last executing test programs: 1m12.770101591s ago: executing program 0 (id=420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, 0x0) 1m9.554038135s ago: executing program 0 (id=445): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005700)={'wlan1\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0xfffffde4, 0x140c, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000856) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c00028005000100000000001400018000"], 0x50}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m9.553863748s ago: executing program 0 (id=446): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, r1, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x304, 0x88a8, 0x6, 0x4, 0x3, @broadcast, "ab7309fd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, "ab309ffa"}}}}, 0x0) 1m9.500745534s ago: executing program 0 (id=447): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x153302) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002740)={&(0x7f0000000080)=[{0x0, 0x0, 0x2900, 0x0}], 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000500a2649223ff7aaa8d3a853541a503f4782296dadec02cc161cd27dfff7e12b233476da407264f1157c6d40d09663002bfc179605d628cd2e3d94bb75a"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000012c0), 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m9.500465754s ago: executing program 0 (id=448): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000181201", 0x2e}], 0x1}, 0x0) listen(r1, 0x208) (async) shutdown(r1, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) (async) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000006040)={0x2020}, 0xfffffffffffffd89) (async) ioctl$DVD_AUTH(r7, 0x5390, &(0x7f0000000100)=@hsc={0x1, 0x0, "18927fbca622cdab86d7"}) (async) sendto$rose(r6, &(0x7f0000000240)="e7e1d4bc427130b98d88b243c8e304242a42ead5315d5d7636c0bfaa553c1c54289d7f32fbf55e473e837f5129297e05178b7c46fc20dc50df5558d5850b177eb0", 0x41, 0x80, 0x0, 0x0) setreuid(0x0, 0x0) (async) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) (async) r8 = socket$caif_stream(0x25, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) 1m9.319333673s ago: executing program 0 (id=452): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r1) 1m9.291967439s ago: executing program 32 (id=452): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000000003", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r1) 6.329718164s ago: executing program 2 (id=1185): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.163587067s ago: executing program 1 (id=1190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4.873121081s ago: executing program 1 (id=1192): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) bind$ax25(r0, &(0x7f0000000380)={{0x3, @null, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 4.8729258s ago: executing program 1 (id=1193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0x0, 0xc, "c629503965c34eb6e37e8ddb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xffff}, 0x0, 0x0, 0x0}) 3.592262675s ago: executing program 2 (id=1200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88e5}, @void, @eth={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @rand_addr=0x64010102, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) 3.463470366s ago: executing program 2 (id=1201): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) 3.378041787s ago: executing program 2 (id=1202): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x1d, 0x4004010, 0x0, 0x0) r2 = socket(0x26, 0x3, 0x8) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) shutdown(r3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r5, 0x0, 0x5, 0x1, 0x80, "8416db836d446f9308e713a6e66384d9e2223be27a30bb1979a947d1f14bd33dbbe3128b954c38c583b2a65ed4a6cd75854972d298d46b8d0c858a2c130e8a", 0x1c}, 0x60) 2.855129929s ago: executing program 1 (id=1205): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x10002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x20040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) 2.854894112s ago: executing program 1 (id=1206): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.502264475s ago: executing program 2 (id=1211): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x601, 0xdb, 0x8000, 0xfff, 0x5c952399, 0x5, 0x800003ff, 0x802, 0x1, 0x0, 0xffffff61, 0x9, 0xe1cb, 0x6, 0x0, 0x3, 0x395, 0x0, 0x8, 0xfffffff9, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 2.436869491s ago: executing program 2 (id=1214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 1.165927421s ago: executing program 4 (id=1220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x34, 0x3f, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.102094742s ago: executing program 4 (id=1221): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x51cbdc23e4268fc0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) 1.01464283s ago: executing program 4 (id=1222): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 1.014472686s ago: executing program 4 (id=1223): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) 620.525057ms ago: executing program 3 (id=1225): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}]) dup3(r0, r1, 0x6700000000000000) 406.834413ms ago: executing program 4 (id=1226): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x800000, 0x0, "f700", '\x00', "030200", "fcffffff", ["50dbfe0100", "808e88e2e9ff09bdae00", "0c436d743c97c443084000", "ff81000000008000"]}) 406.700571ms ago: executing program 4 (id=1227): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000afa000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000691000/0x1000)=nil, 0x1000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 332.38755ms ago: executing program 3 (id=1228): socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='afs\x00', 0x208002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000080)) 75.587297ms ago: executing program 3 (id=1229): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 75.39588ms ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) 304.73µs ago: executing program 3 (id=1231): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xe, [0xffffffff, 0x7, 0x1, 0x8, 0xf, 0x46ba, 0x80, 0x9, 0x8, 0x7, 0x6, 0x101, 0xc0, 0x3, 0x5bec, 0x9, 0x6, 0xe8b, 0x1, 0x8, 0x2, 0x0, 0xfffffff8, 0x74, 0x3, 0x7b2, 0x8, 0xfffffbff, 0x6, 0x9, 0xfffffffd, 0x5, 0xffff, 0x3, 0x1000, 0x7, 0x7f, 0x9, 0x7, 0x7fffffff, 0x8, 0x1ff, 0xfffffffe, 0xfffffffe, 0x80000000, 0x4, 0x10, 0x9, 0x0, 0x7fffffff, 0x2, 0xca2, 0x9, 0x204000, 0x7fff, 0x7, 0x5d, 0x6, 0x7, 0xa, 0x8, 0xffffffff, 0x81, 0x1, 0x5, 0x6, 0x8, 0x9, 0xffff, 0x6, 0x1000, 0x4, 0x6, 0xee, 0x4, 0x6, 0xffffffba, 0x1ff, 0xcb, 0x10, 0xfffffff8, 0x80000001, 0x2, 0x710b, 0x589, 0x8, 0x10001, 0x7, 0x3, 0x6, 0x6, 0x8, 0xa, 0x2, 0xb7d, 0x2, 0x80, 0x9, 0x1, 0x34, 0x9, 0x7ff, 0x8, 0x80000001, 0xffffffff, 0xfffffffc, 0x2, 0x6d, 0xb7, 0x3, 0x5, 0x80, 0x0, 0x6, 0x9, 0x5, 0x7, 0xb622, 0x7, 0x6, 0x3ff, 0xe30, 0x3a28, 0x9, 0x5, 0x5, 0x54, 0x3]}}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x76a, 0xe36, 0xe7a2, 0xeb9e}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 114.628µs ago: executing program 1 (id=1232): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180), 0x2}) 0s ago: executing program 3 (id=1233): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x9]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) kernel console output (not intermixed with test programs): 477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.933211][ T40] audit: type=1400 audit(1756146599.735:447): avc: denied { connect } for pid=7686 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.989110][ T7695] input: syz0 as /devices/virtual/input/input14 [ 100.070297][ T7698] comedi comedi1: comedi_config --init_data is deprecated [ 100.103374][ T7702] program syz.1.482 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.215242][ T952] usb 8-1: device descriptor read/64, error -71 [ 100.246317][ T6735] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 100.289597][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.484'. [ 100.325540][ T40] audit: type=1400 audit(1756146600.118:448): avc: denied { mount } for pid=7707 comm="syz.1.485" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.332683][ T40] audit: type=1400 audit(1756146600.118:449): avc: denied { watch } for pid=7707 comm="syz.1.485" path="/141/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.337526][ T7708] syzkaller1: entered allmulticast mode [ 100.348641][ T40] audit: type=1400 audit(1756146600.137:450): avc: denied { getopt } for pid=7707 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.383939][ T34] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 100.386567][ T34] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 100.390416][ T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0007/input/input15 [ 100.406968][ T34] cm6533_jd 0003:0D8C:0022.0007: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 100.409654][ T6735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.414797][ T6735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.418115][ T6735] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 100.421054][ T6735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.428726][ T6735] usb 7-1: config 0 descriptor?? [ 100.439142][ T40] audit: type=1400 audit(1756146600.230:451): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 100.492417][ T952] usb 8-1: reset high-speed USB device number 9 using dummy_hcd [ 100.528282][ T7714] bridge2: entered promiscuous mode [ 100.530036][ T7714] bridge2: entered allmulticast mode [ 100.773510][ T5991] Bluetooth: hci0: command tx timeout [ 100.804883][ T40] audit: type=1400 audit(1756146600.567:452): avc: denied { getopt } for pid=7725 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.805981][ T7726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.491'. [ 100.817404][ T40] audit: type=1400 audit(1756146600.576:453): avc: denied { ioctl } for pid=7725 comm="syz.1.491" path="socket:[20615]" dev="sockfs" ino=20615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.861809][ T7728] bond2: entered allmulticast mode [ 100.900240][ T40] audit: type=1400 audit(1756146600.661:454): avc: denied { write } for pid=7731 comm="syz.1.493" name="/" dev="9p" ino=37617707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.920803][ T6735] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 100.924071][ T6735] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 100.930119][ T6735] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0008/input/input16 [ 100.950041][ T6735] cm6533_jd 0003:0D8C:0022.0008: input,hiddev2,hidraw3: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 100.987242][ T7737] netlink: 72 bytes leftover after parsing attributes in process `syz.1.494'. [ 101.033084][ T7739] dvmrp17: entered allmulticast mode [ 101.042040][ T7739] dvmrp17: left allmulticast mode [ 101.133786][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.137714][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.142389][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.145673][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.157609][ T7741] kvm: pic: non byte read [ 101.160181][ T7741] kvm: pic: level sensitive irq not supported [ 101.160480][ T7741] kvm: pic: non byte read [ 101.161726][ T7734] FAULT_INJECTION: forcing a failure. [ 101.161726][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 101.163489][ T7741] kvm: pic: level sensitive irq not supported [ 101.164037][ T7734] CPU: 3 UID: 0 PID: 7734 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) [ 101.164053][ T7734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.164060][ T7734] Call Trace: [ 101.164064][ T7734] [ 101.164068][ T7734] dump_stack_lvl+0x16c/0x1f0 [ 101.164103][ T7734] should_fail_ex+0x512/0x640 [ 101.164122][ T7734] ? fs_reclaim_acquire+0xae/0x150 [ 101.164139][ T7734] ? tomoyo_encode2+0x100/0x3e0 [ 101.164166][ T7734] should_failslab+0xc2/0x120 [ 101.164180][ T7734] __kmalloc_noprof+0xd2/0x510 [ 101.164192][ T7734] ? d_absolute_path+0x136/0x1a0 [ 101.164210][ T7734] tomoyo_encode2+0x100/0x3e0 [ 101.164228][ T7734] tomoyo_encode+0x29/0x50 [ 101.164244][ T7734] tomoyo_realpath_from_path+0x18f/0x6e0 [ 101.164265][ T7734] tomoyo_path_number_perm+0x245/0x580 [ 101.164278][ T7734] ? tomoyo_path_number_perm+0x237/0x580 [ 101.164293][ T7734] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.164309][ T7734] ? find_held_lock+0x2b/0x80 [ 101.164353][ T7734] ? find_held_lock+0x2b/0x80 [ 101.164368][ T7734] ? hook_file_ioctl_common+0x145/0x410 [ 101.164383][ T7734] ? __fget_files+0x20e/0x3c0 [ 101.164398][ T7734] security_file_ioctl+0x9b/0x240 [ 101.164415][ T7734] __x64_sys_ioctl+0xb7/0x210 [ 101.164433][ T7734] do_syscall_64+0xcd/0x4c0 [ 101.164448][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.164459][ T7734] RIP: 0033:0x7f32b398ebe9 [ 101.164469][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.164480][ T7734] RSP: 002b:00007f32b476e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.164491][ T7734] RAX: ffffffffffffffda RBX: 00007f32b3bb6090 RCX: 00007f32b398ebe9 [ 101.164498][ T7734] RDX: 00002000000002c0 RSI: 0000000040084504 RDI: 0000000000000004 [ 101.164504][ T7734] RBP: 00007f32b476e090 R08: 0000000000000000 R09: 0000000000000000 [ 101.164511][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.164517][ T7734] R13: 00007f32b3bb6128 R14: 00007f32b3bb6090 R15: 00007ffe40edf8a8 [ 101.164531][ T7734] [ 101.164575][ T7734] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.169324][ T7741] kvm: pic: non byte read [ 101.218266][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 101.225059][ T40] audit: type=1400 audit(1756146600.951:455): avc: denied { read } for pid=7740 comm="iou-sqp-7743" path="socket:[20630]" dev="sockfs" ino=20630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.362202][ T7746] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.365237][ T7746] overlayfs: failed to set xattr on upper [ 101.367587][ T7746] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.372032][ T7746] overlayfs: ...falling back to metacopy=off. [ 101.374622][ T7746] overlayfs: ...falling back to index=off. [ 101.377055][ T7746] overlayfs: ...falling back to uuid=null. [ 101.625700][ T54] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 101.738587][ T7755] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 101.742106][ T7755] syz_tun: entered promiscuous mode [ 101.747125][ T7755] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.814547][ T7757] sp0: Synchronizing with TNC [ 102.057881][ T7763] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 102.060403][ T7763] netlink: 136 bytes leftover after parsing attributes in process `syz.1.503'. [ 102.063701][ T7763] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 102.067054][ T7763] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 102.181683][ T24] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 102.737294][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 102.919093][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 102.922475][ T34] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.925309][ T34] usb 6-1: config 0 has no interface number 0 [ 102.927374][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.931222][ T34] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.934916][ T34] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.938345][ T34] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.942658][ T34] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.945531][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.950072][ T34] usb 6-1: config 0 descriptor?? [ 102.955351][ T34] ldusb 6-1:0.55: LD USB Device #3 now attached to major 180 minor 3 [ 102.991870][ T34] usb 8-1: USB disconnect, device number 9 [ 102.993922][ T5991] Bluetooth: hci0: command tx timeout [ 103.031128][ T7788] libceph: resolve ' [ 103.031128][ T7788] -&fYǝa2i [ 103.031128][ T7788] .?