last executing test programs: 33.880182777s ago: executing program 0 (id=245): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 31.211505712s ago: executing program 0 (id=267): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') pread64(r3, &(0x7f0000000140)=""/12, 0xc, 0x4) 31.001306663s ago: executing program 0 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x5, 0xe64ad2b, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8d], 0x10000, 0x2071c0}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x3, 0x8}, {0x0, 0x5, 0x7}}}}, 0x15) 30.949415567s ago: executing program 0 (id=270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 30.869212533s ago: executing program 0 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 30.86843351s ago: executing program 0 (id=274): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x1, "70050101"}, @local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000f5d000000050f5d00020b1001046000ff000100064d100102447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1b668e10600000000000000fcc0"], 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 15.714648866s ago: executing program 32 (id=274): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x1, "70050101"}, @local]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000f5d000000050f5d00020b1001046000ff000100064d100102447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1b668e10600000000000000fcc0"], 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.856833949s ago: executing program 3 (id=566): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='statm\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.790673549s ago: executing program 3 (id=567): r0 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x8400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x202b00, 0x0) close_range(r0, r1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000380)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x3, 0x0, &(0x7f0000000140)=[{}, {}, {}], 0x4, 0x0, &(0x7f00000002c0)=[{0x0, 0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000340)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000004c0)={r2, &(0x7f0000000400), &(0x7f0000000440)}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000500), 0x7, 0x80) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000540)={0x9, 0xf81a, 0x7, 0xe, 0xadb6, 0x2}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000580), 0xc0800, 0x0) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f00000005c0)={0x4, 0x0, 0x3ff, 0x5, 0x14, "e46c928603ae0ac8079e93576d796bea7f74ac"}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000a00)={0x1, 0x1, 0x6, 0xe, 0x112, &(0x7f0000000600)}) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000a80)={0x0, 0x3, 0x20}, &(0x7f0000000ac0)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000b00)={r9, @in={{0x2, 0x4e23, @loopback}}, 0x800, 0x1, 0x7, 0x2, 0x26, 0x0, 0x6}, 0x9c) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000bc0)={0x0, "1a88c2dba336be2ee34ef7787b48023b"}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000001bc0)={r10, 0x94f8, 0xe}) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000001fc0)={'\x00', 0x7, 0x1, 0x5}) read$rfkill(0xffffffffffffffff, &(0x7f0000002040), 0x8) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000002080)={0x17d3}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000020c0)=0x1000) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000002100)=0x4) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000002140)=0x7) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000021c0)=0x12) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000002200)=0xa) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r7) sendmsg$NL80211_CMD_SET_MAC_ACL(r12, &(0x7f0000002380)={&(0x7f0000002240), 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x78, r13, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x23, 0x6e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.790419428s ago: executing program 3 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2bc, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x81, 0x3, "a65201ba95fcc232bb2045a20df869153f991c7bef9bd45d88d551ed81faac4e1a986ccc7736bdde0e2ed0adea0753f57583fd0fc9a3006169b6917afd5a9ddb35b77ca7a73335fc3b0506e038a978c4fb163872307739297df34a562b076a4b98602413e734ab1abf21755df0fc901d9361d68adcdb04d62be267f181"}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x195}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x380}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x59b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d13}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff0d2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @local, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xe, 0x0, 0x7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r0, r0, 0x29, 0x0, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x1, 0x6, 0x8, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x80, 0x1e8d9b8d, 0x3}}) (rerun: 32) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x80, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r3, r0, 0x1b, 0x20, r0, @void, @void, @void, @value=r4, r2}, 0x20) 1.73038784s ago: executing program 3 (id=570): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1.65970833s ago: executing program 3 (id=572): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000bb15000900000308000000000000a3eaff122defe3096fe3c0c7c19c49b694eaf43d0a043035f76f8d37865dc19954c030b7e4f9c675eac09642807f4cb3263c63ee7adc761dda72a3a9370d8980120b521a79596ebf1d615e81413ee377cf9c0cba55883b482611bd84190d5ba8571f5774bf44d752dd88310f908b5626926c3cad26c55d712edf2752dfd24524d6165f78", @ANYRES32=0x0, @ANYBLOB="0002000000800000140012800900010076657468000000000400028008001300", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x8000) r6 = syz_clone3(&(0x7f00000002c0)={0x800000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x18}, &(0x7f0000000140)=""/194, 0xc2, &(0x7f0000000240)=""/28, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, r4, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) capset(&(0x7f0000000080)={0x20071026, r6}, &(0x7f0000000040)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026, r6}, &(0x7f0000000040)={0x200000, 0x200000}) prctl$PR_SET_SECUREBITS(0x1c, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 820.064658ms ago: executing program 3 (id=585): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='statm\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 430.744519ms ago: executing program 4 (id=600): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xf) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 385.475845ms ago: executing program 4 (id=603): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 320.430458ms ago: executing program 2 (id=604): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x3, 0x0, 0xffffffdf, 0xfffff612, {0x1, 0x2, 0x3, 0x67, 0xf4b, 0x5, 0x2, 0x5, 0x412d, 0xe154, 0x7, 0x7f, 0x5, 0x3, "fe1d00003413000000000020b42717e47b00"}}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000007900580e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000300000000000000007ffbf752b01b9500000800000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) 