last executing test programs: 2.583094729s ago: executing program 2 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000002ac7fd5d244d86dd603f00e700c3007d9fe153206686e65a13182c00fe800000000000000000007e63036e23eb00000000aaff02"], 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x62881, 0x19d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_CREATE2(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x118) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001f61e308d016a9105230010203010902"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 2.180377005s ago: executing program 1 (id=1622): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 2.067346823s ago: executing program 1 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x1a800, 0x70) chdir(0x0) link(0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) 1.963838163s ago: executing program 0 (id=1626): lsetxattr$system_posix_acl(0x0, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) io_uring_enter(0xffffffffffffffff, 0x11d0, 0xb012, 0x20, &(0x7f0000000180)={[0x80000000]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b0001006572"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.855195719s ago: executing program 0 (id=1627): times(&(0x7f0000000540)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x21080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfffc, {0x7, 0x1}, {0xad, 0x2}, @cond=[{0x3, 0x6a, 0x19, 0x2, 0xd, 0xc6}, {0x2, 0x7f, 0x9, 0xa4ed, 0xc7, 0x7}]}) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x1ac00) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) 1.854775083s ago: executing program 1 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fanotify_init(0x4000, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) socket$inet_udp(0x2, 0x2, 0x0) 1.854522277s ago: executing program 3 (id=1629): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000030000000400010005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.766625662s ago: executing program 3 (id=1630): r0 = fanotify_init(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000140)={0x20, 0x0, r5, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.563604119s ago: executing program 3 (id=1631): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) tgkill(0x0, 0x0, 0x2a) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES16=r1], 0x1000f) 1.445153811s ago: executing program 3 (id=1632): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.32715867s ago: executing program 3 (id=1633): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc512, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x78, {0x9, 0x21, 0xfff8, 0x8, 0x1, {0x22, 0x1e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfa, 0x4, 0xc2}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x6, 0x8, 0x10, 0xf}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 968.267633ms ago: executing program 0 (id=1634): mkdir(&(0x7f0000000380)='./file0\x00', 0x1b3) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', 0x183200, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000140)="00f2", 0x2, 0x44040, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='9p\x00', 0x120909, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) read$FUSE(r5, &(0x7f0000000500)={0x2020}, 0x2020) 968.019766ms ago: executing program 2 (id=1635): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$netlink(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 795.541554ms ago: executing program 1 (id=1636): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x1a800, 0x70) chdir(0x0) link(0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) 795.016261ms ago: executing program 0 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x1a800, 0x70) chdir(0x0) link(0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) 640.747825ms ago: executing program 2 (id=1638): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 545.996825ms ago: executing program 3 (id=1639): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r0, 0x1) poll(&(0x7f0000000140)=[{r0, 0xd}], 0x1, 0x1e86e34) 520.008093ms ago: executing program 0 (id=1640): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 519.659389ms ago: executing program 2 (id=1641): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 395.157356ms ago: executing program 1 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) 394.774965ms ago: executing program 0 (id=1643): times(&(0x7f0000000540)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3, 0x21080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfffc, {0x7, 0x1}, {0xad, 0x2}, @cond=[{0x3, 0x6a, 0x19, 0x2, 0xd, 0xc6}, {0x2, 0x7f, 0x9, 0xa4ed, 0xc7, 0x7}]}) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x1ac00) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) 394.292427ms ago: executing program 2 (id=1644): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 224.692221ms ago: executing program 1 (id=1645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fanotify_init(0x4000, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=1646): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x1a800, 0x70) chdir(0x0) link(0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) kernel console output (not intermixed with test programs): tered allmulticast mode [ 88.303017][ T6074] binder: 6073:6074 ioctl 4018620d 0 returned -22 [ 88.356622][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.388604][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.821738][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 88.868747][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 88.875385][ T24] usb 5-1: USB disconnect, device number 2 [ 88.953973][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.957245][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.028868][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.179455][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.217234][ T6091] binder: 6090:6091 ioctl c0306201 2000000003c0 returned -14 [ 89.525982][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.588977][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.768458][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 90.404635][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.468790][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.492257][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.496341][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.499402][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.557373][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.560702][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.563847][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.567203][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.570486][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.574004][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.577007][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.580395][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.583673][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.586899][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.590392][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.593614][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.596805][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.600249][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.603786][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.606864][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.620936][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.630815][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.637509][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.640511][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.652772][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.677484][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.680257][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.685029][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.701876][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.707040][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.708772][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.714004][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.722305][ T65] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 90.734083][ T65] hid-generic 0001:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 90.772332][ T5990] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 90.965782][ T5990] usb 7-1: config 0 has no interfaces? [ 90.968781][ T5990] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 90.975604][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.017296][ T5990] usb 7-1: config 0 descriptor?? [ 91.112667][ T6118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.150487][ T6118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 91.273360][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 91.277029][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 91.310896][ T6118] ipvlan2: entered allmulticast mode [ 91.327829][ T6118] veth0_vlan: entered allmulticast mode [ 91.462000][ T6126] netlink: 'syz.0.41': attribute type 11 has an invalid length. [ 91.479996][ T6126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41'. [ 91.514122][ T65] usb 7-1: USB disconnect, device number 2 [ 91.845546][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 92.371393][ T6136] vlan2: entered allmulticast mode [ 92.521120][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 92.521139][ T40] audit: type=1400 audit(1746176010.494:210): avc: denied { connect } for pid=6145 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.539475][ T40] audit: type=1400 audit(1746176010.494:211): avc: denied { bind } for pid=6145 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.558852][ T40] audit: type=1400 audit(1746176010.494:212): avc: denied { write } for pid=6145 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.869538][ T40] audit: type=1400 audit(1746176010.834:213): avc: denied { read write } for pid=6151 comm="syz.0.52" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.920237][ T40] audit: type=1400 audit(1746176010.834:214): avc: denied { open } for pid=6151 comm="syz.0.52" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.932008][ T40] audit: type=1400 audit(1746176010.854:215): avc: denied { map } for pid=6151 comm="syz.0.52" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.978900][ T40] audit: type=1400 audit(1746176010.854:216): avc: denied { execute } for pid=6151 comm="syz.0.52" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.009796][ T40] audit: type=1400 audit(1746176010.854:217): avc: denied { create } for pid=6151 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.040184][ T40] audit: type=1400 audit(1746176010.854:218): avc: denied { connect } for pid=6151 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.060234][ T40] audit: type=1400 audit(1746176010.854:219): avc: denied { write } for pid=6151 comm="syz.0.52" path="socket:[8777]" dev="sockfs" ino=8777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.666377][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.670451][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.674914][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.684750][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.689368][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.695782][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 94.698970][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.705726][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.710032][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.721021][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.754472][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.758392][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.764164][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.767998][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.826639][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.830983][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.834929][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.838236][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.844045][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.848962][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.854334][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.864336][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.872065][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.876963][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.881826][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.890443][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.895249][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.900286][ T6059] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 94.914827][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.923151][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.928532][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.932147][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.936427][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.941015][ T5990] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 94.948654][ T5990] hid-generic 0001:0000:0000.0003: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 95.108172][ T6059] usb 8-1: config 0 has no interfaces? [ 95.140335][ T6059] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 95.152200][ T6059] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.167613][ T6059] usb 8-1: config 0 descriptor?? [ 95.490752][ T6059] usb 8-1: USB disconnect, device number 2 [ 95.831104][ T6212] ipvlan3: entered allmulticast mode [ 95.833062][ T6212] bond0: entered allmulticast mode [ 95.860829][ T6212] bond_slave_0: entered allmulticast mode [ 95.863562][ T6212] bond_slave_1: entered allmulticast mode [ 95.880044][ T6212] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 95.994606][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.326006][ T6221] Zero length message leads to an empty skb [ 96.502770][ T6223] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.561051][ T67] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 97.566087][ T67] Bluetooth: hci0: Injecting HCI hardware error event [ 97.571787][ T67] Bluetooth: hci0: hardware error 0x00 [ 97.610506][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 97.616873][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 97.764809][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 97.764828][ T40] audit: type=1400 audit(1746176015.674:257): avc: denied { allowed } for pid=6247 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.788221][ T40] audit: type=1400 audit(1746176015.694:258): avc: denied { map } for pid=6247 comm="syz.2.86" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.818692][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.840531][ T40] audit: type=1400 audit(1746176015.694:259): avc: denied { read write } for pid=6247 comm="syz.2.86" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.036570][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.392889][ T40] audit: type=1400 audit(1746176016.374:260): avc: denied { read } for pid=6264 comm="syz.1.91" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 98.425896][ T40] audit: type=1400 audit(1746176016.374:261): avc: denied { open } for pid=6264 comm="syz.1.91" path="/23/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 98.452730][ T960] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 98.610499][ T960] usb 8-1: Using ep0 maxpacket: 16 [ 98.615392][ T960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.621909][ T960] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.627854][ T960] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.634823][ T960] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.639660][ T960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.657025][ T960] usb 8-1: config 0 descriptor?? [ 98.904913][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.124398][ T960] HID 045e:07da: Invalid code 65791 type 1 [ 99.161286][ T960] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:045E:07DA.0004/input/input6 [ 99.224036][ T960] microsoft 0003:045E:07DA.0004: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 99.311802][ T6280] xt_hashlimit: size too large, truncated to 1048576 [ 99.335627][ T78] usb 8-1: USB disconnect, device number 3 [ 99.632562][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.710347][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.988686][ T40] audit: type=1400 audit(1746176017.954:262): avc: denied { unlink } for pid=6286 comm="syz.0.98" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.253382][ T78] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 100.330879][ T40] audit: type=1400 audit(1746176018.304:263): avc: denied { ioctl } for pid=6297 