&*&' (ret=-3): failed [ 103.116433][ T7793] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 103.119217][ T7793] netlink: 136 bytes leftover after parsing attributes in process `syz.3.512'. [ 103.122298][ T7793] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 103.125145][ T7793] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 103.169509][ T1027] usb 6-1: USB disconnect, device number 10 [ 103.173931][ T1027] ldusb 6-1:0.55: LD USB Device #3 now disconnected [ 103.496854][ T6736] usb 9-1: USB disconnect, device number 2 [ 103.549659][ T34] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 103.611641][ T7815] overlayfs: failed to resolve './file0': -2 [ 103.635411][ T24] usb 7-1: device descriptor read/64, error -71 [ 103.652469][ T7817] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 103.654905][ T7817] netlink: 128 bytes leftover after parsing attributes in process `syz.4.521'. [ 103.659004][ T7817] netlink: 'syz.4.521': attribute type 2 has an invalid length. [ 103.724013][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.728579][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.735997][ T34] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 103.739814][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.744944][ T34] usb 8-1: config 0 descriptor?? [ 103.891830][ T24] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 103.998682][ T6063] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 104.161011][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.164537][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.167519][ T6063] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.170434][ T6063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.174578][ T6063] usb 6-1: config 0 descriptor?? [ 104.233351][ T34] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 104.235923][ T34] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 104.239491][ T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0009/input/input17 [ 104.247837][ T34] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 104.447455][ T7833] FAULT_INJECTION: forcing a failure. [ 104.447455][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.451986][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 104.452002][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.452009][ T7833] Call Trace: [ 104.452013][ T7833] [ 104.452018][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 104.452034][ T7833] should_fail_ex+0x512/0x640 [ 104.452049][ T7833] _copy_from_user+0x2e/0xd0 [ 104.452064][ T7833] evdev_handle_set_keycode+0xb7/0x170 [ 104.452081][ T7833] ? __pfx_evdev_handle_set_keycode+0x10/0x10 [ 104.452111][ T7833] ? __pfx___might_resched+0x10/0x10 [ 104.452126][ T7833] ? rcu_is_watching+0x12/0xc0 [ 104.452140][ T7833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.452154][ T7833] evdev_do_ioctl+0xba1/0x1b30 [ 104.452172][ T7833] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 104.452198][ T7833] evdev_ioctl+0x16f/0x1a0 [ 104.452213][ T7833] ? __pfx_evdev_ioctl+0x10/0x10 [ 104.452229][ T7833] __x64_sys_ioctl+0x18b/0x210 [ 104.452248][ T7833] do_syscall_64+0xcd/0x4c0 [ 104.452261][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.452272][ T7833] RIP: 0033:0x7f32b398ebe9 [ 104.452282][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.452292][ T7833] RSP: 002b:00007f32b476e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.452321][ T7833] RAX: ffffffffffffffda RBX: 00007f32b3bb6090 RCX: 00007f32b398ebe9 [ 104.452330][ T7833] RDX: 00002000000002c0 RSI: 0000000040084504 RDI: 0000000000000004 [ 104.452336][ T7833] RBP: 00007f32b476e090 R08: 0000000000000000 R09: 0000000000000000 [ 104.452343][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.452349][ T7833] R13: 00007f32b3bb6128 R14: 00007f32b3bb6090 R15: 00007ffe40edf8a8 [ 104.452364][ T7833] [ 104.612175][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.615398][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.678135][ T6063] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 104.681401][ T6063] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 104.685893][ T6063] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000A/input/input18 [ 104.696484][ T6063] cm6533_jd 0003:0D8C:0022.000A: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 105.217651][ T5991] Bluetooth: hci0: command tx timeout [ 105.355347][ T7845] validate_nla: 1 callbacks suppressed [ 105.355359][ T7845] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 105.359840][ T7845] netlink: 128 bytes leftover after parsing attributes in process `syz.4.530'. [ 105.362775][ T7845] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 105.365800][ T7845] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 105.452638][ T34] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 105.901587][ T6735] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 106.515950][ T839] usb 7-1: USB disconnect, device number 8 [ 106.631214][ T7853] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 106.633418][ T7853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.637685][ T7853] vhci_hcd vhci_hcd.0: Device attached [ 106.680223][ T7871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7871 comm=syz.2.536 [ 106.705060][ T7871] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 106.707494][ T7871] UDF-fs: Scanning with blocksize 2048 failed [ 106.710311][ T7871] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 106.712611][ T7871] UDF-fs: Scanning with blocksize 4096 failed [ 106.751243][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 106.751298][ T40] audit: type=1400 audit(1756146606.133:464): avc: denied { mount } for pid=7872 comm="syz.2.537" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.783507][ T7875] kAFS: No cell specified [ 106.831716][ T6025] vhci_hcd: vhci_device speed not set [ 106.886509][ T7882] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 106.889784][ T7882] netlink: 128 bytes leftover after parsing attributes in process `syz.2.540'. [ 106.894026][ T7882] netlink: 'syz.2.540': attribute type 2 has an invalid length. [ 106.898109][ T6025] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 106.898678][ T7882] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 106.949580][ T6108] usb 8-1: USB disconnect, device number 10 [ 107.109666][ T6108] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 107.184734][ T6204] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.271240][ T6108] usb 8-1: config 0 has no interfaces? [ 107.273024][ T6108] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.275813][ T6108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.279696][ T6108] usb 8-1: config 0 descriptor?? [ 107.334235][ T6735] usb 6-1: device descriptor read/64, error -71 [ 107.346646][ T6204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.350130][ T6204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.353754][ T6204] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 107.357363][ T6204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.361264][ T6204] usb 7-1: config 0 descriptor?? [ 107.488725][ T7893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7893 comm=syz.4.544 [ 107.498795][ T7864] vhci_hcd: unknown pdu 2 [ 107.501938][ T12] vhci_hcd: stop threads [ 107.503419][ T12] vhci_hcd: release socket [ 107.506316][ T12] vhci_hcd: disconnect device [ 107.569401][ T6025] vhci_hcd: vhci_device speed not set [ 107.601440][ T6735] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 107.702227][ T6108] usb 8-1: USB disconnect, device number 11 [ 107.753827][ T40] audit: type=1400 audit(1756146607.068:465): avc: denied { write } for pid=7914 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.794433][ T7919] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 107.797224][ T7919] netlink: 128 bytes leftover after parsing attributes in process `syz.4.550'. [ 107.800463][ T7919] netlink: 'syz.4.550': attribute type 2 has an invalid length. [ 107.803001][ T7919] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 107.851954][ T6204] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 107.854353][ T6204] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 107.858618][ T6204] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000B/input/input19 [ 107.870828][ T6204] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 108.082635][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 108.209852][ T7928] macsec1: entered promiscuous mode [ 108.212624][ T7928] bridge0: entered promiscuous mode [ 108.215623][ T7928] bridge0: port 3(macsec1) entered blocking state [ 108.218198][ T7928] bridge0: port 3(macsec1) entered disabled state [ 108.220550][ T7928] macsec1: entered allmulticast mode [ 108.223212][ T7928] bridge0: entered allmulticast mode [ 108.226970][ T7928] macsec1: left allmulticast mode [ 108.228677][ T7928] bridge0: left allmulticast mode [ 108.231135][ T7928] bridge0: left promiscuous mode [ 108.265952][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.269373][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.272477][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 108.272541][ T7924] FAULT_INJECTION: forcing a failure. [ 108.272541][ T7924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.275413][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.276711][ T24] usb 9-1: config 0 descriptor?? [ 108.279728][ T7924] CPU: 3 UID: 0 PID: 7924 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 108.279742][ T7924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.279749][ T7924] Call Trace: [ 108.279754][ T7924] [ 108.279758][ T7924] dump_stack_lvl+0x16c/0x1f0 [ 108.279775][ T7924] should_fail_ex+0x512/0x640 [ 108.279790][ T7924] _copy_to_user+0x32/0xd0 [ 108.279806][ T7924] simple_read_from_buffer+0xcb/0x170 [ 108.279819][ T7924] proc_fail_nth_read+0x197/0x240 [ 108.279833][ T7924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.279847][ T7924] ? rw_verify_area+0xcf/0x6c0 [ 108.279864][ T7924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.279876][ T7924] vfs_read+0x1e4/0xcf0 [ 108.279889][ T7924] ? __pfx___mutex_lock+0x10/0x10 [ 108.279910][ T7924] ? __pfx_vfs_read+0x10/0x10 [ 108.279925][ T7924] ? __fget_files+0x20e/0x3c0 [ 108.279942][ T7924] ksys_read+0x12a/0x250 [ 108.279952][ T7924] ? __pfx_ksys_read+0x10/0x10 [ 108.279964][ T7924] ? fput+0x9b/0xd0 [ 108.279980][ T7924] do_syscall_64+0xcd/0x4c0 [ 108.279994][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.280006][ T7924] RIP: 0033:0x7f9fc778d5fc [ 108.280015][ T7924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.280026][ T7924] RSP: 002b:00007f9fc59d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.280037][ T7924] RAX: ffffffffffffffda RBX: 00007f9fc79b6090 RCX: 00007f9fc778d5fc [ 108.280044][ T7924] RDX: 000000000000000f RSI: 00007f9fc59d50a0 RDI: 0000000000000005 [ 108.280051][ T7924] RBP: 00007f9fc59d5090 R08: 0000000000000000 R09: 0000000000000000 [ 108.280058][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.280064][ T7924] R13: 00007f9fc79b6128 R14: 00007f9fc79b6090 R15: 00007ffe28d2adc8 [ 108.280078][ T7924] [ 108.347204][ T54] usb 6-1: USB disconnect, device number 11 [ 108.375263][ T7933] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 108.378428][ T7930] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 108.425368][ T7936] No control pipe specified [ 108.468246][ T7939] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.472841][ T7939] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 108.578234][ T7948] netlink: 128 bytes leftover after parsing attributes in process `syz.3.559'. [ 108.808391][ T40] audit: type=1326 audit(1756146608.050:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.816143][ T40] audit: type=1326 audit(1756146608.050:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.829504][ T40] audit: type=1326 audit(1756146608.050:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.835364][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 108.838624][ T40] audit: type=1326 audit(1756146608.050:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.840294][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 108.850686][ T40] audit: type=1326 audit(1756146608.050:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.854260][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.000C/input/input20 [ 108.859805][ T40] audit: type=1326 audit(1756146608.060:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f32b398d69f code=0x7ffc0000 [ 108.870756][ T24] cm6533_jd 0003:0D8C:0022.000C: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 108.872458][ T40] audit: type=1326 audit(1756146608.060:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.888533][ T40] audit: type=1326 audit(1756146608.060:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.3.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32b398ebe9 code=0x7ffc0000 [ 108.997383][ T7974] overlayfs: overlapping lowerdir path [ 109.183723][ T6063] usb 7-1: reset high-speed USB device number 9 using dummy_hcd [ 109.547119][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.718146][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 109.722462][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.726965][ T34] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.730847][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.737520][ T34] usb 6-1: config 0 descriptor?? [ 109.922179][ T7979] netlink: 136 bytes leftover after parsing attributes in process `syz.3.569'. [ 109.959270][ T34] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 110.109297][ T7981] overlayfs: failed to resolve './file0': -2 [ 110.120996][ T7981] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.225450][ T24] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 110.605802][ T5991] Bluetooth: hci3: command tx timeout [ 110.981145][ T6735] usb 7-1: USB disconnect, device number 9 [ 111.002281][ T34] usb 6-1: USB disconnect, device number 12 [ 111.185284][ T8008] block nbd1: Attempted send on invalid socket [ 111.187492][ T8008] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.191049][ T8008] exFAT-fs (nbd1): unable to read boot sector [ 111.193029][ T8008] exFAT-fs (nbd1): failed to read boot sector [ 111.195869][ T8008] exFAT-fs (nbd1): failed to recognize exfat type [ 111.226802][ T8012] validate_nla: 11 callbacks suppressed [ 111.226813][ T8012] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 111.231226][ T8012] netlink: 136 bytes leftover after parsing attributes in process `syz.2.578'. [ 111.238436][ T8012] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 111.239278][ T8016] random: crng reseeded on system resumption [ 111.242383][ T8012] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 111.492805][ T6063] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 111.524964][ T1027] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 111.546261][ T6046] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 111.653333][ T6063] usb 8-1: Using ep0 maxpacket: 16 [ 111.657341][ T6063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.661840][ T6063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.666016][ T6063] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.671239][ T6063] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 111.675334][ T6063] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.680540][ T6063] usb 8-1: config 0 descriptor?? [ 111.687471][ T1027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.690942][ T1027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.694001][ T1027] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.696922][ T1027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.700565][ T1027] usb 7-1: config 0 descriptor?? [ 111.720998][ T6046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.724982][ T6046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.728497][ T24] usb 9-1: device descriptor read/64, error -71 [ 111.730846][ T6046] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.734105][ T6046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.738537][ T6046] usb 6-1: config 0 descriptor?? [ 111.984601][ T24] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 111.987498][ T24] usb 9-1: device reset changed ep0 maxpacket size! [ 111.991228][ T6204] usb 9-1: USB disconnect, device number 3 [ 112.119930][ T6063] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 112.122172][ T6063] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 112.124489][ T6063] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 112.126643][ T6063] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 112.128876][ T6063] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 112.132531][ T6063] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 112.136820][ T6204] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 112.147970][ T6063] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 112.150655][ T6063] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 112.192728][ T1027] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 112.197163][ T1027] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 112.204482][ T1027] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000E/input/input22 [ 112.220140][ T1027] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 112.231911][ T6046] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 112.235016][ T6046] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 112.239362][ T6046] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000F/input/input23 [ 112.250013][ T6046] cm6533_jd 0003:0D8C:0022.000F: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 112.294578][ T6204] usb 9-1: Using ep0 maxpacket: 8 [ 112.297665][ T6204] usb 9-1: config 0 interface 0 has no altsetting 0 [ 112.300048][ T6204] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.303043][ T6204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.306990][ T6204] usb 9-1: config 0 descriptor?? [ 112.334514][ T8006] netlink: 'syz.3.575': attribute type 2 has an invalid length. [ 112.337023][ T8006] netlink: 244 bytes leftover after parsing attributes in process `syz.3.575'. [ 112.771333][ T839] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.773034][ T6046] usb 8-1: USB disconnect, device number 12 [ 112.775734][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 112.775744][ T40] audit: type=1400 audit(1756146611.754:479): avc: denied { create } for pid=8026 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.776620][ T839] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 113.379560][ T8042] program syz.4.