320.266775ms ago: executing program 4 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f0000006740)=[{{&(0x7f0000000180)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, 0x0}}], 0x1, 0x24064044) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x32600) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x3, 0x5, 0xc4, '\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x400, 0xffffffff, 0x25df9bfc}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x48090) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001280)=ANY=[@ANYRES16]) 319.242162ms ago: executing program 1 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6, 0x7f}]}, 0x10) (async) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 249.997903ms ago: executing program 4 (id=607): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.4552ms ago: executing program 2 (id=608): munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x16b0, &(0x7f0000000180)={0x0, 0x45f9, 0x80, 0x2, 0x238}, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f00000082c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r5, &(0x7f00000000c0)=[{0x7, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {0x2}, {}, @addr={0x5b, 0x5d}}, {0xfd, 0x0, 0x0, 0x0, @time, {}, {0x1}, @quote={{0x5, 0x5}}}, {0x0, 0x3, 0x0, 0x5, @tick=0x5, {}, {0x0, 0xfd}, @quote={{0x8, 0x2c}, 0xfff8}}, {0x1, 0xf1, 0x1, 0x0, @tick=0x2, {0x84, 0x1}, {0x4, 0x8}, @quote={{0x2, 0xd8}, 0x8}}, {0x8, 0x1, 0x3, 0x80, @time={0x8, 0x9}, {0xfb}, {0x2, 0x5}, @quote={{0x5, 0x4}, 0x5, &(0x7f0000000080)={0x1, 0x5, 0x5, 0x2, @time={0x4}, {0x10, 0x5}, {0x0, 0x7}, @connect={{0x1, 0xe}, {0x5, 0x80}}}}}, {0xb, 0x6, 0x9c, 0x7, @tick=0xffffffff, {0xfa, 0xa4}, {0xa, 0x2}, @raw32={[0x400, 0x4, 0x7]}}], 0xa8) r6 = syz_io_uring_setup(0x150c, &(0x7f0000000080)={0x0, 0x275c, 0x2000, 0x0, 0x4, 0x0, r5}, &(0x7f0000000600)=0x0, &(0x7f0000000300)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x6, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, {0x0, r9}}) syz_io_uring_submit(r2, r4, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x21, 0x0, @fd=r1, 0x81, &(0x7f0000000740)=[{&(0x7f0000000240)="dcbfdbd3f644642780fbe74f9c9d863f38b9d1e9390ec19f6ef6f58038311197665c6298063c3a1351a252236cc412bb56a944ad68e1ca899d7945ca42b711dc6aee33e47da6205795f7e5ea4a2abbb1741ef263bac779fcfdc82f600251ac5d798e7d1581714ce023196de5b8b17454e6ed8891485ec8c74b16796b4ac69e243b74775184b8632ba1e2d573a59f69133745335db9f0bc7d9e87c91de0e0e2205ba195eebaf9aede79a6c755a64ce5ea736d1699bc07929018f698", 0xbb}, {&(0x7f0000000300)="f2b48ac5909b776cda49491a3304c3dfbee87f57b22f61c2e6cb264509e204ab4a", 0x21}, {&(0x7f0000000340)="453a8fc63d17e99b3ededa77a729a09cecf368e37f2f4630d665465e68a47b0d24c7094e1ae65f743feab0c1adcdbf75f9ac03f396a678899ac09abd9b858b9ddb2fe370", 0x44}, {&(0x7f0000000400)="e36d0005b2b9d27129ed976f5f9a2b29e32d043eb7d7cc5b7fff33f51f58e7c09e6bca539467e808a7bcf60d63b2e5deb483911ea4840a047d1da406bbfe05366a8f999982ef81bd32b3a1d567cfb0f66594c28ebb40d82a71c57a44d631c803b970a54e39b02f29b2fb49087e5cb82224882dba9378750de3ec7f026028c263023c9b1a2b5bde8d0e193735f7fd607d9bee", 0x92}, {&(0x7f00000004c0)="865abbb3c65ab58588271d077e6861d3f216b9bbf7109f73d9c094b4f46db8ef9ddc584dae74e0268670e2d0fbdf2e442a895916129ff470e236747ef50b2d0406da45714fa9b804cfd29ba0f47328f8cb9b328f26c00220da68b42719bd58f5f2ec25c7fd713145fe64d42063be20ede6115594bb1de43cb8f7425ce55905824b1ee54759a2d034b0b4b53a86f431609fe82cc9daf76e0f02580b60d561e7e15043a8e47b", 0xa5}, {&(0x7f0000000580)="8a33e0c5031f2fa5e3bcc4d66757b2c75a6dfc2beac8cbab1a56de1fcbb9de107a205248880087a17796816f1e2d5b0e5fce414883b35d60151a1e5c9779f028d5f2b0080ed3577645ed94ff46a6477c5c268a92623eedc689d56c0b249ba981d7207aea81a61d89fa6c4844450fb97e4d", 0x71}, {&(0x7f0000000600)="73c82f00f72e8b300c7cc9029f7ba369279a0c2203d5228cab67649ca324f7abeedbbf1064852aef04cd99a24f5cdc3bd39b5812ef79475b0a0bb04b95e8c834658d951bac5661c22b9d2cdc6a2382e72bdd9c17dd7143d8f65f33171125a9de02676a6b2269559bcf4be42254a193813abfd0acabecbad13bc1854f63f6e48b9fcd529a051bf65191e34688f661cc4b4a862394ae0fb8", 0x97}, {&(0x7f00000006c0)="a6d21803bc7a859ddcca2a6e5a9f054ac7fb74ed516a2bf07a847d8b80cbb63a18783ba404804cc7b85f6dd21681a3144cb3f6206cad12d748c4491ec2db53a4dda20db3a633992c77db814a6ab2a34d61468293911a2cfbc1dc4846071fadfa027831ce850ead10625d6225dd0dbe89e5eb46508dae3dc201df3021e186", 0x7e}], 0x8, 0x1, 0x0, {0x2, r9}}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) 249.051756ms ago: executing program 1 (id=609): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x88081) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0xfff, 0x8, 0x0, 'queue1\x00', 0x200}) r1 = creat(&(0x7f0000000280)='./file1\x00', 0xecf86c37d53049cc) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x50000025) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f00000002c0)) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') 248.57319ms ago: executing program 4 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mincore(&(0x7f0000c18000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/132) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$revoke(0x3, r3) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040026bd7000fedbdf25860000000c0099000100050018012e00000008002700020000000800a00000000000050018012f0000000800a000090000000800a000660e000005001801310000000800a000000000000500180125000000080026006c090000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x44c4}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302800"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r12, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) write$FUSE_GETXATTR(r12, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)={0x25c, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa5, @empty, 0xb78}}, {0x20, 0x2, @in6={0xa, 0x9, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffc3ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c5}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffe604}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x3c}}, 0x20000084) 248.159749ms ago: executing program 1 (id=611): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x42) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000980)={r2, 0xfffff48c, 0x3, 0x8}, &(0x7f00000009c0)=0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000003800)=@sack_info={r2, 0x4, 0x4}, 0xc) sendmmsg$inet_sctp(r3, &(0x7f0000003940)=[{&(0x7f0000000c00)=@in6={0xa, 0x4e24, 0x10, @mcast1, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000000c0)="07c6b070646cd3097a3253452ee602a47ac2e63e93008a370d67b2239c546861d112c8e0", 0x24}, {&(0x7f0000000240)="a7172b127ffca1c7f7b7d81d11f413f058db2251cf5cc8b226af8279f068b603e2ece45844963616eecda0bfde6ef1244db7fccd30c4bf1369b257852cc13c645acbd58e31ed9e61ece494b3c53f0204f613deca01c8d992344c34c29a916c4e1b6f5e048ab2336b6ad065b0469866c7ffc48261ee56a8339394943b9f93d09f149ebd14a8664b67f01454d77f0aa97552b946a400e0f2727f119d6b47ccb6a203b8e43b14609369c1b306e7687b37a50dd9b9fe08ef49d4ae7265d69ce9c2de50aa6a4b5ae4d3eaa0ac165b36d0b74e049b4f77bad8902068c8a4b4df", 