comm="syz.0.102" path="socket:[11538]" dev="sockfs" ino=11538 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.337358][ T6300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.359477][ T40] audit: type=1400 audit(1746176018.324:264): avc: denied { write } for pid=6297 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.384962][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.506878][ T78] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.512750][ T78] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.517408][ T78] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.531104][ T78] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.536742][ T6293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.579860][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.588999][ T78] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.639294][ T40] audit: type=1400 audit(1746176018.614:265): avc: denied { ioctl } for pid=6308 comm="syz.2.107" path="socket:[9765]" dev="sockfs" ino=9765 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.725784][ T40] audit: type=1400 audit(1746176018.684:266): avc: denied { create } for pid=6308 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.767052][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.781417][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 101.017769][ T78] usb 8-1: USB disconnect, device number 4 [ 101.082873][ T6317] random: crng reseeded on system resumption [ 101.148497][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.488882][ T6323] capability: warning: `syz.0.111' uses deprecated v2 capabilities in a way that may be insecure [ 101.502345][ T6323] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 101.509338][ T6323] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.516440][ T6323] overlayfs: failed to get uuid (32/file1, err=-13); falling back to uuid=null. [ 102.152498][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.284515][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.648510][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.932295][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.266739][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 103.266755][ T40] audit: type=1400 audit(1746176021.244:279): avc: denied { read } for pid=6359 comm="syz.3.125" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.280261][ T40] audit: type=1400 audit(1746176021.244:280): avc: denied { open } for pid=6359 comm="syz.3.125" path="/dev/input/event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.382018][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.484801][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.614122][ T6365] netlink: 'syz.3.126': attribute type 5 has an invalid length. [ 103.799530][ T40] audit: type=1400 audit(1746176021.764:281): avc: denied { cmd } for pid=6371 comm="syz.3.129" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 104.017522][ T6378] process 'syz.2.131' launched './file1' with NULL argv: empty string added [ 104.033942][ T40] audit: type=1400 audit(1746176021.984:282): avc: denied { execute } for pid=6377 comm="syz.2.131" name="file1" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.056500][ T40] audit: type=1400 audit(1746176022.024:283): avc: denied { execute_no_trans } for pid=6377 comm="syz.2.131" path="/29/file1" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.388870][ T6386] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 104.451422][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 104.476035][ T6386] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.547309][ T40] audit: type=1400 audit(1746176022.524:284): avc: denied { ioctl } for pid=6381 comm="syz.3.133" path="socket:[8989]" dev="sockfs" ino=8989 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.564650][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.830311][ T67] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 104.916621][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.046543][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 105.074574][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.090958][ T6347] sp0: Synchronizing with TNC [ 105.185714][ T40] audit: type=1400 audit(1746176023.154:285): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.199704][ T40] audit: type=1400 audit(1746176024.164:286): avc: denied { map } for pid=6429 comm="syz.2.149" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.221004][ T1461] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.243224][ T40] audit: type=1400 audit(1746176024.164:287): avc: denied { execute } for pid=6429 comm="syz.2.149" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.270207][ T40] audit: type=1400 audit(1746176024.194:288): avc: denied { rename } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.398171][ T1461] usb 5-1: Using ep0 maxpacket: 32 [ 106.403567][ T1461] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 106.407605][ T1461] usb 5-1: config 0 has no interface number 0 [ 106.411818][ T1461] usb 5-1: config 0 interface 199 has no altsetting 0 [ 106.449179][ T1461] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 106.453618][ T1461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.458499][ T1461] usb 5-1: Product: syz [ 106.464716][ T1461] usb 5-1: Manufacturer: syz [ 106.478249][ T1461] usb 5-1: SerialNumber: syz [ 106.488133][ T1461] usb 5-1: config 0 descriptor?? [ 106.535477][ T1461] usbtouchscreen 5-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 106.782601][ T6437] ======================================================= [ 106.782601][ T6437] WARNING: The mand mount option has been deprecated and [ 106.782601][ T6437] and is ignored by this kernel. Remove the mand [ 106.782601][ T6437] option from the mount to silence this warning. [ 106.782601][ T6437] ======================================================= [ 107.265554][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.276307][ T6059] usb 5-1: USB disconnect, device number 3 [ 107.384483][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.458311][ T6445] netlink: 'syz.3.153': attribute type 7 has an invalid length. [ 107.468868][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 107.655936][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 107.711003][ T6452] bridge2: port 1(ip6gretap1) entered blocking state [ 107.716545][ T6452] bridge2: port 1(ip6gretap1) entered disabled state [ 107.721554][ T6452] ip6gretap1: entered allmulticast mode [ 107.726280][ T6452] ip6gretap1: entered promiscuous mode [ 107.752268][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.800453][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.817624][ T6452] veth3: entered promiscuous mode [ 107.820579][ T6452] bridge2: port 2(veth3) entered blocking state [ 107.825168][ T6452] bridge2: port 2(veth3) entered disabled state [ 107.837360][ T6452] veth3: entered allmulticast mode [ 108.129234][ T6459] Illegal XDP return value 4294967274 on prog (id 24) dev syz_tun, expect packet loss! [ 108.426932][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 108.555127][ T6469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6469 comm=syz.1.158 [ 108.572112][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 108.572126][ T40] audit: type=1400 audit(1746176026.554:299): avc: denied { read } for pid=6463 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 108.583461][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.613908][ T40] audit: type=1400 audit(1746176026.554:300): avc: denied { create } for pid=6470 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.651102][ T40] audit: type=1400 audit(1746176026.554:301): avc: denied { connect } for pid=6470 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.700435][ T40] audit: type=1400 audit(1746176026.554:302): avc: denied { mounton } for pid=6465 comm="syz.0.161" path="/37/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.237339][ T6489] block device autoloading is deprecated and will be removed. [ 109.740189][ T40] audit: type=1400 audit(1746176027.704:303): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 109.752723][ T40] audit: type=1400 audit(1746176027.704:304): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 109.950965][ T6504] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 109.960515][ T960] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.020583][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 110.037625][ T6504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.051618][ T6506] vlan2: entered promiscuous mode [ 110.054382][ T6506] bond2: entered promiscuous mode [ 110.098196][ T6504] bond2: (slave dummy0): making interface the new active one [ 110.113401][ T6504] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 110.170279][ T960] usb 6-1: Using ep0 maxpacket: 32 [ 110.212383][ T960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.217754][ T960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.224212][ T960] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.231227][ T40] audit: type=1400 audit(1746176028.194:305): avc: denied { mount } for pid=6509 comm="syz.2.174" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.243502][ T960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.301715][ T960] usb 6-1: config 0 descriptor?? [ 110.302261][ T6512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.175'. [ 110.314972][ T40] audit: type=1400 audit(1746176028.284:306): avc: denied { watch } for pid=6509 comm="syz.2.174" path="/45/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 110.338772][ T6510] mac80211_hwsim hwsim9 `ëÿÿ: renamed from wlan1 (while UP) [ 110.353017][ T40] audit: type=1400 audit(1746176028.284:307): avc: denied { read } for pid=6509 comm="syz.2.174" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.387899][ T40] audit: type=1400 audit(1746176028.284:308): avc: denied { open } for pid=6509 comm="syz.2.174" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.422711][ T1260] bond0: (slave bond_slave_0): interface is now down [ 110.425420][ T1260] bond0: (slave bond_slave_1): interface is now down [ 110.427788][ T1260] bond0: (slave wlan1): interface is now down [ 110.435219][ T1260] bond0: now running without any active interface! [ 110.484068][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.629510][ T6517] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 110.639192][ T6517] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 110.642552][ T6517] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.176'. [ 110.738246][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 110.770837][ T960] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 110.773181][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.802518][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.851647][ T6523] binder: 6522:6523 ioctl 4018620d 0 returned -22 [ 110.874332][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 111.016134][ T1461] usb 6-1: USB disconnect, device number 2 [ 111.024809][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.402121][ T6526] xt_hashlimit: max too large, truncated to 1048576 [ 111.703329][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.803066][ T6534] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.808566][ T6534] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.089595][ T6542] 9pnet: bogus RWRITE count (512 > 4) [ 112.420415][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.518915][ T6550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.535945][ T6550] IPv6: NLM_F_CREATE should be set when creating new route [ 112.573346][ T6550] lo: entered allmulticast mode [ 112.579879][ T6550] tunl0: entered allmulticast mode [ 112.585700][ T6550] gre0: entered allmulticast mode [ 112.662466][ T6550] gretap0: entered allmulticast mode [ 112.710174][ T6550] erspan0: entered allmulticast mode [ 112.715476][ T6550] ip_vti0: entered allmulticast mode [ 112.720836][ T6550] ip6_vti0: entered allmulticast mode [ 112.749624][ T6550] sit0: entered allmulticast mode [ 112.752861][ T960] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.767587][ T6550] ip6tnl0: entered allmulticast mode [ 112.780764][ T6550] ip6gre0: entered allmulticast mode [ 112.846394][ T6550] syz_tun: entered allmulticast mode [ 112.857770][ T6550] ip6gretap0: entered allmulticast mode [ 112.872373][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.877544][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.885360][ T6550] bridge0: entered allmulticast mode [ 112.892562][ T6550] vcan0: entered allmulticast mode [ 112.899558][ T6550] bond0: entered allmulticast mode [ 112.904158][ T6550] bond_slave_0: entered allmulticast mode [ 112.907839][ T6550] bond_slave_1: entered allmulticast mode [ 112.918926][ T6550] team0: entered allmulticast mode [ 112.921383][ T960] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 112.931668][ T960] usb 5-1: config 0 has no interface number 0 [ 112.934077][ T6550] team_slave_0: entered allmulticast mode [ 112.934469][ T960] usb 5-1: config 0 interface 29 has no altsetting 0 [ 112.936663][ T6550] team_slave_1: entered allmulticast mode [ 112.949752][ T6550] dummy0: entered allmulticast mode [ 112.957034][ T960] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 112.982611][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.989513][ T960] usb 5-1: Product: syz [ 112.994166][ T960] usb 5-1: Manufacturer: syz [ 112.996248][ T960] usb 5-1: SerialNumber: syz [ 113.000629][ T6550] nlmon0: entered allmulticast mode [ 113.006479][ T6550] caif0: entered allmulticast mode [ 113.009320][ T6550] batadv0: entered allmulticast mode [ 113.019170][ T6550] vxcan0: entered allmulticast mode [ 113.035457][ T6550] vxcan1: entered allmulticast mode [ 113.048864][ T6550] veth0: entered allmulticast mode [ 113.050013][ T960] usb 5-1: config 0 descriptor?? [ 113.062013][ T6550] veth1: entered allmulticast mode [ 113.097269][ T6550] wg0: entered allmulticast mode [ 113.167080][ T6550] wg1: entered allmulticast mode [ 113.244988][ T6550] wg2: entered allmulticast mode [ 113.267810][ T6550] veth0_to_bridge: entered allmulticast mode [ 113.290584][ T6550] veth1_to_bridge: entered allmulticast mode [ 113.316836][ T6550] veth0_to_bond: entered allmulticast mode [ 113.343437][ T6550] veth1_to_bond: entered allmulticast mode [ 113.365374][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.399218][ T6550] veth0_to_team: entered allmulticast mode [ 113.419835][ T6550] veth1_to_team: entered allmulticast mode [ 113.449588][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.469108][ T6550] veth0_to_batadv: entered allmulticast mode [ 113.487824][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.504863][ T6550] batadv_slave_0: entered allmulticast mode [ 113.522244][ T6550] veth1_to_batadv: entered allmulticast mode [ 113.528648][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.536605][ T6550] batadv_slave_1: entered allmulticast mode [ 113.546013][ T6550] xfrm0: entered allmulticast mode [ 113.556791][ T6550] veth0_to_hsr: entered allmulticast mode [ 113.568033][ T6550] hsr_slave_0: entered allmulticast mode [ 113.579733][ T6550] veth1_to_hsr: entered allmulticast mode [ 113.599169][ T6550] hsr_slave_1: entered allmulticast mode [ 113.607817][ T6550] hsr0: entered allmulticast mode [ 113.619519][ T6550] veth1_virt_wifi: entered allmulticast mode [ 113.658199][ T6550] veth0_virt_wifi: entered allmulticast mode [ 113.663103][ T6550] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 113.667611][ T6550] veth1_vlan: entered allmulticast mode [ 113.676971][ T6550] veth0_vlan: entered allmulticast mode [ 113.687311][ T6550] vlan0: entered allmulticast mode [ 113.689912][ T6550] vlan1: entered allmulticast mode [ 113.696831][ T6550] macvlan0: entered allmulticast mode [ 113.708439][ T6550] macvlan1: entered allmulticast mode [ 113.713128][ T6550] ipvlan0: entered allmulticast mode [ 113.715221][ T6550] ipvlan1: entered allmulticast mode [ 113.718064][ T6550] veth1_macvtap: entered allmulticast mode [ 113.728815][ T6550] veth0_macvtap: entered allmulticast mode [ 113.786022][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.817242][ T6550] macvtap0: entered allmulticast mode [ 113.824683][ T6550] macsec0: entered allmulticast mode [ 113.932159][ T6550] geneve0: entered allmulticast mode [ 113.946652][ T6550] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.952935][ T6550] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.958034][ T6550] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.961939][ T6550] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.990365][ T6550] geneve1: entered allmulticast mode [ 114.006833][ T6568] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 114.011458][ T6568] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 114.012047][ T6550] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 114.017748][ T6568] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.197'. [ 114.036769][ T6550] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 114.047569][ T6550] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 114.090260][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.100366][ T6550] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 114.121769][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.152141][ T6550] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 114.198863][ T6550] mac80211_hwsim hwsim9 `ëÿÿ: entered allmulticast mode [ 114.206470][ T6550] ip6erspan0: entered allmulticast mode [ 114.244073][ T6546] vlan2: entered promiscuous mode [ 114.247296][ T6546] vlan2: entered allmulticast mode [ 114.294432][ T6546] hsr_slave_1: entered allmulticast mode [ 114.300255][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.411081][ T960] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 114.418544][ T960] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 114.487366][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.564241][ T960] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 114.572972][ T960] usb 5-1: USB disconnect, device number 4 [ 114.732349][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.940374][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.108381][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.394165][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.608306][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.799042][ T6602] No such timeout policy "syz1" [ 116.235989][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 116.236003][ T40] audit: type=1400 audit(1746176034.204:322): avc: denied { mount } for pid=6610 comm="syz.1.212" name="/" dev="autofs" ino=13505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 116.397871][ T40] audit: type=1400 audit(1746176034.364:323): avc: denied { create } for pid=6612 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 116.449445][ T40] audit: type=1400 audit(1746176034.414:324): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 116.673614][ T40] audit: type=1400 audit(1746176034.654:325): avc: denied { read } for pid=6620 comm="syz.3.215" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.714725][ T40] audit: type=1400 audit(1746176034.674:326): avc: denied { read } for pid=6618 comm="syz.1.214" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.745533][ T40] audit: type=1400 audit(1746176034.674:327): avc: denied { open } for pid=6618 comm="syz.1.214" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.820271][ T40] audit: type=1400 audit(1746176034.674:328): avc: denied { ioctl } for pid=6618 comm="syz.1.214" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.876535][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.879451][ C1] hpet: Lost 1 RTC interrupts [ 116.915653][ T40] audit: type=1400 audit(1746176034.694:329): avc: denied { nlmsg_write } for pid=6620 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 116.919104][ T6626] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 116.966673][ T40] audit: type=1400 audit(1746176034.694:330): avc: denied { create } for pid=6620 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.990436][ T6626] netlink: 15922 bytes leftover after parsing attributes in process `syz.2.216'. [ 117.183250][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.319140][ T6644] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 117.464005][ T6647] bond0: entered promiscuous mode [ 117.466304][ T6647] bond_slave_0: entered promiscuous mode [ 117.468885][ T6647] bond_slave_1: entered promiscuous mode [ 117.495230][ T6647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.502797][ T6647] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 117.607667][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.627250][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.632233][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.638938][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.649017][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.466904][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.645153][ T6683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.670744][ T960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.751841][ T6691] ERROR: device name not specified. [ 118.753164][ T6679] kvm: pic: non byte read [ 118.771255][ T6679] kvm: pic: level sensitive irq not supported [ 118.771784][ T6679] kvm: pic: non byte read [ 118.779723][ T6679] kvm: pic: level sensitive irq not supported [ 118.781463][ T6679] kvm: pic: non byte read [ 118.793561][ T6679] kvm: pic: level sensitive irq not supported [ 118.794287][ T6679] kvm: pic: non byte read [ 118.799940][ T6679] kvm: pic: level sensitive irq not supported [ 118.823889][ T6679] kvm: pic: non byte read [ 118.830511][ T6679] kvm: pic: level sensitive irq not supported [ 118.830918][ T6679] kvm: pic: non byte read [ 118.856208][ T960] usb 5-1: Using ep0 maxpacket: 32 [ 118.860597][ T960] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 118.863902][ T960] usb 5-1: config 0 has no interface number 0 [ 118.866339][ T960] usb 5-1: config 0 interface 199 has no altsetting 0 [ 118.887964][ T960] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 118.892491][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.907389][ T960] usb 5-1: Product: syz [ 118.909957][ T960] usb 5-1: Manufacturer: syz [ 118.911957][ T960] usb 5-1: SerialNumber: syz [ 118.918790][ T960] usb 5-1: config 0 descriptor?? [ 118.938311][ T960] usbtouchscreen 5-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 118.962943][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.138019][ T6677] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 119.661963][ T6702] netlink: 'syz.1.239': attribute type 10 has an invalid length. [ 119.703840][ T6702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.707116][ T64] usb 5-1: USB disconnect, device number 5 [ 119.822945][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 120.212443][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.452315][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.492515][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.517152][ T6704] hsr_slave_1 (unregistering): left promiscuous mode [ 120.556000][ T6719] overlay: ./file0 is not a directory [ 120.676419][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.830379][ T5957] Bluetooth: hci2: command tx timeout [ 120.980709][ T6734] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 121.043897][ T6734] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 121.048556][ T6734] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.146117][ T6738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.150374][ T6738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 121.152468][ T65] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.310346][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 121.332156][ T65] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 121.337973][ T65] usb 6-1: config 0 has no interface number 0 [ 121.349011][ T65] usb 6-1: config 0 interface 199 has no altsetting 0 [ 121.383913][ T65] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 121.389429][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.406470][ T65] usb 6-1: Product: syz [ 121.414565][ T65] usb 6-1: Manufacturer: syz [ 121.416823][ T65] usb 6-1: SerialNumber: syz [ 121.422074][ T65] usb 6-1: config 0 descriptor?? [ 121.473963][ T65] usbtouchscreen 6-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 121.645052][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 121.645066][ T40] audit: type=1400 audit(1746176039.624:354): avc: denied { create } for pid=6745 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.674177][ T6729] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 121.725468][ T40] audit: type=1400 audit(1746176039.694:355): avc: denied { getopt } for pid=6745 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.292800][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.326942][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.334530][ T40] audit: type=1400 audit(1746176040.284:356): avc: denied { ioctl } for pid=6752 comm="syz.0.267" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 122.350852][ T5992] usb 6-1: USB disconnect, device number 3 [ 122.469316][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.775180][ T40] audit: type=1400 audit(1746176040.754:357): avc: denied { create } for pid=6766 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.786519][ T40] audit: type=1400 audit(1746176040.764:358): avc: denied { write } for pid=6766 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.354041][ T6783] misc userio: Invalid payload size [ 123.533133][ T6786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.537460][ T6786] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 123.678411][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.761285][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.802045][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.933404][ T78] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 124.120923][ T78] usb 6-1: Using ep0 maxpacket: 32 [ 124.140516][ T78] usb 6-1: config 0 has an invalid interface number: 199 but max is 0 [ 124.145537][ T78] usb 6-1: config 0 has no interface number 0 [ 124.149300][ T78] usb 6-1: config 0 interface 199 has no altsetting 0 [ 124.182367][ T78] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 124.189668][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.214431][ T78] usb 6-1: Product: syz [ 124.216629][ T78] usb 6-1: Manufacturer: syz [ 124.221833][ T78] usb 6-1: SerialNumber: syz [ 124.241257][ T78] usb 6-1: config 0 descriptor?? [ 124.282496][ T78] usbtouchscreen 6-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 124.390444][ T65] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 124.484413][ T6788] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 124.540395][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.573168][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 124.602495][ T65] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.608268][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.614366][ T65] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.618600][ T65] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.627071][ T65] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.631208][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.724560][ T40] audit: type=1400 audit(1746176042.704:359): avc: denied { setopt } for pid=6803 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.737068][ T6804] Failed to initialize the IGMP autojoin socket (err -2) [ 124.858884][ T65] usb 7-1: GET_CAPABILITIES returned 0 [ 124.865695][ T65] usbtmc 7-1:16.0: can't read capabilities [ 124.892559][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.053197][ T10] usb 6-1: USB disconnect, device number 4 [ 125.072351][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 125.075868][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.078263][ T24] usb 5-1: config index 0 descriptor too short (expected 65535, got 18) [ 125.082141][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.101217][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.107916][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.109414][ T24] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 125.117672][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.117711][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.117740][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.123293][ T24] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 125.131713][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.139864][ T24] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 125.142930][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.167831][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 125.178890][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.178935][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.178970][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.193685][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.209292][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.213538][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.217151][ T24] usb 5-1: Product: syz [ 125.221237][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.221268][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 125.235107][ T24] usb 5-1: Manufacturer: syz [ 125.235125][ T24] usb 5-1: SerialNumber: syz [ 125.282590][ T6009] usb 7-1: USB disconnect, device number 3 [ 125.462054][ T40] audit: type=1400 audit(1746176043.434:360): avc: denied { append } for pid=6799 comm="syz.0.275" path="/61/file0/freezer.self_freezing" dev="9p" ino=35913979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.477555][ T6812] trusted_key: encrypted_key: insufficient parameters specified [ 125.586734][ T65] usb 5-1: USB disconnect, device number 6 [ 125.634726][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.892396][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.215712][ T40] audit: type=1400 audit(1746176044.194:361): avc: denied { create } for pid=6831 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.496351][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.532271][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.672462][ T6837] overlay: ./file0 is not a directory [ 126.715685][ T6841] Failed to initialize the IGMP autojoin socket (err -2) [ 126.745929][ T6837] netfs: Duplicate cookie detected [ 126.750525][ T6837] netfs: O-cookie c=00000009 [fl=5088 na=1 nA=0 s=-] [ 126.754568][ T6837] netfs: O-cookie V=00000004 [9p,syz,] [ 126.757574][ T6837] netfs: O-key=[8] '9f00240200000000' [ 126.762795][ T6837] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-] [ 126.771513][ T6837] netfs: N-cookie V=00000004 [9p,syz,] [ 126.775532][ T6837] netfs: N-key=[8] '9f00240200000000' [ 126.820949][ T6848] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 126.881392][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.919789][ T6848] syz_tun: entered promiscuous mode [ 126.937517][ T6848] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 126.952268][ T12] bond0: (slave syz_tun): interface is now down [ 126.970775][ T1260] bond0: (slave syz_tun): interface is now down [ 126.974804][ T1260] bond0: now running without any active interface! [ 127.196835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.202775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 127.221551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.228801][ T6862] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 127.237949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.256740][ T6862] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.330339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.510519][ T6864] tipc: Trying to set illegal importance in message [ 127.513006][ T40] audit: type=1400 audit(1746176045.484:362): avc: denied { setopt } for pid=6863 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.585105][ T6845] syz.2.290 (6845): drop_caches: 2 [ 127.640224][ T40] audit: type=1400 audit(1746176045.524:363): avc: denied { setattr } for pid=6863 comm="syz.3.296" name="TIPC" dev="sockfs" ino=12948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.712621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 127.722366][ T6867] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 127.918270][ T40] audit: type=1400 audit(1746176045.874:364): avc: denied { sys_module } for pid=6868 comm="syz.2.298" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.936586][ T6871] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 127.976167][ T6871] mac80211_hwsim hwsim9 `ëÿÿ: left allmulticast mode [ 127.984766][ T6871] mac80211_hwsim hwsim9 `ëÿÿ: entered promiscuous mode [ 127.989342][ T6871] mac80211_hwsim hwsim9 `ëÿÿ: entered allmulticast mode [ 127.998069][ T6871] bond0: (slave `ëÿÿ): Enslaving as an active interface with an up link [ 128.260500][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.270567][ T6880] overlay: ./file0 is not a directory [ 128.501156][ T6880] netfs: Duplicate cookie detected [ 128.503538][ T6880] netfs: O-cookie c=0000000c [fl=5088 na=1 nA=0 s=-] [ 128.506446][ T6880] netfs: O-cookie V=00000006 [9p,syz,] [ 128.508777][ T6880] netfs: O-key=[8] '9f00240200000000' [ 128.511446][ T6880] netfs: N-cookie c=0000000d [fl=8 na=0 nA=0 s=-] [ 128.515378][ T6880] netfs: N-cookie V=00000006 [9p,syz,] [ 128.517851][ T6880] netfs: N-key=[8] '9f00240200000000' [ 128.750539][ T6903] overlayfs: failed to clone upperpath [ 128.751322][ T6902] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 129.088297][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.124280][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.216687][ T6919] overlayfs: failed to clone upperpath [ 129.321928][ T6009] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.328649][ T40] audit: type=1400 audit(1746176047.294:365): avc: denied { read } for pid=6922 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.431291][ T6930] overlay: ./file0 is not a directory [ 129.456542][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.469604][ T6933] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 129.480548][ T6009] usb 5-1: Using ep0 maxpacket: 32 [ 129.485454][ T6009] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 129.487763][ T6009] usb 5-1: config 0 has no interface number 0 [ 129.490768][ T6009] usb 5-1: config 0 interface 199 has no altsetting 0 [ 129.510240][ T6009] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 129.513833][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.516798][ T6009] usb 5-1: Product: syz [ 129.518571][ T6009] usb 5-1: Manufacturer: syz [ 129.523634][ T6009] usb 5-1: SerialNumber: syz [ 129.531318][ T6009] usb 5-1: config 0 descriptor?? [ 129.565551][ T6009] usbtouchscreen 5-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 129.638704][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.716296][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.761150][ T6912] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 129.939790][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.110917][ T6009] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 130.197557][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.280662][ T6009] usb 7-1: Using ep0 maxpacket: 16 [ 130.284882][ T6009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.293598][ T6009] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 130.301188][ T10] usb 5-1: USB disconnect, device number 7 [ 130.311166][ T6009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.311189][ T6009] usb 7-1: Product: syz [ 130.311202][ T6009] usb 7-1: Manufacturer: syz [ 130.311214][ T6009] usb 7-1: SerialNumber: syz [ 130.335368][ T6009] usb 7-1: config 0 descriptor?? [ 130.356325][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.422100][ T6009] hub 7-1:0.0: bad descriptor, ignoring hub [ 130.425557][ T6009] hub 7-1:0.0: probe with driver hub failed with error -5 [ 130.441424][ T6009] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 130.644488][ T40] audit: type=1400 audit(1746176048.614:366): avc: denied { read write } for pid=6941 comm="syz.2.328" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.667960][ T40] audit: type=1400 audit(1746176048.614:367): avc: denied { open } for pid=6941 comm="syz.2.328" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 130.697332][ T40] audit: type=1400 audit(1746176048.664:368): avc: denied { append } for pid=6941 comm="syz.2.328" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.888279][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.040296][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.054908][ T5957] Bluetooth: unknown link type 52 [ 131.058858][ T5957] Bluetooth: hci1: connection err: -111 [ 131.350859][ T78] usb 7-1: USB disconnect, device number 4 [ 131.740243][ T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.901755][ T6977] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 131.913679][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 131.919016][ T64] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 131.923544][ T64] usb 5-1: config 0 has no interface number 0 [ 131.950195][ T64] usb 5-1: config 0 interface 199 has no altsetting 0 [ 131.956240][ T64] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 131.961896][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.965613][ T64] usb 5-1: Product: syz [ 131.967528][ T64] usb 5-1: Manufacturer: syz [ 131.974330][ T64] usb 5-1: SerialNumber: syz [ 131.984640][ T64] usb 5-1: config 0 descriptor?? [ 132.013204][ T64] usbtouchscreen 5-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 132.201533][ T6973] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 132.313278][ T6993] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 132.316352][ T6993] team0: Device bond0 is up. Set it down before adding it as a team port [ 132.498458][ T6996] overlayfs: failed to clone upperpath [ 132.772541][ T78] usb 5-1: USB disconnect, device number 8 [ 132.796830][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808634][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916380][ C3] vkms_vblank_simulate: vblank timer overrun [ 133.052765][ T7014] overlay: ./file0 is not a directory [ 133.085565][ T7018] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 133.105334][ T7014] netfs: Duplicate cookie detected [ 133.108594][ T7014] netfs: O-cookie c=00000010 [fl=5088 na=1 nA=0 s=-] [ 133.113683][ T7014] netfs: O-cookie V=0000000b [9p,syz,] [ 133.115498][ T7014] netfs: O-key=[8] '9f00240200000000' [ 133.117248][ T7014] netfs: N-cookie c=00000011 [fl=8 na=0 nA=0 s=-] [ 133.118539][ T7020] 9pnet_virtio: no channels available for device syz [ 133.121458][ T7014] netfs: N-cookie V=0000000b [9p,syz,] [ 133.134620][ T7014] netfs: N-key=[8] '9f00240200000000' [ 133.641975][ C3] vkms_vblank_simulate: vblank timer overrun [ 133.685690][ T7047] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 133.689737][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.694454][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.726302][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.736006][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.746756][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.768689][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.777981][ T7047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.800268][ T1260] bond0: (slave bridge0): interface is now down [ 133.804664][ T1260] bond0: now running without any active interface! [ 133.848158][ T7051] overlay: ./file0 is not a directory [ 133.941885][ T7051] netfs: Duplicate cookie detected [ 133.953095][ T7051] netfs: O-cookie c=00000013 [fl=5088 na=1 nA=0 s=-] [ 133.957863][ T7051] netfs: O-cookie V=0000000c [9p,syz,] [ 133.961692][ T7051] netfs: O-key=[8] '9f00240200000000' [ 133.969315][ T7051] netfs: N-cookie c=00000014 [fl=8 na=0 nA=0 s=-] [ 133.971836][ T7051] netfs: N-cookie V=0000000c [9p,syz,] [ 133.974772][ T7051] netfs: N-key=[8] '9f00240200000000' [ 134.302551][ T7069] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 134.306235][ T7069] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 134.328273][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.498939][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.641070][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.736463][ T40] audit: type=1400 audit(1746176052.694:369): avc: denied { read } for pid=7097 comm="syz.0.395" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.770022][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.903880][ T7098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.906727][ T7098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.913895][ T7098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 134.936220][ T7098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.938807][ T7098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.955114][ T7098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.957798][ T7098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.968994][ T7098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 135.066360][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.158085][ T7107] overlay: ./file0 is not a directory [ 135.319804][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 135.341190][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.345832][ T7119] netfs: Duplicate cookie detected [ 135.369916][ T7119] netfs: O-cookie c=00000016 [fl=5088 na=1 nA=0 s=-] [ 135.374798][ T7119] netfs: O-cookie V=0000000d [9p,syz,] [ 135.390482][ T7119] netfs: O-key=[8] '9f00240200000000' [ 135.397597][ T7119] netfs: N-cookie c=00000017 [fl=8 na=0 nA=0 s=-] [ 135.417235][ T7119] netfs: N-cookie V=0000000d [9p,syz,] [ 135.428962][ T7119] netfs: N-key=[8] '9f00240200000000' [ 135.458158][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.610929][ T7125] Cache volume key already in use (9p,syz,) [ 135.669797][ T7126] overlayfs: failed to clone upperpath [ 135.794525][ T40] audit: type=1400 audit(1746176053.774:370): avc: denied { write } for pid=7129 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.835937][ T40] audit: type=1400 audit(1746176053.814:371): avc: denied { mount } for pid=7131 comm="syz.3.408" name="/" dev="hugetlbfs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 135.940276][ T65] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 135.999132][ T7141] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 136.114692][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 136.134005][ T65] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 136.139141][ T65] usb 7-1: config 0 has no interface number 0 [ 136.150705][ T65] usb 7-1: config 0 interface 199 has no altsetting 0 [ 136.164043][ T65] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 136.164767][ T7148] overlayfs: failed to clone upperpath [ 136.168719][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.168745][ T65] usb 7-1: Product: syz [ 136.168759][ T65] usb 7-1: Manufacturer: syz [ 136.168772][ T65] usb 7-1: SerialNumber: syz [ 136.171581][ T65] usb 7-1: config 0 descriptor?? [ 136.193167][ T65] usbtouchscreen 7-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 136.392645][ T7128] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 136.486427][ T7167] netlink: 'syz.1.421': attribute type 10 has an invalid length. [ 136.653629][ T7179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.658449][ T7179] IPv6: NLM_F_CREATE should be set when creating new route [ 136.746936][ T7187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.762151][ T7187] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.835517][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.954886][ C3] vkms_vblank_simulate: vblank timer overrun [ 136.998242][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.002027][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.030233][ T65] usb 7-1: USB disconnect, device number 5 [ 137.092212][ T7196] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 137.263154][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.299435][ T7207] overlay: ./file0 is not a directory [ 137.358326][ T7207] netfs: Duplicate cookie detected [ 137.361053][ T7207] netfs: O-cookie c=00000019 [fl=5088 na=1 nA=0 s=-] [ 137.364231][ T7207] netfs: O-cookie V=00000010 [9p,syz,] [ 137.380419][ T7207] netfs: O-key=[8] '9f00240200000000' [ 137.382772][ T7207] netfs: N-cookie c=0000001a [fl=8 na=0 nA=0 s=-] [ 137.385553][ T7207] netfs: N-cookie V=00000010 [9p,syz,] [ 137.387859][ T7207] netfs: N-key=[8] '9f00240200000000' [ 137.465510][ T40] audit: type=1400 audit(1746176055.444:372): avc: denied { write } for pid=7212 comm="syz.2.441" path="socket:[16086]" dev="sockfs" ino=16086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.809964][ T7235] 9pnet_virtio: no channels available for device syz [ 137.811802][ T7233] overlay: ./file0 is not a directory [ 137.825215][ T7235] overlayfs: failed to clone upperpath [ 137.837653][ T7233] netfs: Duplicate cookie detected [ 137.840009][ T7233] netfs: O-cookie c=0000001c [fl=5088 na=1 nA=0 s=-] [ 137.856420][ T7233] netfs: O-cookie V=00000011 [9p,syz,] [ 137.858762][ T7233] netfs: O-key=[8] '9f00240200000000' [ 137.860928][ T7233] netfs: N-cookie c=0000001d [fl=8 na=0 nA=0 s=-] [ 137.863232][ T7233] netfs: N-cookie V=00000011 [9p,syz,] [ 137.865404][ T7233] netfs: N-key=[8] '9f00240200000000' [ 137.866294][ T836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.091178][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 138.096563][ T836] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 138.101141][ T836] usb 5-1: config 0 has no interface number 0 [ 138.106295][ T836] usb 5-1: config 0 interface 199 has no altsetting 0 [ 138.149159][ T836] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 138.175483][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.182029][ T836] usb 5-1: Product: syz [ 138.192002][ T836] usb 5-1: Manufacturer: syz [ 138.194414][ T836] usb 5-1: SerialNumber: syz [ 138.198403][ T836] usb 5-1: config 0 descriptor?? [ 138.254573][ T836] usbtouchscreen 5-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 138.289952][ T7259] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 138.373577][ C3] vkms_vblank_simulate: vblank timer overrun [ 138.476550][ T7219] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 138.535669][ T7265] overlayfs: failed to clone upperpath [ 138.839964][ T40] audit: type=1400 audit(1746176056.814:373): avc: denied { bind } for pid=7282 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.906573][ T7286] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 138.917901][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.975590][ T7289] overlay: ./file0 is not a directory [ 139.039685][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.049728][ T64] usb 5-1: USB disconnect, device number 9 [ 139.072748][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.104067][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.104110][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.140831][ T7294] netfs: Duplicate cookie detected [ 139.143077][ T7298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.143783][ T7294] netfs: O-cookie c=0000001f [fl=5088 na=1 nA=0 s=-] [ 139.149166][ T7298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 139.165820][ T7294] netfs: O-cookie V=00000013 [9p,syz,] [ 139.169737][ T7294] netfs: O-key=[8] '9f00240200000000' [ 139.173356][ T7294] netfs: N-cookie c=00000020 [fl=8 na=0 nA=0 s=-] [ 139.177709][ T7294] netfs: N-cookie V=00000013 [9p,syz,] [ 139.181581][ T7294] netfs: N-key=[8] '9f00240200000000' [ 139.339165][ T7302] Cache volume key already in use (9p,syz,) [ 139.366079][ T7304] overlayfs: failed to clone upperpath [ 139.541256][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.567646][ T7314] overlayfs: failed to clone upperpath [ 139.800686][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.957672][ T7326] overlay: ./file0 is not a directory [ 139.989364][ T7326] netfs: Duplicate cookie detected [ 139.991818][ T7326] netfs: O-cookie c=00000022 [fl=5088 na=1 nA=0 s=-] [ 140.000657][ T7326] netfs: O-cookie V=00000016 [9p,syz,] [ 140.003923][ T7326] netfs: O-key=[8] '9f00240200000000' [ 140.016439][ T7326] netfs: N-cookie c=00000023 [fl=8 na=0 nA=0 s=-] [ 140.027865][ T7326] netfs: N-cookie V=00000016 [9p,syz,] [ 140.032399][ T7326] netfs: N-key=[8] '9f00240200000000' [ 140.055055][ T7330] 9pnet_virtio: no channels available for device syz [ 140.244305][ T7337] Failed to initialize the IGMP autojoin socket (err -2) [ 140.293020][ T7340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.297672][ T7340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.671818][ T7361] overlayfs: failed to clone upperpath [ 141.004967][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.038675][ T7372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.152462][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.484981][ T7384] overlayfs: failed to clone upperpath [ 141.604387][ T7390] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 141.623881][ T7392] use of bytesused == 0 is deprecated and will be removed in the future, [ 141.633484][ T7392] use the actual size instead. [ 141.768922][ T7401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.773523][ T7401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.850928][ T67] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 142.115460][ T7420] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 142.384143][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.420244][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.492261][ T7437] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 142.593613][ T7431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.648897][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.665857][ T7443] overlayfs: failed to clone upperpath [ 142.736474][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 142.884899][ T7454] overlayfs: failed to clone upperpath [ 143.155940][ T7465] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 143.245469][ T7471] netlink: 168 bytes leftover after parsing attributes in process `syz.0.562'. [ 143.292296][ T836] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 143.417134][ T7481] overlayfs: failed to clone upperpath [ 143.443733][ T836] usb 7-1: Using ep0 maxpacket: 16 [ 143.468146][ T836] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 143.475469][ T836] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 143.479158][ T836] usb 