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.430749][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.451199][ T40] audit: type=1400 audit(1756146612.400:480): avc: denied { map } for pid=8046 comm="syz.4.587" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.458541][ T40] audit: type=1400 audit(1756146612.400:481): avc: denied { execute } for pid=8046 comm="syz.4.587" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.482272][ T8054] netlink: 'syz.4.589': attribute type 30 has an invalid length. [ 113.503121][ T8057] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 113.503238][ T8054] geneve2: entered promiscuous mode [ 113.506259][ T8057] netlink: 136 bytes leftover after parsing attributes in process `syz.3.590'. [ 113.507894][ T8054] geneve2: entered allmulticast mode [ 113.511580][ T8057] netlink: 'syz.3.590': attribute type 2 has an invalid length. [ 113.511599][ T8057] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 113.520788][ T46] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.523622][ T46] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.526941][ T46] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.530363][ T46] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.534695][ T34] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 113.601841][ T6025] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 113.624114][ T8069] tipc: Started in network mode [ 113.625776][ T8069] tipc: Node identity ac1414aa, cluster identity 4711 [ 113.628816][ T8069] tipc: Enabled bearer , priority 10 [ 113.637044][ T40] audit: type=1400 audit(1756146612.568:482): avc: denied { mount } for pid=8059 comm="syz.4.592" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 113.713446][ T40] audit: type=1400 audit(1756146612.643:483): avc: denied { module_request } for pid=8071 comm="syz.3.595" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 113.741365][ T40] audit: type=1400 audit(1756146612.671:484): avc: denied { mount } for pid=8071 comm="syz.3.595" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.764073][ T40] audit: type=1400 audit(1756146612.690:485): avc: denied { unmount } for pid=5987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.793419][ T8077] Bluetooth: MGMT ver 1.23 [ 113.860188][ T8080] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 113.864461][ T8080] lo: Master is either lo or non-ether device [ 113.927964][ T8082] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 113.932095][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.935832][ T8082] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.037793][ T8086] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 114.041929][ T8086] netlink: 136 bytes leftover after parsing attributes in process `syz.3.600'. [ 114.473774][ T40] audit: type=1400 audit(1756146613.345:486): avc: denied { getopt } for pid=8090 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.512565][ T8095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.604'. [ 114.690929][ T1027] tipc: Node number set to 2886997162 [ 114.718291][ T40] audit: type=1400 audit(1756146613.578:487): avc: denied { create } for pid=8104 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.725106][ T40] audit: type=1400 audit(1756146613.578:488): avc: denied { ioctl } for pid=8104 comm="syz.2.608" path="socket:[20201]" dev="sockfs" ino=20201 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.732644][ T8110] autofs: Bad value for 'fd' [ 114.770011][ T8115] netlink: 136 bytes leftover after parsing attributes in process `syz.1.609'. [ 114.801177][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 114.804251][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 114.971870][ T8129] team0: Port device dummy0 added [ 114.977966][ T8129] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.987326][ T8129] team0: Failed to send options change via netlink (err -105) [ 114.992359][ T8129] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.995522][ T8129] team0: Port device dummy0 removed [ 114.999671][ T8129] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.003993][ T8129] comedi: valid board names for 8255 driver are: [ 115.006307][ T8129] 8255 [ 115.007297][ T8129] comedi: valid board names for vmk80xx driver are: [ 115.010925][ T8129] vmk80xx [ 115.012256][ T8129] comedi: valid board names for usbduxsigma driver are: [ 115.015062][ T8129] usbduxsigma [ 115.016506][ T8129] comedi: valid board names for usbduxfast driver are: [ 115.019319][ T8129] usbduxfast [ 115.020975][ T8129] comedi: valid board names for usbdux driver are: [ 115.023649][ T8129] usbdux [ 115.024927][ T8129] comedi: valid board names for ni6501 driver are: [ 115.027589][ T8129] ni6501 [ 115.028833][ T8129] comedi: valid board names for dt9812 driver are: [ 115.031633][ T8129] dt9812 [ 115.032890][ T8129] comedi: valid board names for ni_labpc_cs driver are: [ 115.035714][ T8129] ni_labpc_cs [ 115.037052][ T8129] comedi: valid board names for ni_daq_700 driver are: [ 115.039841][ T8129] ni_daq_700 [ 115.041292][ T8129] comedi: valid board names for labpc_pci driver are: [ 115.044188][ T8129] labpc_pci [ 115.045580][ T8129] comedi: valid board names for adl_pci9118 driver are: [ 115.048455][ T8129] pci9118dg [ 115.049846][ T8129] pci9118hg [ 115.051237][ T8129] pci9118hr [ 115.052942][ T8129] comedi: valid board names for 8255_pci driver are: [ 115.056093][ T8129] 8255_pci [ 115.057689][ T8129] comedi: valid board names for s526 driver are: [ 115.060350][ T8129] s526 [ 115.061552][ T8129] comedi: valid board names for multiq3 driver are: [ 115.064435][ T8129] multiq3 [ 115.065758][ T8129] comedi: valid board names for pcmuio driver are: [ 115.068435][ T8129] pcmuio48 [ 115.069776][ T8129] pcmuio96 [ 115.071144][ T8129] comedi: valid board names for pcmmio driver are: [ 115.073889][ T8129] pcmmio [ 115.075429][ T8129] comedi: valid board names for pcmda12 driver are: [ 115.078820][ T8129] pcmda12 [ 115.080434][ T8129] comedi: valid board names for pcmad driver are: [ 115.083959][ T8129] pcmad12 [ 115.085860][ T8129] pcmad16 [ 115.087200][ T8129] comedi: valid board names for ni_labpc driver are: [ 115.089936][ T8129] lab-pc-1200 [ 115.091372][ T8129] lab-pc-1200ai [ 115.092861][ T8129] lab-pc+ [ 115.094162][ T8129] comedi: valid board names for atmio16 driver are: [ 115.096962][ T8129] atmio16 [ 115.098277][ T8129] atmio16d [ 115.099615][ T8129] comedi: valid board names for ni_at_ao driver are: [ 115.102339][ T8129] at-ao-6 [ 115.103612][ T8129] at-ao-10 [ 115.104942][ T8129] comedi: valid board names for ni_at_a2150 driver are: [ 115.109400][ T8129] ni_at_a2150 [ 115.110868][ T8129] comedi: valid board names for adq12b driver are: [ 115.113496][ T8129] adq12b [ 115.114730][ T8129] comedi: valid board names for mpc624 driver are: [ 115.117653][ T8129] mpc624 [ 115.119202][ T8129] comedi: valid board names for c6xdigio driver are: [ 115.121728][ T8129] c6xdigio [ 115.123071][ T8129] comedi: valid board names for aio_iiro_16 driver are: [ 115.125354][ T8129] aio_iiro_16 [ 115.126455][ T8129] comedi: valid board names for aio_aio12_8 driver are: [ 115.128886][ T8129] aio_aio12_8 [ 115.129986][ T8129] aio_ai12_8 [ 115.131202][ T8129] aio_ao12_4 [ 115.132280][ T8129] comedi: valid board names for fl512 driver are: [ 115.134417][ T8129] fl512 [ 115.135421][ T8129] comedi: valid board names for dmm32at driver are: [ 115.137496][ T8129] dmm32at [ 115.138634][ T8129] comedi: valid board names for dt282x driver are: [ 115.140834][ T8129] dt2821 [ 115.142066][ T8129] dt2821-f [ 115.143231][ T8129] dt2821-g [ 115.144229][ T8129] dt2823 [ 115.145277][ T8129] dt2824-pgh [ 115.146597][ T8129] dt2824-pgl [ 115.147885][ T8129] dt2825 [ 115.149150][ T8129] dt2827 [ 115.150034][ T8129] dt2828 [ 115.151000][ T8129] dt2829 [ 115.151917][ T8129] dt21-ez [ 115.152896][ T8129] dt23-ez [ 115.153898][ T8129] dt24-ez [ 115.154891][ T8129] dt24-ez-pgl [ 115.155978][ T8129] comedi: valid board names for dt2817 driver are: [ 115.157946][ T8129] dt2817 [ 115.158861][ T8129] comedi: valid board names for dt2815 driver are: [ 115.161045][ T8129] dt2815 [ 115.161987][ T8129] comedi: valid board names for dt2814 driver are: [ 115.164007][ T8129] dt2814 [ 115.164990][ T8129] comedi: valid board names for dt2811 driver are: [ 115.167016][ T8129] dt2811-pgh [ 115.168135][ T8129] dt2811-pgl [ 115.169332][ T8129] comedi: valid board names for dt2801 driver are: [ 115.171804][ T8129] dt2801 [ 115.172906][ T8129] comedi: valid board names for das6402 driver are: [ 115.174932][ T8129] das6402-12 [ 115.175990][ T8129] das6402-16 [ 115.177070][ T8129] comedi: valid board names for das1800 driver are: [ 115.179149][ T8129] das-1701st [ 115.180252][ T8129] das-1701st-da [ 115.181503][ T8129] das-1702st [ 115.182515][ T8129] das-1702st-da [ 115.183607][ T8129] das-1702hr [ 115.184643][ T8129] das-1702hr-da [ 115.185775][ T8129] das-1701ao [ 115.186822][ T8129] das-1702ao [ 115.187795][ T8129] das-1801st [ 115.188848][ T8129] das-1801st-da [ 115.189939][ T8129] das-1802st [ 115.190989][ T8129] das-1802st-da [ 115.192271][ T8129] das-1802hr [ 115.193379][ T8129] das-1802hr-da [ 115.194476][ T8129] das-1801hc [ 115.195526][ T8129] das-1802hc [ 115.196579][ T8129] das-1801ao [ 115.197630][ T8129] das-1802ao [ 115.198685][ T8129] comedi: valid board names for das800 driver are: [ 115.200709][ T8129] das-800 [ 115.201681][ T8129] cio-das800 [ 115.202968][ T8129] das-801 [ 115.204045][ T8129] cio-das801 [ 115.205409][ T8129] das-802 [ 115.206701][ T8129] cio-das802 [ 115.208024][ T8129] cio-das802/16 [ 115.209500][ T8129] comedi: valid board names for isa-das08 driver are: [ 115.212066][ T8129] isa-das08 [ 115.213257][ T8129] das08-pgm [ 115.214378][ T8129] das08-pgh [ 115.215498][ T8129] das08-pgl [ 115.216661][ T8129] das08-aoh [ 115.217802][ T8129] das08-aol [ 115.218895][ T8129] das08-aom [ 115.219947][ T8129] das08/jr-ao [ 115.221066][ T8129] das08jr-16-ao [ 115.222204][ T8129] pc104-das08 [ 115.223316][ T8129] das08jr/16 [ 115.224442][ T8129] comedi: valid board names for das16m1 driver are: [ 115.226522][ T8129] das16m1 [ 115.227561][ T8129] comedi: valid board names for dac02 driver are: [ 115.230080][ T8129] dac02 [ 115.231040][ T8129] comedi: valid board names for rti802 driver are: [ 115.233083][ T8129] rti802 [ 115.234052][ T8129] comedi: valid board names for rti800 driver are: [ 115.236158][ T8129] rti800 [ 115.237136][ T8129] rti815 [ 115.238280][ T8129] comedi: valid board names for pcm3724 driver are: [ 115.240774][ T8129] pcm3724 [ 115.241787][ T8129] comedi: valid board names for pcl818 driver are: [ 115.243836][ T8129] pcl818l [ 115.244884][ T8129] pcl818h [ 115.245966][ T8129] pcl818hd [ 115.247004][ T8129] pcl818hg [ 115.248037][ T8129] pcl818 [ 115.249007][ T8129] pcl718 [ 115.249999][ T8129] pcm3718 [ 115.251013][ T8129] comedi: valid board names for pcl816 driver are: [ 115.253062][ T8129] pcl816 [ 115.254037][ T8129] pcl814b [ 115.255125][ T8129] comedi: valid board names for pcl812 driver are: [ 115.257300][ T8129] pcl812 [ 115.258290][ T8129] pcl812pg [ 115.259328][ T8129] acl8112pg [ 115.260412][ T8129] acl8112dg [ 115.261493][ T8129] acl8112hg [ 115.262547][ T8129] a821pgl [ 115.263565][ T8129] a821pglnda [ 115.264655][ T8129] a821pgh [ 115.265654][ T8129] a822pgl [ 115.266735][ T8129] a822pgh [ 115.267719][ T8129] a823pgl [ 115.268718][ T8129] a823pgh [ 115.269713][ T8129] pcl813 [ 115.270693][ T8129] pcl813b [ 115.271685][ T8129] acl8113 [ 115.272717][ T8129] iso813 [ 115.273697][ T8129] acl8216 [ 115.274688][ T8129] a826pg [ 115.275620][ T8129] comedi: valid board names for pcl730 driver are: [ 115.277276][ T6735] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 115.278517][ T8129] pcl730 [ 115.282202][ T8129] iso730 [ 115.283198][ T8129] acl7130 [ 115.284137][ T8129] pcm3730 [ 115.285091][ T8129] pcl725 [ 115.285995][ T8129] p8r8dio [ 115.286942][ T8129] acl7225b [ 115.288568][ T8129] p16r16dio [ 115.289710][ T8129] pcl733 [ 115.289865][ T6025] usb 6-1: device descriptor read/64, error -71 [ 115.290651][ T8129] pcl734 [ 115.290658][ T8129] opmm-1616-xt [ 115.295142][ T8129] pearl-mm-p [ 115.296160][ T8129] ir104-pbf [ 115.297179][ T8129] comedi: valid board names for pcl726 driver are: [ 115.299232][ T8129] pcl726 [ 115.300342][ T8129] pcl727 [ 115.301348][ T8129] pcl728 [ 115.302280][ T8129] acl6126 [ 115.303242][ T8129] acl6128 [ 115.304188][ T8129] comedi: valid board names for pcl724 driver are: [ 115.306120][ T8129] pcl724 [ 115.307077][ T8129] pcl722 [ 115.308054][ T8129] pcl731 [ 115.309076][ T8129] acl7122 [ 115.310532][ T8129] acl7124 [ 115.311568][ T8129] pet48dio [ 115.312590][ T8129] pcmio48 [ 115.313587][ T8129] onyx-mm-dio [ 115.314648][ T8129] comedi: valid board names for pcl711 driver are: [ 115.316608][ T8129] pcl711 [ 115.317516][ T8129] pcl711b [ 115.318491][ T8129] acl8112hg [ 115.319554][ T8129] acl8112dg [ 115.321272][ T8129] comedi: valid board names for amplc_pc263 driver are: [ 115.323489][ T6108] usb 7-1: USB disconnect, device number 10 [ 115.324569][ T8129] pc263 [ 115.327363][ T8129] comedi: valid board names for amplc_pc236 driver are: [ 115.330448][ T8129] pc36at [ 115.331486][ T8129] comedi: valid board names for amplc_dio200 driver are: [ 115.333668][ T8129] pc212e [ 115.334569][ T8129] pc214e [ 115.335476][ T8129] pc215e [ 115.336387][ T8129] pc218e [ 115.337768][ T8129] pc272e [ 115.338693][ T8129] comedi: valid board names for comedi_parport driver are: [ 115.340966][ T8129] comedi_parport [ 115.342643][ T8129] comedi: valid board names for comedi_test driver are: [ 115.345919][ T8129] comedi_test [ 115.347783][ T8129] comedi: valid board names for comedi_bond driver are: [ 115.351180][ T8129] comedi_bond [ 115.383855][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 115.392703][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 115.461282][ T6735] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.465720][ T6735] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.469494][ T6735] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 115.473114][ T6735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.478530][ T6735] usb 8-1: config 0 descriptor?? [ 115.544581][ T6025] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 115.700362][ T8131] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 115.975495][ T6735] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 115.981203][ T6735] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0010/input/input24 [ 115.989784][ T6735] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 116.288926][ T8149] netlink: 136 bytes leftover after parsing attributes in process `syz.4.620'. [ 117.223092][ T6735] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 117.449564][ T8171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8171 comm=syz.4.628 [ 117.454629][ T8171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.628'. [ 117.496942][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 117.877829][ T6204] usbhid 9-1:0.0: can't add hid device: -32 [ 117.880865][ T6204] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 118.062827][ T54] usb 6-1: USB disconnect, device number 13 [ 118.080739][ T8183] validate_nla: 13 callbacks suppressed [ 118.080750][ T8183] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 118.085994][ T8183] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 118.088469][ T8183] netlink: 'syz.1.631': attribute type 1 has an invalid length. [ 118.127076][ T8185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 118.241869][ T8190] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 118.247220][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.356550][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 118.356565][ T40] audit: type=1400 audit(1756146616.974:494): avc: denied { write } for pid=8193 comm="syz.2.636" lport=37305 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 118.416948][ T40] audit: type=1400 audit(1756146617.039:495): avc: denied { ioctl } for pid=8199 comm="syz.2.638" path="socket:[20285]" dev="sockfs" ino=20285 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.504365][ T8210] netlink: 'syz.1.640': attribute type 7 has an invalid length. [ 118.507818][ T8210] netlink: 'syz.1.640': attribute type 8 has an invalid length. [ 118.513861][ T8209] SELinux: failed to load policy [ 118.521799][ T8213] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 118.524380][ T8213] netlink: 'syz.4.641': attribute type 2 has an invalid length. [ 118.527030][ T8213] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 118.553350][ T8216] nfs4: Bad value for 'source' [ 118.709717][ T8169] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 118.848067][ T6063] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 118.870598][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.874712][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.878186][ T8169] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 118.882288][ T8169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.886713][ T8169] usb 7-1: config 0 descriptor?? [ 118.958686][ T40] audit: type=1400 audit(1756146617.545:496): avc: denied { getopt } for pid=8232 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.995140][ T8235] openvswitch: netlink: Message has 5 unknown bytes. [ 119.033061][ T40] audit: type=1400 audit(1756146617.619:497): avc: denied { append } for pid=8236 comm="syz.4.650" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.042280][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.045853][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.049028][ T6063] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 119.052120][ T6063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.055485][ T839] usb 8-1: USB disconnect, device number 13 [ 119.064889][ T6063] usb 6-1: config 0 descriptor?? [ 119.077039][ T8239] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 119.079903][ T8239] netlink: 'syz.4.651': attribute type 2 has an invalid length. [ 119.380774][ T8169] hid_parser_main: 1 callbacks suppressed [ 119.380787][ T8169] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 119.385276][ T8169] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 119.390733][ T8169] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0011/input/input25 [ 119.400862][ T8169] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 119.559439][ T6063] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 119.561802][ T6063] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 119.565933][ T6063] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0012/input/input26 [ 119.573417][ T6063] cm6533_jd 0003:0D8C:0022.0012: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 119.637328][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8270 comm=syz.4.660 [ 119.669746][ T8273] __nla_validate_parse: 9 callbacks suppressed [ 119.669757][ T8273] netlink: 136 bytes leftover after parsing attributes in process `syz.4.661'. [ 119.878526][ T40] audit: type=1400 audit(1756146618.405:498): avc: denied { mounton } for pid=8280 comm="syz.4.664" path="/bus" dev="bpf" ino=23626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 119.879609][ T8281] overlayfs: upper fs does not support tmpfile. [ 119.973090][ T8286] 8021q: VLANs not supported on ip_vti0 [ 120.080014][ T40] audit: type=1400 audit(1756146618.602:499): avc: denied { create } for pid=8291 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.080704][ T8292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.668'. [ 120.088074][ T40] audit: type=1400 audit(1756146618.602:500): avc: denied { write } for pid=8291 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.088119][ T40] audit: type=1400 audit(1756146618.602:501): avc: denied { nlmsg_write } for pid=8291 comm="syz.4.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.130770][ T40] audit: type=1400 audit(1756146618.639:502): avc: denied { shutdown } for pid=8294 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.175367][ T8297] netlink: 136 bytes leftover after parsing attributes in process `syz.4.670'. [ 120.222397][ T8299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.440989][ T5985] Bluetooth: hci4: command 0x1003 tx timeout [ 120.441234][ T5991] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.715722][ T8321] netlink: 136 bytes leftover after parsing attributes in process `syz.3.679'. [ 120.750887][ T8169] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 120.776831][ T8327] erspan0: entered promiscuous mode [ 120.879176][ T6046] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 121.316266][ T40] audit: type=1400 audit(1756146619.752:503): avc: denied { setopt } for pid=8340 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.386451][ T8346] lo speed is unknown, defaulting to 1000 [ 121.388740][ T8346] lo speed is unknown, defaulting to 1000 [ 121.391935][ T8346] lo speed is unknown, defaulting to 1000 [ 121.400380][ T8346] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.407662][ T8346] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.426673][ T8346] lo speed is unknown, defaulting to 1000 [ 121.429838][ T8346] lo speed is unknown, defaulting to 1000 [ 121.433899][ T8346] lo speed is unknown, defaulting to 1000 [ 121.436900][ T8346] lo speed is unknown, defaulting to 1000 [ 121.476498][ T8348] netlink: 180 bytes leftover after parsing attributes in process `syz.4.689'. [ 121.834019][ T8394] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.694'. [ 122.150089][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8408 comm=syz.2.698 [ 122.187565][ T8413] netlink: 180 bytes leftover after parsing attributes in process `syz.4.699'. [ 122.344988][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.349691][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.454598][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.458446][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.469599][ T8435] netlink: 72 bytes leftover after parsing attributes in process `syz.2.706'. [ 122.634027][ T6204] usb 6-1: USB disconnect, device number 14 [ 122.694053][ T8439] fuse: Bad value for 'rootmode' [ 122.696325][ T8439] fuse: Bad value for 'user_id' [ 122.698083][ T8439] fuse: Bad value for 'user_id' [ 122.700368][ T8439] ucma_write: process 548 (syz.1.707) changed security contexts after opening file descriptor, this is not allowed. [ 122.766370][ T8443] netlink: 180 bytes leftover after parsing attributes in process `syz.1.709'. [ 122.803469][ T8169] usb 7-1: device descriptor read/64, error -71 [ 122.869354][ T8452] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.712'. [ 122.873175][ T8451] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 122.875813][ T8451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.936091][ T8458] loop7: detected capacity change from 0 to 7 [ 123.060217][ T8169] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 123.070308][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 123.074762][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 123.209795][ T8169] usb 7-1: device descriptor read/64, error -71 [ 123.531571][ T8483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.534296][ T8483] IPv6: NLM_F_CREATE should be set when creating new route [ 123.626670][ T8169] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 123.661662][ T8169] usb 7-1: device descriptor read/8, error -71 [ 123.829801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 123.979459][ T8169] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 123.998534][ T8504] validate_nla: 16 callbacks suppressed [ 123.998545][ T8504] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 124.003808][ T8169] usb 7-1: device descriptor read/8, error -71 [ 124.037671][ T8507] binder: BINDER_SET_CONTEXT_MGR already set [ 124.039898][ T8507] binder: 8505:8507 ioctl 4018620d 200000000100 returned -16 [ 124.043742][ T8506] binder: 8505:8506 ioctl 40044591 0 returned -22 [ 124.129546][ T6063] usb 7-1: USB disconnect, device number 11 [ 124.153592][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=8509 comm=syz.1.730 [ 124.225557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.301440][ T6063] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 124.440609][ T6063] usb 7-1: device descriptor read/64, error -71 [ 124.706481][ T6063] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 124.762303][ T8524] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 124.856064][ T6063] usb 7-1: device descriptor read/64, error -71 [ 124.974589][ T6063] usb usb7-port1: attempt power cycle [ 124.991364][ T8530] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 125.021411][ T8534] __nla_validate_parse: 5 callbacks suppressed [ 125.021423][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.739'. [ 125.083450][ T8539] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 125.217652][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 125.217667][ T40] audit: type=1400 audit(1756146623.400:507): avc: denied { ioctl } for pid=8545 comm="syz.1.744" path="socket:[22076]" dev="sockfs" ino=22076 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 125.347861][ T6063] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 125.380386][ T6063] usb 7-1: device descriptor read/8, error -71 [ 125.443408][ T8561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8561 comm=syz.1.747 [ 125.481644][ T8563] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 125.484213][ T8563] netlink: 180 bytes leftover after parsing attributes in process `syz.1.748'. [ 125.515338][ T8565] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 125.517709][ T8565] netlink: 172 bytes leftover after parsing attributes in process `syz.1.749'. [ 125.524362][ T40] audit: type=1400 audit(1756146623.690:508): avc: denied { mounton } for pid=8566 comm="syz.4.750" path="/93/file0" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.588431][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'. [ 125.636991][ T6063] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 125.676231][ T6063] usb 7-1: device descriptor read/8, error -71 [ 125.696077][ T8587] overlayfs: failed to resolve './file1': -2 [ 125.769282][ T8594] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 125.772141][ T8594] netlink: 180 bytes leftover after parsing attributes in process `syz.4.757'. [ 125.787463][ T6063] usb usb7-port1: unable to enumerate USB device [ 125.787651][ T40] audit: type=1400 audit(1756146623.924:509): avc: granted { setsecparam } for pid=8593 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 125.806425][ T40] audit: type=1400 audit(1756146623.952:510): avc: denied { create } for pid=8598 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.823393][ T40] audit: type=1400 audit(1756146623.971:511): avc: denied { getopt } for pid=8598 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.858925][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.864959][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.911305][ T40] audit: type=1400 audit(1756146624.046:512): avc: denied { connect } for pid=8607 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.914827][ T8608] pimreg: entered allmulticast mode [ 125.915402][ T8606] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 125.984635][ T40] audit: type=1400 audit(1756146624.120:513): avc: denied { bind } for pid=8615 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.999330][ T8618] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 126.002499][ T8618] netlink: 180 bytes leftover after parsing attributes in process `syz.1.766'. [ 126.073445][ T8626] lo speed is unknown, defaulting to 1000 [ 126.112349][ T8626] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 126.115327][ T8626] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 126.118657][ T8626] comedi: valid board names for 8255 driver are: [ 126.119450][ T40] audit: type=1400 audit(1756146624.251:514): avc: denied { setopt } for pid=8625 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.120706][ T8626] 8255 [ 126.129276][ T8626] comedi: valid board names for vmk80xx driver are: [ 126.131351][ T8626] vmk80xx [ 126.132285][ T8626] comedi: valid board names for usbduxsigma driver are: [ 126.133801][ T40] audit: type=1400 audit(1756146624.261:515): avc: denied { ioctl } for pid=8631 comm="syz.1.770" path="socket:[23536]" dev="sockfs" ino=23536 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.134300][ T8626] usbduxsigma [ 126.134306][ T8626] comedi: valid board names for usbduxfast driver are: [ 126.145512][ T8626] usbduxfast [ 126.146588][ T8626] comedi: valid board names for usbdux driver are: [ 126.148535][ T8626] usbdux [ 126.149460][ T8626] comedi: valid board names for ni6501 driver are: [ 126.151694][ T8626] ni6501 [ 126.152645][ T8626] comedi: valid board names for dt9812 driver are: [ 126.154585][ T8626] dt9812 [ 126.155520][ T8626] comedi: valid board names for ni_labpc_cs driver are: [ 126.157640][ T8626] ni_labpc_cs [ 126.159410][ T8626] comedi: valid board names for ni_daq_700 driver are: [ 126.162148][ T8626] ni_daq_700 [ 126.164319][ T8626] comedi: valid board names for labpc_pci driver are: [ 126.167499][ T8626] labpc_pci [ 126.168825][ T8626] comedi: valid board names for adl_pci9118 driver are: [ 126.171639][ T8626] pci9118dg [ 126.172774][ T8626] pci9118hg [ 126.173789][ T8626] pci9118hr [ 126.176017][ T8626] comedi: valid board names for 8255_pci driver are: [ 126.178102][ T8626] 8255_pci [ 126.179454][ T8626] comedi: valid board names for s526 driver are: [ 126.181783][ T8626] s526 [ 126.183734][ T8626] comedi: valid board names for multiq3 driver are: [ 126.185846][ T8626] multiq3 [ 126.186827][ T8626] comedi: valid board names for pcmuio driver are: [ 126.188851][ T8626] pcmuio48 [ 126.189907][ T8626] pcmuio96 [ 126.191014][ T8626] comedi: valid board names for pcmmio driver are: [ 126.194311][ T8626] pcmmio [ 126.195232][ T8626] comedi: valid board names for pcmda12 driver are: [ 126.197157][ T8626] pcmda12 [ 126.198161][ T8626] comedi: valid board names for pcmad driver are: [ 126.200661][ T8626] pcmad12 [ 126.201662][ T8626] pcmad16 [ 126.202742][ T8626] comedi: valid board names for ni_labpc driver are: [ 126.205354][ T8626] lab-pc-1200 [ 126.206455][ T8626] lab-pc-1200ai [ 126.207567][ T8626] lab-pc+ [ 126.210245][ T8626] comedi: valid board names for atmio16 driver are: [ 126.212493][ T8626] atmio16 [ 126.213487][ T8626] atmio16d [ 126.214740][ T8626] comedi: valid board names for ni_at_ao driver are: [ 126.216851][ T8626] at-ao-6 [ 126.217827][ T8626] at-ao-10 [ 126.218820][ T8626] comedi: valid board names for ni_at_a2150 driver are: [ 126.221040][ T8626] ni_at_a2150 [ 126.222158][ T8626] comedi: valid board names for adq12b driver are: [ 126.224223][ T8626] adq12b [ 126.225706][ T8626] comedi: valid board names for mpc624 driver are: [ 126.227902][ T8626] mpc624 [ 126.229508][ T8626] comedi: valid board names for c6xdigio driver are: [ 126.231556][ T8626] c6xdigio [ 126.232595][ T8626] comedi: valid board names for aio_iiro_16 driver are: [ 126.234699][ T8626] aio_iiro_16 [ 126.235815][ T8626] comedi: valid board names for aio_aio12_8 driver are: [ 126.237935][ T8626] aio_aio12_8 [ 126.238978][ T8626] aio_ai12_8 [ 126.240015][ T8626] aio_ao12_4 [ 126.241251][ T8626] comedi: valid board names for fl512 driver are: [ 126.243217][ T8626] fl512 [ 126.244087][ T8626] comedi: valid board names for dmm32at driver are: [ 126.246709][ T8626] dmm32at [ 126.247665][ T8626] comedi: valid board names for dt282x driver are: [ 126.249707][ T8626] dt2821 [ 126.250825][ T8626] dt2821-f [ 126.252129][ T8626] dt2821-g [ 126.253134][ T8626] dt2823 [ 126.254039][ T8626] dt2824-pgh [ 126.255048][ T8626] dt2824-pgl [ 126.256077][ T8626] dt2825 [ 126.257041][ T8626] dt2827 [ 126.257990][ T8626] dt2828 [ 126.258901][ T8626] dt2829 [ 126.259832][ T8626] dt21-ez [ 126.260942][ T8626] dt23-ez [ 126.261917][ T8626] dt24-ez [ 126.262878][ T8626] dt24-ez-pgl [ 126.263930][ T8626] comedi: valid board names for dt2817 driver are: [ 126.265868][ T8626] dt2817 [ 126.266811][ T8626] comedi: valid board names for dt2815 driver are: [ 126.268963][ T8626] dt2815 [ 126.269969][ T8626] comedi: valid board names for dt2814 driver are: [ 126.272062][ T8626] dt2814 [ 126.273052][ T8626] comedi: valid board names for dt2811 driver are: [ 126.274994][ T8626] dt2811-pgh [ 126.276019][ T8626] dt2811-pgl [ 126.277037][ T8626] comedi: valid board names for dt2801 driver are: [ 126.279038][ T8626] dt2801 [ 126.279960][ T8626] comedi: valid board names for das6402 driver are: [ 126.282221][ T8626] das6402-12 [ 126.283411][ T8626] das6402-16 [ 126.284802][ T8626] comedi: valid board names for das1800 driver are: [ 126.286768][ T8626] das-1701st [ 126.287778][ T8626] das-1701st-da [ 126.289059][ T8626] das-1702st [ 126.290123][ T8626] das-1702st-da [ 126.291277][ T8626] das-1702hr [ 126.292313][ T8626] das-1702hr-da [ 126.293445][ T8626] das-1701ao [ 126.294537][ T8626] das-1702ao [ 126.295553][ T8626] das-1801st [ 126.296540][ T8626] das-1801st-da [ 126.297636][ T8626] das-1802st [ 126.298657][ T8626] das-1802st-da [ 126.299853][ T8626] das-1802hr [ 126.300997][ T8626] das-1802hr-da [ 126.302087][ T8626] das-1801hc [ 126.303139][ T8626] das-1802hc [ 126.304193][ T8626] das-1801ao [ 126.305289][ T8626] das-1802ao [ 126.306406][ T8626] comedi: valid board names for das800 driver are: [ 126.308406][ T8626] das-800 [ 126.309358][ T8626] cio-das800 [ 126.310520][ T8626] das-801 [ 126.311552][ T8626] cio-das801 [ 126.312616][ T8626] das-802 [ 126.313641][ T8626] cio-das802 [ 126.314662][ T8626] cio-das802/16 [ 126.315770][ T8626] comedi: valid board names for isa-das08 driver are: [ 126.317833][ T8626] isa-das08 [ 126.318837][ T8626] das08-pgm [ 126.319867][ T8626] das08-pgh [ 126.321047][ T8626] das08-pgl [ 126.322208][ T8626] das08-aoh [ 126.323326][ T8626] das08-aol [ 126.324401][ T8626] das08-aom [ 126.325391][ T8626] das08/jr-ao [ 126.326429][ T8626] das08jr-16-ao [ 126.327506][ T8626] pc104-das08 [ 126.328697][ T8626] das08jr/16 [ 126.329778][ T8626] comedi: valid board names for das16m1 driver are: [ 126.331875][ T8626] das16m1 [ 126.333062][ T8626] comedi: valid board names for dac02 driver are: [ 126.335508][ T8626] dac02 [ 126.336729][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.775'. [ 126.336793][ T8626] comedi: valid board names for rti802 driver are: [ 126.342129][ T8626] rti802 [ 126.343088][ T8626] comedi: valid board names for rti800 driver are: [ 126.345029][ T8626] rti800 [ 126.345935][ T8626] rti815 [ 126.346844][ T8626] comedi: valid board names for pcm3724 driver are: [ 126.348871][ T8626] pcm3724 [ 126.349858][ T8626] comedi: valid board names for pcl818 driver are: [ 126.352058][ T8626] pcl818l [ 126.353443][ T8626] pcl818h [ 126.354401][ T8626] pcl818hd [ 126.355348][ T8626] pcl818hg [ 126.356347][ T8626] pcl818 [ 126.357231][ T8626] pcl718 [ 126.358125][ T8626] pcm3718 [ 126.359068][ T8626] comedi: valid board names for pcl816 driver are: [ 126.361054][ T8626] pcl816 [ 126.361973][ T8626] pcl814b [ 126.362985][ T8626] comedi: valid board names for pcl812 driver are: [ 126.365287][ T8626] pcl812 [ 126.366184][ T8626] pcl812pg [ 126.367158][ T8626] acl8112pg [ 126.368184][ T8626] acl8112dg [ 126.369169][ T8626] acl8112hg [ 126.370273][ T8626] a821pgl [ 126.371249][ T8626] a821pglnda [ 126.372299][ T8626] a821pgh [ 126.373334][ T8626] a822pgl [ 126.374582][ T8626] a822pgh [ 126.375542][ T8626] a823pgl [ 126.376578][ T8626] a823pgh [ 126.377519][ T8626] pcl813 [ 126.378535][ T8626] pcl813b [ 126.379636][ T8626] acl8113 [ 126.380666][ T8626] iso813 [ 126.381615][ T8626] acl8216 [ 126.382571][ T8626] a826pg [ 126.383554][ T8626] comedi: valid board names for pcl730 driver are: [ 126.385862][ T8626] pcl730 [ 126.386788][ T8626] iso730 [ 126.387800][ T8626] acl7130 [ 126.388754][ T8626] pcm3730 [ 126.389686][ T8626] pcl725 [ 126.390700][ T8626] p8r8dio [ 126.391657][ T8626] acl7225b [ 126.392630][ T8626] p16r16dio [ 126.393676][ T8626] pcl733 [ 126.394871][ T8626] pcl734 [ 126.395884][ T8626] opmm-1616-xt [ 126.397247][ T8626] pearl-mm-p [ 126.398262][ T8626] ir104-pbf [ 126.399350][ T8626] comedi: valid board names for pcl726 driver are: [ 126.401450][ T8626] pcl726 [ 126.402346][ T8626] pcl727 [ 126.403279][ T8626] pcl728 [ 126.404246][ T8626] acl6126 [ 126.405191][ T8626] acl6128 [ 126.407051][ T8626] comedi: valid board names for pcl724 driver are: [ 126.409001][ T8626] pcl724 [ 126.409888][ T8626] pcl722 [ 126.410856][ T8626] pcl731 [ 126.411730][ T8626] acl7122 [ 126.412677][ T8626] acl7124 [ 126.413631][ T8626] pet48dio [ 126.414599][ T8626] pcmio48 [ 126.415531][ T8626] onyx-mm-dio [ 126.416604][ T8626] comedi: valid board names for pcl711 driver are: [ 126.418687][ T8626] pcl711 [ 126.419577][ T8626] pcl711b [ 126.420560][ T8626] acl8112hg [ 126.421554][ T8626] acl8112dg [ 126.422714][ T8626] comedi: valid board names for amplc_pc263 driver are: [ 126.424782][ T8626] pc263 [ 126.425681][ T8626] comedi: valid board names for amplc_pc236 driver are: [ 126.428150][ T8626] pc36at [ 126.429422][ T8626] comedi: valid board names for amplc_dio200 driver are: [ 126.431626][ T8626] pc212e [ 126.432574][ T8626] pc214e [ 126.433503][ T8626] pc215e [ 126.434421][ T8626] pc218e [ 126.435372][ T8626] pc272e [ 126.436329][ T8626] comedi: valid board names for comedi_parport driver are: [ 126.438670][ T8626] comedi_parport [ 126.439843][ T8626] comedi: valid board names for comedi_test driver are: [ 126.441963][ T8626] comedi_test [ 126.443011][ T8626] comedi: valid board names for comedi_bond driver are: [ 126.445121][ T8626] comedi_bond [ 126.567469][ T8666] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 126.569923][ T8666] netlink: 180 bytes leftover after parsing attributes in process `syz.2.777'. [ 126.742687][ T40] audit: type=1400 audit(1756146624.831:516): avc: denied { write } for pid=8676 comm="syz.2.779" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 126.922684][ T8687] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 128.401194][ T8723] netlink: 'syz.1.787': attribute type 1 has an invalid length. [ 128.403719][ T8723] netlink: 180 bytes leftover after parsing attributes in process `syz.1.787'. [ 128.480483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.545901][ T8738] misc userio: Invalid payload size [ 128.765451][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.768341][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.771269][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.773735][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.775957][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.778198][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.780882][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.783114][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.785458][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.787702][ T6204] hid-generic 0006:0004:0009.0013: unknown main item tag 0x0 [ 128.794663][ T6204] hid-generic 0006:0004:0009.0013: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 128.837269][ T8770] fido_id[8770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.098888][ T8802] tmpfs: Unknown parameter 'smackfsroot' [ 129.147773][ T8807] loop0: Can't mount, would change RO state [ 129.263734][ T8823] 9pnet_fd: p9_fd_create_unix (8823): problem connecting socket: ./file0: -111 [ 130.592737][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 130.592754][ T40] audit: type=1400 audit(1756146628.433:537): avc: denied { mount } for pid=8941 comm="syz.4.892" name="/" dev="hugetlbfs" ino=25064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 130.606062][ T40] audit: type=1400 audit(1756146628.442:538): avc: denied { unmount } for pid=7591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 130.767822][ T40] audit: type=1400 audit(1756146628.592:539): avc: denied { unmount } for pid=5978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.959710][ T40] audit: type=1400 audit(1756146628.760:540): avc: denied { append } for pid=8997 comm="syz.3.922" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.018932][ T40] audit: type=1400 audit(1756146628.825:541): avc: denied { read } for pid=9011 comm="syz.4.928" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 131.117997][ T40] audit: type=1400 audit(1756146628.919:542): avc: denied { read append } for pid=9030 comm="syz.3.937" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.227237][ T9045] syzkaller1: entered promiscuous mode [ 131.231904][ T9045] syzkaller1: entered allmulticast mode [ 131.643928][ T5991] Bluetooth: hci3: ISO packet too small [ 131.666072][ T6204] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 131.799438][ T40] audit: type=1400 audit(1756146629.555:543): avc: denied { connect } for pid=9063 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.831252][ T6204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.835472][ T6204] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 131.839965][ T6204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.843934][ T40] audit: type=1400 audit(1756146629.602:544): avc: denied { mounton } for pid=9065 comm="syz.3.953" path="/281/file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 131.846353][ T6204] usb 6-1: config 0 descriptor?? [ 132.010893][ T9072] netlink: 'syz.4.956': attribute type 21 has an invalid length. [ 132.014157][ T9072] netlink: 'syz.4.956': attribute type 22 has an invalid length. [ 132.017329][ T9072] netlink: 'syz.4.956': attribute type 23 has an invalid length. [ 132.021677][ T9072] netlink: 'syz.4.956': attribute type 26 has an invalid length. [ 132.023974][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.956'. [ 132.055584][ T9074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.059555][ T9074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.125715][ T952] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 132.290352][ T6204] lua 0003:1E7D:2C2E.0014: unknown global tag 0xe [ 132.292420][ T6204] lua 0003:1E7D:2C2E.0014: item 0 0 1 14 parsing failed [ 132.294870][ T6204] lua 0003:1E7D:2C2E.0014: parse failed [ 132.296934][ T6204] lua 0003:1E7D:2C2E.0014: probe with driver lua failed with error -22 [ 132.300177][ T952] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.303540][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.305983][ T952] usb 7-1: Product: syz [ 132.307406][ T952] usb 7-1: Manufacturer: syz [ 132.308964][ T952] usb 7-1: SerialNumber: syz [ 132.312043][ T952] usb 7-1: config 0 descriptor?? [ 132.315977][ T952] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 132.505829][ T6108] usb 6-1: USB disconnect, device number 15 [ 132.535616][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.538414][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.626521][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.630354][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.664129][ T952] gspca_sunplus: reg_r err -71 [ 132.665761][ T952] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 132.670148][ T952] usb 7-1: USB disconnect, device number 16 [ 132.929974][ T40] audit: type=1400 audit(1756146630.621:545): avc: denied { append } for pid=9081 comm="syz.3.960" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.136993][ T40] audit: type=1400 audit(1756146630.808:546): avc: denied { read write } for pid=9087 comm="syz.1.962" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 133.226612][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.232671][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.302359][ T9094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.119910][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.122871][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.274492][ T6204] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.327966][ T952] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 134.435108][ T6204] usb 6-1: Using ep0 maxpacket: 8 [ 134.441494][ T6204] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 134.445056][ T6204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.450361][ T6204] usb 6-1: Product: syz [ 134.452172][ T6204] usb 6-1: Manufacturer: syz [ 134.454000][ T6204] usb 6-1: SerialNumber: syz [ 134.458123][ T6204] usb 6-1: config 0 descriptor?? [ 134.501011][ T952] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.503760][ T952] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.507062][ T952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.510243][ T952] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.513712][ T952] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.518813][ T952] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.521938][ T952] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.524456][ T952] usb 7-1: Product: syz [ 134.525813][ T952] usb 7-1: Manufacturer: syz [ 134.530950][ T952] cdc_wdm 7-1:1.0: skipping garbage [ 134.533200][ T952] cdc_wdm 7-1:1.0: skipping garbage [ 134.536881][ T952] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 134.538836][ T952] cdc_wdm 7-1:1.0: Unknown control protocol [ 134.683496][ T6204] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 134.689505][ T9137] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.965790][ T952] usb 7-1: USB disconnect, device number 17 [ 135.687355][ T9158] syzkaller1: entered promiscuous mode [ 135.688556][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.689134][ T9158] syzkaller1: entered allmulticast mode [ 135.695548][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.177502][ T5985] Bluetooth: hci0: command 0x0405 tx timeout [ 136.192001][ T6204] usb write operation failed. (-71) [ 136.201900][ T6204] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.206734][ T6204] dvbdev: DVB: registering new adapter (Terratec H7) [ 136.210211][ T6204] usb 6-1: media controller created [ 136.214616][ T6204] usb read operation failed. (-71) [ 136.217292][ T6204] usb write operation failed. (-71) [ 136.224776][ T6204] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 136.230674][ T6204] usb 6-1: USB disconnect, device number 16 [ 136.338067][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.341920][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.917803][ T9176] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 136.919886][ T9176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.922411][ T9176] vhci_hcd vhci_hcd.0: Device attached [ 136.926011][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.928790][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.931598][ T9177] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 136.934009][ T8383] vhci_hcd: stop threads [ 136.937153][ T8383] vhci_hcd: release socket [ 136.939389][ T8383] vhci_hcd: disconnect device [ 137.014333][ T952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 137.171663][ T952] usb 6-1: Using ep0 maxpacket: 16 [ 137.175233][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.178622][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.181792][ T952] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 137.184852][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.189170][ T952] usb 6-1: config 0 descriptor?? [ 137.337628][ T9180] syzkaller1: entered promiscuous