] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 109.103800][ T7413] loop4: partition table partially beyond EOD, truncated [ 109.107466][ T7413] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 109.119205][ T7413] SELinux: syz.2.567 (7413) wrote to checkreqprot. This is no longer supported. [ 109.148918][ T5742] udevd[5742]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 109.319017][ T24] usb 8-1: USB disconnect, device number 17 [ 109.620069][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 109.626847][ T7447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7447 comm=syz.3.573 [ 109.722888][ T7447] veth3: entered allmulticast mode [ 109.990256][ T5746] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 109.993937][ T5746] CPU: 2 UID: 0 PID: 5746 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 109.993955][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.993963][ T5746] Workqueue: hci3 hci_rx_work [ 109.993991][ T5746] Call Trace: [ 109.994004][ T5746] [ 109.994010][ T5746] dump_stack_lvl+0x100/0x190 [ 109.994028][ T5746] sysfs_warn_dup.cold+0x1c/0x28 [ 109.994046][ T5746] sysfs_create_dir_ns+0x24b/0x2b0 [ 109.994066][ T5746] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 109.994085][ T5746] ? find_held_lock+0x2b/0x80 [ 109.994097][ T5746] ? kobject_add_internal+0x25f/0x930 [ 109.994115][ T5746] ? kobject_add_internal+0x25f/0x930 [ 109.994134][ T5746] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.994152][ T5746] kobject_add_internal+0x2c8/0x930 [ 109.994173][ T5746] kobject_add+0x16a/0x1e0 [ 109.994189][ T5746] ? __pfx_kobject_add+0x10/0x10 [ 109.994205][ T5746] ? class_to_subsys+0x10f/0x150 [ 109.994224][ T5746] ? kobject_put+0xb9/0x640 [ 109.994241][ T5746] ? _raw_spin_unlock+0x28/0x50 [ 109.994256][ T5746] device_add+0x294/0x1970 [ 109.994271][ T5746] ? __pfx_dev_set_name+0x10/0x10 [ 109.994282][ T5746] ? __pfx_device_add+0x10/0x10 [ 109.994298][ T5746] ? mgmt_send_event_skb+0x2fb/0x460 [ 109.994315][ T5746] hci_conn_add_sysfs+0x1a3/0x260 [ 109.994329][ T5746] le_conn_complete_evt+0x11eb/0x1f60 [ 109.994346][ T5746] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 109.994358][ T5746] ? hci_event_packet+0x186/0xcd0 [ 109.994373][ T5746] hci_le_conn_complete_evt+0x23c/0x3a0 [ 109.994386][ T5746] ? skb_pull_data+0x15f/0x1e0 [ 109.994404][ T5746] hci_le_meta_evt+0x34a/0x5f0 [ 109.994424][ T5746] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 109.994440][ T5746] hci_event_packet+0x51c/0xcd0 [ 109.994453][ T5746] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 109.994467][ T5746] ? __pfx_hci_event_packet+0x10/0x10 [ 109.994483][ T5746] ? kcov_remote_start+0x384/0x670 [ 109.994497][ T5746] ? lockdep_hardirqs_on+0x78/0x100 [ 109.994515][ T5746] hci_rx_work+0x451/0xfc0 [ 109.994531][ T5746] process_one_work+0xa23/0x1940 [ 109.994549][ T5746] ? __pfx_process_one_work+0x10/0x10 [ 109.994565][ T5746] ? __pfx_hci_rx_work+0x10/0x10 [ 109.994578][ T5746] worker_thread+0x5ef/0xe50 [ 109.994595][ T5746] ? kthread+0x13a/0x450 [ 109.994605][ T5746] ? __pfx_worker_thread+0x10/0x10 [ 109.994616][ T5746] kthread+0x370/0x450 [ 109.994626][ T5746] ? __pfx_kthread+0x10/0x10 [ 109.994638][ T5746] ret_from_fork+0x72b/0xd50 [ 109.994654][ T5746] ? __pfx_ret_from_fork+0x10/0x10 [ 109.994669][ T5746] ? rcu_is_watching+0x12/0xc0 [ 109.994686][ T5746] ? __switch_to+0x800/0x10f0 [ 109.994697][ T5746] ? __pfx_kthread+0x10/0x10 [ 109.994708][ T5746] ret_from_fork_asm+0x1a/0x30 [ 109.994731][ T5746] [ 109.994748][ T5746] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 110.046465][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 110.046483][ T42] audit: type=1400 audit(1785592103.277:633): avc: denied { write } for pid=7453 comm="syz.3.576" name="functions" dev="configfs" ino=9354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.048019][ T5746] Bluetooth: hci3: failed to register connection device [ 110.055801][ T7454] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 110.057027][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 110.064115][ T7454] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 110.069921][ T42] audit: type=1400 audit(1785592103.277:634): avc: denied { create } for pid=7453 comm="syz.3.576" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 110.076222][ T7454] udc dummy_udc.0: failed to start g1: -22 [ 110.079608][ T42] audit: type=1400 audit(1785592103.287:635): avc: denied { write } for pid=7453 comm="syz.3.576" name="c.1" dev="configfs" ino=9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.090380][ T7454] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 110.091498][ T42] audit: type=1400 audit(1785592103.287:636): avc: denied { write } for pid=7453 comm="syz.3.576" name="c.1" dev="configfs" ino=9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.101959][ T7454] UDC core: g1: couldn't find an available UDC or it's busy [ 110.694553][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 110.699704][ T7471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7471 comm=syz.2.583 [ 110.886159][ T7471] veth9: entered allmulticast mode [ 110.978877][ T7468] syz.3.582 (7468): drop_caches: 2 [ 111.148145][ T7480] fuse: Unknown parameter 'grou00000000000000000000' [ 111.235967][ T7485] netlink: 164 bytes leftover after parsing attributes in process `syz.2.589'. [ 111.417737][ T7493] syz.2.592 (7493): drop_caches: 2 [ 111.516416][ T7497] syz.2.594 (7497): drop_caches: 2 [ 111.565724][ T7499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7499 comm=syz.2.595 [ 111.654178][ T7499] veth9: entered allmulticast mode [ 111.863683][ T7502] fuse: Unknown parameter 'grou00000000000000000000' [ 111.951748][ T7506] __nla_validate_parse: 1 callbacks suppressed [ 111.951767][ T7506] netlink: 164 bytes leftover after parsing attributes in process `syz.2.598'. [ 112.222970][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 112.246044][ T7521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7521 comm=syz.3.604 [ 112.397742][ T7521] veth3: entered allmulticast mode [ 112.402757][ T7521] bond1: (slave veth3): Enslaving as an active interface with an up link [ 112.408653][ T7523] bond1 (unregistering): (slave veth3): Releasing backup interface [ 112.413931][ T7523] bond1 (unregistering): Released all slaves [ 112.556688][ T7525] syz.3.605 (7525): drop_caches: 2 [ 112.597468][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 112.602157][ T7529] fuse: Unknown parameter 'grou00000000000000000000' [ 112.616845][ T7527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7527 comm=syz.2.613 [ 112.809777][ T7527] veth9: entered allmulticast mode [ 112.815007][ T7527] bond1: (slave veth9): Enslaving as an active interface with an up link [ 112.826117][ T7533] bond1 (unregistering): (slave veth9): Releasing backup interface [ 112.838240][ T7533] bond1 (unregistering): Released all slaves [ 112.845977][ T42] audit: type=1400 audit(1785592106.077:637): avc: denied { mount } for pid=7534 comm="syz.3.608" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.003392][ T7542] UDC core: g1: couldn't find an available UDC or it's busy [ 113.090327][ T61] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 113.148635][ T7552] fuse: Unknown parameter 'group_i00000000000000000000' [ 113.255240][ T61] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.269222][ T61] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.286394][ T61] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 113.290633][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.294081][ T61] usb 8-1: Product: syz [ 113.296020][ T61] usb 8-1: Manufacturer: syz [ 113.300292][ T61] usb 8-1: SerialNumber: syz [ 113.314937][ T61] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 113.322686][ T61] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 113.367648][ T7565] hid-generic 0003:0627:0001.0001: pid 7565 passed too short report [ 113.447725][ T7570] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 113.453308][ T7570] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 113.456912][ T7570] udc dummy_udc.0: failed to start g1: -22 [ 113.459460][ T7570] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 113.468042][ T7570] UDC core: g1: couldn't find an available UDC or it's busy [ 113.515940][ T42] audit: type=1400 audit(1785592106.747:638): avc: denied { create } for pid=7534 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.524320][ T42] audit: type=1400 audit(1785592106.747:639): avc: denied { write } for pid=7534 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.533752][ T42] audit: type=1400 audit(1785592106.767:640): avc: denied { create } for pid=7572 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.535850][ T7573] netlink: 164 bytes leftover after parsing attributes in process `syz.0.624'. [ 113.545276][ T42] audit: type=1400 audit(1785592106.767:641): avc: denied { write } for pid=7572 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.590612][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'. [ 113.600898][ T5829] usb 8-1: USB disconnect, device number 18 [ 113.608908][ T42] audit: type=1400 audit(1785592106.837:642): avc: denied { unmount } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.626678][ T5829] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 113.631469][ T5829] kl5kusb105 8-1:1.0: device disconnected [ 113.643106][ T7581] fuse: Unknown parameter 'group_i00000000000000000000' [ 113.741380][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'. [ 113.744406][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'. [ 113.752970][ T7587] hid-generic 0003:0627:0001.0001: pid 7587 passed too short report [ 113.856039][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 113.864804][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 113.880496][ T7597] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 113.882775][ T7597] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 113.898681][ T7597] udc dummy_udc.0: failed to start g1: -22 [ 113.901123][ T7597] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 113.909120][ T7597] UDC core: g1: couldn't find an available UDC or it's busy [ 113.915156][ T7595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7595 comm=syz.0.633 [ 113.976997][ T7602] fuse: Unknown parameter 'group_i00000000000000000000' [ 114.093906][ T7595] veth3: entered allmulticast mode [ 114.098497][ T7595] bond4: (slave veth3): Enslaving as an active interface with an up link [ 114.108250][ T7603] bond4 (unregistering): (slave veth3): Releasing backup interface [ 114.116732][ T7603] bond4 (unregistering): Released all slaves [ 114.147289][ T7607] FAULT_INJECTION: forcing a failure. [ 114.147289][ T7607] name failslab, interval 1, probability 0, space 0, times 1 [ 114.155176][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.1.637 Not tainted syzkaller #0 PREEMPT(full) [ 114.155203][ T7607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.155213][ T7607] Call Trace: [ 114.155220][ T7607] [ 114.155227][ T7607] dump_stack_lvl+0x100/0x190 [ 114.155258][ T7607] should_fail_ex.cold+0x5/0xa [ 114.155282][ T7607] should_failslab+0xc2/0x120 [ 114.155325][ T7607] __kmalloc_noprof+0xfc/0x820 [ 114.155347][ T7607] ? p9pdu_readf+0x1226/0x1d90 [ 114.155373][ T7607] p9pdu_readf+0x1226/0x1d90 [ 114.155390][ T7607] ? is_bpf_text_address+0x94/0x1a0 [ 114.155415][ T7607] ? kernel_text_address+0x8d/0x100 [ 114.155445][ T7607] ? __pfx_p9pdu_readf+0x10/0x10 [ 114.155460][ T7607] ? arch_stack_walk+0xa6/0xf0 [ 114.155495][ T7607] ? _parse_integer_limit+0x1ac/0x220 [ 114.155522][ T7607] p9dirent_read+0x109/0x260 [ 114.155558][ T7607] ? __pfx_p9dirent_read+0x10/0x10 [ 114.155582][ T7607] ? __lock_acquire+0x49f/0x1a40 [ 114.155610][ T7607] v9fs_dir_readdir_dotl+0x3e4/0x790 [ 114.155639][ T7607] ? __pfx_v9fs_dir_readdir_dotl+0x10/0x10 [ 114.155681][ T7607] ? __pfx_down_read_killable+0x10/0x10 [ 114.155706][ T7607] ? avc_policy_seqno+0x9/0x20 [ 114.155726][ T7607] ? selinux_file_permission+0x8f/0x6d0 [ 114.155760][ T7607] iterate_dir+0x296/0xae0 [ 114.155791][ T7607] __x64_sys_getdents64+0x13b/0x2c0 [ 114.155819][ T7607] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 114.155842][ T7607] ? fput+0x79/0x100 [ 114.155862][ T7607] ? __pfx_filldir64+0x10/0x10 [ 114.155896][ T7607] do_syscall_64+0x115/0x870 [ 114.155917][ T7607] ? clear_bhb_loop+0x40/0x90 [ 114.155935][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.155952][ T7607] RIP: 0033:0x7f284b99e019 [ 114.155967][ T7607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.155983][ T7607] RSP: 002b:00007f284c928028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 114.156001][ T7607] RAX: ffffffffffffffda RBX: 00007f284bc25fa0 RCX: 00007f284b99e019 [ 114.156013][ T7607] RDX: 000000000000100c RSI: 0000200000001f80 RDI: 0000000000000003 [ 114.156023][ T7607] RBP: 00007f284c928090 R08: 0000000000000000 R09: 0000000000000000 [ 114.156034][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.156044][ T7607] R13: 00007f284bc26038 R14: 00007f284bc25fa0 R15: 00007fff10f128d8 [ 114.156069][ T7607] [ 114.294752][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 114.417892][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 114.423489][ T7621] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 114.425895][ T7621] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 114.428552][ T7621] udc dummy_udc.0: failed to start g1: -22 [ 114.430625][ T7621] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 114.434241][ T7621] UDC core: g1: couldn't find an available UDC or it's busy [ 114.475371][ T7624] fuse: Unknown parameter 'group_id00000000000000000000' [ 114.736784][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 114.757157][ T7641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7641 comm=syz.3.651 [ 114.767462][ T7644] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 114.770929][ T7644] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 114.775142][ T7644] udc dummy_udc.0: failed to start g1: -22 [ 114.777679][ T7644] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 114.783182][ T7644] UDC core: g1: couldn't find an available UDC or it's busy [ 114.835126][ T7647] fuse: Unknown parameter 'group_id00000000000000000000' [ 114.934593][ T7641] veth5: entered allmulticast mode [ 114.939345][ T7641] bond1: (slave veth5): Enslaving as an active interface with an up link [ 114.946045][ T7645] bond1 (unregistering): (slave veth5): Releasing backup interface [ 114.952720][ T7645] bond1 (unregistering): Released all slaves [ 115.097197][ T7653] /dev/nullb0: Can't open blockdev [ 115.130448][ T5888] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 115.294928][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.295178][ T7663] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 115.299542][ T5888] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.304614][ T7663] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 115.308923][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.314102][ T7663] udc dummy_udc.0: failed to start g1: -22 [ 115.314121][ T7663] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 115.316090][ T7663] UDC core: g1: couldn't find an available UDC or it's busy [ 115.320506][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.324814][ T5888] usb 6-1: Product: syz [ 115.326588][ T5888] usb 6-1: Manufacturer: syz [ 115.328233][ T5888] usb 6-1: SerialNumber: syz [ 115.334117][ T5888] cdc_mbim 6-1:1.0: skipping garbage [ 115.421902][ T7665] hid-generic 0003:0627:0001.0001: pid 7665 passed too short report [ 115.506205][ T7671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.664'. [ 115.513646][ T7671] use of bytesused == 0 is deprecated and will be removed in the future, [ 115.517157][ T7671] use the actual size instead. [ 115.540476][ T7649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.573650][ T5746] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 115.691353][ T7685] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 115.693710][ T7685] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 115.696343][ T7685] udc dummy_udc.0: failed to start g1: -22 [ 115.698209][ T7685] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 115.703196][ T7685] UDC core: g1: couldn't find an available UDC or it's busy [ 115.753710][ T7687] FAULT_INJECTION: forcing a failure. [ 115.753710][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 115.758940][ T7687] CPU: 2 UID: 0 PID: 7687 Comm: syz.0.675 Not tainted syzkaller #0 PREEMPT(full) [ 115.758964][ T7687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.758975][ T7687] Call Trace: [ 115.758983][ T7687] [ 115.758991][ T7687] dump_stack_lvl+0x100/0x190 [ 115.759017][ T7687] should_fail_ex.cold+0x5/0xa [ 115.759032][ T7687] should_failslab+0xc2/0x120 [ 115.759053][ T7687] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 115.759075][ T7687] ? __d_alloc+0x35/0xa50 [ 115.759099][ T7687] __d_alloc+0x35/0xa50 [ 115.759117][ T7687] d_alloc_parallel+0x105/0x14b0 [ 115.759146][ T7687] ? find_held_lock+0x2b/0x80 [ 115.759161][ T7687] ? __d_lookup+0x25c/0x4a0 [ 115.759185][ T7687] ? __pfx_d_alloc_parallel+0x10/0x10 [ 115.759206][ T7687] ? __d_lookup+0x266/0x4a0 [ 115.759232][ T7687] ? d_lookup+0xe7/0x190 [ 115.759258][ T7687] proc_fill_cache+0x225/0x3a0 [ 115.759276][ T7687] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 115.759291][ T7687] ? __pfx_proc_fill_cache+0x10/0x10 [ 115.759310][ T7687] ? proc_pid_readdir+0x395/0xa50 [ 115.759332][ T7687] proc_pid_readdir+0x581/0xa50 [ 115.759356][ T7687] ? __pfx_proc_pid_readdir+0x10/0x10 [ 115.759371][ T7687] ? find_held_lock+0x2b/0x80 [ 115.759380][ T7687] ? __pfx_down_read_killable+0x10/0x10 [ 115.759401][ T7687] ? avc_policy_seqno+0x9/0x20 [ 115.759420][ T7687] ? selinux_file_permission+0x8f/0x6d0 [ 115.759449][ T7687] proc_root_readdir+0xa1/0xd0 [ 115.759466][ T7687] iterate_dir+0x296/0xae0 [ 115.759492][ T7687] __x64_sys_getdents+0x13b/0x2b0 [ 115.759518][ T7687] ? __pfx___x64_sys_getdents+0x10/0x10 [ 115.759542][ T7687] ? fput+0x79/0x100 [ 115.759557][ T7687] ? __pfx_filldir+0x10/0x10 [ 115.759589][ T7687] do_syscall_64+0x115/0x870 [ 115.759608][ T7687] ? clear_bhb_loop+0x40/0x90 [ 115.759628][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.759641][ T7687] RIP: 0033:0x7fa31379e019 [ 115.759655][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.759671][ T7687] RSP: 002b:00007fa3146a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 115.759688][ T7687] RAX: ffffffffffffffda RBX: 00007fa313a25fa0 RCX: 00007fa31379e019 [ 115.759699][ T7687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.759709][ T7687] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.759717][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.759724][ T7687] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 115.759747][ T7687] [ 115.933278][ T7689] hid-generic 0003:0627:0001.0001: pid 7689 passed too short report [ 115.972727][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 115.972746][ T42] audit: type=1400 audit(1785592109.207:645): avc: denied { watch } for pid=7697 comm="syz.3.679" path="/193" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.156520][ T7649] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.159546][ T5888] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 116.163088][ T5888] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 116.166739][ T5888] wwan wwan0: port wwan0mbim0 attached [ 116.175836][ T5888] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ea:c7:44:65:08:9f [ 116.264641][ T42] audit: type=1400 audit(1785592109.497:646): avc: denied { write } for pid=7708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.322488][ T42] audit: type=1400 audit(1785592109.557:647): avc: denied { write } for pid=7711 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.394787][ T5450] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 116.441353][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 116.452824][ T42] audit: type=1400 audit(1785592109.677:648): avc: denied { append } for pid=7719 comm="syz.0.685" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.467299][ T7717] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 116.469637][ T7717] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 116.470590][ T42] audit: type=1400 audit(1785592109.687:649): avc: denied { map } for pid=7719 comm="syz.0.685" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.479351][ T7717] udc dummy_udc.0: failed to start g1: -22 [ 116.482627][ T42] audit: type=1400 audit(1785592109.687:650): avc: denied { write execute } for pid=7719 comm="syz.0.685" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.483519][ T7717] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 116.501492][ T7717] UDC core: g1: couldn't find an available UDC or it's busy [ 116.502419][ T42] audit: type=1400 audit(1785592109.737:651): avc: denied { write } for pid=7721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.569175][ T42] audit: type=1400 audit(1785592109.787:652): avc: denied { write } for pid=7726 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.595466][ T7725] hid-generic 0003:0627:0001.0001: pid 7725 passed too short report [ 116.656378][ T5746] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 116.699014][ T7739] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.702221][ T42] audit: type=1400 audit(1785592109.937:653): avc: denied { unlink } for pid=7738 comm="syz.0.690" name="#1" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.714349][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 116.716494][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 116.718504][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 116.720527][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 116.722703][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 116.724848][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 116.726990][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 116.729098][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 116.944594][ T7751] FAULT_INJECTION: forcing a failure. [ 116.944594][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 116.949303][ T7751] CPU: 0 UID: 0 PID: 7751 Comm: syz.0.695 Not tainted syzkaller #0 PREEMPT(full) [ 116.949321][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.949328][ T7751] Call Trace: [ 116.949332][ T7751] [ 116.949336][ T7751] dump_stack_lvl+0x100/0x190 [ 116.949355][ T7751] should_fail_ex.cold+0x5/0xa [ 116.949371][ T7751] should_failslab+0xc2/0x120 [ 116.949386][ T7751] kmem_cache_alloc_noprof+0x91/0x6a0 [ 116.949400][ T7751] ? vm_area_dup+0x27/0x8e0 [ 116.949418][ T7751] vm_area_dup+0x27/0x8e0 [ 116.949436][ T7751] __split_vma+0x18c/0xda0 [ 116.949449][ T7751] ? __pfx___split_vma+0x10/0x10 [ 116.949467][ T7751] vma_modify+0x12ad/0x25c0 [ 116.949482][ T7751] ? __pfx_vma_modify+0x10/0x10 [ 116.949494][ T7751] ? find_held_lock+0x2b/0x80 [ 116.949505][ T7751] ? is_bpf_text_address+0x8a/0x1a0 [ 116.949525][ T7751] vma_modify_flags+0x257/0x3d0 [ 116.949537][ T7751] ? __pfx_vma_modify_flags+0x10/0x10 [ 116.949548][ T7751] ? avc_has_perm_noaudit+0x145/0x3b0 [ 116.949630][ T7751] ? __pfx_ima_file_mprotect+0x10/0x10 [ 116.949643][ T7751] ? __pfx__kstrtoull+0x10/0x10 [ 116.949657][ T7751] mprotect_fixup+0x27a/0xe30 [ 116.949678][ T7751] ? __pfx_mprotect_fixup+0x10/0x10 [ 116.949703][ T7751] ? __pfx_mas_prev+0x10/0x10 [ 116.949722][ T7751] do_mprotect_pkey+0xa4b/0xef0 [ 116.949737][ T7751] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 116.949746][ T7751] ? ksys_write+0x190/0x250 [ 116.949768][ T7751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.949783][ T7751] ? __fget_files+0x21f/0x3d0 [ 116.949799][ T7751] ? __pfx_ksys_write+0x10/0x10 [ 116.949819][ T7751] __x64_sys_mprotect+0x78/0xc0 [ 116.949828][ T7751] ? lockdep_hardirqs_on+0x78/0x100 [ 116.949841][ T7751] do_syscall_64+0x115/0x870 [ 116.949855][ T7751] ? clear_bhb_loop+0x40/0x90 [ 116.949868][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.949880][ T7751] RIP: 0033:0x7fa31379e019 [ 116.949890][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.949901][ T7751] RSP: 002b:00007fa3146a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 116.949913][ T7751] RAX: ffffffffffffffda RBX: 00007fa313a25fa0 RCX: 00007fa31379e019 [ 116.949920][ T7751] RDX: 0000000000000003 RSI: 0000000000800000 RDI: 0000200000000000 [ 116.949926][ T7751] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 116.949933][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.949939][ T7751] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 116.949955][ T7751] [ 117.084161][ T42] audit: type=1400 audit(1785592110.317:654): avc: denied { shutdown } for pid=7754 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.514545][ T7765] fuse: Bad value for 'user_id' [ 117.516248][ T7765] fuse: Bad value for 'user_id' [ 117.581585][ T7770] ISOFS: Unable to identify CD-ROM format. [ 117.594938][ T7767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.702'. [ 117.703618][ T7780] FAULT_INJECTION: forcing a failure. [ 117.703618][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.707813][ T7780] CPU: 3 UID: 0 PID: 7780 Comm: syz.0.708 Not tainted syzkaller #0 PREEMPT(full) [ 117.707828][ T7780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.707835][ T7780] Call Trace: [ 117.707840][ T7780] [ 117.707845][ T7780] dump_stack_lvl+0x100/0x190 [ 117.707877][ T7780] should_fail_ex.cold+0x5/0xa [ 117.707892][ T7780] _copy_from_user+0x2e/0xd0 [ 117.707909][ T7780] copy_msghdr_from_user+0x9f/0x4c0 [ 117.707922][ T7780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.707939][ T7780] ___sys_sendmsg+0x106/0x1e0 [ 117.707950][ T7780] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.707960][ T7780] ? __lock_acquire+0x49f/0x1a40 [ 117.707973][ T7780] ? get_pid_task+0x106/0x250 [ 117.707998][ T7780] __sys_sendmsg+0x160/0x210 [ 117.708012][ T7780] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.708033][ T7780] do_syscall_64+0x115/0x870 [ 117.708046][ T7780] ? clear_bhb_loop+0x40/0x90 [ 117.708059][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.708071][ T7780] RIP: 0033:0x7fa31379e019 [ 117.708080][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.708091][ T7780] RSP: 002b:00007fa3146a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.708103][ T7780] RAX: ffffffffffffffda RBX: 00007fa313a25fa0 RCX: 00007fa31379e019 [ 117.708110][ T7780] RDX: 0000000010008000 RSI: 0000200000007e40 RDI: 0000000000000004 [ 117.708116][ T7780] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 117.708122][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.708128][ T7780] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 117.708142][ T7780] [ 117.771829][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.709'. [ 117.801866][ T7783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7783 comm=syz.2.709 [ 117.864024][ T7792] netlink: 72 bytes leftover after parsing attributes in process `syz.0.712'. [ 117.885257][ T34] usb 6-1: USB disconnect, device number 18 [ 117.892068][ T34] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 117.917694][ T7796] random: crng reseeded on system resumption [ 117.945215][ T7783] veth11: entered allmulticast mode [ 117.950815][ T7783] bond1: (slave veth11): Enslaving as an active interface with an up link [ 117.959151][ T7793] bond1 (unregistering): (slave veth11): Releasing backup interface [ 117.963901][ T7793] bond1 (unregistering): Released all slaves [ 117.976163][ T7798] netlink: 164 bytes leftover after parsing attributes in process `syz.0.714'. [ 118.114821][ T34] wwan wwan0: port wwan0mbim0 disconnected [ 118.151501][ T7814] FAULT_INJECTION: forcing a failure. [ 118.151501][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.158192][ T7814] CPU: 3 UID: 0 PID: 7814 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT(full) [ 118.158216][ T7814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.158236][ T7814] Call Trace: [ 118.158255][ T7814] [ 118.158263][ T7814] dump_stack_lvl+0x100/0x190 [ 118.158366][ T7814] should_fail_ex.cold+0x5/0xa [ 118.158388][ T7814] _copy_to_user+0x32/0xd0 [ 118.158426][ T7814] simple_read_from_buffer+0xcb/0x170 [ 118.158455][ T7814] proc_fail_nth_read+0x1af/0x230 [ 118.158481][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.158505][ T7814] ? rw_verify_area+0xce/0x6d0 [ 118.158537][ T7814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.158561][ T7814] vfs_read+0x1e4/0xb40 [ 118.158591][ T7814] ? __pfx_vfs_read+0x10/0x10 [ 118.158616][ T7814] ? __fget_files+0x215/0x3d0 [ 118.158639][ T7814] ? __fget_files+0x21f/0x3d0 [ 118.158665][ T7814] ksys_read+0x12a/0x250 [ 118.158689][ T7814] ? __pfx_ksys_read+0x10/0x10 [ 118.158719][ T7814] do_syscall_64+0x115/0x870 [ 118.158767][ T7814] ? clear_bhb_loop+0x40/0x90 [ 118.158789][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.158807][ T7814] RIP: 0033:0x7fa31375e84e [ 118.158824][ T7814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.158841][ T7814] RSP: 002b:00007fa3146a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.158859][ T7814] RAX: ffffffffffffffda RBX: 00007fa3146a56c0 RCX: 00007fa31375e84e [ 118.158871][ T7814] RDX: 000000000000000f RSI: 00007fa3146a50a0 RDI: 0000000000000003 [ 118.158882][ T7814] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.158893][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.158903][ T7814] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 118.158928][ T7814] [ 118.355496][ T7835] netlink: 164 bytes leftover after parsing attributes in process `syz.1.723'. [ 118.360294][ T61] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 118.383621][ T7840] netlink: 72 bytes leftover after parsing attributes in process `syz.1.724'. [ 118.475526][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 118.501114][ T7849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7849 comm=syz.1.726 [ 118.510566][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 118.515107][ T61] usb 7-1: unable to get BOS descriptor or descriptor too short [ 118.519418][ T61] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 118.523461][ T61] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 118.526927][ T61] usb 7-1: config 14 has no interface number 0 [ 118.529526][ T61] usb 7-1: config 14 has no interface number 1 [ 118.532528][ T61] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 118.536997][ T61] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 118.542171][ T61] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 118.546803][ T61] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 118.551881][ T61] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 118.556491][ T61] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.564353][ T61] usb 7-1: config 14 interface 57 has no altsetting 0 [ 118.567277][ T61] usb 7-1: config 14 interface 228 has no altsetting 0 [ 118.572942][ T61] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 118.576826][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.580150][ T61] usb 7-1: Product: syz [ 118.582063][ T61] usb 7-1: Manufacturer: syz [ 118.583961][ T61] usb 7-1: SerialNumber: syz [ 118.633115][ T7849] veth3: entered allmulticast mode [ 118.636706][ T7849] bond2: (slave veth3): Enslaving as an active interface with an up link [ 118.642605][ T7854] bond2 (unregistering): (slave veth3): Releasing backup interface [ 118.648336][ T7854] bond2 (unregistering): Released all slaves [ 118.927585][ T7862] kvm: pic: non byte write [ 118.997634][ T61] legousbtower 7-1:14.57: interrupt endpoints not found [ 119.399570][ T61] legousbtower 7-1:14.228: get version request failed: -71 [ 119.402031][ T61] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 119.409178][ T61] usb 7-1: USB disconnect, device number 18 [ 119.884298][ T7875] FAULT_INJECTION: forcing a failure. [ 119.884298][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 119.884509][ T7872] netlink: 164 bytes leftover after parsing attributes in process `syz.1.732'. [ 119.891188][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: syz.3.733 Not tainted syzkaller #0 PREEMPT(full) [ 119.891206][ T7875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.891219][ T7875] Call Trace: [ 119.891229][ T7875] [ 119.891234][ T7875] dump_stack_lvl+0x100/0x190 [ 119.891265][ T7875] should_fail_ex.cold+0x5/0xa [ 119.891279][ T7875] ? __pfx_write_leasetime+0x10/0x10 [ 119.891301][ T7875] should_failslab+0xc2/0x120 [ 119.891316][ T7875] ? __pfx_write_leasetime+0x10/0x10 [ 119.891325][ T7875] __kmalloc_cache_noprof+0x91/0x6c0 [ 119.891344][ T7875] ? simple_transaction_get+0x82/0x1a0 [ 119.891358][ T7875] ? __pfx_write_leasetime+0x10/0x10 [ 119.891368][ T7875] simple_transaction_get+0x82/0x1a0 [ 119.891381][ T7875] nfsctl_transaction_write+0xcd/0x1a0 [ 119.891398][ T7875] vfs_write+0x2aa/0x1050 [ 119.891420][ T7875] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 119.891438][ T7875] ? __pfx_vfs_write+0x10/0x10 [ 119.891454][ T7875] ? __fget_files+0x215/0x3d0 [ 119.891468][ T7875] ? __fget_files+0x21f/0x3d0 [ 119.891482][ T7875] ksys_write+0x12a/0x250 [ 119.891498][ T7875] ? __pfx_ksys_write+0x10/0x10 [ 119.891519][ T7875] do_syscall_64+0x115/0x870 [ 119.891536][ T7875] ? clear_bhb_loop+0x40/0x90 [ 119.891549][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.891560][ T7875] RIP: 0033:0x7f9689f9e019 [ 119.891570][ T7875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.891581][ T7875] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.891592][ T7875] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 119.891599][ T7875] RDX: 0000000000000ff7 RSI: 00002000000002c0 RDI: 0000000000000003 [ 119.891605][ T7875] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.891611][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.891618][ T7875] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 119.891631][ T7875] [ 119.937746][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 119.975643][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 119.991700][ T7881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7881 comm=syz.2.735 [ 120.010511][ T7883] ISOFS: Unable to identify CD-ROM format. [ 120.159858][ T7877] veth13: entered allmulticast mode [ 120.165782][ T7877] bond1: (slave veth13): Enslaving as an active interface with an up link [ 120.172123][ T7881] bond1 (unregistering): (slave veth13): Releasing backup interface [ 120.176363][ T7881] bond1 (unregistering): Released all slaves [ 120.610404][ T5888] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 120.760292][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 120.764333][ T5888] usb 8-1: unable to get BOS descriptor or descriptor too short [ 120.768874][ T5888] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 120.773087][ T5888] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 120.775717][ T5888] usb 8-1: config 14 has no interface number 0 [ 120.778253][ T5888] usb 8-1: config 14 has no interface number 1 [ 120.781014][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 120.784838][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 120.788900][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 120.793093][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 120.797685][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 120.802347][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.807781][ T5888] usb 8-1: config 14 interface 57 has no altsetting 0 [ 120.810396][ T5888] usb 8-1: config 14 interface 228 has no altsetting 0 [ 120.816255][ T5888] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 120.819995][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.823426][ T5888] usb 8-1: Product: syz [ 120.825176][ T5888] usb 8-1: Manufacturer: syz [ 120.827118][ T5888] usb 8-1: SerialNumber: syz [ 121.073322][ T7913] netlink: 164 bytes leftover after parsing attributes in process `syz.1.747'. [ 121.236828][ T5888] legousbtower 8-1:14.57: interrupt endpoints not found [ 121.359527][ T7924] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 121.495488][ T7928] FAULT_INJECTION: forcing a failure. [ 121.495488][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 121.499493][ T7928] CPU: 0 UID: 0 PID: 7928 Comm: syz.0.753 Not tainted syzkaller #0 PREEMPT(full) [ 121.499508][ T7928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.499515][ T7928] Call Trace: [ 121.499522][ T7928] [ 121.499527][ T7928] dump_stack_lvl+0x100/0x190 [ 121.499545][ T7928] should_fail_ex.cold+0x5/0xa [ 121.499559][ T7928] should_failslab+0xc2/0x120 [ 121.499588][ T7928] kmem_cache_alloc_noprof+0x91/0x6a0 [ 121.499602][ T7928] ? do_getname+0x35/0x390 [ 121.499618][ T7928] do_getname+0x35/0x390 [ 121.499633][ T7928] __x64_sys_rmdir+0x36/0x70 [ 121.499645][ T7928] do_syscall_64+0x115/0x870 [ 121.499658][ T7928] ? clear_bhb_loop+0x40/0x90 [ 121.499672][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.499683][ T7928] RIP: 0033:0x7fa31379e019 [ 121.499692][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.499703][ T7928] RSP: 002b:00007fa3146a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 121.499715][ T7928] RAX: ffffffffffffffda RBX: 00007fa313a25fa0 RCX: 00007fa31379e019 [ 121.499722][ T7928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 