7-1: Product: syz [ 143.491115][ T836] usb 7-1: Manufacturer: syz [ 143.496329][ T836] usb 7-1: SerialNumber: syz [ 143.517680][ T836] usb 7-1: config 0 descriptor?? [ 143.761393][ T64] usb 7-1: USB disconnect, device number 6 [ 143.888741][ T7496] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 143.931662][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.062412][ T7503] overlay: ./file0 is not a directory [ 144.323493][ T7505] infiniband syz2: set down [ 144.328436][ T7505] infiniband syz2: added ipvlan1 [ 144.336230][ T7505] syz2: rxe_create_qp: returned err = -2 [ 144.339026][ T7505] infiniband syz2: Couldn't create ib_mad QP1 [ 144.343164][ T7505] infiniband syz2: Couldn't open port 1 [ 144.349945][ T7512] overlay: ./file0 is not a directory [ 144.366473][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.409032][ T7505] RDS/IB: syz2: added [ 144.414891][ T7505] smc: adding ib device syz2 with port count 1 [ 144.419271][ T7505] smc: ib device syz2 port 1 has pnetid [ 144.928268][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.130321][ T7537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.161874][ T40] audit: type=1400 audit(1746176063.134:374): avc: denied { setopt } for pid=7531 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.206948][ T7537] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.474652][ T7542] overlay: ./file0 is not a directory [ 145.749031][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.784368][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.165783][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.476787][ T7578] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.500247][ T7578] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 146.632738][ T7584] overlayfs: failed to clone upperpath [ 146.664903][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.930736][ T40] audit: type=1400 audit(1746176064.864:375): avc: denied { create } for pid=7590 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 146.951575][ T40] audit: type=1400 audit(1746176064.864:376): avc: denied { setopt } for pid=7590 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 147.348116][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.524585][ T7604] overlayfs: failed to clone upperpath [ 147.891602][ T7628] overlay: ./file0 is not a directory [ 147.891646][ T7629] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.918232][ T7629] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 147.966962][ T7632] netfs: Duplicate cookie detected [ 147.969388][ T7632] netfs: O-cookie c=0000002b [fl=5088 na=1 nA=0 s=-] [ 147.973149][ T7632] netfs: O-cookie V=00000021 [9p,syz,] [ 147.974923][ T7632] netfs: O-key=[8] '9f00240200000000' [ 147.976984][ T7632] netfs: N-cookie c=0000002c [fl=8 na=0 nA=0 s=-] [ 147.979363][ T7632] netfs: N-cookie V=00000021 [9p,syz,] [ 147.992019][ T7632] netfs: N-key=[8] '9f00240200000000' [ 148.035474][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.262587][ T7642] overlayfs: failed to clone upperpath [ 148.279543][ T1461] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.408139][ T7645] overlayfs: failed to clone upperpath [ 148.463923][ T1461] usb 5-1: Using ep0 maxpacket: 8 [ 148.473886][ T1461] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.479720][ T1461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 148.506839][ T65] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 148.515724][ T1461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 148.528699][ T1461] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 148.536258][ T1461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.540713][ T1461] usb 5-1: Product: syz [ 148.542556][ T1461] usb 5-1: Manufacturer: syz [ 148.545234][ T1461] usb 5-1: SerialNumber: syz [ 148.560936][ T1461] usb 5-1: config 0 descriptor?? [ 148.620630][ T1461] rc_core: IR keymap rc-streamzap not found [ 148.623138][ T1461] Registered IR keymap rc-empty [ 148.626956][ T1461] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 148.649777][ T1461] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 148.721745][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 148.729809][ T65] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 148.781492][ T65] usb 7-1: config 0 has no interface number 0 [ 148.793081][ T64] usb 5-1: USB disconnect, device number 10 [ 148.795251][ T65] usb 7-1: config 0 interface 199 has no altsetting 0 [ 148.821333][ T65] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 148.833194][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.841737][ T65] usb 7-1: Product: syz [ 148.847454][ T65] usb 7-1: Manufacturer: syz [ 148.856151][ T65] usb 7-1: SerialNumber: syz [ 148.880656][ T65] usb 7-1: config 0 descriptor?? [ 148.891863][ T65] usbtouchscreen 7-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 149.097431][ T7641] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 149.210806][ T7668] overlayfs: failed to clone upperpath [ 149.730257][ T64] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.916689][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 149.920864][ T64] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 150 [ 149.929889][ T7688] 9pnet_virtio: no channels available for device syz [ 149.938111][ T64] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.961934][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=e6.40 [ 149.983892][ T7689] overlayfs: failed to clone upperpath [ 149.994782][ T64] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 150.011709][ T7688] overlayfs: failed to clone upperpath [ 150.016793][ T64] usb 5-1: Product: syz [ 150.026335][ T64] usb 5-1: Manufacturer: syz [ 150.055683][ T7672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.498246][ T7672] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.709594][ T64] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 150.729833][ T7712] overlayfs: failed to clone upperpath [ 150.754746][ T64] usb 5-1: USB disconnect, device number 11 [ 150.866649][ T7715] overlayfs: failed to clone upperpath [ 150.982413][ T7719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.986398][ T7719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.152996][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.258859][ T1461] usb 7-1: USB disconnect, device number 7 [ 151.375706][ T7730] Bluetooth: MGMT ver 1.23 [ 151.793964][ T7736] overlay: ./file0 is not a directory [ 151.895083][ T7738] 9pnet_virtio: no channels available for device syz [ 151.901938][ T7738] overlayfs: failed to clone upperpath [ 151.979029][ T7741] netfs: Duplicate cookie detected [ 151.981103][ T7741] netfs: O-cookie c=0000002e [fl=5088 na=1 nA=0 s=-] [ 151.984468][ T7741] netfs: O-cookie V=00000028 [9p,syz,] [ 151.987006][ T7741] netfs: O-key=[8] '9f00240200000000' [ 151.990906][ T7741] netfs: N-cookie c=0000002f [fl=8 na=0 nA=0 s=-] [ 151.994207][ T7741] netfs: N-cookie V=00000028 [9p,syz,] [ 152.016445][ T7741] netfs: N-key=[8] '9f00240200000000' [ 152.157220][ T1260] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.729252][ T7782] 9pnet_virtio: no channels available for device syz [ 152.731354][ T7783] overlay: ./file0 is not a directory [ 152.737296][ T7782] overlayfs: failed to clone upperpath [ 153.244749][ T7807] overlay: ./file0 is not a directory [ 153.316028][ T7807] netfs: Duplicate cookie detected [ 153.318849][ T7807] netfs: O-cookie c=00000033 [fl=5088 na=1 nA=0 s=-] [ 153.322552][ T7807] netfs: O-cookie V=0000002a [9p,syz,] [ 153.325791][ T7807] netfs: O-key=[8] '9f00240200000000' [ 153.329287][ T7807] netfs: N-cookie c=00000034 [fl=8 na=0 nA=0 s=-] [ 153.332806][ T7807] netfs: N-cookie V=0000002a [9p,syz,] [ 153.335282][ T7807] netfs: N-key=[8] '9f00240200000000' [ 153.352945][ T7811] 9pnet_virtio: no channels available for device syz [ 153.358814][ T7811] overlayfs: failed to clone upperpath [ 153.816445][ T7824] Bluetooth: MGMT ver 1.23 [ 153.872051][ C3] vkms_vblank_simulate: vblank timer overrun [ 154.002167][ T7834] overlayfs: failed to clone upperpath [ 154.160126][ C3] vkms_vblank_simulate: vblank timer overrun [ 154.439964][ C3] vkms_vblank_simulate: vblank timer overrun [ 154.472285][ C3] vkms_vblank_simulate: vblank timer overrun [ 154.508119][ T7850] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.516798][ T7850] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.520835][ T7852] overlay: ./file0 is not a directory [ 154.586263][ T7856] netfs: Duplicate cookie detected [ 154.589673][ T7856] netfs: O-cookie c=00000036 [fl=5088 na=1 nA=0 s=-] [ 154.598381][ T7856] netfs: O-cookie V=0000002c [9p,syz,] [ 154.623664][ C3] vkms_vblank_simulate: vblank timer overrun [ 154.634419][ T7856] netfs: O-key=[8] '9f00240200000000' [ 154.644404][ T7856] netfs: N-cookie c=00000037 [fl=8 na=0 nA=0 s=-] [ 154.653046][ T7856] netfs: N-cookie V=0000002c [9p,syz,] [ 154.665431][ T7856] netfs: N-key=[8] '9f00240200000000' [ 154.769203][ T7860] 9pnet_virtio: no channels available for device syz [ 154.805929][ T7860] overlayfs: failed to clone upperpath [ 155.318987][ C3] vkms_vblank_simulate: vblank timer overrun [ 155.370205][ T836] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 155.590574][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 155.603086][ T836] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.608960][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.617708][ T836] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.623032][ T836] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.629239][ T836] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.635679][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.718500][ C3] vkms_vblank_simulate: vblank timer overrun [ 155.886040][ T836] usb 7-1: GET_CAPABILITIES returned 0 [ 155.903172][ T836] usbtmc 7-1:16.0: can't read capabilities [ 155.906411][ T7908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 155.910583][ T7908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.952971][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.070449][ C3] vkms_vblank_simulate: vblank timer overrun [ 156.087533][ T836] usb 7-1: USB disconnect, device number 8 [ 156.174039][ T7911] fuse: Bad value for 'fd' [ 156.542922][ C3] vkms_vblank_simulate: vblank timer overrun [ 156.705722][ T7922] overlayfs: failed to clone upperpath [ 157.072933][ C3] vkms_vblank_simulate: vblank timer overrun [ 157.142438][ T7940] fuse: Bad value for 'fd' [ 157.262798][ C3] vkms_vblank_simulate: vblank timer overrun [ 157.687204][ T7958] overlayfs: failed to clone upperpath [ 157.870327][ T7968] fuse: Bad value for 'fd' [ 157.930288][ T836] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 158.092022][ C3] vkms_vblank_simulate: vblank timer overrun [ 158.117659][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 158.131857][ T836] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 158.156009][ C3] vkms_vblank_simulate: vblank timer overrun [ 158.164341][ T7980] 9pnet_virtio: no channels available for device syz [ 158.192909][ T836] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.195792][ T836] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.198404][ T836] usb 5-1: Product: syz [ 158.199815][ T836] usb 5-1: Manufacturer: syz [ 158.202762][ T836] usb 5-1: SerialNumber: syz [ 158.206518][ T836] usb 5-1: config 0 descriptor?? [ 158.238282][ T7961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.295484][ T7983] 9pnet_virtio: no channels available for device syz [ 158.302051][ T7983] overlayfs: failed to clone upperpath [ 158.319201][ T7981] overlay: ./file0 is not a directory [ 158.374326][ T7981] netfs: Duplicate cookie detected [ 158.376669][ T7981] netfs: O-cookie c=00000039 [fl=5088 na=1 nA=0 s=-] [ 158.379636][ T7981] netfs: O-cookie V=0000002f [9p,syz,] [ 158.385250][ T7981] netfs: O-key=[8] '9f00240200000000' [ 158.387951][ T7981] netfs: N-cookie c=0000003a [fl=8 na=0 nA=0 s=-] [ 158.396689][ T7981] netfs: N-cookie V=0000002f [9p,syz,] [ 158.427495][ T7981] netfs: N-key=[8] '9f00240200000000' [ 158.537361][ T6009] usb 5-1: USB disconnect, device number 12 [ 158.965568][ T8012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.969442][ T8012] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.288000][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.830006][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.841309][ T5990] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 160.046012][ T5990] usb 7-1: Using ep0 maxpacket: 32 [ 160.053696][ T5990] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 160.074400][ T5990] usb 7-1: config 0 has no interface number 0 [ 160.078892][ T5990] usb 7-1: config 0 interface 199 has no altsetting 0 [ 160.108067][ T5990] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 160.114790][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.136684][ T5990] usb 7-1: Product: syz [ 160.138235][ T5990] usb 7-1: Manufacturer: syz [ 160.140881][ T5990] usb 7-1: SerialNumber: syz [ 160.161242][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.167701][ T5990] usb 7-1: config 0 descriptor?? [ 160.183351][ T5990] usbtouchscreen 7-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 160.378751][ T8029] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 160.441268][ T8057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.444261][ T8055] overlayfs: failed to clone upperpath [ 160.447954][ T8057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.698298][ T8062] overlay: ./file0 is not a directory [ 160.790378][ T8062] netfs: Duplicate cookie detected [ 160.792572][ T8062] netfs: O-cookie c=0000003c [fl=5088 na=1 nA=0 s=-] [ 160.795001][ T8062] netfs: O-cookie V=00000032 [9p,syz,] [ 160.806966][ T8062] netfs: O-key=[8] '9f00240200000000' [ 160.811695][ T8062] netfs: N-cookie c=0000003d [fl=8 na=0 nA=0 s=-] [ 160.820352][ T8062] netfs: N-cookie V=00000032 [9p,syz,] [ 160.826817][ T8062] netfs: N-key=[8] '9f00240200000000' [ 161.151987][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.741096][ T8087] Failed to initialize the IGMP autojoin socket (err -2) [ 161.890688][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.971946][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.077969][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.827'. [ 162.081625][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 162.085495][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.827'. [ 162.089792][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.827'. [ 162.523106][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.595057][ T64] usb 7-1: USB disconnect, device number 9 [ 162.723745][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.739381][ T8133] overlayfs: failed to resolve './file1': -2 [ 162.771911][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.930060][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.480241][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.205304][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.040198][ T1461] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 165.213201][ T1461] usb 7-1: Using ep0 maxpacket: 32 [ 165.219179][ T1461] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 165.227962][ T1461] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 165.260688][ T1461] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 165.273631][ T1461] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 165.286626][ T1461] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.324967][ T1461] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.335463][ T1461] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.341174][ T1461] usb 7-1: Product: syz [ 165.343887][ T1461] usb 7-1: Manufacturer: syz [ 165.346727][ T1461] usb 7-1: SerialNumber: syz [ 165.360631][ T1461] usb 7-1: config 0 descriptor?? [ 165.384312][ T1461] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.415896][ T1461] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.516351][ T8206] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.520563][ T8206] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.294908][ T78] usb 7-1: USB disconnect, device number 10 [ 166.300241][ T78] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 166.352682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 166.882497][ T8237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.882804][ T8241] Cache volume key already in use (9p,syz,) [ 166.917601][ T8237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.372460][ T1461] libceph: mon0 (1)[c::]:6789 connect error [ 167.405575][ T1461] libceph: mon0 (1)[c::]:6789 connect error [ 167.439497][ T8260] ceph: No mds server is up or the cluster is laggy [ 167.752659][ T8265] netlink: 'syz.3.895': attribute type 29 has an invalid length. [ 167.787031][ T8265] netlink: 'syz.3.895': attribute type 29 has an invalid length. [ 167.921297][ T67] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 