mode [ 137.339837][ T9180] syzkaller1: entered allmulticast mode [ 137.500875][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.505587][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.627423][ T952] hid_parser_main: 7 callbacks suppressed [ 137.627437][ T952] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 137.632425][ T952] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 137.635023][ T952] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 137.637733][ T952] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 137.640755][ T952] corsair 0003:1B1C:1B02.0015: unknown main item tag 0x0 [ 137.650152][ T952] corsair 0003:1B1C:1B02.0015: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 137.839234][ T952] corsair 0003:1B1C:1B02.0015: Read invalid backlight brightness: 88. [ 138.055025][ T8169] usb 6-1: USB disconnect, device number 17 [ 138.077643][ T9199] loop6: detected capacity change from 0 to 7 [ 138.082194][ T9199] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 138.083960][ T9199] loop6: partition table partially beyond EOD, truncated [ 138.086248][ T9199] loop6: p1 size 2319028379 extends beyond EOD, truncated [ 138.121680][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.125610][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.187255][ T6736] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 138.347641][ T6736] usb 7-1: Using ep0 maxpacket: 32 [ 138.351009][ T6736] usb 7-1: config 14 has an invalid interface number: 137 but max is 3 [ 138.353620][ T6736] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 138.356876][ T6736] usb 7-1: config 14 has 1 interface, different from the descriptor's value: 4 [ 138.359813][ T6736] usb 7-1: config 14 has no interface number 0 [ 138.363581][ T6736] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 138.366800][ T6736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.369682][ T6736] usb 7-1: Product: syz [ 138.371116][ T6736] usb 7-1: Manufacturer: syz [ 138.372586][ T6736] usb 7-1: SerialNumber: syz [ 138.595578][ T6736] usb 7-1: USB disconnect, device number 18 [ 138.669078][ T9210] syzkaller1: entered promiscuous mode [ 138.671513][ T9210] syzkaller1: entered allmulticast mode [ 138.736484][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 138.736496][ T40] audit: type=1400 audit(1756146636.047:555): avc: denied { bind } for pid=9215 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.767437][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 138.769741][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.779879][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.799061][ T9222] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.802142][ T9222] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.805028][ T9222] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 138.807211][ T9222] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.809526][ T9222] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 138.811666][ T9222] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 138.813852][ T9222] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 138.815942][ T9222] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 138.819640][ T9222] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 138.822300][ T9222] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.824358][ T9222] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 138.826927][ T9222] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.830858][ T9222] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.833134][ T9222] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.835249][ T9222] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 138.837312][ T9222] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 138.839928][ T9222] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.842334][ T9222] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.845095][ T9222] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 139.063917][ T6108] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 139.085534][ T5991] Bluetooth: hci0: command 0x0405 tx timeout [ 139.234935][ T6108] usb 6-1: Using ep0 maxpacket: 8 [ 139.241707][ T6108] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 139.245632][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.249010][ T6108] usb 6-1: Product: syz [ 139.250987][ T6108] usb 6-1: Manufacturer: syz [ 139.253069][ T6108] usb 6-1: SerialNumber: syz [ 139.259455][ T6108] usb 6-1: config 0 descriptor?? [ 139.380584][ T40] audit: type=1400 audit(1756146636.645:556): avc: denied { bind } for pid=9249 comm="syz.3.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.416856][ T6736] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 139.482631][ T6108] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 139.529196][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.532790][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.538277][ T9268] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 139.541202][ T9268] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 139.543818][ T9268] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 139.547784][ T9268] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 139.550008][ T9268] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 139.552068][ T9268] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 139.554247][ T9268] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 139.556470][ T9268] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 139.558504][ T9268] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 139.560565][ T9268] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 139.563576][ T9268] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 139.565670][ T9268] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 139.567890][ T9268] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 139.570375][ T9268] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 139.573119][ T9268] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 139.575578][ T9268] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 139.577766][ T9268] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 139.579958][ T6736] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.580204][ T9268] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 139.582939][ T6736] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.589549][ T6736] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.593120][ T6736] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.596548][ T6736] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.602570][ T6736] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.605518][ T6736] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.608163][ T6736] usb 7-1: Product: syz [ 139.609796][ T6736] usb 7-1: Manufacturer: syz [ 139.616658][ T6736] cdc_wdm 7-1:1.0: skipping garbage [ 139.618638][ T6736] cdc_wdm 7-1:1.0: skipping garbage [ 139.622373][ T6736] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 139.624870][ T6736] cdc_wdm 7-1:1.0: Unknown control protocol [ 141.209923][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.215306][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.309216][ T5991] Bluetooth: hci0: command 0x0405 tx timeout [ 141.428186][ T6108] usb write operation failed. (-71) [ 141.431859][ T6108] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.436469][ T6108] dvbdev: DVB: registering new adapter (Terratec H7) [ 141.439890][ T6108] usb 6-1: media controller created [ 141.441969][ T6108] usb read operation failed. (-71) [ 141.443884][ T6108] usb write operation failed. (-71) [ 141.448295][ T6108] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 141.453748][ T6108] usb 6-1: USB disconnect, device number 18 [ 141.483055][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.485952][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.792178][ T9308] syzkaller1: entered promiscuous mode [ 141.794577][ T9308] syzkaller1: entered allmulticast mode [ 141.796606][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.801115][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.372638][ T6108] usb 7-1: USB disconnect, device number 19 [ 142.412685][ T9326] syzkaller1: entered promiscuous mode [ 142.414429][ T9326] syzkaller1: entered allmulticast mode [ 142.431146][ T9328] tipc: Enabled bearer , priority 0 [ 142.457377][ T9328] syzkaller0: entered promiscuous mode [ 142.459292][ T9328] syzkaller0: entered allmulticast mode [ 142.462489][ T9328] tipc: Resetting bearer [ 142.469345][ T9327] tipc: Resetting bearer [ 142.550350][ T1027] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 142.722710][ T1027] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 142.726141][ T1027] usb 6-1: config 0 has no interface number 0 [ 142.728768][ T1027] usb 6-1: config 0 interface 98 has no altsetting 0 [ 142.734969][ T1027] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 142.738795][ T1027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.742422][ T1027] usb 6-1: Product: syz [ 142.744222][ T1027] usb 6-1: Manufacturer: syz [ 142.746190][ T1027] usb 6-1: SerialNumber: syz [ 142.750607][ T1027] usb 6-1: config 0 descriptor?? [ 142.891298][ T6108] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 142.984772][ T1027] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 143.063168][ T6108] usb 7-1: Using ep0 maxpacket: 16 [ 143.066523][ T6108] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 143.069380][ T6108] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.072692][ T6108] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.077636][ T6108] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.080760][ T6108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.083357][ T6108] usb 7-1: Product: syz [ 143.085046][ T6108] usb 7-1: Manufacturer: syz [ 143.086513][ T6108] usb 7-1: SerialNumber: syz [ 143.528320][ T6108] usb 7-1: 0:2 : does not exist [ 143.544301][ T5985] Bluetooth: hci0: command 0x0405 tx timeout [ 143.639329][ T9327] tipc: Disabling bearer [ 143.662798][ T1027] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 143.728827][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.732513][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.086759][ T1027] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 144.089396][ T1027] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 144.093607][ T6204] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 144.096782][ T6204] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 144.183543][ T6108] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 144.210743][ T6108] usb 7-1: USB disconnect, device number 20 [ 144.224982][ T6144] udevd[6144]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.295348][ T9372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.298431][ T9372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.304932][ T6063] usb 6-1: USB disconnect, device number 19 [ 144.438141][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 144.732216][ T9384] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 144.735581][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1077'. [ 145.157581][ T6108] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 145.283061][ T9412] binder: 9411:9412 ioctl c0306201 200000000640 returned -22 [ 145.332376][ T6108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 145.338043][ T6108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17801, setting to 1024 [ 145.343091][ T6108] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.347223][ T6108] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.353259][ T6108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.357622][ T6108] usb 6-1: config 0 descriptor?? [ 145.360070][ T9391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.515892][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.518853][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.629535][ T6063] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 145.788567][ T6063] usb 7-1: Using ep0 maxpacket: 8 [ 145.792235][ T6063] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 145.795408][ T6063] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.799228][ T6063] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.800737][ T6108] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 145.802927][ T6063] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.802949][ T6063] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.802984][ T6063] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.819242][ T6063] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.042131][ T6063] usb 7-1: usb_control_msg returned -32 [ 146.043966][ T6063] usbtmc 7-1:16.0: can't read capabilities [ 146.335744][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.338578][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.445998][ C2] plantronics 0003:047F:FFFF.0016: hid_field_extract() called with n (132) > 32! (syz.1.1080) [ 146.662409][ T6063] usb 6-1: USB disconnect, device number 20 [ 147.241493][ T5985] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 147.311636][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.315372][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.339647][ T9450] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 147.616717][ T1027] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 147.777030][ T1027] usb 6-1: Using ep0 maxpacket: 8 [ 147.783153][ T1027] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 147.787018][ T1027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.790699][ T1027] usb 6-1: Product: syz [ 147.792518][ T1027] usb 6-1: Manufacturer: syz [ 147.794517][ T1027] usb 6-1: SerialNumber: syz [ 147.800096][ T1027] usb 6-1: config 0 descriptor?? [ 147.947483][ T9466] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 148.023016][ T1027] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 148.029436][ T9476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.032804][ T9476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.590096][ T6046] usb 7-1: USB disconnect, device number 21 [ 148.607215][ T5991] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 148.650672][ T9482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.653975][ T9482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.974096][ T6046] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 149.134478][ T6046] usb 7-1: Using ep0 maxpacket: 8 [ 149.137622][ T6046] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 149.140775][ T6046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.145154][ T6046] usb 7-1: config 0 descriptor?? [ 149.222555][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.225517][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.316851][ T1027] usb write operation failed. (-71) [ 149.321983][ T1027] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.327083][ T1027] dvbdev: DVB: registering new adapter (Terratec H7) [ 149.329914][ T1027] usb 6-1: media controller created [ 149.332415][ T1027] usb read operation failed. (-71) [ 149.334333][ T1027] usb write operation failed. (-71) [ 149.340308][ T1027] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 149.344842][ T1027] usb 6-1: USB disconnect, device number 21 [ 149.364078][ T6046] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 149.690423][ T5991] Bluetooth: hci3: command 0x0406 tx timeout [ 149.795748][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.799553][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.379578][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.382664][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.845151][ T1027] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 150.976824][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.980642][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.007081][ T1027] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 151.009985][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.014234][ T1027] usb 6-1: config 0 descriptor?? [ 151.018837][ T1027] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 151.234393][ T1027] gp8psk: usb in 128 operation failed. [ 151.305165][ T6046] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 151.308756][ T6046] asix 7-1:0.0: probe with driver asix failed with error -71 [ 151.319116][ T6046] usb 7-1: USB disconnect, device