0xdd}, {&(0x7f0000000100)="0afa59cad5e6b7456f231db8081cce8d54e896338f7ca2f73ff53f3443af932eabb8fea24da645b4fadd12cadceb16e17e", 0x31}, {&(0x7f0000000400)="42ec124422291f8e9bbf42354d20de9befd22376bd15000c364df91a1e481a827166b98cabb14ce23c7a9a79f3ff21e8c84fcbb2fa3a6e3f7dc7c416dcfbebbc9178a84467addf67205bcd5bc6a5c4f556715b24b023754c1515812c5f405d200ebfa26a67625d277c88080405b05055c7da2e239dcaa259d3fa4fde81e7edd33ac6ffa59cfe630899f3a6916359ff95fdbd145a5ec1ddc683db4eb51dbbc31c1d67b1", 0xa3}, {&(0x7f0000000180)="cbd56cad4fa340e33b3cbe26db0f8a2c71e797", 0x13}, {&(0x7f00000004c0)="512e893c82e59aaf6aac6ce93302baba85c0ca52cb3741646816aa16ca3c6912642de944c62a940d29667deed1988c3162ebd16bf6ef7f9238cc3962f4e3", 0x3e}, {&(0x7f0000000500)="72ca87e7683d05af48a85370cfa8e8f418b3e1869ddb9aad39c5f80d1ee1c3921ffc2b3e2030477e83c57070a3200294509c5fb158695d076d988a753d04d1865ab144841db72d830d034f7674a46b2d080d6ab833409ffc3fcbf05b344b2637e9f693511f2382d3339c66b4cb1864194498a1b745d5913708213b966eac56bb027e801a87ee98d5f550cf1b105ea9a957751fc0d928eb8a31b128", 0x9b}, {&(0x7f00000005c0)="9da54124005ed74f49a792847858f02a69257cc04ecf50d21c929ac4116dd3754f67c2442a9267596ea41f67107a67bd02dc0f4331a2cd4c8ac4bf84ecf4dd780d74cc64ca33beaac1760681f1e380df6cca4968fea55a9456c02f4ee66a093d990b1beada5a40c32e059ea2d64cb6c2393a06bd246cbb52deb2c5a4de23271eac8444906dba16be436252eea598564fecbeecead211f665a06b9b3ccd8d3e3175ea2b842bdc534fa85247a2db39096caf8a85fdffebc9d2b20b95d7df3a8c5523e00dab5057cb7762c91cce66af9e6a98471584e6667495e197d33fd3b4ade537ad33c70a0870d1804283eb5eb530e79f55dcea47cfe539", 0xf8}, {&(0x7f00000006c0)="34cd97df263ba495130797691e90996998d28415f8be4269377a72bafb006c1ddf998eda1d8aa9829cce0d71bb3a7eefc2409975d77affb7180c05c18af73946783b0bc9", 0x44}], 0x9, &(0x7f0000000800)=[@authinfo={0x18, 0x84, 0x6, {0x408d}}, @sndrcv={0x30, 0x84, 0x1, {0x36, 0x8, 0x10001, 0x4, 0x2, 0x7, 0x1, 0x2, r1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x60, 0x801}, {&(0x7f0000000880)=@in6={0xa, 0x4e23, 0x1, @remote}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000008c0)="19709360bc967b1a5ce688758ca996bf22990722540de46728cf81fbb3e848afe3754a3b94ee32ee3265259c8f14dc849161fcb84440c20796bc14645d44af77d5b07a884993786372ced9eeda0e609bba026df907216e648713bdf5d693ab413c4b5343b200", 0x66}], 0x1, &(0x7f0000000a00)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x7fff, 0xfffb, 0x8004, 0xfffffae2, 0xe, 0xbc71, 0xa332, 0xfffffffb, r4}}, @authinfo={0x18, 0x84, 0x6, {0xe}}, @sndrcv={0x30, 0x84, 0x1, {0x2008, 0x8, 0x0, 0x2e, 0x8, 0x3, 0x2, 0xcd, r1}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x7, 0x103, 0x0, 0xa, 0x2, 0x2, 0x2, r2}}, @init={0x18, 0x84, 0x0, {0x6, 0x4, 0xffff, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8202, 0xb63, 0x3, r2}}, @authinfo={0x18, 0x84, 0x6, {0x80}}], 0x110, 0x40000}, {&(0x7f0000000b40)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b80)="fd2f77d4a272dc38414bdeec6a954c2dc4e56445762efee18995e5217066c40718cddc2da42056ac7372a51884ab67810c75b02767b40dd425b2967a7e5306e77a35d7fddd7aa05a00128144de15b6eaa79273f29f266e37e7668408cb59ce76ab9a51", 0x63}, {&(0x7f0000003a80)="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", 0x1c4}], 0x2, &(0x7f0000000d40)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x0, 0xffff8001, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xa}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x89d6, 0xc4, 0xa, 0xffff, 0x101, 0x1, 0x5ee6, 0x3, r2}}, @init={0x18, 0x84, 0x0, {0x6, 0x2, 0x6, 0x80}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0xff, 0xe, 0x862, 0x1}}], 0xf8, 0x44cc0}, {&(0x7f0000000e40)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000003140)=[{&(0x7f0000000f40)="31e1f47d5db811fc578d6b74aa6cd963bbb3dfe3d6ccf9a20418f6d6309d0d5fca49de9fba06042e48ea27d7cddb105493e8c81f57ca3b840ce52869d3e0dad0f58ba77de3994f52e02cb3e5d2302cb031effbe591ab08b263d569674a0ba42f46329f5ebdfdecbaa2555a34ed07b4f5c03ce50f637c7a9a57f1b8a4e3260ba3509fd070e76c23e8445da94c35874072b89376", 0x93}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="43f4841b7f46ad5f948bc2cfdaf5203cf8614cc791f92812096da5ce077976e371d12ef8ca899d0d1b8ed45bb2c8641173f232193e3f2f7bec63a24cde9cce627a022c3fa1", 0x45}, {&(0x7f0000002080)="def2b6d4b0a0fa98840b46a1c7eb621502a3a686e8e15651fd619ce0a0868d14304566db4ae4b3b3835830fad0cab8bb66df6f6a0b87bee7fdd75b9311a2b57dc115f50fdcefb8ca9fa3179ca35a3fba84f461c75448a319c234906bb201fe5373eefcab5635da81e1b216ee96e5d701abe17f2fd0a95e6b077add6b088f35ed4f9ba31a1ab1812c9764b3a2d4df94b9d5", 0x91}, {&(0x7f0000000e80)="e256b7849d37c9ce947f0bc279008135262721de8a0706", 0x17}, {&(0x7f0000002140)="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", 0x1000}], 0x6, &(0x7f00000031c0)=[@dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @init={0x18, 0x84, 0x0, {0x3, 0x3, 0x5, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x8006, 0x371, 0x21, r7}}, @authinfo={0x18, 0x84, 0x6, {0x40}}, @init={0x18, 0x84, 0x0, {0x0, 0xc38, 0x9, 0x81}}, @init={0x18, 0x84, 0x0, {0xffc0, 0x8ac, 0x1, 0x8001}}], 0xb8, 0x48081}, {&(0x7f00000032c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003740)=[{&(0x7f0000003300)="f5c6ef1567d81228c9344c89a24aaac22db5af65fb71fd1f1454470d5929238106869638eac1ce9e8b35f856c17b42ed86099efebaf7919b2b5098a27874c41c4ee656e86987fcc0a400d10f2204e640dc40e982eda6ed1bee53a54392eb8821097c3eb5b5089570de5696d291477e69c483de5dcaf1395389f71bbc38732fdef92b56eded8e7b9f1362132de43cda5424e9439f0d750cf887316664ebd2e6ab56bfe0467729", 0xa6}, {&(0x7f00000033c0)="753fd0f72158c20f5a9d73af80b423b31cf80013eb1176a72abd40f2a984ae09f0379d1cf8c303751e2f189a790cc797129c6e6d34e18ea58ac6d1b35775eda311ebdb04051a3cac5e0d3b52c3b095b6557c44b4d00053f38c49b0f1073d632b8ed0809335bbee8d69de4232ec91d7f4140d8cbb2740c53b7c5be6fff624e1b3f562d0cdc34685ba30a605181cd3de45583495f5a2240ea40ded3c", 0x9b}, {&(0x7f0000003480)="2ea9d000de821ed0dc4e3d1cb5832ab9c6ae82a0227235ea57aaabd0870c885e8f6ecbf36e537c366ed2e6895b951a643792f370601ec0608065c3ddfd0142a4c24bfef92bd3ba3155874dbdb8baadbd56a3634a16ab63594dc9821d18f2b16f349d409a1043560ccff36957dc748a50c9277fa356f08ed2b95ed3bc9ca2", 0x7e}, {&(0x7f0000003500)="2e2f3265a27cbe742500b38b0104d2a8139137e1383dddbcd92cc419cae0f64f08df7d5b81af52a03a9857798330b135fd936a978b075ae38be73fac2c8436e2ad8490eceeaed21e6140a8c435846a61a67bdea5d22dd17798fb9fa7d9175e4dcecfde8a7ed35a09cbc9d7bae1d3e902ba929cd65ae98746f36eaa81540ddc773b9ed09e58b26c08278d0d57f1eb5e66d68102813b8fc4c6a23e53838e955382fbfa0b436c1cf7170d5a10ccf909a772e3b5d94c9877fd3cf5681f731d63b9ef6d8a4931db60ade68a03c298f593ddd013e4a072a098d67f3bde35", 0xdb}, {&(0x7f0000003600)="6d615774736d1a91a3368eb2040bbee0cc5d8842842cfbcb78154c321f0ce509fa2e1fbe52349e6ef7963d3c30878ddb7c2ed24aec6bd8d15ab8a07ceea11a7da4e60a27be1b1e129102a61dcbd28fd7d97e806f43682d685aa9601adfcfa250034cab3d6361b8e4ca693d285aee2ce1a7eafea584a4d7ff2479481f819a6eba327351dd18fb9d95314695c7143a20e5dff6606a3e4cbe6062ff93929a8b1257c08c13a56ea1db742633a501a9fc4505a292cdb7e2846e", 0xb7}, {&(0x7f00000036c0)="95713eff5f2f4f89f5a70295b7f67d52308081856f1f6d48970886c76aade2339468400fc21eea5b674586a70fdefcb86d9c6e3790f041fe47a2203fd4ff6f52f4773f07e873c286a113c32390707425bd5794b951fa7e1ce3f796e5a204e9", 