168.292994][ T8297] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 168.326957][ T8300] netlink: 108 bytes leftover after parsing attributes in process `syz.2.909'. [ 168.340934][ T40] audit: type=1400 audit(1746176086.314:377): avc: denied { listen } for pid=8299 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.366756][ T40] audit: type=1326 audit(1746176086.314:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8299 comm="syz.2.909" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc90158e969 code=0x0 [ 168.446220][ T8304] binder: 8299:8304 unknown command 2 [ 168.448914][ T8304] binder: 8299:8304 ioctl c0306201 200000000080 returned -22 [ 168.780830][ T8310] 9pnet_fd: Insufficient options for proto=fd [ 168.849700][ T8313] overlayfs: failed to resolve './file1': -2 [ 169.117079][ T8320] overlayfs: failed to clone upperpath [ 169.241512][ T8331] 9pnet_fd: Insufficient options for proto=fd [ 169.371761][ T8340] Cache volume key already in use (9p,syz,) [ 169.393079][ T8343] overlayfs: failed to resolve './file0': -2 [ 169.689435][ T8353] overlayfs: failed to clone upperpath [ 169.770710][ T8360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 169.774785][ T8360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 169.963539][ T65] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 170.155373][ T65] usb 7-1: Using ep0 maxpacket: 8 [ 170.168368][ T65] usb 7-1: config index 0 descriptor too short (expected 65535, got 18) [ 170.173716][ T65] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 170.196955][ T65] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 170.201494][ T65] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 170.221848][ T65] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 170.225838][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.229317][ T65] usb 7-1: Product: syz [ 170.240795][ T65] usb 7-1: Manufacturer: syz [ 170.243101][ T65] usb 7-1: SerialNumber: syz [ 170.472006][ T65] usb 7-1: USB disconnect, device number 11 [ 170.483075][ T8379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.942'. [ 170.497646][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 170.502588][ T8379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.942'. [ 170.508265][ T8379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.942'. [ 171.016185][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.951'. [ 171.019955][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'. [ 171.027065][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.951'. [ 171.056330][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.951'. [ 171.128130][ T8401] 9pnet_virtio: no channels available for device syz [ 171.746900][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'. [ 171.977274][ T67] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.011140][ T67] Bluetooth: hci1: Injecting HCI hardware error event [ 172.015515][ T67] Bluetooth: hci1: hardware error 0x00 [ 172.023926][ T8440] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 172.117033][ T8443] overlayfs: failed to clone upperpath [ 172.553989][ T8460] overlayfs: failed to clone upperpath [ 172.714648][ T8467] overlayfs: failed to clone upperpath [ 172.981196][ T8474] Cache volume key already in use (9p,syz,) [ 173.040916][ T8476] overlayfs: failed to resolve './file1': -2 [ 173.651706][ T8496] overlayfs: failed to clone upperpath [ 173.917057][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 173.928424][ T8509] ceph: No mds server is up or the cluster is laggy [ 174.048596][ T67] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 174.174314][ T8518] __nla_validate_parse: 7 callbacks suppressed [ 174.174337][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 174.183560][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1001'. [ 174.203897][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 174.207300][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1001'. [ 174.831303][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 174.837585][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'. [ 174.861742][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 174.885520][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'. [ 174.888410][ T8543] ceph: No mds server is up or the cluster is laggy [ 174.891254][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'. [ 174.998112][ C3] vkms_vblank_simulate: vblank timer overrun [ 175.468848][ T8558] 9pnet_fd: Insufficient options for proto=fd [ 175.663762][ C3] vkms_vblank_simulate: vblank timer overrun [ 175.772923][ T8575] overlayfs: failed to clone upperpath [ 175.964871][ T8582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.982343][ T8582] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 176.031345][ T8587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'. [ 176.050950][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1031'. [ 176.454599][ T8608] overlayfs: failed to clone upperpath [ 176.630924][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.689873][ T8616] overlay: ./file0 is not a directory [ 176.723435][ T8616] netfs: Duplicate cookie detected [ 176.726462][ T8616] netfs: O-cookie c=00000041 [fl=5088 na=1 nA=0 s=-] [ 176.729971][ T8616] netfs: O-cookie V=00000047 [9p,syz,] [ 176.736988][ T8616] netfs: O-key=[8] '9f00240200000000' [ 176.742804][ T8616] netfs: N-cookie c=00000042 [fl=8 na=0 nA=0 s=-] [ 176.758383][ T8616] netfs: N-cookie V=00000047 [9p,syz,] [ 176.770745][ T8616] netfs: N-key=[8] '9f00240200000000' [ 176.882998][ T8620] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 176.887060][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.894665][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.903347][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.930412][ C3] vkms_vblank_simulate: vblank timer overrun [ 176.944508][ T8620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.948712][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.961709][ T8620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.970795][ T8620] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 177.313512][ C3] vkms_vblank_simulate: vblank timer overrun [ 177.447895][ C3] vkms_vblank_simulate: vblank timer overrun [ 177.747846][ C3] vkms_vblank_simulate: vblank timer overrun [ 177.835862][ C3] vkms_vblank_simulate: vblank timer overrun [ 178.024677][ C3] vkms_vblank_simulate: vblank timer overrun [ 178.113698][ C3] vkms_vblank_simulate: vblank timer overrun [ 178.424628][ T8676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.428762][ T8676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.495208][ T8672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.690332][ T1461] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 178.840286][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.843369][ T1461] usb 7-1: Using ep0 maxpacket: 32 [ 178.847646][ T1461] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.857090][ T1461] usb 7-1: config index 0 descriptor too short (expected 34347, got 43) [ 178.864545][ T1461] usb 7-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 178.868042][ T1461] usb 7-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 178.877959][ T1461] usb 7-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 178.885249][ T1461] usb 7-1: config 31 has no interface number 0 [ 178.888763][ T1461] usb 7-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 178.906252][ T1461] usb 7-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 1 [ 178.915164][ T1461] usb 7-1: config 31 interface 81 has no altsetting 0 [ 178.947219][ T1461] usb 7-1: string descriptor 0 read error: -22 [ 178.954536][ T1461] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 178.960466][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.982602][ T8679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.998273][ T1461] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:31.81/input/input19 [ 179.034493][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.221534][ C1] usbtouchscreen 7-1:31.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 179.331839][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.363809][ C3] vkms_vblank_simulate: vblank timer overrun [ 179.469565][ T78] usb 7-1: USB disconnect, device number 12 [ 179.504995][ T8697] overlayfs: failed to clone upperpath [ 179.595806][ C3] vkms_vblank_simulate: vblank timer overrun [ 180.105261][ T8729] overlayfs: failed to clone upperpath [ 180.209392][ T8734] overlayfs: failed to resolve './file0': -2 [ 180.275924][ T8736] overlayfs: failed to clone upperpath [ 180.431705][ T8738] __nla_validate_parse: 10 callbacks suppressed [ 180.431724][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1099'. [ 180.462876][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1099'. [ 180.471765][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1099'. [ 180.490281][ T8738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1099'. [ 180.695812][ C3] vkms_vblank_simulate: vblank timer overrun [ 180.738669][ C3] vkms_vblank_simulate: vblank timer overrun [ 180.748455][ T8756] overlayfs: failed to resolve './file0': -2 [ 180.764255][ T8758] 9pnet_virtio: no channels available for device syz [ 181.004854][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1114'. [ 181.019262][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1114'. [ 181.035491][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1114'. [ 181.050296][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1114'. [ 181.787628][ T8794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1123'. [ 181.793054][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1123'. [ 182.470844][ T836] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 182.674032][ T836] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 182.679393][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.685667][ T836] usb 7-1: Product: syz [ 182.687599][ T836] usb 7-1: Manufacturer: syz [ 182.689921][ T836] usb 7-1: SerialNumber: syz [ 182.697009][ T836] usb 7-1: config 0 descriptor?? [ 182.913850][ T836] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.940784][ T836] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.948709][ T836] usb 7-1: USB disconnect, device number 13 [ 183.239086][ T8834] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 183.562032][ T8848] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.565409][ T8848] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.790884][ T1461] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 183.960214][ T1461] usb 7-1: Using ep0 maxpacket: 32 [ 183.964919][ T1461] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 183.969163][ T1461] usb 7-1: config 0 has no interface number 0 [ 183.979257][ T1461] usb 7-1: config 0 interface 199 has no altsetting 0 [ 184.000936][ T1461] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 184.004601][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.007917][ T1461] usb 7-1: Product: syz [ 184.009820][ T1461] usb 7-1: Manufacturer: syz [ 184.012618][ T1461] usb 7-1: SerialNumber: syz [ 184.040038][ T1461] usb 7-1: config 0 descriptor?? [ 184.069317][ T1461] usbtouchscreen 7-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 184.182419][ T8868] overlayfs: failed to clone upperpath [ 184.270604][ T8844] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 184.537390][ T8882] overlayfs: failed to clone upperpath [ 184.651597][ T8886] overlayfs: failed to clone upperpath [ 184.836529][ T8895] overlayfs: failed to clone upperpath [ 185.033647][ T8906] overlayfs: failed to clone upperpath [ 185.329852][ T8914] overlayfs: failed to clone upperpath [ 186.063947][ T8923] overlayfs: failed to clone upperpath [ 186.275583][ T8933] overlayfs: failed to clone upperpath [ 186.350363][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.509849][ T1461] usb 7-1: USB disconnect, device number 14 [ 186.614006][ T8951] overlayfs: failed to clone upperpath [ 186.790865][ T8958] __nla_validate_parse: 18 callbacks suppressed [ 186.790885][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 186.799912][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'. [ 186.804556][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 186.809578][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1198'. [ 187.446742][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1203'. [ 187.459063][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1203'. [ 187.479318][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1203'. [ 187.487575][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1203'. [ 187.633758][ T8981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1208'. [ 187.638579][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'. [ 187.935647][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.235713][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.018607][ T9026] overlayfs: failed to clone upperpath [ 189.119806][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.219174][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.367727][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.887331][ T9065] overlayfs: failed to clone upperpath [ 189.897745][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.032079][ T40] audit: type=1326 audit(1746176107.994:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.0.1245" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63618e969 code=0x0 [ 190.188412][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.279076][ T9077] overlayfs: failed to clone upperpath [ 190.331723][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.949833][ T9103] 9pnet_fd: Insufficient options for proto=fd [ 191.147896][ T64] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 191.262313][ T9112] overlayfs: failed to clone upperpath [ 191.349501][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 191.353348][ T64] usb 7-1: config 0 has an invalid interface number: 199 but max is 0 [ 191.360613][ T64] usb 7-1: config 0 has no interface number 0 [ 191.390177][ T64] usb 7-1: config 0 interface 199 has no altsetting 0 [ 191.403896][ T64] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=d2.77 [ 191.411680][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.422200][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.422221][ T64] usb 7-1: Product: syz [ 191.422231][ T64] usb 7-1: Manufacturer: syz [ 191.422241][ T64] usb 7-1: SerialNumber: syz [ 191.459409][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.474264][ T64] usb 7-1: config 0 descriptor?? [ 191.479758][ T64] usbtouchscreen 7-1:0.199: probe with driver usbtouchscreen failed with error -32 [ 191.503355][ T9123] overlayfs: failed to clone upperpath [ 191.678516][ T9099] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 191.704018][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.836486][ T9145] __nla_validate_parse: 10 callbacks suppressed [ 191.836503][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1280'. [ 191.844803][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1280'. [ 191.848473][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1280'. [ 191.857290][ T9146] overlayfs: failed to clone upperpath [ 191.868772][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1280'. [ 192.228949][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.237936][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.249994][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.266257][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.279781][ T9171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1292'. [ 192.293955][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1292'. [ 192.371730][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.427610][ T9178] overlayfs: failed to clone upperpath [ 192.936967][ T9201] overlayfs: failed to clone upperpath [ 193.252655][ T9208] overlayfs: failed to clone upperpath [ 193.618104][ T9214] overlayfs: failed to clone upperpath [ 193.707648][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.714043][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.817410][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.887503][ T6009] usb 7-1: USB disconnect, device number 15 [ 194.116841][ T9235] 9pnet_virtio: no channels available for device syz [ 194.203677][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206212][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.382492][ T64] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 194.530632][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 194.534686][ T64] usb 7-1: config index 0 descriptor too short (expected 65535, got 18) [ 194.537863][ T64] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 194.556832][ T64] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 194.561614][ T64] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 194.596158][ T64] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 