121.499728][ T7928] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 121.499734][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.499740][ T7928] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 121.499754][ T7928] [ 121.641229][ T5888] legousbtower 8-1:14.228: get version request failed: -71 [ 121.643691][ T5888] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 121.648981][ T5888] usb 8-1: USB disconnect, device number 19 [ 121.866296][ T7938] ISOFS: Unable to identify CD-ROM format. [ 121.874607][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 121.874632][ T42] audit: type=1400 audit(1785592115.107:680): avc: denied { mount } for pid=7937 comm="syz.0.757" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.898731][ T42] audit: type=1400 audit(1785592115.127:681): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.013415][ T7942] UDC core: g1: couldn't find an available UDC or it's busy [ 122.325165][ T7965] UDC core: g1: couldn't find an available UDC or it's busy [ 122.382835][ T42] audit: type=1400 audit(1785592115.617:682): avc: denied { write } for pid=7968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.429855][ T42] audit: type=1400 audit(1785592115.657:683): avc: denied { write } for pid=7975 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.523651][ T42] audit: type=1400 audit(1785592115.757:684): avc: denied { write } for pid=7983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.571691][ T42] audit: type=1400 audit(1785592115.807:685): avc: denied { write } for pid=7988 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.600067][ T7993] FAULT_INJECTION: forcing a failure. [ 122.600067][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.605515][ T7993] CPU: 3 UID: 0 PID: 7993 Comm: syz.3.776 Not tainted syzkaller #0 PREEMPT(full) [ 122.605559][ T7993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.605570][ T7993] Call Trace: [ 122.605577][ T7993] [ 122.605585][ T7993] dump_stack_lvl+0x100/0x190 [ 122.605614][ T7993] should_fail_ex.cold+0x5/0xa [ 122.605637][ T7993] _copy_from_user+0x2e/0xd0 [ 122.605663][ T7993] copy_msghdr_from_user+0x9f/0x4c0 [ 122.605708][ T7993] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 122.605738][ T7993] ___sys_sendmsg+0x106/0x1e0 [ 122.605757][ T7993] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.605774][ T7993] ? __lock_acquire+0x49f/0x1a40 [ 122.605808][ T7993] ? get_pid_task+0x106/0x250 [ 122.605852][ T7993] __sys_sendmsg+0x160/0x210 [ 122.605890][ T7993] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.605930][ T7993] do_syscall_64+0x115/0x870 [ 122.605953][ T7993] ? clear_bhb_loop+0x40/0x90 [ 122.605973][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.605992][ T7993] RIP: 0033:0x7f9689f9e019 [ 122.606010][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.606027][ T7993] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.606047][ T7993] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 122.606059][ T7993] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 122.606070][ T7993] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.606079][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.606089][ T7993] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 122.606112][ T7993] [ 122.640251][ T42] audit: type=1400 audit(1785592115.867:686): avc: denied { write } for pid=7994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.684555][ T61] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 122.687019][ T42] audit: type=1400 audit(1785592115.917:687): avc: denied { write } for pid=7997 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.689518][ T7999] __nla_validate_parse: 3 callbacks suppressed [ 122.689529][ T7999] netlink: 164 bytes leftover after parsing attributes in process `syz.3.777'. [ 122.726117][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 122.733038][ T8004] UDC core: g1: couldn't find an available UDC or it's busy [ 122.759248][ T42] audit: type=1400 audit(1785592115.987:688): avc: denied { write } for pid=8003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.811956][ T42] audit: type=1400 audit(1785592116.047:689): avc: denied { write } for pid=8010 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.830355][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 122.834490][ T61] usb 6-1: unable to get BOS descriptor or descriptor too short [ 122.838453][ T61] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 122.844416][ T61] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 122.847940][ T61] usb 6-1: config 14 has no interface number 0 [ 122.851598][ T61] usb 6-1: config 14 has no interface number 1 [ 122.854275][ T61] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 122.858753][ T61] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 122.863964][ T61] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 122.868261][ T61] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 122.872330][ T61] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 122.875867][ T61] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.879903][ T61] usb 6-1: config 14 interface 57 has no altsetting 0 [ 122.882743][ T61] usb 6-1: config 14 interface 228 has no altsetting 0 [ 122.887754][ T61] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 122.892031][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.895438][ T61] usb 6-1: Product: syz [ 122.897189][ T61] usb 6-1: Manufacturer: syz [ 122.899150][ T61] usb 6-1: SerialNumber: syz [ 122.929995][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 122.934131][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 122.942270][ T8022] geneve2: entered promiscuous mode [ 122.943967][ T8022] geneve2: entered allmulticast mode [ 122.960353][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.963327][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.965915][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.968500][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.311786][ T61] legousbtower 6-1:14.57: interrupt endpoints not found [ 123.484125][ T8034] UDC core: g1: couldn't find an available UDC or it's busy [ 123.570896][ T8040] FAULT_INJECTION: forcing a failure. [ 123.570896][ T8040] name failslab, interval 1, probability 0, space 0, times 0 [ 123.574973][ T8040] CPU: 3 UID: 0 PID: 8040 Comm: syz.2.791 Not tainted syzkaller #0 PREEMPT(full) [ 123.574996][ T8040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.575006][ T8040] Call Trace: [ 123.575013][ T8040] [ 123.575019][ T8040] dump_stack_lvl+0x100/0x190 [ 123.575046][ T8040] should_fail_ex.cold+0x5/0xa [ 123.575067][ T8040] should_failslab+0xc2/0x120 [ 123.575088][ T8040] __kmalloc_noprof+0xfc/0x820 [ 123.575106][ T8040] ? rcu_is_watching+0x12/0xc0 [ 123.575130][ T8040] ? tomoyo_realpath_from_path+0xb6/0x690 [ 123.575164][ T8040] tomoyo_realpath_from_path+0xb6/0x690 [ 123.575185][ T8040] tomoyo_path_number_perm+0x23c/0x580 [ 123.575207][ T8040] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.575229][ T8040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.575281][ T8040] ? find_held_lock+0x2b/0x80 [ 123.575295][ T8040] ? __fget_files+0x215/0x3d0 [ 123.575310][ T8040] ? hook_file_ioctl_common+0x140/0x440 [ 123.575327][ T8040] ? __fget_files+0x215/0x3d0 [ 123.575347][ T8040] ? __fget_files+0x21f/0x3d0 [ 123.575366][ T8040] security_file_ioctl+0xd3/0x230 [ 123.575392][ T8040] __x64_sys_ioctl+0xb7/0x210 [ 123.575417][ T8040] do_syscall_64+0x115/0x870 [ 123.575436][ T8040] ? clear_bhb_loop+0x40/0x90 [ 123.575455][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.575472][ T8040] RIP: 0033:0x7f5bc659e019 [ 123.575486][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.575500][ T8040] RSP: 002b:00007f5bc743d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.575518][ T8040] RAX: ffffffffffffffda RBX: 00007f5bc6825fa0 RCX: 00007f5bc659e019 [ 123.575528][ T8040] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000005 [ 123.575537][ T8040] RBP: 00007f5bc743d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.575547][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.575556][ T8040] R13: 00007f5bc6826038 R14: 00007f5bc6825fa0 R15: 00007ffd522ca408 [ 123.575578][ T8040] [ 123.575585][ T8040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.693416][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.792'. [ 123.713616][ T61] legousbtower 6-1:14.228: get version request failed: -71 [ 123.716021][ T61] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 123.725201][ T61] usb 6-1: USB disconnect, device number 19 [ 123.758038][ T8046] ISOFS: Unable to identify CD-ROM format. [ 123.848228][ T8052] FAULT_INJECTION: forcing a failure. [ 123.848228][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.853027][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.2.797 Not tainted syzkaller #0 PREEMPT(full) [ 123.853043][ T8052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.853050][ T8052] Call Trace: [ 123.853055][ T8052] [ 123.853060][ T8052] dump_stack_lvl+0x100/0x190 [ 123.853079][ T8052] should_fail_ex.cold+0x5/0xa [ 123.853093][ T8052] _copy_from_user+0x2e/0xd0 [ 123.853109][ T8052] move_addr_to_kernel+0x65/0x170 [ 123.853122][ T8052] __sys_connect+0xb5/0x170 [ 123.853133][ T8052] ? __pfx___sys_connect+0x10/0x10 [ 123.853145][ T8052] ? __fget_files+0x21f/0x3d0 [ 123.853161][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 123.853181][ T8052] __x64_sys_connect+0x72/0xb0 [ 123.853192][ T8052] ? lockdep_hardirqs_on+0x78/0x100 [ 123.853206][ T8052] do_syscall_64+0x115/0x870 [ 123.853218][ T8052] ? clear_bhb_loop+0x40/0x90 [ 123.853231][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.853243][ T8052] RIP: 0033:0x7f5bc659e019 [ 123.853253][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.853264][ T8052] RSP: 002b:00007f5bc743d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 123.853276][ T8052] RAX: ffffffffffffffda RBX: 00007f5bc6825fa0 RCX: 00007f5bc659e019 [ 123.853282][ T8052] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 123.853289][ T8052] RBP: 00007f5bc743d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.853295][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.853301][ T8052] R13: 00007f5bc6826038 R14: 00007f5bc6825fa0 R15: 00007ffd522ca408 [ 123.853314][ T8052] [ 123.881844][ T8054] UDC core: g1: couldn't find an available UDC or it's busy [ 123.975216][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.801'. [ 123.981739][ T5743] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 124.019768][ T8069] ISOFS: Unable to identify CD-ROM format. [ 124.040465][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 124.075423][ T8073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 124.125927][ T8075] syz.3.807 (8075): drop_caches: 2 [ 124.250052][ T8079] UDC core: g1: couldn't find an available UDC or it's busy [ 124.351279][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.811'. [ 124.650406][ T6308] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 124.801928][ T6308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.806073][ T6308] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 124.811387][ T6308] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 124.814905][ T6308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.825234][ T6308] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 125.014404][ T8093] ISOFS: Unable to identify CD-ROM format. [ 125.071381][ T8097] FAULT_INJECTION: forcing a failure. [ 125.071381][ T8097] name failslab, interval 1, probability 0, space 0, times 0 [ 125.076266][ T8097] CPU: 3 UID: 0 PID: 8097 Comm: syz.3.817 Not tainted syzkaller #0 PREEMPT(full) [ 125.076289][ T8097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.076300][ T8097] Call Trace: [ 125.076306][ T8097] [ 125.076314][ T8097] dump_stack_lvl+0x100/0x190 [ 125.076343][ T8097] should_fail_ex.cold+0x5/0xa [ 125.076365][ T8097] should_failslab+0xc2/0x120 [ 125.076387][ T8097] __kvmalloc_node_noprof+0x116/0x970 [ 125.076407][ T8097] ? find_held_lock+0x2b/0x80 [ 125.076423][ T8097] ? proc_sys_call_handler+0x169/0x5a0 [ 125.076444][ T8097] ? proc_sys_call_handler+0x169/0x5a0 [ 125.076463][ T8097] ? proc_sys_call_handler+0x2c7/0x5a0 [ 125.076487][ T8097] proc_sys_call_handler+0x2c7/0x5a0 [ 125.076509][ T8097] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 125.076531][ T8097] ? __lock_acquire+0x49f/0x1a40 [ 125.076555][ T8097] do_iter_readv_writev+0x6f7/0x930 [ 125.076583][ T8097] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 125.076619][ T8097] vfs_writev+0x360/0xdd0 [ 125.076644][ T8097] ? rcu_is_watching+0x12/0xc0 [ 125.076669][ T8097] ? trace_contention_end+0x126/0x160 [ 125.076691][ T8097] ? __pfx_vfs_writev+0x10/0x10 [ 125.076723][ T8097] ? rcu_read_lock_any_held+0x6a/0xa0 [ 125.076753][ T8097] ? __fget_files+0x21f/0x3d0 [ 125.076776][ T8097] ? do_writev+0x13e/0x340 [ 125.076799][ T8097] do_writev+0x13e/0x340 [ 125.076825][ T8097] ? __pfx_do_writev+0x10/0x10 [ 125.076856][ T8097] do_syscall_64+0x115/0x870 [ 125.076877][ T8097] ? clear_bhb_loop+0x40/0x90 [ 125.076897][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.076916][ T8097] RIP: 0033:0x7f9689f9e019 [ 125.076932][ T8097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.076952][ T8097] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 125.076969][ T8097] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 125.076981][ T8097] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 125.076991][ T8097] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.077001][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.077011][ T8097] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 125.077034][ T8097] [ 125.097453][ T8099] syz.0.818 (8099): drop_caches: 2 [ 125.188188][ T8103] netlink: 'syz.3.819': attribute type 2 has an invalid length. [ 125.193128][ T8103] netlink: 'syz.3.819': attribute type 2 has an invalid length. [ 125.213546][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 126.919595][ T8121] ISOFS: Unable to identify CD-ROM format. [ 126.958539][ T5746] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 126.998331][ T8125] FAULT_INJECTION: forcing a failure. [ 126.998331][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.002481][ T8125] CPU: 3 UID: 0 PID: 8125 Comm: syz.3.828 Not tainted syzkaller #0 PREEMPT(full) [ 127.002497][ T8125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.002503][ T8125] Call Trace: [ 127.002508][ T8125] [ 127.002513][ T8125] dump_stack_lvl+0x100/0x190 [ 127.002532][ T8125] should_fail_ex.cold+0x5/0xa [ 127.002545][ T8125] _copy_from_user+0x2e/0xd0 [ 127.002561][ T8125] copy_msghdr_from_user+0x9f/0x4c0 [ 127.002573][ T8125] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.002590][ T8125] ___sys_sendmsg+0x106/0x1e0 [ 127.002601][ T8125] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.002610][ T8125] ? __lock_acquire+0x49f/0x1a40 [ 127.002624][ T8125] ? get_pid_task+0x106/0x250 [ 127.002648][ T8125] __sys_sendmsg+0x160/0x210 [ 127.002662][ T8125] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.002683][ T8125] do_syscall_64+0x115/0x870 [ 127.002696][ T8125] ? clear_bhb_loop+0x40/0x90 [ 127.002709][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.002720][ T8125] RIP: 0033:0x7f9689f9e019 [ 127.002729][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.002740][ T8125] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.002751][ T8125] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 127.002758][ T8125] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 127.002764][ T8125] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.002770][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.002776][ T8125] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 127.002789][ T8125] [ 127.095581][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 127.100415][ T5746] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 127.224124][ T8141] syz.2.835 (8141): drop_caches: 2 [ 127.267625][ T8144] ISOFS: Unable to identify CD-ROM format. [ 127.416153][ T5888] usb 6-1: USB disconnect, device number 20 [ 127.427483][ T8149] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.446291][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 127.446382][ T42] audit: type=1400 audit(1785592120.677:694): avc: denied { map_read map_write } for pid=8150 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.487829][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.840'. [ 127.587272][ T8156] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.595062][ T8156] FAULT_INJECTION: forcing a failure. [ 127.595062][ T8156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.601486][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.841 Not tainted syzkaller #0 PREEMPT(full) [ 127.601535][ T8156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.601547][ T8156] Call Trace: [ 127.601555][ T8156] [ 127.601562][ T8156] dump_stack_lvl+0x100/0x190 [ 127.601594][ T8156] should_fail_ex.cold+0x5/0xa [ 127.601616][ T8156] trace_user_fault_read+0x515/0x890 [ 127.601644][ T8156] tracing_mark_write+0xe9/0x3b0 [ 127.601665][ T8156] vfs_write+0x2aa/0x1050 [ 127.601693][ T8156] ? __pfx_tracing_mark_write+0x10/0x10 [ 127.601715][ T8156] ? __pfx_vfs_write+0x10/0x10 [ 127.601738][ T8156] ? find_held_lock+0x2b/0x80 [ 127.601754][ T8156] ? __fget_files+0x215/0x3d0 [ 127.601772][ T8156] ? __fget_files+0x215/0x3d0 [ 127.601798][ T8156] ? __fget_files+0x21f/0x3d0 [ 127.601823][ T8156] ksys_write+0x1f8/0x250 [ 127.601851][ T8156] ? __pfx_ksys_write+0x10/0x10 [ 127.601886][ T8156] do_syscall_64+0x115/0x870 [ 127.601908][ T8156] ? clear_bhb_loop+0x40/0x90 [ 127.601931][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.601949][ T8156] RIP: 0033:0x7f284b99e019 [ 127.601964][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.601981][ T8156] RSP: 002b:00007f284c907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.601999][ T8156] RAX: ffffffffffffffda RBX: 00007f284bc26090 RCX: 00007f284b99e019 [ 127.602011][ T8156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 127.602021][ T8156] RBP: 00007f284c907090 R08: 0000000000000000 R09: 0000000000000000 [ 127.602031][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.602039][ T8156] R13: 00007f284bc26128 R14: 00007f284bc26090 R15: 00007fff10f128d8 [ 127.602057][ T8156] [ 128.302169][ T8159] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.497665][ T8167] syz.1.846 (8167): drop_caches: 2 [ 128.607551][ T42] audit: type=1400 audit(1785592121.837:695): avc: denied { listen } for pid=8168 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.615312][ T42] audit: type=1400 audit(1785592121.847:696): avc: denied { accept } for pid=8168 comm="syz.1.848" lport=49683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.644129][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 128.653553][ T8171] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 128.656418][ T8171] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 128.659112][ T8171] udc dummy_udc.0: failed to start g1: -22 [ 128.661963][ T8171] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 128.666053][ T8171] UDC core: g1: couldn't find an available UDC or it's busy [ 128.716188][ T8172] kvm: MONITOR instruction emulated as NOP! [ 128.794678][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 128.865584][ T8181] FAULT_INJECTION: forcing a failure. [ 128.865584][ T8181] name failslab, interval 1, probability 0, space 0, times 0 [ 128.870962][ T8181] CPU: 1 UID: 0 PID: 8181 Comm: syz.0.851 Not tainted syzkaller #0 PREEMPT(full) [ 128.870979][ T8181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.870991][ T8181] Call Trace: [ 128.871003][ T8181] [ 128.871007][ T8181] dump_stack_lvl+0x100/0x190 [ 128.871037][ T8181] should_fail_ex.cold+0x5/0xa [ 128.871061][ T8181] should_failslab+0xc2/0x120 [ 128.871076][ T8181] __kvmalloc_node_noprof+0x116/0x970 [ 128.871091][ T8181] ? seq_read_iter+0x819/0x1270 [ 128.871118][ T8181] seq_read_iter+0x819/0x1270 [ 128.871137][ T8181] ? __pfx_seq_read_iter+0x10/0x10 [ 128.871148][ T8181] vfs_read+0x82e/0xb40 [ 128.871166][ T8181] ? __pfx_vfs_read+0x10/0x10 [ 128.871191][ T8181] ksys_read+0x12a/0x250 [ 128.871207][ T8181] ? __pfx_ksys_read+0x10/0x10 [ 128.871227][ T8181] do_syscall_64+0x115/0x870 [ 128.871244][ T8181] ? clear_bhb_loop+0x40/0x90 [ 128.871257][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.871269][ T8181] RIP: 0033:0x7fa31379e019 [ 128.871278][ T8181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.871289][ T8181] RSP: 002b:00007fa3146a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.871300][ T8181] RAX: ffffffffffffffda RBX: 00007fa313a25fa0 RCX: 00007fa31379e019 [ 128.871307][ T8181] RDX: 0000000000002020 RSI: 00002000000045c0 RDI: 0000000000000003 [ 128.871313][ T8181] RBP: 00007fa3146a5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.871319][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.871325][ T8181] R13: 00007fa313a26038 R14: 00007fa313a25fa0 R15: 00007ffc9ce853e8 [ 128.871339][ T8181] [ 129.357275][ T8197] fuse: Bad value for 'rootmode' [ 129.572696][ T8213] FAULT_INJECTION: forcing a failure. [ 129.572696][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.573437][ T8211] UDC core: g1: couldn't find an available UDC or it's busy [ 129.578169][ T8213] CPU: 2 UID: 0 PID: 8213 Comm: syz.1.866 Not tainted syzkaller #0 PREEMPT(full) [ 129.578192][ T8213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.578203][ T8213] Call Trace: [ 129.578212][ T8213] [ 129.578219][ T8213] dump_stack_lvl+0x100/0x190 [ 129.578246][ T8213] should_fail_ex.cold+0x5/0xa [ 129.578270][ T8213] strncpy_from_user+0x3b/0x2d0 [ 129.578297][ T8213] __do_sys_request_key+0xac/0x3c0 [ 129.578316][ T8213] ? __pfx___do_sys_request_key+0x10/0x10 [ 129.578334][ T8213] ? ksys_write+0x1ac/0x250 [ 129.578371][ T8213] do_syscall_64+0x115/0x870 [ 129.578391][ T8213] ? clear_bhb_loop+0x40/0x90 [ 129.578414][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.578433][ T8213] RIP: 0033:0x7f284b99e019 [ 129.578448][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.578465][ T8213] RSP: 002b:00007f284c928028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 129.578485][ T8213] RAX: ffffffffffffffda RBX: 00007f284bc25fa0 RCX: 00007f284b99e019 [ 129.578496][ T8213] RDX: 0000200000000200 RSI: 0000200000000380 RDI: 0000200000000340 [ 129.578508][ T8213] RBP: 00007f284c928090 R08: 0000000000000000 R09: 0000000000000000 [ 129.578518][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.578529][ T8213] R13: 00007f284bc26038 R14: 00007f284bc25fa0 R15: 00007fff10f128d8 [ 129.578553][ T8213] [ 129.608941][ T8215] fuse: Unknown parameter 'use00000000000000000000' [ 129.794562][ T42] audit: type=1400 audit(1785592123.027:697): avc: denied { execute } for pid=8226 comm="syz.3.874" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.838326][ T8233] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 129.841779][ T8233] UDF-fs: Scanning with blocksize 2048 failed [ 129.846902][ T8233] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 129.849915][ T8233] UDF-fs: Scanning with blocksize 4096 failed [ 129.922202][ T8239] UDC core: g1: couldn't find an available UDC or it's busy [ 129.948020][ T8237] FAULT_INJECTION: forcing a failure. [ 129.948020][ T8237] name failslab, interval 1, probability 0, space 0, times 0 [ 129.953277][ T8237] CPU: 3 UID: 0 PID: 8237 Comm: syz.3.876 Not tainted syzkaller #0 PREEMPT(full) [ 129.953293][ T8237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.953300][ T8237] Call Trace: [ 129.953304][ T8237] [ 129.953308][ T8237] dump_stack_lvl+0x100/0x190 [ 129.953327][ T8237] should_fail_ex.cold+0x5/0xa [ 129.953341][ T8237] should_failslab+0xc2/0x120 [ 129.953355][ T8237] __kmalloc_noprof+0xfc/0x820 [ 129.953373][ T8237] ? rcu_is_watching+0x12/0xc0 [ 129.953390][ T8237] ? tomoyo_realpath_from_path+0xb6/0x690 [ 129.953405][ T8237] tomoyo_realpath_from_path+0xb6/0x690 [ 129.953418][ T8237] tomoyo_path_number_perm+0x23c/0x580 [ 129.953433][ T8237] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.953449][ T8237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.953477][ T8237] ? find_held_lock+0x2b/0x80 [ 129.953487][ T8237] ? __fget_files+0x215/0x3d0 [ 129.953498][ T8237] ? hook_file_ioctl_common+0x140/0x440 [ 129.953533][ T8237] ? __fget_files+0x215/0x3d0 [ 129.953546][ T8237] ? __fget_files+0x21f/0x3d0 [ 129.953559][ T8237] security_file_ioctl+0xd3/0x230 [ 129.953576][ T8237] __x64_sys_ioctl+0xb7/0x210 [ 129.953594][ T8237] do_syscall_64+0x115/0x870 [ 129.953607][ T8237] ? clear_bhb_loop+0x40/0x90 [ 129.953620][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.953631][ T8237] RIP: 0033:0x7f9689f9e019 [ 129.953641][ T8237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.953652][ T8237] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.953663][ T8237] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 129.953670][ T8237] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 129.953676][ T8237] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.953683][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.953689][ T8237] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 129.953702][ T8237] [ 129.953707][ T8237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.241014][ T42] audit: type=1400 audit(1785592123.467:698): avc: denied { write } for pid=8255 comm="syz.2.884" name="/" dev="9p" ino=78395277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.249101][ T42] audit: type=1400 audit(1785592123.477:699): avc: denied { write } for pid=8255 comm="syz.2.884" name="file1" dev="9p" ino=78395281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.261313][ T42] audit: type=1400 audit(1785592123.477:700): avc: denied { open } for pid=8255 comm="syz.2.884" path="/189/file0/file1" dev="9p" ino=78395281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.320916][ T8261] 9pnet_virtio: no channels available for device syz [ 130.324339][ T8261] FAULT_INJECTION: forcing a failure. [ 130.324339][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.328578][ T8261] CPU: 2 UID: 0 PID: 8261 Comm: syz.3.885 Not tainted syzkaller #0 PREEMPT(full) [ 130.328593][ T8261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.328605][ T8261] Call Trace: [ 130.328617][ T8261] [ 130.328621][ T8261] dump_stack_lvl+0x100/0x190 [ 130.328652][ T8261] should_fail_ex.cold+0x5/0xa [ 130.328666][ T8261] _copy_from_user+0x2e/0xd0 [ 130.328685][ T8261] io_submit_one+0xbd/0x1fb0 [ 130.328701][ T8261] ? __lock_acquire+0x49f/0x1a40 [ 130.328714][ T8261] ? lockdep_hardirqs_on+0x78/0x100 [ 130.328732][ T8261] ? __pfx_io_submit_one+0x10/0x10 [ 130.328749][ T8261] ? __might_fault+0xc5/0x140 [ 130.328764][ T8261] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 130.328777][ T8261] __x64_sys_io_submit+0x1b1/0x3a0 [ 130.328792][ T8261] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 130.328806][ T8261] ? fput+0x79/0x100 [ 130.328824][ T8261] do_syscall_64+0x115/0x870 [ 130.328836][ T8261] ? clear_bhb_loop+0x40/0x90 [ 130.328849][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.328860][ T8261] RIP: 0033:0x7f9689f9e019 [ 130.328871][ T8261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.328881][ T8261] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 130.328892][ T8261] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 130.328899][ T8261] RDX: 0000200000000540 RSI: 000000000000003b RDI: 00007f968adcd000 [ 130.328906][ T8261] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.328912][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.328918][ T8261] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 130.328931][ T8261] [ 130.508608][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.887'. [ 130.548873][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.551869][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.606773][ T8269] UDC core: g1: couldn't find an available UDC or it's busy [ 130.728066][ T8275] net2280 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 130.768058][ T42] audit: type=1400 audit(1785592123.997:701): avc: denied { bind } for pid=8276 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.775599][ T8279] bridge1: entered promiscuous mode [ 130.775762][ T8279] bridge1: entered allmulticast mode [ 130.780952][ T42] audit: type=1400 audit(1785592124.007:702): avc: denied { write } for pid=8276 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.788822][ T42] audit: type=1400 audit(1785592124.007:703): avc: denied { setopt } for pid=8276 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.980345][ T8291] fuse: Unknown parameter 'use00000000000000000000' [ 131.056828][ T8295] UDC core: g1: couldn't find an available UDC or it's busy [ 131.350289][ T5843] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 131.410410][ T61] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 131.512090][ T5843] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 131.515457][ T5843] usb 6-1: config 0 has no interface number 0 [ 131.517946][ T5843] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.522639][ T5843] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.526158][ T5843] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 16485, setting to 1024 [ 131.529966][ T5843] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 131.533914][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.539139][ T5843] usb 6-1: config 0 descriptor?? [ 131.546463][ T5843] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input10 [ 131.557838][ C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 131.571639][ T61] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 131.574322][ T61] usb 7-1: config 0 has no interface number 0 [ 131.576442][ T61] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.581051][ T61] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.584727][ T61] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 16485, setting to 1024 [ 131.588916][ T61] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 131.589058][ C3] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 131.592387][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.601412][ T61] usb 7-1: config 0 descriptor?? [ 131.608186][ T61] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.120/input/input11 [ 131.750313][ T5843] usb 6-1: USB disconnect, device number 21 [ 131.805203][ T8303] FAULT_INJECTION: forcing a failure. [ 131.805203][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 131.809038][ T8303] CPU: 2 UID: 0 PID: 8303 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT(full) [ 131.809053][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.809060][ T8303] Call Trace: [ 131.809065][ T8303] [ 131.809069][ T8303] dump_stack_lvl+0x100/0x190 [ 131.809087][ T8303] should_fail_ex.cold+0x5/0xa [ 131.809102][ T8303] should_failslab+0xc2/0x120 [ 131.809117][ T8303] kmem_cache_alloc_noprof+0x91/0x6a0 [ 131.809131][ T8303] ? do_getname+0x35/0x390 [ 131.809147][ T8303] do_getname+0x35/0x390 [ 131.809162][ T8303] do_sys_openat2+0xc7/0x1e0 [ 131.809176][ T8303] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.809190][ T8303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.809204][ T8303] ? __fget_files+0x21f/0x3d0 [ 131.809218][ T8303] __x64_sys_openat+0x12d/0x210 [ 131.809232][ T8303] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.809245][ T8303] ? ksys_write+0x1ac/0x250 [ 131.809265][ T8303] do_syscall_64+0x115/0x870 [ 131.809278][ T8303] ? clear_bhb_loop+0x40/0x90 [ 131.809291][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.809302][ T8303] RIP: 0033:0x7f5bc655e84e [ 131.809312][ T8303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.809326][ T8303] RSP: 002b:00007f5bc743cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.809338][ T8303] RAX: ffffffffffffffda RBX: 00007f5bc743d6c0 RCX: 00007f5bc655e84e [ 131.809344][ T8303] RDX: 0000000000123101 RSI: 00007f5bc743cc00 RDI: ffffffffffffff9c [ 131.809350][ T8303] RBP: 00007f5bc743cc00 R08: 0000000000000000 R09: 0000000000000000 [ 131.809357][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 131.809363][ T8303] R13: 00007f5bc6826038 R14: 00007f5bc6825fa0 R15: 00007ffd522ca408 [ 131.809376][ T8303] [ 131.865176][ T5745] usb 7-1: USB disconnect, device number 19 [ 132.083510][ T8313] fuse: Unknown parameter 'user_i00000000000000000000' [ 132.158316][ T8317] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 132.161424][ T8317] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 132.164846][ T8317] udc dummy_udc.0: failed to start g1: -22 [ 132.167294][ T8317] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 132.173819][ T8317] UDC core: g1: couldn't find an available UDC or it's busy [ 132.287281][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.914'. [ 132.290515][ T5745] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 132.429552][ T8337] UDC core: g1: couldn't find an available UDC or it's busy [ 132.442785][ T5745] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 132.446366][ T5745] usb 8-1: config 0 has no interface number 0 [ 132.449019][ T5745] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.453191][ T5745] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.456551][ T5745] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 16485, setting to 1024 [ 132.461746][ T5745] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 132.465578][ T5745] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.471784][ T5745] usb 8-1: config 0 descriptor?? [ 132.479791][ T5745] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.120/input/input12 [ 132.607242][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 132.640624][ T8352] FAULT_INJECTION: forcing a failure. [ 132.640624][ T8352] name failslab, interval 1, probability 0, space 0, times 0 [ 132.645109][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(full) [ 132.645124][ T8352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.645131][ T8352] Call Trace: [ 132.645136][ T8352] [ 132.645141][ T8352] dump_stack_lvl+0x100/0x190 [ 132.645160][ T8352] should_fail_ex.cold+0x5/0xa [ 132.645174][ T8352] should_failslab+0xc2/0x120 [ 132.645189][ T8352] __kmalloc_noprof+0xfc/0x820 [ 132.645202][ T8352] ? rcu_is_watching+0x12/0xc0 [ 132.645218][ T8352] ? tomoyo_realpath_from_path+0xb6/0x690 [ 132.645232][ T8352] tomoyo_realpath_from_path+0xb6/0x690 [ 132.645246][ T8352] tomoyo_path_number_perm+0x23c/0x580 [ 132.645261][ T8352] ? tomoyo_path_number_perm+0x22e/0x580 [ 132.645277][ T8352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.645306][ T8352] ? find_held_lock+0x2b/0x80 [ 132.645315][ T8352] ? __fget_files+0x215/0x3d0 [ 132.645327][ T8352] ? hook_file_ioctl_common+0x140/0x440 [ 132.645339][ T8352] ? __fget_files+0x215/0x3d0 [ 132.645351][ T8352] ? __fget_files+0x21f/0x3d0 [ 132.645364][ T8352] security_file_ioctl+0xd3/0x230 [ 132.645381][ T8352] __x64_sys_ioctl+0xb7/0x210 [ 132.645398][ T8352] do_syscall_64+0x115/0x870 [ 132.645411][ T8352] ? clear_bhb_loop+0x40/0x90 [ 132.645425][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.645436][ T8352] RIP: 0033:0x7f284b99e019 [ 132.645446][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.645457][ T8352] RSP: 002b:00007f284c928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.645468][ T8352] RAX: ffffffffffffffda RBX: 00007f284bc25fa0 RCX: 00007f284b99e019 [ 132.645475][ T8352] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000003 [ 132.645481][ T8352] RBP: 00007f284c928090 R08: 0000000000000000 R09: 0000000000000000 [ 132.645487][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.645510][ T8352] R13: 00007f284bc26038 R14: 00007f284bc25fa0 R15: 00007fff10f128d8 [ 132.645524][ T8352] [ 132.645530][ T8352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.728954][ T61] usb 8-1: USB disconnect, device number 20 [ 132.742161][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744350][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.788647][ T8356] UDC core: g1: couldn't find an available UDC or it's busy [ 132.840318][ T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 132.990374][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 132.994701][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 132.999106][ T34] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 133.002669][ T34] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 133.006915][ T34] usb 7-1: config 14 has no interface number 0 [ 133.009767][ T34] usb 7-1: config 14 has no interface number 1 [ 133.012524][ T34] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 133.016903][ T34] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 133.021739][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 133.026314][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 133.031034][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 133.035581][ T34] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.040843][ T34] usb 7-1: config 14 interface 57 has no altsetting 0 [ 133.042070][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 133.043558][ T34] usb 7-1: config 14 interface 228 has no altsetting 0 [ 133.045740][ T34] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 133.054134][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.057536][ T34] usb 7-1: Product: syz [ 133.059262][ T34] usb 7-1: Manufacturer: syz [ 133.061244][ T34] usb 7-1: SerialNumber: syz [ 133.181293][ T8376] UDC core: g1: couldn't find an available UDC or it's busy [ 133.213768][ T8378] FAULT_INJECTION: forcing a failure. [ 133.213768][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 133.217532][ T8378] CPU: 3 UID: 0 PID: 8378 Comm: syz.1.939 Not tainted syzkaller #0 PREEMPT(full) [ 133.217547][ T8378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.217553][ T8378] Call Trace: [ 133.217558][ T8378] [ 133.217562][ T8378] dump_stack_lvl+0x100/0x190 [ 133.217581][ T8378] should_fail_ex.cold+0x5/0xa [ 133.217595][ T8378] ? __pfx_write_leasetime+0x10/0x10 [ 133.217606][ T8378] should_failslab+0xc2/0x120 [ 133.217620][ T8378] ? __pfx_write_leasetime+0x10/0x10 [ 133.217629][ T8378] __kmalloc_cache_noprof+0x91/0x6c0 [ 133.217661][ T8378] ? simple_transaction_get+0x82/0x1a0 [ 133.217675][ T8378] ? __pfx_write_leasetime+0x10/0x10 [ 133.217684][ T8378] simple_transaction_get+0x82/0x1a0 [ 133.217697][ T8378] nfsctl_transaction_write+0xcd/0x1a0 [ 133.217715][ T8378] vfs_write+0x2aa/0x1050 [ 133.217732][ T8378] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 133.217750][ T8378] ? __pfx_vfs_write+0x10/0x10 [ 133.217765][ T8378] ? __fget_files+0x215/0x3d0 [ 133.217779][ T8378] ? __fget_files+0x21f/0x3d0 [ 133.217794][ T8378] ksys_write+0x12a/0x250 [ 133.217810][ T8378] ? __pfx_ksys_write+0x10/0x10 [ 133.217831][ T8378] do_syscall_64+0x115/0x870 [ 133.217850][ T8378] ? clear_bhb_loop+0x40/0x90 [ 133.217869][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.217885][ T8378] RIP: 0033:0x7f284b99e019 [ 133.217898][ T8378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.217915][ T8378] RSP: 002b:00007f284c928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.217932][ T8378] RAX: ffffffffffffffda RBX: 00007f284bc25fa0 RCX: 00007f284b99e019 [ 133.217944][ T8378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 133.217953][ T8378] RBP: 00007f284c928090 R08: 0000000000000000 R09: 0000000000000000 [ 133.217962][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.217970][ T8378] R13: 00007f284bc26038 R14: 00007f284bc25fa0 R15: 00007fff10f128d8 [ 133.217990][ T8378] [ 133.268092][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 133.297734][ T8380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8380 comm=syz.3.940 [ 133.485323][ T8391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.944'. [ 133.490305][ T34] legousbtower 7-1:14.57: interrupt endpoints not found [ 133.597481][ T5743] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 133.642500][ T8401] FAULT_INJECTION: forcing a failure. [ 133.642500][ T8401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.646617][ T8401] CPU: 2 UID: 0 PID: 8401 Comm: syz.3.950 Not tainted syzkaller #0 PREEMPT(full) [ 133.646632][ T8401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.646639][ T8401] Call Trace: [ 133.646643][ T8401] [ 133.646648][ T8401] dump_stack_lvl+0x100/0x190 [ 133.646666][ T8401] should_fail_ex.cold+0x5/0xa [ 133.646681][ T8401] _copy_from_iter+0x1f4/0x1690 [ 133.646700][ T8401] ? __pfx__copy_from_iter+0x10/0x10 [ 133.646714][ T8401] ? _parse_integer_limit+0x1ac/0x220 [ 133.646728][ T8401] ? _kstrtoull+0x13c/0x1f0 [ 133.646738][ T8401] ? __pfx__kstrtoull+0x10/0x10 [ 133.646750][ T8401] tun_get_user+0x265/0x3c20 [ 133.646779][ T8401] ? __lock_acquire+0x49f/0x1a40 [ 133.646795][ T8401] ? __pfx_tun_get_user+0x10/0x10 [ 133.646807][ T8401] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 133.646827][ T8401] ? find_held_lock+0x2b/0x80 [ 133.646837][ T8401] ? tun_get+0x191/0x370 [ 133.646845][ T8401] ? tun_get+0x191/0x370 [ 133.646858][ T8401] tun_chr_write_iter+0xdc/0x200 [ 133.646870][ T8401] vfs_write+0x6ac/0x1050 [ 133.646888][ T8401] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 133.646901][ T8401] ? __pfx_vfs_write+0x10/0x10 [ 133.646916][ T8401] ? find_held_lock+0x2b/0x80 [ 133.646934][ T8401] ksys_write+0x12a/0x250 [ 133.646950][ T8401] ? __pfx_ksys_write+0x10/0x10 [ 133.646970][ T8401] do_syscall_64+0x115/0x870 [ 133.646983][ T8401] ? clear_bhb_loop+0x40/0x90 [ 133.646996][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.647007][ T8401] RIP: 0033:0x7f9689f9e019 [ 133.647017][ T8401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.647027][ T8401] RSP: 002b:00007f968adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.647038][ T8401] RAX: ffffffffffffffda RBX: 00007f968a225fa0 RCX: 00007f9689f9e019 [ 133.647045][ T8401] RDX: 000000000000002a RSI: 0000200000000180 RDI: 0000000000000003 [ 133.647052][ T8401] RBP: 00007f968adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.647058][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.647064][ T8401] R13: 00007f968a226038 R14: 00007f968a225fa0 R15: 00007fff37c3cf58 [ 133.647077][ T8401] [ 133.848433][ T8409] syzkaller0: entered promiscuous mode [ 133.854007][ T8409] syzkaller0: entered allmulticast mode [ 133.881449][ T34] legousbtower 7-1:14.228: get version request failed: -71 [ 133.883906][ T34] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 133.893147][ T34] usb 7-1: USB disconnect, device number 20 [ 133.932419][ T8411] netlink: 96 bytes leftover after parsing attributes in process `syz.3.954'. [ 134.400410][ T8432] tmpfs: Unknown parameter '˘' [ 134.413704][ T8434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.964'. [ 134.454618][ T8431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.480300][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 134.630911][ T34] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 134.634370][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.637609][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.641127][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.644014][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.646984][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.650650][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.653571][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.656496][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.659884][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.663778][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.666760][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.670398][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.673284][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.676183][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.679650][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.682607][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.685456][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.688885][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.692126][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.694996][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.698393][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.701823][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.704738][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.708181][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 134.712232][ T34] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.715246][ T34] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.718250][ T34] usb 6-1: Product: syz [ 134.719681][ T34] usb 6-1: Manufacturer: syz [ 134.721217][ T34] usb 6-1: SerialNumber: syz [ 134.724861][ T34] usb 6-1: config 0 descriptor?? [ 134.732461][ T34] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 134.938946][ T5888] usb 6-1: USB disconnect, device number 22 [ 134.942692][ T5888] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 135.432668][ T8460] FAULT_INJECTION: forcing a failure. [ 135.432668][ T8460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.436768][ T8460] CPU: 2 UID: 0 PID: 8460 Comm: syz.2.972 Not tainted syzkaller #0 PREEMPT(full) [ 135.436793][ T8460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.436804][ T8460] Call Trace: [ 135.436811][ T8460] [ 135.436819][ T8460] dump_stack_lvl+0x100/0x190 [ 135.436848][ T8460] should_fail_ex.cold+0x5/0xa [ 135.436873][ T8460] _copy_to_user+0x32/0xd0 [ 135.436901][ T8460] simple_read_from_buffer+0xcb/0x170 [ 135.436924][ T8460] proc_fail_nth_read+0x1af/0x230 [ 135.436953][ T8460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.436983][ T8460] ? rw_verify_area+0xce/0x6d0 [ 135.437008][ T8460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.437034][ T8460] vfs_read+0x1e4/0xb40 [ 135.437065][ T8460] ? __pfx_vfs_read+0x10/0x10 [ 135.437091][ T8460] ? __fget_files+0x215/0x3d0 [ 135.437116][ T8460] ? __fget_files+0x21f/0x3d0 [ 135.437142][ T8460] ksys_read+0x12a/0x250 [ 135.437169][ T8460] ? __pfx_ksys_read+0x10/0x10 [ 135.437198][ T8460] do_syscall_64+0x115/0x870 [ 135.437223][ T8460] ? clear_bhb_loop+0x40/0x90 [ 135.437246][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.437262][ T8460] RIP: 0033:0x7f5bc655e84e [ 135.437275][ T8460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.437289][ T8460] RSP: 002b:00007f5bc741bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.437306][ T8460] RAX: ffffffffffffffda RBX: 00007f5bc741c6c0 RCX: 00007f5bc655e84e [ 135.437317][ T8460] RDX: 000000000000000f RSI: 00007f5bc741c0a0 RDI: 0000000000000004 [ 135.437327][ T8460] RBP: 00007f5bc741c090 R08: 0000000000000000 R09: 0000000000000000 [ 135.437336][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.437345][ T8460] R13: 00007f5bc6826128 R14: 00007f5bc6826090 R15: 00007ffd522ca408 [ 135.437367][ T8460] [ 135.545800][ T8465] netlink: 96 bytes leftover after parsing attributes in process `syz.1.974'. [ 135.640463][ T5888] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 135.660399][ T8474] ISOFS: Unable to identify CD-ROM format. [ 135.790734][ T5888] usb 8-1: Using ep0 maxpacket: 32 [ 135.794067][ T5888] usb 8-1: unable to get BOS descriptor or descriptor too short [ 135.797402][ T5888] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 135.800039][ T5888] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 135.802730][ T5888] usb 8-1: config 14 has no interface number 0 [ 135.804719][ T5888] usb 8-1: config 14 has no interface number 1 [ 135.806792][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 135.810128][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 135.813860][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 135.817427][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 135.821153][ T5888] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 135.824685][ T5888] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.828795][ T5888] usb 8-1: config 14 interface 57 has no altsetting 0 [ 135.831084][ T5888] usb 8-1: config 14 interface 228 has no altsetting 0 [ 135.835015][ T5888] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 135.837960][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.840670][ T5888] usb 8-1: Product: syz [ 135.842094][ T5888] usb 8-1: Manufacturer: syz [ 135.843565][ T5888] usb 8-1: SerialNumber: syz [ 136.252061][ T5888] legousbtower 8-1:14.57: interrupt endpoints not found [ 136.653771][ T5888] legousbtower 8-1:14.228: get version request failed: -71 [ 136.656079][ T5888] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 136.667481][ T5888] usb 8-1: USB disconnect, device number 21 [ 136.918158][ T8490] UDC core: g1: couldn't find an available UDC or it's busy [ 136.981851][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.989'. [ 137.018734][ T8501] usbip-vudc usbip-vudc.0: failed to lookup sock [ 137.205951][ T8519] syzkaller0: entered promiscuous mode [ 137.207775][ T8519] syzkaller0: entered allmulticast mode [ 137.210855][ T8522] UDC core: g1: couldn't find an available UDC or it's busy [ 137.291891][ T8527] net2280 0000:00:02.0: unbind [ 137.335045][ T8527] net2280 0000:00:02.0: Failed to enable MSI mode [ 137.338273][ T8527] net2280 0000:00:02.0: PLX NET228x/USB338x USB Peripheral Controller [ 137.340841][ T8527] net2280 0000:00:02.0: irq 22, pci mem ffffc90006640000, chip rev 0000 [ 137.343381][ T8527] net2280 0000:00:02.0: version: 2005 Sept 27/v3.0; legacy mode [ 137.373683][ C1] BUG: kernel NULL pointer dereference, address: 000000000000000c [ 137.376091][ C1] #PF: supervisor read access in kernel mode [ 137.378006][ C1] #PF: error_code(0x0000) - not-present page [ 137.380440][ C1] PGD 0 P4D 0 [ 137.382128][ C1] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 