0x5f}], 0x6, &(0x7f00000037c0)=[@authinfo={0x18, 0x84, 0x6, {0xf}}], 0x18, 0x1}], 0x5, 0x4000040) accept$inet6(r3, 0x0, &(0x7f0000000ec0)) 190.849719ms ago: executing program 2 (id=612): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000010000000ff000040"]) 189.464613ms ago: executing program 2 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000100)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x180000}]}}, 0x0, 0x26}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xce) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="14000000100001000000f9602e250000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800700010063740000140012800800014000000013080002400000000614000000110001000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300683726f6c469700005000400000000000900020073797a31000000000c00078008000840000000d305000500020000000500010006000000"], 0x50}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xc, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfff9}, 0x92f5e}, 0x6d) 189.311823ms ago: executing program 1 (id=614): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 60.348815ms ago: executing program 2 (id=615): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = syz_io_uring_setup(0xbc2, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 59.999607ms ago: executing program 4 (id=616): mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x20, 0x15}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x2, r1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) syz_emit_ethernet(0x76, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x6, [{@private=0xa010101, 0xeb8}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@private}, {@dev, 0xfffffffd}, {@private}]}]}}}}}}}, 0x0) fsetxattr$security_ima(r4, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) 784.321µs ago: executing program 1 (id=617): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x15, &(0x7f00000000c0)={&(0x7f0000000100)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000080)=0xf3e, 0x4) ftruncate(r0, 0x3292e291) 252.969µs ago: executing program 2 (id=618): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=619): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x800, 0x10000, 0x3, 0x7, 0x8, 0x8, 0x7, 0x8, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x3ff, 0x89, 0xcaa7, 0x4, 0x20001e58, 0x96f, 0xe69, 0x3c, 0x8, 0x6, 0x40000000, 0xfffffff8]}) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): 50.815870][ T40] audit: type=1400 audit(1752757948.480:205): avc: denied { ioctl } for pid=6182 comm="syz.0.46" path="socket:[11376]" dev="sockfs" ino=11376 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.839594][ T6197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.841496][ T40] audit: type=1400 audit(1752757948.500:206): avc: denied { mount } for pid=6196 comm="syz.2.51" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.845295][ T6197] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.851150][ T40] audit: type=1400 audit(1752757948.500:207): avc: denied { mounton } for pid=6196 comm="syz.2.51" path="/15/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 50.880044][ T40] audit: type=1400 audit(1752757948.540:208): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.904728][ T40] audit: type=1400 audit(1752757948.570:209): avc: denied { write } for pid=6200 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.910637][ T40] audit: type=1400 audit(1752757948.570:210): avc: denied { bind } for pid=6200 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 50.913731][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 50.920930][ T40] audit: type=1400 audit(1752757948.580:211): avc: denied { getopt } for pid=6202 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.927687][ T40] audit: type=1400 audit(1752757948.590:212): avc: denied { accept } for pid=6200 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.057347][ T6215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.212541][ T6236] kvm: pic: non byte write [ 51.257858][ T6241] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 51.376621][ T6261] hsr0: entered promiscuous mode [ 51.378704][ T6261] macsec1: entered allmulticast mode [ 51.380501][ T6261] hsr0: entered allmulticast mode [ 51.382966][ T6261] hsr_slave_0: entered allmulticast mode [ 51.385021][ T6261] hsr_slave_1: entered allmulticast mode [ 51.503523][ T6273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61288 sclass=netlink_route_socket pid=6273 comm=syz.1.76 [ 51.747713][ T6288] overlay: Unknown parameter '' [ 51.751530][ T6034] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 51.779096][ T6293] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.891654][ T6034] usb 5-1: device descriptor read/64, error -71 [ 52.006964][ T6304] trusted_key: syz.3.83 sent an empty control message without MSG_MORE. [ 52.131531][ T6034] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 52.181752][ T5958] Bluetooth: hci1: command tx timeout [ 52.191898][ T5958] Bluetooth: hci2: command tx timeout [ 52.191981][ T5954] Bluetooth: hci0: command tx timeout [ 52.192004][ T5964] Bluetooth: hci3: command tx timeout [ 52.271548][ T6034] usb 5-1: device descriptor read/64, error -71 [ 52.392029][ T6034] usb usb5-port1: attempt power cycle [ 52.743860][ T6034] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 52.762468][ T6034] usb 5-1: device descriptor read/8, error -71 [ 52.767871][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.868084][ T6330] : renamed from lo (while UP) [ 52.872375][ T6329] delete_channel: no stack [ 53.021638][ T6034] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 53.042003][ T6034] usb 5-1: device descriptor read/8, error -71 [ 53.064873][ T6338] input: syz1 as /devices/virtual/input/input5 [ 53.111848][ T837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.151729][ T6034] usb usb5-port1: unable to enumerate USB device [ 53.273210][ T837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.276553][ T837] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.279560][ T837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.282537][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.288728][ T6328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 53.294582][ T837] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 53.437621][ T6350] process 'syz.1.98' launched './file0' with NULL argv: empty string added [ 53.496960][ T837] usb 7-1: USB disconnect, device number 2 [ 53.687075][ T6369] hpfs: hpfs_map_sector(): read error [ 53.785708][ T61] cfg80211: failed to load regulatory.db [ 53.824298][ T6374] capability: warning: `syz.1.107' uses 32-bit capabilities (legacy support in use) [ 53.845005][ T6376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.847146][ T6376] overlayfs: failed to set xattr on upper [ 53.848851][ T6376] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.850995][ T6376] overlayfs: ...falling back to index=off. [ 53.853624][ T6376] overlayfs: ...falling back to uuid=null. [ 54.070387][ T6391] warning: `syz.1.