194.606880][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.612766][ T64] usb 7-1: Product: syz [ 194.615046][ T64] usb 7-1: Manufacturer: syz [ 194.617195][ T64] usb 7-1: SerialNumber: syz [ 194.875471][ T64] usb 7-1: USB disconnect, device number 16 [ 194.897090][ T9256] overlayfs: failed to clone upperpath [ 195.281113][ T9268] overlayfs: failed to clone upperpath [ 195.369721][ T9270] Failed to initialize the IGMP autojoin socket (err -2) [ 195.565619][ T9279] overlayfs: failed to clone upperpath [ 195.802903][ T9289] overlayfs: failed to clone upperpath [ 195.889186][ T9293] overlayfs: failed to clone upperpath [ 196.505815][ T9313] overlayfs: failed to clone upperpath [ 197.134113][ T9333] overlayfs: failed to clone upperpath [ 197.597984][ T9341] overlayfs: failed to clone upperpath [ 197.744300][ T9355] __nla_validate_parse: 14 callbacks suppressed [ 197.744318][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1374'. [ 197.762766][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1374'. [ 197.767471][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1374'. [ 197.784605][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1374'. [ 197.911279][ T9365] 9pnet: Unknown protocol version 9 [ 197.962931][ T9365] overlayfs: failed to clone upperpath [ 198.581234][ T9391] 9pnet: Unknown protocol version 9 [ 198.587055][ T9391] overlayfs: failed to clone upperpath [ 198.609232][ T9393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1390'. [ 198.615148][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 198.620123][ T9393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1390'. [ 198.624247][ T9393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1390'. [ 198.700259][ T9398] team0: No ports can be present during mode change [ 198.838511][ T9409] overlayfs: failed to clone upperpath [ 198.949472][ T9413] 9pnet: Unknown protocol version 9 [ 198.959183][ T9413] overlayfs: failed to clone upperpath [ 199.405369][ T9428] overlayfs: failed to clone upperpath [ 199.548857][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1409'. [ 199.553869][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1409'. [ 199.665688][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.886237][ T9452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.886268][ T9452] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.827509][ T9487] 9pnet_virtio: no channels available for device syz [ 200.896551][ T1461] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 201.115800][ T1461] usb 7-1: Using ep0 maxpacket: 8 [ 201.127010][ T1461] usb 7-1: config index 0 descriptor too short (expected 65535, got 18) [ 201.141933][ T9497] 9pnet_virtio: no channels available for device syz [ 201.147471][ T1461] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 201.147521][ T1461] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 201.147537][ T1461] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 201.153137][ T1461] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 201.165304][ T9497] overlayfs: failed to clone upperpath [ 201.237950][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.258064][ T1461] usb 7-1: Product: syz [ 201.259902][ T1461] usb 7-1: Manufacturer: syz [ 201.262145][ T1461] usb 7-1: SerialNumber: syz [ 201.307813][ T9503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.315794][ T9503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.506842][ T65] usb 7-1: USB disconnect, device number 17 [ 201.525410][ T9510] 9pnet: Unknown protocol version 9p200 [ 201.551002][ T9510] overlayfs: failed to clone upperpath [ 202.027138][ T9530] 9pnet: Unknown protocol version 9 [ 202.033148][ T9530] overlayfs: failed to clone upperpath [ 202.237620][ T9538] 9pnet: Unknown protocol version 9p2000. [ 202.354796][ T9547] overlayfs: failed to clone upperpath [ 202.520686][ T9557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.535189][ T9557] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 203.443550][ T9574] 9pnet: Unknown protocol version 9p2000. [ 203.595331][ T9580] __nla_validate_parse: 14 callbacks suppressed [ 203.595348][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 203.636809][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 203.641428][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 203.648723][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 203.812879][ T9590] overlay: ./file0 is not a directory [ 203.818293][ T9594] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.837463][ T9594] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 203.873014][ T9596] 9pnet: Unknown protocol version 9p200 [ 203.879697][ T9596] overlayfs: failed to clone upperpath [ 204.142026][ T9603] 9pnet: Unknown protocol version 9p2000. [ 204.348132][ T9611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1488'. [ 204.353887][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'. [ 204.394103][ T9611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1488'. [ 204.398455][ T9611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1488'. [ 204.634525][ T9619] 9pnet: Unknown protocol version 9p200 [ 204.683646][ T9619] overlayfs: failed to clone upperpath [ 204.805922][ T9628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 204.812817][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1497'. [ 204.820742][ T9630] overlayfs: failed to clone upperpath [ 205.047604][ T9646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.051014][ T9646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 205.258708][ T9654] 9pnet: Unknown protocol version 9p200 [ 205.486284][ T9663] overlayfs: failed to clone upperpath [ 205.682129][ T9666] overlayfs: failed to clone upperpath [ 205.925395][ T40] audit: type=1400 audit(1746176123.884:380): avc: denied { write } for pid=9676 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.005182][ T9680] 9pnet: Unknown protocol version 9p2000. [ 206.029766][ T9680] overlayfs: failed to clone upperpath [ 206.047790][ T9682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.053188][ T40] audit: type=1400 audit(1746176124.014:381): avc: denied { getattr } for pid=9681 comm="syz.2.1519" name="/" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 206.148057][ T9686] 9pnet_virtio: no channels available for device syz [ 206.328074][ T9696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.351254][ T9696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.723995][ T78] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 206.894286][ T9708] 9pnet: Unknown protocol version 9p2000. [ 206.920298][ T78] usb 7-1: Using ep0 maxpacket: 8 [ 206.927300][ T78] usb 7-1: config index 0 descriptor too short (expected 65535, got 18) [ 206.931544][ T78] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 206.935447][ T9708] overlayfs: failed to clone upperpath [ 206.935993][ T78] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 206.952069][ T78] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 206.965239][ T78] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 206.971769][ T78] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.977793][ T78] usb 7-1: Product: syz [ 206.985946][ T78] usb 7-1: Manufacturer: syz [ 206.992668][ T78] usb 7-1: SerialNumber: syz [ 207.038725][ T9710] 9pnet_virtio: no channels available for device syz [ 207.102169][ T9712] 9pnet_virtio: no channels available for device syz [ 207.116177][ T9712] overlayfs: failed to resolve './file0': -2 [ 207.256958][ T1461] usb 7-1: USB disconnect, device number 18 [ 207.355540][ T9721] 9pnet_virtio: no channels available for device syz [ 207.496228][ T9729] 9pnet: Unknown protocol version 9p2000. [ 207.522614][ T9729] overlayfs: failed to clone upperpath [ 207.527836][ T9731] 9pnet_virtio: no channels available for device syz [ 207.532881][ T9731] overlayfs: failed to resolve './file0': -2 [ 207.601881][ T9735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.621188][ T9735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 208.271047][ T6009] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 208.420971][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 208.485019][ T6009] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.488599][ T6009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.515905][ T6009] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.519815][ T6009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 208.527209][ T6009] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.546164][ T6009] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.559833][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.583615][ T6009] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 209.389153][ T9790] __nla_validate_parse: 18 callbacks suppressed [ 209.389174][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1564'. [ 209.430222][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1564'. [ 209.435031][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1564'. [ 209.442283][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1564'. [ 209.565357][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.116173][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1576'. [ 210.121677][ T9819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1576'. [ 210.126936][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1576'. [ 210.131738][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1576'. [ 210.454155][ T40] audit: type=1400 audit(1746176128.424:382): avc: denied { ioctl } for pid=9829 comm="syz.3.1581" path="socket:[27182]" dev="sockfs" ino=27182 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.593164][ T9833] overlayfs: failed to resolve './file0': -2 [ 210.966926][ T9845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1587'. [ 210.972320][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1587'. [ 211.074299][ T78] usb 7-1: USB disconnect, device number 19 [ 211.851300][ T9884] overlayfs: failed to resolve './file1': -2 [ 212.443895][ T9901] overlayfs: failed to clone upperpath [ 213.102417][ T5990] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 213.201962][ T9930] 9pnet_virtio: no channels available for device syz [ 213.214405][ T9930] overlayfs: failed to clone upperpath [ 213.280293][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 213.286914][ T5990] usb 7-1: config index 0 descriptor too short (expected 65535, got 18) [ 213.293606][ T5990] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 213.311223][ T5990] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 213.335927][ T5990] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 213.353523][ T5990] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 213.356906][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.359709][ T5990] usb 7-1: Product: syz [ 213.361659][ T5990] usb 7-1: Manufacturer: syz [ 213.364353][ T9936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 213.375327][ T5990] usb 7-1: SerialNumber: syz [ 213.385735][ T9936] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 213.614420][ T65] usb 7-1: USB disconnect, device number 20 [ 214.434160][ T9961] Cache volume key already in use (9p,syz,) [ 214.491509][ T9962] overlayfs: failed to resolve './file1': -2 [ 214.596682][ T9964] __nla_validate_parse: 26 callbacks suppressed [ 214.596704][ T9964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'. [ 214.618102][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1638'. [ 214.621899][ T9964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'. [ 214.625476][ T9964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'. [ 214.753101][ T9972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 214.768969][ T9972] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.175212][ C3] ================================================================== [ 215.208446][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 215.212207][ C3] Read of size 1 at addr ffff888020c30418 by task syz.1.1645/9979 [ 215.216493][ C3] [ 215.217512][ C3] CPU: 3 UID: 0 PID: 9979 Comm: syz.1.1645 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 215.217534][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.217544][ C3] Call Trace: [ 215.217553][ C3] [ 215.217566][ C3] dump_stack_lvl+0x116/0x1f0 [ 215.217589][ C3] print_report+0xc3/0x670 [ 215.217604][ C3] ? __virt_addr_valid+0x5e/0x590 [ 215.217624][ C3] ? __phys_addr+0xc6/0x150 [ 215.217643][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 215.217660][ C3] kasan_report+0xe0/0x110 [ 215.217675][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 215.217693][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 215.217708][ C3] __kasan_check_byte+0x36/0x50 [ 215.217723][ C3] lock_acquire+0xfc/0x350 [ 215.217745][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 215.217759][ C3] ? .slowpath+0x9/0x18 [ 215.217776][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 215.217792][ C3] ? p9_req_put+0xaf/0x250 [ 215.217809][ C3] p9_req_put+0xaf/0x250 [ 215.217828][ C3] req_done+0x1dc/0x2e0 [ 215.217844][ C3] ? __pfx_req_done+0x10/0x10 [ 215.217859][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 215.217896][ C3] ? __pfx_req_done+0x10/0x10 [ 215.217911][ C3] vring_interrupt+0x31b/0x400 [ 215.217933][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 215.217953][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 215.217974][ C3] handle_irq_event+0xab/0x1e0 [ 215.217988][ C3] handle_edge_irq+0x263/0xd10 [ 215.218005][ C3] __common_interrupt+0xdf/0x250 [ 215.218027][ C3] common_interrupt+0x61/0xe0 [ 215.218049][ C3] asm_common_interrupt+0x26/0x40 [ 215.218065][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 215.218085][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 a0 83 8b 8b e8 48 f3 ef 09 65 66 c7 05 b6 26 27 12 00 00 e8 b9 3d 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 215.218100][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000202 [ 215.218113][ C3] RAX: 000000000000067a RBX: 00000000ffffffff RCX: 0000000000000002 [ 215.218123][ C3] RDX: 0000000000000000 RSI: ffffffff8dbe0861 RDI: ffffffff8bf47e20 [ 215.218133][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 215.218143][ C3] R10: ffffffff9084fc17 R11: 0000000000000000 R12: 0000000000000280 [ 215.218152][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed10047c1488 [ 215.218168][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 215.218184][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 215.218207][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 215.218227][ C3] __irq_exit_rcu+0x109/0x170 [ 215.218245][ C3] irq_exit_rcu+0x9/0x30 [ 215.218262][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 215.218280][ C3] [ 215.218285][ C3] [ 215.218291][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.218306][ C3] RIP: 0010:lock_acquire+0x62/0x350 [ 215.218328][ C3] Code: ce 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 ea ec 0e 0f 82 74 02 00 00 8b 35 da 19 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 ce 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 215.218342][ C3] RSP: 0018:ffffc900074df2a0 EFLAGS: 00000206 [ 215.218354][ C3] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000000b876632 [ 215.218365][ C3] RDX: 0000000000000000 RSI: ffffffff8dbbb25f RDI: ffffffff8bf47e20 [ 215.218374][ C3] RBP: 0000000000000002 R08: 5f77cbb3d8f98d14 R09: 0000000000000000 [ 215.218384][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 215.218393][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.218409][ C3] ? unwind_next_frame+0x3f4/0x20a0 [ 215.218428][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.218447][ C3] unwind_next_frame+0xd1/0x20a0 [ 215.218463][ C3] ? unwind_next_frame+0xbd/0x20a0 [ 215.218479][ C3] ? __split_vma+0x33b/0x1030 [ 215.218501][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.218519][ C3] arch_stack_walk+0x94/0x100 [ 215.218539][ C3] ? __split_vma+0x33b/0x1030 [ 215.218572][ C3] stack_trace_save+0x8e/0xc0 [ 215.218589][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 215.218608][ C3] ? stack_trace_save+0x8e/0xc0 [ 215.218627][ C3] kasan_save_stack+0x33/0x60 [ 215.218649][ C3] ? kasan_save_stack+0x33/0x60 [ 215.218668][ C3] ? kasan_save_track+0x14/0x30 [ 215.218688][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 215.218702][ C3] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 215.218725][ C3] ? mas_alloc_nodes+0x2f1/0x8b0 [ 215.218741][ C3] ? mas_node_count_gfp+0x105/0x130 [ 215.218756][ C3] ? mas_preallocate+0x53e/0xcd0 [ 215.218775][ C3] ? __split_vma+0x33b/0x1030 [ 215.218808][ C3] kasan_save_track+0x14/0x30 [ 215.218829][ C3] __kasan_slab_alloc+0x89/0x90 [ 215.218843][ C3] kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 215.218867][ C3] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 215.218890][ C3] ? mas_alloc_nodes+0x18b/0x8b0 [ 215.218907][ C3] ? mas_alloc_nodes+0x2f1/0x8b0 [ 