137.384195][ C1] CPU: 1 UID: 0 PID: 5673 Comm: sshd-session Not tainted syzkaller #0 PREEMPT(full) [ 137.387647][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.391434][ C1] RIP: 0010:handle_ep_small+0x84/0x1ca0 [ 137.393559][ C1] Code: 37 fa 48 8d 43 50 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 28 18 00 00 48 8b 43 50 <44> 8b 68 0c 48 8d 7b 78 44 89 6c 24 20 48 b8 00 00 00 00 00 fc ff [ 137.399898][ C1] RSP: 0018:ffffc900006a0d70 EFLAGS: 00010046 [ 137.401764][ C1] RAX: 0000000000000000 RBX: ffff88805a3d4928 RCX: ffffffff87d2b586 [ 137.404157][ C1] RDX: 1ffff1100b47a92f RSI: ffffffff87d2965c RDI: ffff88805a3d4928 [ 137.406641][ C1] RBP: ffff88805a3d49a8 R08: 0000000000000005 R09: 0000000000000000 [ 137.409068][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffffffffffffff88 [ 137.411487][ C1] R13: 0000000000000040 R14: ffff88805a3d4000 R15: 0000000000000020 [ 137.413918][ C1] FS: 00007f62a8074300(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 137.416719][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.418753][ C1] CR2: 000000000000000c CR3: 00000000272d3000 CR4: 0000000000352ef0 [ 137.418763][ C1] Call Trace: [ 137.418768][ C1] [ 137.418773][ C1] ? rcu_is_watching+0x12/0xc0 [ 137.424746][ C1] net2280_irq+0x854/0x4ea0 [ 137.426365][ C1] ? __pfx_net2280_irq+0x10/0x10 [ 137.427957][ C1] ? ____napi_schedule+0x2b3/0x3b0 [ 137.429535][ C1] ? __napi_schedule+0x9d/0x180 [ 137.431063][ C1] ? __pfx_net2280_irq+0x10/0x10 [ 137.432597][ C1] __handle_irq_event_percpu+0x232/0x880 [ 137.434431][ C1] handle_irq_event+0xab/0x1e0 [ 137.436051][ C1] handle_fasteoi_irq+0x323/0xb60 [ 137.437592][ C1] __common_interrupt+0xd8/0x2f0 [ 137.439095][ C1] common_interrupt+0xb9/0xe0 [ 137.440577][ C1] [ 137.441520][ C1] [ 137.442461][ C1] asm_common_interrupt+0x26/0x40 [ 137.444025][ C1] RIP: 0010:e1000_xmit_frame+0x275c/0x5190 [ 137.445868][ C1] Code: c1 ea 03 48 01 c3 48 b8 00 00 00 00 00 fc ff df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 42 26 00 00 48 8b 44 24 20 8b 40 18 89 03 <31> db e8 bd c9 11 fb 89 d8 48 81 c4 f0 00 00 00 5b 5d 41 5c 41 5d [ 137.451818][ C1] RSP: 0018:ffffc90005516ef0 EFLAGS: 00000246 [ 137.453741][ C1] RAX: 0000000000000053 RBX: ffffc90006b83818 RCX: ffffffff86f8976d [ 137.456223][ C1] RDX: 1ffff1100566b023 RSI: ffffffff86f8977a RDI: ffff88802b35812a [ 137.458701][ C1] RBP: 0000000000000053 R08: 0000000000000001 R09: 0000000000000000 [ 137.461093][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900000ab520 [ 137.463511][ C1] R13: dffffc0000000000 R14: 00000000af100004 R15: ffff88802b09c000 [ 137.465974][ C1] ? e1000_xmit_frame+0x26ad/0x5190 [ 137.467612][ C1] ? e1000_xmit_frame+0x26ba/0x5190 [ 137.469225][ C1] dev_hard_start_xmit+0x121/0x760 [ 137.470815][ C1] sch_direct_xmit+0x1b2/0xc70 [ 137.472505][ C1] ? lock_acquire+0x1b9/0x370 [ 137.474033][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 137.475704][ C1] ? do_raw_spin_lock+0x240/0x260 [ 137.477249][ C1] __dev_queue_xmit+0x27ac/0x4970 [ 137.478810][ C1] ? __lock_acquire+0x49f/0x1a40 [ 137.480334][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.481997][ C1] ? __lock_acquire+0x49f/0x1a40 [ 137.483518][ C1] ? __lock_acquire+0x49f/0x1a40 [ 137.485079][ C1] ? __lock_acquire+0x49f/0x1a40 [ 137.486610][ C1] ip_finish_output2+0xf4a/0x2400 [ 137.488198][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 137.489890][ C1] ? skb_gso_transport_seglen+0x1a5/0x3b0 [ 137.491657][ C1] __ip_finish_output.part.0+0x444/0x6f0 [ 137.493393][ C1] ip_output+0x39b/0xc10 [ 137.494731][ C1] ? __pfx_ip_output+0x10/0x10 [ 137.496265][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 137.497973][ C1] ? __pfx_ip_output+0x10/0x10 [ 137.499466][ C1] ip_local_out+0x193/0x1f0 [ 137.500874][ C1] __ip_queue_xmit+0x885/0x1e90 [ 137.502394][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 137.503956][ C1] __tcp_transmit_skb+0x3506/0x4f20 [ 137.505795][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 137.507566][ C1] ? ktime_get+0x22c/0x320 [ 137.508951][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 137.510574][ C1] tcp_write_xmit+0x1130/0x8470 [ 137.512057][ C1] ? __sk_mem_schedule+0xd0/0x100 [ 137.513605][ C1] tcp_sendmsg_locked+0x2c8c/0x44d0 [ 137.515317][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 137.517046][ C1] ? do_raw_spin_lock+0x128/0x260 [ 137.518608][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.520247][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 137.521876][ C1] tcp_sendmsg+0x2e/0x50 [ 137.523194][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 137.524736][ C1] inet_sendmsg+0xb9/0x140 [ 137.526216][ C1] sock_write_iter+0x4ea/0x5b0 [ 137.527728][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 137.529292][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 137.530976][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 137.532636][ C1] ? security_file_permission+0x76/0x210 [ 137.534351][ C1] ? rw_verify_area+0xce/0x6d0 [ 137.535977][ C1] vfs_write+0x6ac/0x1050 [ 137.537376][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 137.539033][ C1] ? __pfx_vfs_write+0x10/0x10 [ 137.540521][ C1] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 137.542276][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 137.543900][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 137.545562][ C1] ? __x64_sys_rt_sigprocmask+0x2d7/0x410 [ 137.547392][ C1] ksys_write+0x1f8/0x250 [ 137.548759][ C1] ? __pfx_ksys_write+0x10/0x10 [ 137.550288][ C1] do_syscall_64+0x115/0x870 [ 137.551744][ C1] ? clear_bhb_loop+0x40/0x90 [ 137.553214][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.555131][ C1] RIP: 0033:0x7f62a78a7407 [ 137.556574][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 137.562488][ C1] RSP: 002b:00007ffc80a6aa60 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 137.565115][ C1] RAX: ffffffffffffffda RBX: 00007f62a8074300 RCX: 00007f62a78a7407 [ 137.567620][ C1] RDX: 0000000000008024 RSI: 00007f62a7fe7010 RDI: 0000000000000004 [ 137.570070][ C1] RBP: 0000559757e33be0 R08: 0000000000000000 R09: 0000000000000000 [ 137.572464][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 137.575148][ C1] R13: 00007ffc80a6abb0 R14: 0000000000000000 R15: 0000000000000004 [ 137.577627][ C1] [ 137.578609][ C1] Modules linked in: [ 137.579820][ C1] CR2: 000000000000000c [ 137.581115][ C1] ---[ end trace 0000000000000000 ]--- [ 137.582797][ C1] RIP: 0010:handle_ep_small+0x84/0x1ca0 [ 137.584459][ C1] Code: 37 fa 48 8d 43 50 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 28 18 00 00 48 8b 43 50 <44> 8b 68 0c 48 8d 7b 78 44 89 6c 24 20 48 b8 00 00 00 00 00 fc ff [ 137.590341][ C1] RSP: 0018:ffffc900006a0d70 EFLAGS: 00010046 [ 137.592183][ C1] RAX: 0000000000000000 RBX: ffff88805a3d4928 RCX: ffffffff87d2b586 [ 137.594572][ C1] RDX: 1ffff1100b47a92f RSI: ffffffff87d2965c RDI: ffff88805a3d4928 [ 137.597044][ C1] RBP: ffff88805a3d49a8 R08: 0000000000000005 R09: 0000000000000000 [ 137.599416][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffffffffffffff88 [ 137.601800][ C1] R13: 0000000000000040 R14: ffff88805a3d4000 R15: 0000000000000020 [ 137.604165][ C1] FS: 00007f62a8074300(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 137.606879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.608899][ C1] CR2: 000000000000000c CR3: 00000000272d3000 CR4: 0000000000352ef0 [ 137.611310][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 137.614058][ C1] Kernel Offset: disabled [ 137.615610][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:48:50 Registers: info registers vcpu 0 CPU#0 RAX=1ffff110062f99e0 RBX=ffff8880317ccf00 RCX=ffffffff84de133f RDX=ffff88802d7eca80 RSI=0000000000000000 RDI=ffff88802d7eca80 RBP=dffffc0000000000 RSP=ffffc9000d0dfa70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc9000d0dfb98 R13=ffff88802a5be990 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84de143d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fda63042880 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7f761fb758 CR3=0000000034c85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe18086f68 00007ffe18086f68 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe18087140 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e3d7d7dc50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda629f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda629f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732690a4a4b483 73732695fafa4159 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 782afa6bc780a293 737373762d4e0ef4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265776f702f3270 6f6f6c2f6b636f6c 622f6c6175747269 762f736563697665 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000055e3d7b412c0 00000000000001c1 00007265776f702f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b598918b4f3d1e0 000055e689e45b69 0000000000000051 000000302e32303a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000037316c6c696b 66722fef33af2bf0 2d86088ad33ae291 e5865147227eeb68 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc900006a0560 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b6fe1e7 R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f62a8074300 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000000000c CR3=00000000272d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ee000000010000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 0254000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ed000000200000 0003000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0050000000640000 00780000008c0000 00a0000000b40000 00cc000000e40000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00fc000001140000 012c000001400000 0158000001700000 0188000001ac0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01d0000000140000 0000000000000000 0115000000000225 5100000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb 6643b7cb6643b7cb ZMM25=aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a aad5213aaad5213a ZMM26=87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd 87dab6cd87dab6cd ZMM27=bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 bedc8923bedc8923 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 a7090000a7090000 info registers vcpu 2 CPU#2 RAX=0000000000172834 RBX=ffff88801eef4a80 RCX=ffffffff8bbbc2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dde950 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbba89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f968adf5ff8 CR3=00000000470ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff37c3d446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff37c3d446 00007fff37c3d44c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a0355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a03562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a035793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a035621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a1f25f8 00007f968a1f25c8 00007f968a1f2600 00007f968a1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0003ffc000000000 RBX=ffffea00014a7d80 RCX=ffffffff825dfe3d RDX=1ffffd4000294fb0 RSI=0000000000000008 RDI=ffffea00014a7d80 RBP=0000000000000001 RSP=ffffc90003617540 R8 =0000000000000000 R9 =fffff94000294fb0 R10=ffffea00014a7d87 R11=0000000000000001 R12=0000000000000008 R13=000000000000bdf8 R14=ffff88803e1ccf78 R15=ffffea00014a7d80 RIP=ffffffff825dfe5d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555573a50500 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c26c610 CR3=00000000204ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000000003ff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968ad5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff37c3d446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff37c3d446 00007fff37c3d44c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a0355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a03562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a035793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a035621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a1f2600 00007f968a1f25e0 00007f968a1f25e8 00007f968a1f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968ad5d020 00007f968a1f25c0 00007f968a1f25d0 00007f968a1f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f968a1f25f8 00007f968a1f25c8 00007f968a1f2600 00007f968a1f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000