number 22 [ 151.451286][ T1027] gp8psk: usb in 146 operation failed. [ 151.453392][ T1027] gp8psk: failed to get FW version [ 151.455744][ T1027] gp8psk: FPGA Version = 121 [ 151.550698][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.554345][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.671209][ T1027] gp8psk: usb in 138 operation failed. [ 151.673009][ T1027] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 151.676281][ T1027] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 151.680023][ T1027] usb 6-1: USB disconnect, device number 22 [ 152.207065][ T9513] syzkaller1: entered promiscuous mode [ 152.209401][ T9513] syzkaller1: entered allmulticast mode [ 152.330982][ T8169] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 152.502075][ T8169] usb 7-1: Using ep0 maxpacket: 16 [ 152.506200][ T8169] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.509641][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.513335][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.516351][ T8169] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.519358][ T8169] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.525486][ T8169] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.529068][ T8169] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.531664][ T8169] usb 7-1: Manufacturer: syz [ 152.541547][ T8169] usb 7-1: config 0 descriptor?? [ 152.577029][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.579893][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.812117][ T8169] rc_core: IR keymap rc-hauppauge not found [ 152.814060][ T8169] Registered IR keymap rc-empty [ 152.815937][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.833452][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.856000][ T8169] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 152.860735][ T8169] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input28 [ 152.869501][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.887105][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.908373][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.929713][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.951306][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.972431][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 152.993901][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 153.015212][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 153.037099][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 153.057960][ T8169] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 153.083163][ T8169] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 153.086906][ T8169] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.234592][ T8169] usb 7-1: USB disconnect, device number 23 [ 153.451184][ T9546] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 153.453875][ T9546] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 153.459319][ T9546] vhci_hcd vhci_hcd.0: Device attached [ 153.463162][ T5985] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 153.463244][ T9547] vhci_hcd: connection closed [ 153.467831][ T8383] vhci_hcd: stop threads [ 153.471557][ T8383] vhci_hcd: release socket [ 153.473403][ T8383] vhci_hcd: disconnect device [ 153.592434][ T6025] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 153.752804][ T6025] usb 6-1: Using ep0 maxpacket: 16 [ 153.755689][ T6025] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.758901][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.762852][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.766124][ T6025] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.771443][ T6025] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.774646][ T6025] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.777153][ T6025] usb 6-1: Manufacturer: syz [ 153.779998][ T6025] usb 6-1: config 0 descriptor?? [ 154.006179][ T6046] usb 6-1: USB disconnect, device number 23 [ 154.026442][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.030481][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.112291][ T9557] syzkaller1: entered promiscuous mode [ 154.114416][ T9557] syzkaller1: entered allmulticast mode [ 154.490958][ T40] audit: type=1400 audit(1756146650.789:557): avc: denied { call } for pid=9562 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.491713][ T9563] binder_alloc: 9562: pid 9562 spamming oneway? 1 buffers allocated for a total size of 4096 [ 154.535431][ T5985] Bluetooth: hci3: unexpected cc 0x2002 length: 65 > 4 [ 154.537879][ T5985] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 154.543948][ T6025] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 154.625945][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.629068][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.716644][ T6025] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 154.720556][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.726706][ T6025] usb 7-1: config 0 descriptor?? [ 154.886192][ T9578] block nbd1: Attempted send on invalid socket [ 154.889582][ T9578] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.892888][ T9578] block nbd1: Attempted send on invalid socket [ 154.894855][ T9578] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.899058][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 154.902196][ T9578] block nbd1: Attempted send on invalid socket [ 154.904120][ T9578] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.907041][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 154.910760][ T9578] block nbd1: Attempted send on invalid socket [ 154.912739][ T9578] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.915732][ T9578] block nbd1: Attempted send on invalid socket [ 154.917702][ T9578] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.921023][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 154.924102][ T9578] block nbd1: Attempted send on invalid socket [ 154.926077][ T9578] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.929292][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 154.932516][ T9578] block nbd1: Attempted send on invalid socket [ 154.934471][ T9578] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.937824][ T9578] block nbd1: Attempted send on invalid socket [ 154.940499][ T9578] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.943423][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 154.946485][ T9578] block nbd1: Attempted send on invalid socket [ 154.948506][ T9578] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.951570][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 154.954790][ T9578] block nbd1: Attempted send on invalid socket [ 154.956747][ T9578] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.961076][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 154.964201][ T9578] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 154.967127][ T9578] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 156.254431][ T8169] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 156.414759][ T8169] usb 6-1: Using ep0 maxpacket: 8 [ 156.418536][ T8169] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.421714][ T8169] usb 6-1: config 0 has no interface number 0 [ 156.424137][ T8169] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.428613][ T8169] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.432488][ T8169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.438210][ T8169] usb 6-1: config 0 descriptor?? [ 156.447295][ T8169] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 156.928622][ T1027] usb 6-1: USB disconnect, device number 24 [ 157.095303][ T6025] pegasus 7-1:0.0: setup Pegasus II specific registers [ 157.530447][ T6025] pegasus 7-1:0.0: can't locate MII phy, using default [ 157.542970][ T6025] pegasus 7-1:0.0: eth6, ELECOM USB Ethernet LD-USB20, ce:6b:5f:0a:d6:ff [ 157.546637][ T6025] usb 7-1: USB disconnect, device number 24 [ 157.655063][ T5991] Bluetooth: hci4: command 0x1003 tx timeout [ 157.656206][ T5985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.696321][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.700005][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.751170][ T54] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 157.915574][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.919240][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.923322][ T54] usb 6-1: Product: syz [ 157.925040][ T54] usb 6-1: Manufacturer: syz [ 157.926906][ T54] usb 6-1: SerialNumber: syz [ 158.299739][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.302775][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.396348][ T40] audit: type=1400 audit(1756146654.437:558): avc: denied { read } for pid=9619 comm="syz.3.1179" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.523242][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.526191][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.015153][ T54] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 159.017619][ T54] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 159.131913][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.136096][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.194356][ T6735] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 159.440217][ T8169] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 159.446669][ T54] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 159.611302][ T8169] usb 7-1: Using ep0 maxpacket: 32 [ 159.614841][ T8169] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 159.617461][ T8169] usb 7-1: config 0 has no interface number 0 [ 159.619444][ T8169] usb 7-1: config 0 interface 89 has no altsetting 0 [ 159.624519][ T8169] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 159.627321][ T8169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.629850][ T8169] usb 7-1: Product: syz [ 159.631241][ T8169] usb 7-1: Manufacturer: syz [ 159.632795][ T8169] usb 7-1: SerialNumber: syz [ 159.635671][ T8169] usb 7-1: config 0 descriptor?? [ 159.639677][ T8169] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 159.642943][ T8169] em28xx 7-1:0.89: Video interface 89 found: bulk [ 159.656045][ T6735] usb 6-1: USB disconnect, device number 25 [ 159.662780][ T6735] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 160.286852][ T8169] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 160.538032][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.541697][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.762657][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.766382][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.947591][ T1027] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 161.110531][ T1027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.114207][ T1027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.117383][ T1027] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.121974][ T1027] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.125008][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.129911][ T1027] usb 6-1: config 0 descriptor?? [ 161.338303][ T9658] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 161.340546][ T9658] binder: 9657:9658 ioctl 4018620d 200000000a80 returned -1 [ 161.374644][ T8169] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 161.378640][ T8169] em28xx 7-1:0.89: board has no eeprom [ 161.439315][ T8169] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 161.441805][ T8169] em28xx 7-1:0.89: analog set to bulk mode. [ 161.444725][ T6063] em28xx 7-1:0.89: Registering V4L2 extension [ 161.455114][ T8169] usb 7-1: USB disconnect, device number 25 [ 161.465476][ T8169] em28xx 7-1:0.89: Disconnecting em28xx [ 161.467414][ T6063] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 161.469809][ T6063] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 161.472093][ T6063] em28xx 7-1:0.89: No AC97 audio processor [ 161.476422][ T6063] usb 7-1: Decoder not found [ 161.477941][ T6063] em28xx 7-1:0.89: failed to create media graph [ 161.479892][ T6063] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 161.483561][ T6063] em28xx 7-1:0.89: Registering snapshot button... [ 161.486893][ T6063] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.89/input/input29 [ 161.493061][ T6063] em28xx 7-1:0.89: Remote control support is not available for this card. [ 161.496282][ T8169] em28xx 7-1:0.89: Closing input extension [ 161.498638][ T8169] em28xx 7-1:0.89: Deregistering snapshot button [ 161.516239][ T8169] em28xx 7-1:0.89: Freeing device [ 161.573352][ T1027] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 161.796509][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.800057][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.108890][ T6108] usb 6-1: USB disconnect, device number 26 [ 162.398617][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.401968][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.066718][ T9700] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 163.069419][ T9700] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 163.072255][ T9700] comedi comedi3: 8255: I/O port conflict (0x601,4) [ 163.074809][ T9700] comedi comedi3: 8255: I/O port conflict (0xdb,4) [ 163.077174][ T9700] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 163.079504][ T9700] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 163.081932][ T9700] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 163.084461][ T9700] comedi comedi3: 8255: I/O port conflict (0xffffffff800003ff,4) [ 163.087112][ T9700] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 163.147113][ T9708] syzkaller1: entered promiscuous mode [ 163.149493][ T9708] syzkaller1: entered allmulticast mode [ 163.182033][ T8169] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 163.342275][ T8169] usb 6-1: Using ep0 maxpacket: 8 [ 163.347568][ T8169] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 163.350551][ T8169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.353398][ T8169] usb 6-1: Product: syz [ 163.354729][ T8169] usb 6-1: Manufacturer: syz [ 163.356457][ T8169] usb 6-1: SerialNumber: syz [ 163.360863][ T8169] usb 6-1: config 0 descriptor?? [ 163.374827][ T6108] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 163.545763][ T6108] usb 7-1: Using ep0 maxpacket: 32 [ 163.549060][ T6108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.552619][ T6108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.555901][ T6108] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.559973][ T6108] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 163.562913][ T6108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.567479][ T6108] usb 7-1: config 0 descriptor?? [ 163.580334][ T8169] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.012912][ T6108] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0018/input/input30 [ 164.096841][ T6108] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0018/input/input31 [ 164.114240][ T6108] kye 0003:0458:5011.0018: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 164.225243][ T40] audit: type=1400 audit(1756146659.890:559): avc: denied { append } for pid=9705 comm="syz.2.1214" name="hiddev0" dev="devtmpfs" ino=3349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.319301][ T9716] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2429201179/2429201181 [ 164.400805][ T5991] Bluetooth: hci0: command 0x0405 tx timeout [ 164.449539][ T8169] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.453792][ T8169] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 164.457285][ T8169] usb 6-1: media controller created [ 164.470948][ T8169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.509285][ T8169] i2c i2c-2: Added multiplexed i2c bus 3 [ 164.511250][ T8169] rtl2830 2-0010: Realtek RTL2830 successfully attached [ 164.514042][ T8169] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 164.518081][ T8169] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 164.531084][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.534555][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.542048][ T8169] DVB: Unable to find symbol mxl5005s_attach() [ 164.997372][ T8169] usb 6-1: USB disconnect, device number 27 [ 165.118257][ C3] kye 0003:0458:5011.0018: usb_submit_urb(ctrl) failed: -1 [ 165.122325][ T840] usb 7-1: USB disconnect, device number 26 [ 165.194684][ T9739] kAFS: unparsable volume name [ 165.512471][ T9746] loop2: detected capacity change from 0 to 7 [ 165.516391][ T9746] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 165.518249][ T9746] loop2: p1 start 124387328 is beyond EOD, truncated [ 165.520435][ T9746] loop2: p2 start 1634533376 is beyond EOD, truncated [ 165.522564][ T9746] loop2: p3 start 1886744434 is beyond EOD, truncated [ 165.524823][ T9746] loop2: p4 start 8388608 is beyond EOD, truncated [ 165.526890][ T9746] loop2: p5 start 196608 is beyond EOD, truncated [ 165.630630][ T9750] [ 165.631477][ T9750] ====================================================== [ 165.633674][ T9750] WARNING: possible circular locking dependency detected [ 165.635916][ T9750] syzkaller #0 Not tainted [ 165.637445][ T9750] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.639784][ T9750] syz.3.1233/9750 is trying to acquire lock: [ 165.641797][ T9750] ffff88801ca8ea20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 165.645020][ T9750] [ 165.645020][ T9750] but task is already holding lock: [ 165.647351][ T9750] ffff888105c31e18 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.736077][ T9750] [ 165.736077][ T9750] which lock already depends on the new lock. [ 165.736077][ T9750] [ 165.740376][ T9750] [ 165.740376][ T9750] the existing dependency chain (in reverse order) is: [ 165.744058][ T9750] [ 165.744058][ T9750] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 165.747583][ T9750] blk_alloc_queue+0x619/0x760 [ 165.749608][ T9750] blk_mq_alloc_queue+0x172/0x280 [ 165.751535][ T9750] __blk_mq_alloc_disk+0x29/0x120 [ 165.753536][ T9750] loop_add+0x490/0xb70 [ 165.755043][ T9750] loop_init+0x164/0x270 [ 165.756603][ T9750] do_one_initcall+0x120/0x6e0 [ 165.758457][ T9750] kernel_init_freeable+0x5c2/0x910 [ 165.760746][ T9750] kernel_init+0x1c/0x2b0 [ 165.762325][ T9750] ret_from_fork+0x5d7/0x6f0 [ 165.763979][ T9750] ret_from_fork_asm+0x1a/0x30 [ 165.765671][ T9750] [ 165.765671][ T9750] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 165.768133][ T9750] fs_reclaim_acquire+0x102/0x150 [ 165.769990][ T9750] kmem_cache_alloc_noprof+0x53/0x3b0 [ 165.771949][ T9750] __kernfs_iattrs+0x124/0x3e0 [ 165.773666][ T9750] __kernfs_setattr+0x4d/0x3c0 [ 165.775355][ T9750] kernfs_iop_setattr+0xda/0x120 [ 165.777107][ T9750] notify_change+0x6a9/0x1230 [ 165.779154][ T9750] do_truncate+0x1d7/0x230 [ 165.781137][ T9750] path_openat+0x2678/0x2cb0 [ 165.782806][ T9750] do_filp_open+0x20b/0x470 [ 165.784438][ T9750] do_sys_openat2+0x11b/0x1d0 [ 165.786087][ T9750] __x64_sys_openat+0x174/0x210 [ 165.787829][ T9750] do_syscall_64+0xcd/0x4c0 [ 165.789773][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.792493][ T9750] [ 165.792493][ T9750] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 165.795173][ T9750] __lock_acquire+0x12a6/0x1ce0 [ 165.796976][ T9750] lock_acquire+0x179/0x350 [ 165.798651][ T9750] down_read+0x9b/0x480 [ 165.800171][ T9750] kernfs_iop_getattr+0x9c/0xf0 [ 165.801875][ T9750] vfs_getattr_nosec+0x2a9/0x430 [ 165.803587][ T9750] vfs_getattr+0x4a/0x60 [ 165.805120][ T9750] loop_query_min_dio_size.isra.0+0x117/0x250 [ 165.807183][ T9750] lo_ioctl+0x144b/0x1cc0 [ 165.808852][ T9750] blkdev_ioctl+0x274/0x6d0 [ 165.810864][ T9750] __x64_sys_ioctl+0x18b/0x210 [ 165.812658][ T9750] do_syscall_64+0xcd/0x4c0 [ 165.814264][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.816282][ T9750] [ 165.816282][ T9750] other info that might help us debug this: [ 165.816282][ T9750] [ 165.819683][ T9750] Chain exists of: [ 165.819683][ T9750] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 165.819683][ T9750] [ 165.824114][ T9750] Possible unsafe locking scenario: [ 165.824114][ T9750] [ 165.826431][ T9750] CPU0 CPU1 [ 165.828131][ T9750] ---- ---- [ 165.829878][ T9750] lock(&q->q_usage_counter(io)#24); [ 165.831882][ T9750] lock(fs_reclaim); [ 165.834151][ T9750] lock(&q->q_usage_counter(io)#24); [ 165.836732][ T9750] rlock(&root->kernfs_iattr_rwsem); [ 165.838482][ T9750] [ 165.838482][ T9750] *** DEADLOCK *** [ 165.838482][ T9750] [ 165.841162][ T9750] 3 locks held by syz.3.1233/9750: [ 165.842816][ T9750] #0: ffff88802723c400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 165.846222][ T9750] #1: ffff888105c31e18 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.850477][ T9750] #2: ffff888105c31e50 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.854502][ T9750] [ 165.854502][ T9750] stack backtrace: [ 165.856366][ T9750] CPU: 3 UID: 0 PID: 9750 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT(full) [ 165.856380][ T9750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.856387][ T9750] Call Trace: [ 165.856392][ T9750] [ 165.856397][ T9750] dump_stack_lvl+0x116/0x1f0 [ 165.856413][ T9750] print_circular_bug+0x275/0x350 [ 165.856431][ T9750] check_noncircular+0x14c/0x170 [ 165.856451][ T9750] __lock_acquire+0x12a6/0x1ce0 [ 165.856471][ T9750] lock_acquire+0x179/0x350 [ 165.856488][ T9750] ? kernfs_iop_getattr+0x9c/0xf0 [ 165.856503][ T9750] ? __pfx___might_resched+0x10/0x10 [ 165.856518][ T9750] down_read+0x9b/0x480 [ 165.856531][ T9750] ? kernfs_iop_getattr+0x9c/0xf0 [ 165.856544][ T9750] ? find_held_lock+0x2b/0x80 [ 165.856557][ T9750] ? __pfx_down_read+0x10/0x10 [ 165.856569][ T9750] ? kernfs_root+0xee/0x2a0 [ 165.856583][ T9750] kernfs_iop_getattr+0x9c/0xf0 [ 165.856597][ T9750] vfs_getattr_nosec+0x2a9/0x430 [ 165.856612][ T9750] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 165.856626][ T9750] vfs_getattr+0x4a/0x60 [ 165.856639][ T9750] loop_query_min_dio_size.isra.0+0x117/0x250 [ 165.856656][ T9750] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 165.856673][ T9750] ? mark_held_locks+0x49/0x80 [ 165.856693][ T9750] ? blk_freeze_queue_start+0xec/0x140 [ 165.856709][ T9750] lo_ioctl+0x144b/0x1cc0 [ 165.856727][ T9750] ? __pfx_lo_ioctl+0x10/0x10 [ 165.856745][ T9750] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 165.856757][ T9750] ? kasan_quarantine_put+0x10a/0x240 [ 165.856767][ T9750] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.856779][ T9750] ? blk_get_meta_cap+0x482/0x700 [ 165.856795][ T9750] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 165.856813][ T9750] ? blkdev_common_ioctl+0x1d6/0x2470 [ 165.856830][ T9750] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 165.856847][ T9750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.856860][ T9750] ? do_vfs_ioctl+0x128/0x14f0 [ 165.856875][ T9750] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.856891][ T9750] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 165.856911][ T9750] ? __pfx_lo_ioctl+0x10/0x10 [ 165.856927][ T9750] blkdev_ioctl+0x274/0x6d0 [ 165.856942][ T9750] ? __pfx_blkdev_ioctl+0x10/0x10 [ 165.856958][ T9750] ? selinux_file_ioctl+0x180/0x270 [ 165.856972][ T9750] ? selinux_file_ioctl+0xb4/0x270 [ 165.856987][ T9750] ? __pfx_blkdev_ioctl+0x10/0x10 [ 165.857010][ T9750] __x64_sys_ioctl+0x18b/0x210 [ 165.857028][ T9750] do_syscall_64+0xcd/0x4c0 [ 165.857041][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.857054][ T9750] RIP: 0033:0x7f32b398ebe9 [ 165.857063][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.857074][ T9750] RSP: 002b:00007f32b478f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.857085][ T9750] RAX: ffffffffffffffda RBX: 00007f32b3bb5fa0 RCX: 00007f32b398ebe9 [ 165.857092][ T9750] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003 [ 165.857098][ T9750] RBP: 00007f32b3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.857105][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.857111][ T9750] R13: 00007f32b3bb6038 R14: 00007f32b3bb5fa0 R15: 00007ffe40edf8a8 [ 165.857121][ T9750] [ 165.963301][ T8169] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 166.024085][ T952] usb 9-1: USB disconnect, device number 4 [ 166.092704][ T9748] bond0: (slave syz_tun): Releasing backup interface [ 166.194451][ T8359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.330372][ T8359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.405725][ T8359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.482253][ T8359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.615292][ T8359] bond1 (unregistering): (slave geneve3): Releasing active interface [ 166.631266][ T8359] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 166.969557][ T8359] bond0 (unregistering): Released all slaves [ 166.975561][ T8359] bond1 (unregistering): Released all slaves [ 166.979608][ T8359] bond2 (unregistering): Released all slaves [ 167.138878][ T8359] IPVS: stopping backup sync thread 8524 ... [ 167.292942][ T8359] hsr_slave_0: left promiscuous mode [ 167.295430][ T8359] hsr_slave_1: left promiscuous mode [ 167.300477][ T8359] veth1_macvtap: left promiscuous mode [ 167.302545][ T8359] veth0_macvtap: left promiscuous mode [ 167.304424][ T8359] veth1_vlan: left promiscuous mode [ 167.306129][ T8359] veth0_vlan: left promiscuous mode [ 168.242841][ T8359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.247296][ T8359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.339466][ T8359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.343210][ T8359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.423400][ T8359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.426568][ T8359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.493378][ T8359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.496778][ T8359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.838787][ T8359] bridge_slave_1: left allmulticast mode [ 168.841152][ T8359] bridge_slave_1: left promiscuous mode [ 168.843500][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.847093][ T8359] bridge_slave_0: left allmulticast mode [ 168.849569][ T8359] bridge_slave_0: left promiscuous mode [ 168.852171][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.857977][ T8359] bridge_slave_1: left promiscuous mode [ 168.860848][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.864609][ T8359] bridge_slave_0: left allmulticast mode [ 168.866960][ T8359] bridge_slave_0: left promiscuous mode [ 168.869384][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.097017][ T8359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.100564][ T8359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.104080][ T8359] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 169.108419][ T8359] bond0 (unregistering): Released all slaves [ 169.112228][ T8359] bond1 (unregistering): Released all slaves [ 169.116071][ T8359] bond2 (unregistering): Released all slaves [ 169.355295][ T8359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.358796][ T8359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.362965][ T8359] bond0 (unregistering): (slave team0): Releasing backup interface [ 169.367391][ T8359] bond0 (unregistering): Released all slaves [ 169.373181][ T8359] bond1 (unregistering): Released all slaves [ 169.378479][ T8359] bond2 (unregistering): Released all slaves [ 169.893003][ T8359] hsr_slave_0: left promiscuous mode [ 169.894864][ T8359] hsr_slave_1: left promiscuous mode [ 169.896716][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.898798][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.901228][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.903617][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.907517][ T8359] hsr_slave_0: left promiscuous mode [ 169.909333][ T8359] hsr_slave_1: left promiscuous mode [ 169.911086][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.913514][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.916763][ T8359] veth1_macvtap: left promiscuous mode [ 169.918447][ T8359] veth0_macvtap: left promiscuous mode [ 169.942823][ T8359] pimreg (unregistering): left allmulticast mode [ 170.040267][ T8359] team0 (unregistering): Port device team_slave_1 removed [ 170.075186][ T8359] team0 (unregistering): Port device team_slave_0 removed [ 170.757032][ T8359] team0 (unregistering): Port device team_slave_1 removed [ 170.822310][ T8359] team0 (unregistering): Port device team_slave_0 removed [ 172.052097][ T8359] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 18:26:50 Registers: info registers vcpu 0 CPU#0 RAX=00000000001de804 RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=ffffed100d486656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4b90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9fc77729a0 CR3=000000004b0cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e65707375735f 6e6f5f636e79732f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe40edfdb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe40edfdb6 00007ffe40edfdbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b46ed100 00007f32b3b87460 00007f32b3b80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32b3b874b8 00007f32b3b874b0 00007f32b3b874a8 00007f32b3b874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88806a43acf0 RCX=0000000000000000 RDX=1ffff1100d4875b9 RSI=000000000004aeda RDI=ffff88806a43a300 RBP=ffff88806a43a3c0 RSP=ffffc90000677688 R8 =0000000000000000 R9 =fffffbfff2156972 R10=ffffffff90ab4b97 R11=0000000000000000 R12=0000000d531a790d R13=ffff88806a43a300 R14=000000000004aeda R15=0000000000000000 RIP=ffffffff8192a71f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555574ba5c8 CR3=0000000024371000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000010400004 Opmask04=00000000fbffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005558bf895e10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005558bf88aa60 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6a5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373262bccfba483 7373262e999ddc59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99e7d9bd14f52d2f 7373737626f88beb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 376273752f322e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002b1 0064726f0064726f 6365723a0035746e 6576652f31337475 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c2c346d2c 383261722c463831 2c4538312c443831 2c4338312c423831 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4138312c393831 2c3838312c373831 2c3638312c353831 2c3438312c333831 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c3238312c313831 2c3038312c463731 2c4537312c443731 2c4337312c423731 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4137312c393731 2c3837312c373731 2c3637312c353731 2c3437312c333731 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a741e80 RCX=ffffffff81af8c71 RDX=ffff8880316f4880 RSI=ffffffff81af8c4b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003f07870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4e83d1 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af8c4d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa7c88e7d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c7d876c3 00007fa7c7d876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe95467200 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555566fe12d5 0000555566fe1100 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555566fdf47f 0000555566fdf030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f5f636e79732f 7265776f702f7379 732f01ffffffffff ffffffcb08018003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101000006080602 b08c080001000000 0806060120a05a04 0020808008000180 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c7100008064b 9a646e6570737573 5f6e6f5f636e7973 2f7265776f702f73 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 79732f01ffffffff ffffffffcb080180 030b800402b09408 0001000002080606 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120a40000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90003c67168 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000066666666 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f32b478f6c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558d6d9808 CR3=000000004b0cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe92e6fba6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe92e6fba6 00007ffe92e6fbac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea71812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea719874a8 00007fea719874a0 00007fea71987498 00007fea71987470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea724ed100 00007fea71987460 00007fea71980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea719874b8 00007fea719874b0 00007fea719874a8 00007fea719874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000