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.091556][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.108311][ T6393] __nla_validate_parse: 7 callbacks suppressed [ 54.108325][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 54.261727][ T5954] Bluetooth: hci3: command tx timeout [ 54.262408][ T5958] Bluetooth: hci1: command tx timeout [ 54.263303][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 54.263374][ T5964] Bluetooth: hci2: command tx timeout [ 54.265730][ T53] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.271817][ T5958] Bluetooth: hci0: command tx timeout [ 54.273314][ T53] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.277924][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 54.279960][ T53] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 54.283763][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.289318][ T53] usb 8-1: config 0 descriptor?? [ 54.339462][ T6403] tls_set_device_offload_rx: netdev not found [ 54.450708][ T6403] xt_socket: unknown flags 0xc [ 54.523974][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.696682][ T53] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 54.894392][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.897868][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.906142][ T61] usb 8-1: USB disconnect, device number 2 [ 54.931544][ T1330] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.091602][ T1330] usb 5-1: Using ep0 maxpacket: 8 [ 55.095850][ T1330] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 55.098569][ T1330] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 55.101326][ T1330] usb 5-1: Product: syz [ 55.103324][ T1330] usb 5-1: Manufacturer: syz [ 55.104789][ T1330] usb 5-1: SerialNumber: syz [ 55.107423][ T1330] usb 5-1: config 0 descriptor?? [ 55.327649][ T1330] usb 5-1: USB disconnect, device number 6 [ 55.664117][ T6454] lo: Master is either lo or non-ether device [ 55.761332][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 55.761343][ T40] audit: type=1400 audit(1752757953.429:305): avc: denied { ioctl } for pid=6455 comm="syz.3.127" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.773084][ T40] audit: type=1400 audit(1752757953.439:306): avc: denied { write } for pid=6455 comm="syz.3.127" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.780844][ T40] audit: type=1400 audit(1752757953.439:307): avc: denied { map } for pid=6455 comm="syz.3.127" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.962907][ T40] audit: type=1400 audit(1752757953.629:308): avc: denied { read } for pid=6463 comm="syz.0.130" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.969857][ T40] audit: type=1400 audit(1752757953.629:309): avc: denied { open } for pid=6463 comm="syz.0.130" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 55.977203][ T40] audit: type=1400 audit(1752757953.649:310): avc: denied { read } for pid=6465 comm="syz.2.131" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.984328][ T40] audit: type=1400 audit(1752757953.649:311): avc: denied { open } for pid=6465 comm="syz.2.131" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.992253][ T40] audit: type=1400 audit(1752757953.649:312): avc: denied { map } for pid=6465 comm="syz.2.131" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 56.014566][ T40] audit: type=1400 audit(1752757953.689:313): avc: denied { read write } for pid=6463 comm="syz.0.130" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.021488][ T40] audit: type=1400 audit(1752757953.689:314): avc: denied { open } for pid=6463 comm="syz.0.130" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.031491][ T836] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.191992][ T836] usb 8-1: Using ep0 maxpacket: 16 [ 56.195925][ T836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.199299][ T836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.205253][ T836] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 56.209242][ T836] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 56.209512][ T6487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=10 sclass=netlink_tcpdiag_socket pid=6487 comm=syz.2.137 [ 56.212266][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.220393][ T836] usb 8-1: config 0 descriptor?? [ 56.271178][ T6496] mmap: syz.1.140 (6496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.303456][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.143'. [ 56.309265][ T6503] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 56.341164][ T6505] trusted_key: encrypted_key: insufficient parameters specified [ 56.347536][ T6507] trusted_key: encrypted_key: insufficient parameters specified [ 56.469408][ T6499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.141'. [ 56.521549][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.583453][ T6522] tmpfs: Bad value for 'mpol' [ 56.627112][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 56.633627][ T836] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 56.635855][ T836] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 56.638205][ T836] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 56.641237][ T836] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 56.647211][ T836] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 56.654346][ T836] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 56.659147][ T6535] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 56.663211][ T6535] netlink: 784 bytes leftover after parsing attributes in process `syz.0.153'. [ 56.673108][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 56.674550][ C2] Unknown status report in ack skb [ 56.677336][ T837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.688746][ T837] usb 7-1: config 0 has no interfaces? [ 56.694008][ T837] usb 7-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 56.696004][ T836] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 56.698482][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.703086][ T836] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 56.708195][ T837] usb 7-1: Product: syz [ 56.710003][ T837] usb 7-1: Manufacturer: syz [ 56.712318][ T837] usb 7-1: SerialNumber: syz [ 56.722072][ T837] usb 7-1: config 0 descriptor?? [ 56.816156][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 56.818877][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 56.955143][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'. [ 56.965529][ T6035] usb 7-1: USB disconnect, device number 3 [ 56.982941][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 56.986217][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 56.998365][ T6560] tipc: Trying to set illegal importance in message [ 57.116890][ T836] usb 8-1: USB disconnect, device number 3 [ 57.120146][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 57.128817][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 57.131496][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.133904][ T9] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 57.168102][ T6567] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 57.170917][ T6567] SELinux: failed to load policy [ 57.281620][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 