215.218923][ C3] mas_alloc_nodes+0x2f1/0x8b0 [ 215.218941][ C3] mas_node_count_gfp+0x105/0x130 [ 215.218958][ C3] mas_preallocate+0x53e/0xcd0 [ 215.218978][ C3] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 215.218996][ C3] ? __pfx_mas_preallocate+0x10/0x10 [ 215.219020][ C3] ? anon_vma_name+0x75/0x100 [ 215.219038][ C3] __split_vma+0x33b/0x1030 [ 215.219060][ C3] ? __pfx___split_vma+0x10/0x10 [ 215.219086][ C3] vma_modify+0x3b4/0x510 [ 215.219108][ C3] vma_modify_flags+0x212/0x2d0 [ 215.219131][ C3] ? __pfx_vma_modify_flags+0x10/0x10 [ 215.219160][ C3] mprotect_fixup+0x2b3/0xb10 [ 215.219185][ C3] ? __pfx_mprotect_fixup+0x10/0x10 [ 215.219205][ C3] ? selinux_file_mprotect+0x15b/0x600 [ 215.219228][ C3] do_mprotect_pkey+0x9ca/0xd50 [ 215.219252][ C3] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 215.219282][ C3] ? rcu_is_watching+0x12/0xc0 [ 215.219303][ C3] __x64_sys_mprotect+0x78/0xc0 [ 215.219325][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.219343][ C3] do_syscall_64+0xcd/0x260 [ 215.219393][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.219407][ C3] RIP: 0033:0x7f3d6d78ea27 [ 215.219420][ C3] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.219432][ C3] RSP: 002b:00007ffcca6026d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 215.219446][ C3] RAX: ffffffffffffffda RBX: 00007f3d6e5466c0 RCX: 00007f3d6d78ea27 [ 215.219456][ C3] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f3d6e527000 [ 215.219465][ C3] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 215.219474][ C3] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcca602830 [ 215.219483][ C3] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 215.219498][ C3] [ 215.219504][ C3] [ 215.791395][ C3] Allocated by task 9984: [ 215.794048][ C3] kasan_save_stack+0x33/0x60 [ 215.797051][ C3] kasan_save_track+0x14/0x30 [ 215.800077][ C3] __kasan_kmalloc+0xaa/0xb0 [ 215.802854][ C3] p9_client_create+0xc7/0x11c0 [ 215.805985][ C3] v9fs_session_init+0x1f7/0x1a80 [ 215.810240][ C3] v9fs_mount+0xc5/0xa30 [ 215.814483][ C3] legacy_get_tree+0x109/0x220 [ 215.817883][ C3] vfs_get_tree+0x8b/0x340 [ 215.822283][ C3] path_mount+0x14d4/0x1f20 [ 215.825614][ C3] __x64_sys_mount+0x28d/0x310 [ 215.829056][ C3] do_syscall_64+0xcd/0x260 [ 215.831472][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.835092][ C3] [ 215.836693][ C3] Freed by task 9984: [ 215.839400][ C3] kasan_save_stack+0x33/0x60 [ 215.842257][ C3] kasan_save_track+0x14/0x30 [ 215.845081][ C3] kasan_save_free_info+0x3b/0x60 [ 215.848315][ C3] __kasan_slab_free+0x51/0x70 [ 215.852028][ C3] kfree+0x2b6/0x4d0 [ 215.854933][ C3] p9_client_create+0xa28/0x11c0 [ 215.857879][ C3] v9fs_session_init+0x1f7/0x1a80 [ 215.860986][ C3] v9fs_mount+0xc5/0xa30 [ 215.863475][ C3] legacy_get_tree+0x109/0x220 [ 215.866089][ C3] vfs_get_tree+0x8b/0x340 [ 215.868654][ C3] path_mount+0x14d4/0x1f20 [ 215.871600][ C3] __x64_sys_mount+0x28d/0x310 [ 215.874994][ C3] do_syscall_64+0xcd/0x260 [ 215.883052][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.885674][ C3] [ 215.886611][ C3] The buggy address belongs to the object at ffff888020c30400 [ 215.886611][ C3] which belongs to the cache kmalloc-512 of size 512 [ 215.905563][ C3] The buggy address is located 24 bytes inside of [ 215.905563][ C3] freed 512-byte region [ffff888020c30400, ffff888020c30600) [ 215.918838][ C3] [ 215.920474][ C3] The buggy address belongs to the physical page: [ 215.925829][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20c30 [ 215.932731][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.939036][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 215.943504][ C3] page_type: f5(slab) [ 215.946413][ C3] raw: 00fff00000000040 ffff88801b442c80 ffffea00013f0e00 dead000000000002 [ 215.952203][ C3] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 215.958349][ C3] head: 00fff00000000040 ffff88801b442c80 ffffea00013f0e00 dead000000000002 [ 215.963958][ C3] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 215.969225][ C3] head: 00fff00000000002 ffffea0000830c01 00000000ffffffff 00000000ffffffff [ 215.974279][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 215.979385][ C3] page dumped because: kasan: bad access detected [ 215.983039][ C3] page_owner tracks the page as allocated [ 215.988443][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5637, tgid 5637 (S40network), ts 36646197035, free_ts 32911979741 [ 216.004444][ C3] post_alloc_hook+0x181/0x1b0 [ 216.008318][ C3] get_page_from_freelist+0x135c/0x3920 [ 216.011658][ C3] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 216.015402][ C3] alloc_pages_mpol+0x1fb/0x550 [ 216.018431][ C3] new_slab+0x244/0x340 [ 216.022015][ C3] ___slab_alloc+0xd9c/0x1940 [ 216.026167][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 216.030966][ C3] __kmalloc_noprof+0x2f2/0x510 [ 216.035948][ C3] tomoyo_init_log+0x1385/0x2140 [ 216.040272][ C3] tomoyo_supervisor+0x302/0x13b0 [ 216.044664][ C3] tomoyo_path_permission+0x270/0x3b0 [ 216.048010][ C3] tomoyo_check_open_permission+0x37b/0x3c0 [ 216.052399][ C3] tomoyo_file_open+0x6b/0x90 [ 216.055855][ C3] security_file_open+0x84/0x1e0 [ 216.058356][ C3] do_dentry_open+0x596/0x1c10 [ 216.060680][ C3] vfs_open+0x82/0x3f0 [ 216.063012][ C3] page last free pid 5365 tgid 5365 stack trace: [ 216.068215][ C3] __free_frozen_pages+0x69d/0xff0 [ 216.072570][ C3] qlist_free_all+0x4e/0x120 [ 216.074760][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 216.077159][ C3] __kasan_slab_alloc+0x69/0x90 [ 216.079364][ C3] __kmalloc_noprof+0x1d4/0x510 [ 216.081835][ C3] tomoyo_realpath_from_path+0xc2/0x6e0 [ 216.084618][ C3] tomoyo_path_perm+0x274/0x460 [ 216.086879][ C3] security_inode_getattr+0x116/0x290 [ 216.089977][ C3] vfs_statx+0x11d/0x3e0 [ 216.091708][ C3] vfs_fstatat+0x7b/0xf0 [ 216.093433][ C3] __do_sys_newfstatat+0xa1/0x130 [ 216.096999][ C3] do_syscall_64+0xcd/0x260 [ 216.099690][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.102116][ C3] [ 216.103161][ C3] Memory state around the buggy address: [ 216.105563][ C3] ffff888020c30300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.109336][ C3] ffff888020c30380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.112985][ C3] >ffff888020c30400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.115818][ C3] ^ [ 216.118233][ C3] ffff888020c30480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.121920][ C3] ffff888020c30500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.124888][ C3] ================================================================== [ 216.127389][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.130046][ C3] CPU: 3 UID: 0 PID: 9979 Comm: syz.1.1645 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 216.135229][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.139632][ C3] Call Trace: [ 216.141412][ C3] [ 216.142693][ C3] dump_stack_lvl+0x3d/0x1f0 [ 216.145039][ C3] panic+0x71c/0x800 [ 216.146950][ C3] ? __pfx_panic+0x10/0x10 [ 216.148919][ C3] ? __pfx__printk+0x10/0x10 [ 216.151470][ C3] ? end_report+0x4c/0x170 [ 216.155136][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 216.158689][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 216.161330][ C3] check_panic_on_warn+0xab/0xb0 [ 216.164002][ C3] end_report+0x107/0x170 [ 216.166578][ C3] kasan_report+0xee/0x110 [ 216.168857][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 216.171438][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 216.174339][ C3] __kasan_check_byte+0x36/0x50 [ 216.177556][ C3] lock_acquire+0xfc/0x350 [ 216.180782][ C3] ? do_raw_spin_unlock+0x53/0x230 [ 216.184607][ C3] ? .slowpath+0x9/0x18 [ 216.187595][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 216.190941][ C3] ? p9_req_put+0xaf/0x250 [ 216.193917][ C3] p9_req_put+0xaf/0x250 [ 216.196499][ C3] req_done+0x1dc/0x2e0 [ 216.198363][ C3] ? __pfx_req_done+0x10/0x10 [ 216.200646][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 216.203147][ C3] ? __pfx_req_done+0x10/0x10 [ 216.205462][ C3] vring_interrupt+0x31b/0x400 [ 216.208680][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 216.212338][ C3] __handle_irq_event_percpu+0x229/0x7d0 [ 216.215587][ C3] handle_irq_event+0xab/0x1e0 [ 216.217986][ C3] handle_edge_irq+0x263/0xd10 [ 216.220351][ C3] __common_interrupt+0xdf/0x250 [ 216.222221][ C3] common_interrupt+0x61/0xe0 [ 216.224848][ C3] asm_common_interrupt+0x26/0x40 [ 216.228234][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 216.231359][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 a0 83 8b 8b e8 48 f3 ef 09 65 66 c7 05 b6 26 27 12 00 00 e8 b9 3d 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 216.242241][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000202 [ 216.245556][ C3] RAX: 000000000000067a RBX: 00000000ffffffff RCX: 0000000000000002 [ 216.250169][ C3] RDX: 0000000000000000 RSI: ffffffff8dbe0861 RDI: ffffffff8bf47e20 [ 216.255029][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 216.260058][ C3] R10: ffffffff9084fc17 R11: 0000000000000000 R12: 0000000000000280 [ 216.264737][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed10047c1488 [ 216.269152][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 216.272262][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 216.275467][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 216.278750][ C3] __irq_exit_rcu+0x109/0x170 [ 216.281768][ C3] irq_exit_rcu+0x9/0x30 [ 216.284577][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 216.288048][ C3] [ 216.289857][ C3] [ 216.291820][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.296471][ C3] RIP: 0010:lock_acquire+0x62/0x350 [ 216.300671][ C3] Code: ce 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 ea ec 0e 0f 82 74 02 00 00 8b 35 da 19 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 ce 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 216.312459][ C3] RSP: 0018:ffffc900074df2a0 EFLAGS: 00000206 [ 216.316096][ C3] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000000b876632 [ 216.321295][ C3] RDX: 0000000000000000 RSI: ffffffff8dbbb25f RDI: ffffffff8bf47e20 [ 216.326605][ C3] RBP: 0000000000000002 R08: 5f77cbb3d8f98d14 R09: 0000000000000000 [ 216.332467][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 216.337951][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.344000][ C3] ? unwind_next_frame+0x3f4/0x20a0 [ 216.348717][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 216.353976][ C3] unwind_next_frame+0xd1/0x20a0 [ 216.357856][ C3] ? unwind_next_frame+0xbd/0x20a0 [ 216.362546][ C3] ? __split_vma+0x33b/0x1030 [ 216.366139][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 216.371534][ C3] arch_stack_walk+0x94/0x100 [ 216.375124][ C3] ? __split_vma+0x33b/0x1030 [ 216.379739][ C3] stack_trace_save+0x8e/0xc0 [ 216.384035][ C3] ? __pfx_stack_trace_save+0x10/0x10 [ 216.388134][ C3] ? stack_trace_save+0x8e/0xc0 [ 216.392352][ C3] kasan_save_stack+0x33/0x60 [ 216.395446][ C3] ? kasan_save_stack+0x33/0x60 [ 216.398772][ C3] ? kasan_save_track+0x14/0x30 [ 216.401894][ C3] ? __kasan_slab_alloc+0x89/0x90 [ 216.405028][ C3] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 216.408941][ C3] ? mas_alloc_nodes+0x2f1/0x8b0 [ 216.411920][ C3] ? mas_node_count_gfp+0x105/0x130 [ 216.415087][ C3] ? mas_preallocate+0x53e/0xcd0 [ 216.418145][ C3] ? __split_vma+0x33b/0x1030 [ 216.421101][ C3] kasan_save_track+0x14/0x30 [ 216.424008][ C3] __kasan_slab_alloc+0x89/0x90 [ 216.426909][ C3] kmem_cache_alloc_bulk_noprof+0x41a/0xbd0 [ 216.430430][ C3] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 216.433963][ C3] ? mas_alloc_nodes+0x18b/0x8b0 [ 216.436955][ C3] ? mas_alloc_nodes+0x2f1/0x8b0 [ 216.440074][ C3] mas_alloc_nodes+0x2f1/0x8b0 [ 216.443758][ C3] mas_node_count_gfp+0x105/0x130 [ 216.446793][ C3] mas_preallocate+0x53e/0xcd0 [ 216.449637][ C3] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 216.453298][ C3] ? __pfx_mas_preallocate+0x10/0x10 [ 216.456447][ C3] ? anon_vma_name+0x75/0x100 [ 216.460263][ C3] __split_vma+0x33b/0x1030 [ 216.463634][ C3] ? __pfx___split_vma+0x10/0x10 [ 216.466647][ C3] vma_modify+0x3b4/0x510 [ 216.469285][ C3] vma_modify_flags+0x212/0x2d0 [ 216.472266][ C3] ? __pfx_vma_modify_flags+0x10/0x10 [ 216.476299][ C3] mprotect_fixup+0x2b3/0xb10 [ 216.480464][ C3] ? __pfx_mprotect_fixup+0x10/0x10 [ 216.484045][ C3] ? selinux_file_mprotect+0x15b/0x600 [ 216.488370][ C3] do_mprotect_pkey+0x9ca/0xd50 [ 216.491913][ C3] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 216.495887][ C3] ? rcu_is_watching+0x12/0xc0 [ 216.501875][ C3] __x64_sys_mprotect+0x78/0xc0 [ 216.506156][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.510425][ C3] do_syscall_64+0xcd/0x260 [ 216.514744][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.519309][ C3] RIP: 0033:0x7f3d6d78ea27 [ 216.522879][ C3] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.535465][ C3] RSP: 002b:00007ffcca6026d8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 216.540919][ C3] RAX: ffffffffffffffda RBX: 00007f3d6e5466c0 RCX: 00007f3d6d78ea27 [ 216.545118][ C3] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f3d6e527000 [ 216.549445][ C3] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 216.552477][ C3] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcca602830 [ 216.555159][ C3] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 216.559490][ C3] [ 216.562536][ C3] Kernel Offset: disabled [ 216.564688][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:55:33 Registers: info registers vcpu 0 CPU#0 RAX=000000000012c41b RBX=0000000000000000 RCX=ffffffff8b6ca419 RDX=0000000000000000 RSI=ffffffff8dbe0861 RDI=ffffffff8bf47e20 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084fc10 R15=0000000000000000 RIP=ffffffff8b6c8caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c185f CR3=0000000025e30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff893e5911 ffffffff893e5766 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff893e5766 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd0f0c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff823b8929 ffffffff823b88f6 ffffffff823b88d9 ffffffff823b8794 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff893e5766 ffffffff823b8d2a ffffffff00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff823b89a9 ffffffff823b8929 ffffffff823b88f6 ffffffff823b88d9 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffe8fefc58a500 RCX=ffffffff815f26be RDX=1ffffd1fdf8b14ad RSI=000000321bcb12ad RDI=ffffe8fefc58a540 RBP=ffffe8fefc58a508 RSP=ffffc900006a0c98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000de617a R13=ffffe8fefc58a500 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8193bbf5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ae2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000fefcfffe Opmask02=00000000fcfe0000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901783488 00007fc901783480 00007fc901783478 00007fc901783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9022ed100 00007fc901783440 00007fc901783458 00007fc9017834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc901783498 00007fc901783490 00007fc901783488 00007fc901783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a7415a0 RCX=ffffffff81af1bb9 RDX=ffff888021042440 RSI=ffffffff81af1b93 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000b4f938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d4e82b5 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88806a63b040 RIP=ffffffff81af1b93 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d6be2000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555579d3f808 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006563696d2f7475 706e692f7665642f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636383488 00007fb636383480 00007fb636383478 00007fb636383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636eed100 00007fb636383440 00007fb636380004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb636383498 00007fb636383490 00007fb636383488 00007fb636383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854f2870 RDI=ffffffff9adf64e0 RBP=ffffffff9adf64a0 RSP=ffffc900006f8568 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7269765f5f203f20 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35becee R15=dffffc0000000000 RIP=ffffffff854f2897 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556ccc6500 ffffffff 00c00000 GS =0000 ffff8880d6ce2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3d6d9a2eb8 CR3=000000005377e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d811c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d983488 00007f3d6d983480 00007f3d6d983478 00007f3d6d983450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6e4ed100 00007f3d6d983440 00007f3d6d980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6d983498 00007f3d6d983490 00007f3d6d983488 00007f3d6d983480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000