57.284744][ T53] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.288674][ T53] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.292489][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.294791][ T53] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 57.297893][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.302167][ T53] usb 6-1: config 0 descriptor?? [ 57.508565][ T53] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 57.547198][ T6586] tmpfs: Bad value for 'nr_blocks' [ 57.563496][ T6589] veth0_to_bond: entered allmulticast mode [ 57.615535][ T6594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 57.617656][ T6594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.621940][ T6594] vhci_hcd vhci_hcd.0: Device attached [ 57.711582][ T6600] syz.3.168: attempt to access beyond end of device [ 57.711582][ T6600] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 57.716403][ T6600] syz.3.168: attempt to access beyond end of device [ 57.716403][ T6600] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 57.720711][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 57.724323][ T6600] syz.3.168: attempt to access beyond end of device [ 57.724323][ T6600] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 57.729568][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 57.734712][ T6600] syz.3.168: attempt to access beyond end of device [ 57.734712][ T6600] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 57.739928][ T6600] syz.3.168: attempt to access beyond end of device [ 57.739928][ T6600] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 57.745644][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 57.748958][ T6600] syz.3.168: attempt to access beyond end of device [ 57.748958][ T6600] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 57.753916][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 57.757123][ T6600] syz.3.168: attempt to access beyond end of device [ 57.757123][ T6600] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 57.761882][ T6600] syz.3.168: attempt to access beyond end of device [ 57.761882][ T6600] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 57.765785][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 57.767247][ T6601] QAT: failed to copy from user. [ 57.768690][ T6600] syz.3.168: attempt to access beyond end of device [ 57.768690][ T6600] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 57.775327][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 57.776653][ T6596] vhci_hcd: connection closed [ 57.778504][ T6600] syz.3.168: attempt to access beyond end of device [ 57.778504][ T6600] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 57.780421][ T60] vhci_hcd: stop threads [ 57.783982][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 57.786025][ T60] vhci_hcd: release socket [ 57.788501][ T6600] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 57.791018][ T60] vhci_hcd: disconnect device [ 57.793868][ T6600] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 57.801891][ T5989] vhci_hcd: vhci_device speed not set [ 57.932102][ T6612] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 57.935826][ T6612] qnx6: wrong signature (magic) in superblock #1. [ 57.937782][ T6612] qnx6: unable to read the first superblock [ 58.027528][ T6621] sch_tbf: peakrate 1 is lower than or equals to rate 4 ! [ 58.059527][ T6623] netlink: 'syz.2.176': attribute type 23 has an invalid length. [ 58.361488][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.531579][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 58.535257][ T61] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.539837][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.544066][ T61] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.548079][ T61] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.553759][ T61] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.557421][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.754008][ T53] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 58.793841][ T61] usb 7-1: GET_CAPABILITIES returned 0 [ 58.795693][ T61] usbtmc 7-1:16.0: can't read capabilities [ 58.867027][ T6638] netlink: 'syz.0.180': attribute type 8 has an invalid length. [ 58.996774][ T836] usb 7-1: USB disconnect, device number 4 [ 59.011490][ T6034] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.161564][ T6034] usb 8-1: Using ep0 maxpacket: 8 [ 59.165463][ T6034] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.168998][ T6034] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.173272][ T6034] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.177437][ T6034] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.181738][ T6034] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.187307][ T6034] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.191122][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.466558][ T6034] usb 8-1: usb_control_msg returned -71 [ 59.468270][ T6034] usbtmc 8-1:16.0: can't read capabilities [ 59.474913][ T6034] usb 8-1: USB disconnect, device number 4 [ 59.534015][ T6660] comedi comedi3: Buffer allocation failed [ 59.573218][ T6666] input: syz0 as /devices/virtual/input/input8 [ 59.805238][ T6684] tipc: Started in network mode [ 59.807119][ T6684] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 59.810002][ T6684] tipc: Enabled bearer , priority 10 [ 60.071517][ T6379] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.211502][ T53] usb 6-1: device descriptor read/64, error -71 [ 60.221721][ T6379] usb 5-1: Using ep0 maxpacket: 16 [ 60.225991][ T6379] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 60.228878][ T6379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.231347][ T6379] usb 5-1: Product: syz [ 60.232776][ T6689] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.235133][ T6379] usb 5-1: Manufacturer: syz [ 60.236586][ T6379] usb 5-1: SerialNumber: syz [ 60.239901][ T6379] usb 5-1: config 0 descriptor?? [ 60.244452][ T6379] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 60.383282][ T6689] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.386353][ T6689] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.389989][ T6689] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.393987][ T6689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.396457][ T6689] usb 8-1: SerialNumber: syz [ 60.451598][ T53] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 60.454713][ T53] usb 6-1: device reset changed ep0 maxpacket size! [ 60.464662][ T1330] usb 6-1: USB disconnect, device number 2 [ 60.601694][ T1330] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.615772][ T6689] usb 8-1: 0:2 : does not exist [ 60.632052][ T6689] usb 8-1: USB disconnect, device number 5 [ 60.648164][ T6379] gspca_sn9c2028: read1 error -71 [ 60.650009][ T6379] gspca_sn9c2028: read1 error -71 [ 60.651329][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.651709][ T6379] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 60.660022][ T6379] usb 5-1: USB disconnect, device number 7 [ 60.761528][ T1330] usb 6-1: Using ep0 maxpacket: 32 [ 60.764465][ T1330] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 60.767572][ T1330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.774412][ T1330] usb 6-1: config 0 descriptor?? [ 60.779474][ T1330] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 60.932624][ T6689] tipc: Node number set to 15444650 [ 60.951622][ T836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 61.103144][ T836] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.106378][ T836] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.111600][ T836] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.114598][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.117114][ T836] usb 7-1: SerialNumber: syz [ 61.244666][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 61.244677][ T40] audit: type=1400 audit(1752757958.919:365): avc: denied { lock } for pid=6706 comm="syz.0.196" path="socket:[12058]" dev="sockfs" ino=12058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 61.304004][ T40] audit: type=1400 audit(1752757958.979:366): avc: denied { mounton } for pid=6706 comm="syz.0.196" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.320287][ T6710] overlayfs: statfs failed on './file0' [ 61.328489][ T836] usb 7-1: 0:2 : does not exist [ 61.330116][ T836] usb 7-1: unit 255 not found! [ 61.334850][ T836] usb 7-1: 5:0: cannot get min/max values for control 1 (id 5) [ 61.340246][ T836] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 61.345659][ T836] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 61.352914][ T836] usb 7-1: USB disconnect, device number 5 [ 61.380682][ T6358] udevd[6358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.386119][ T6714] syzkaller1: entered promiscuous mode [ 61.388477][ T6714] syzkaller1: entered allmulticast mode [ 61.910914][ T6731] syzkaller1: entered promiscuous mode [ 61.913233][ T6731] syzkaller1: entered allmulticast mode [ 62.131629][ T6035] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 62.194650][ T1330] gspca_vc032x: reg_w err -71 [ 62.196155][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.197781][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.199426][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.201092][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.203172][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.204861][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.206510][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.208532][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.210129][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.211855][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.213483][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.215229][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.216836][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.218480][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.220143][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.221871][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.223528][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.225181][ T1330] gspca_vc032x: I2c Bus Busy Wait 00 [ 62.226879][ T1330] gspca_vc032x: Unknown sensor... [ 62.228496][ T1330] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 62.231735][ T1330] usb 6-1: USB disconnect, device number 3 [ 62.291535][ T6035] usb 7-1: Using ep0 maxpacket: 32 [ 62.295542][ T6035] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 62.298786][ T6035] usb 7-1: config 0 has no interface number 0 [ 62.301173][ T6035] usb 7-1: config 0 interface 23 has no altsetting 0 [ 62.306173][ T6035] usb 7-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 62.310365][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.313964][ T6035] usb 7-1: Product: syz [ 62.315742][ T6035] usb 7-1: Manufacturer: syz [ 62.317695][ T6035] usb 7-1: SerialNumber: syz [ 62.321953][ T6035] usb 7-1: config 0 descriptor?? [ 62.341656][ T836] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 62.411632][ T6034] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.503213][ T836] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.506460][ T836] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.510045][ T836] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.512978][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.515702][ T836] usb 8-1: SerialNumber: syz [ 62.541012][ T6035] kaweth 7-1:0.23: Firmware present in device. [ 62.571623][ T6034] usb 5-1: Using ep0 maxpacket: 16 [ 62.575290][ T6034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.578739][ T6034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.581720][ T6034] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 62.584183][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.587900][ T6034] usb 5-1: config 0 descriptor?? [ 62.724622][ T836] usb 8-1: 0:2 : does not exist [ 62.733571][ T836] usb 8-1: USB disconnect, device number 6 [ 62.734714][ T40] audit: type=1400 audit(1752757960.409:367): avc: denied { map } for pid=6738 comm="syz.1.209" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.735517][ T6035] kaweth 7-1:0.23: Statistics collection: 0 [ 62.743376][ T40] audit: type=1400 audit(1752757960.409:368): avc: denied { call } for pid=6738 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.752352][ T6035] kaweth 7-1:0.23: Multicast filter limit: 0 [ 62.754432][ T6035] kaweth 7-1:0.23: MTU: 0 [ 62.755905][ T6035] kaweth 7-1:0.23: Read MAC address 00:00:00:00:00:00 [ 62.787886][ T6086] udevd[6086]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.995916][ T6034] playstation 0003:054C:05C4.0005: unknown main item tag 0x0 [ 62.998026][ T6034] playstation 0003:054C:05C4.0005: unknown main item tag 0x0 [ 63.000213][ T6034] playstation 0003:054C:05C4.0005: unknown main item tag 0x0 [ 63.004046][ T6034] playstation 0003:054C:05C4.0005: unknown main item tag 0x0 [ 63.006213][ T6034] playstation 0003:054C:05C4.0005: unknown main item tag 0x0 [ 63.018742][ T6034] playstation 0003:054C:05C4.0005: hidraw1: USB HID v5.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 63.136898][ T6035] kaweth 7-1:0.23: Error setting SOFS wait [ 63.138847][ T6035] kaweth 7-1:0.23: probe with driver kaweth failed with error -5 [ 63.144892][ T6035] usb 7-1: USB disconnect, device number 6 [ 63.199301][ T6034] playstation 0003:054C:05C4.0005: Invalid byte count transferred, expected 16 got 0 [ 63.203499][ T6034] playstation 0003:054C:05C4.0005: Failed to retrieve DualShock4 pairing info: -22 [ 63.206084][ T6034] playstation 0003:054C:05C4.0005: Failed to get MAC address from DualShock4 [ 63.209647][ T6034] playstation 0003:054C:05C4.0005: Failed to create dualshock4. [ 63.213984][ T6034] playstation 0003:054C:05C4.0005: probe with driver playstation failed with error -22 [ 63.257344][ T40] audit: type=1400 audit(1752757960.929:369): avc: denied { create } for pid=6756 comm="syz.1.217" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.263408][ T40] audit: type=1400 audit(1752757960.929:370): avc: denied { link } for pid=6756 comm="syz.1.217" name="#b" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.269458][ T40] audit: type=1400 audit(1752757960.929:371): avc: denied { rename } for pid=6756 comm="syz.1.217" name="#c" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.402907][ T54] usb 5-1: USB disconnect, device number 8 [ 63.523438][ T40] audit: type=1400 audit(1752757961.199:372): avc: denied { watch } for pid=6770 comm="syz.1.223" path="/83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.536829][ T40] audit: type=1400 audit(1752757961.199:373): avc: denied { watch_sb watch_reads } for pid=6770 comm="syz.1.223" path="/83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.550711][ T40] audit: type=1400 audit(1752757961.199:374): avc: denied { read write } for pid=6770 comm="syz.1.223" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 63.851492][ T6689] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.961729][ T1330] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 63.972501][ T5989] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 64.014758][ T6689] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.018226][ T6689] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 64.022225][ T6689] usb 6-1: config 220 has no interface number 2 [ 64.024742][ T6689] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.030075][ T6689] usb 6-1: config 220 interface 0 has no altsetting 0 [ 64.033118][ T6689] usb 6-1: config 220 interface 76 has no altsetting 0 [ 64.035963][ T6689] usb 6-1: config 220 interface 1 has no altsetting 0 [ 64.042828][ T6689] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.046426][ T6689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.050505][ T6689] usb 6-1: Product: syz [ 64.052669][ T6689] usb 6-1: Manufacturer: syz [ 64.054819][ T6689] usb 6-1: SerialNumber: syz [ 64.134197][ T1330] usb 7-1: config 0 has no interfaces? [ 64.139992][ T1330] usb 7-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 64.141622][ T5989] usb 8-1: Using ep0 maxpacket: 32 [ 64.143903][ T1330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.146962][ T5989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.148188][ T1330] usb 7-1: Product: syz [ 64.152206][ T5989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.154415][ T1330] usb 7-1: Manufacturer: syz [ 64.156710][ T5989] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.158720][ T1330] usb 7-1: SerialNumber: syz [ 64.161288][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.162714][ T5989] usb 8-1: config 0 descriptor?? [ 64.168229][ T1330] usb 7-1: config 0 descriptor?? [ 64.168955][ T5989] hub 8-1:0.0: USB hub found [ 64.273470][ T6689] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 64.275818][ T6689] usb 6-1: No valid video chain found. [ 64.278078][ T6689] usb 6-1: selecting invalid altsetting 0 [ 64.288413][ T6689] usb 6-1: selecting invalid altsetting 0 [ 64.290807][ T6689] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 64.295606][ T6689] usb 6-1: USB disconnect, device number 4 [ 64.371504][ T5989] hub 8-1:0.0: 16 ports detected [ 64.373405][ T5989] hub 8-1:0.0: insufficient power available to use all downstream ports [ 64.374039][ T1330] usb 7-1: USB disconnect, device number 7 [ 64.572180][ T5989] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 64.574417][ T5989] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 64.579040][ T5989] usbhid 8-1:0.0: can't add hid device: -71 [ 64.581598][ T5989] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 64.612440][ T5989] usb 8-1: USB disconnect, device number 7 [ 64.981615][ T5954] Bluetooth: hci3: command 0x0405 tx timeout [ 65.031590][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.192945][ T5989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.196608][ T5989] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 65.199691][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.204589][ T5989] usb 6-1: config 0 descriptor?? [ 65.208653][ T5989] pwc: Askey VC010 type 2 USB webcam detected. [ 65.221621][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 65.361577][ T6035] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 65.382725][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.386809][ T54] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 65.390928][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.397584][ T54] usb 7-1: config 0 descriptor?? [ 65.410174][ T5989] pwc: send_video_command error -71 [ 65.410497][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 65.412183][ T5989] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 65.412524][ T5989] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 65.427613][ T5989] usb 6-1: USB disconnect, device number 5 [ 65.524153][ T6035] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 65.528559][ T6035] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 65.533359][ T6035] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 65.539731][ T6035] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 65.543528][ T6035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.546001][ T6035] usb 8-1: Product: syz [ 65.547321][ T6035] usb 8-1: Manufacturer: syz [ 65.548776][ T6035] usb 8-1: SerialNumber: syz [ 65.551784][ T6035] usb 8-1: config 0 descriptor?? [ 65.554498][ T6805] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.556850][ T6805] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.560170][ T6035] usb 8-1: ucan: probing device on interface #0 [ 65.603921][ T54] pwc: send_video_command error -71 [ 65.605645][ T54] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 65.608026][ T54] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 65.611772][ T54] usb 7-1: USB disconnect, device number 8 [ 65.652542][ T1330] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 65.803157][ T1330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.806289][ T1330] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.809879][ T1330] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.813018][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.815556][ T1330] usb 5-1: SerialNumber: syz [ 65.871504][ T6689] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 65.962990][ T6035] usb 8-1: ucan: device reported invalid tx-fifo size [ 65.965149][ T6035] usb 8-1: ucan: probe failed; try to update the device firmware [ 66.026273][ T1330] usb 5-1: 0:2 : does not exist [ 66.028921][ T6689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.032758][ T6689] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 66.037126][ T6689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.042218][ T1330] usb 5-1: USB disconnect, device number 9 [ 66.042618][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 66.045715][ T6689] usb 6-1: config 0 descriptor?? [ 66.053204][ T6689] pwc: Askey VC010 type 2 USB webcam detected. [ 66.062428][ T6358] udevd[6358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.171197][ T6379] usb 8-1: USB disconnect, device number 8 [ 66.192653][ T54] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.196085][ T54] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 66.201026][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.206047][ T54] usb 7-1: config 0 descriptor?? [ 66.211700][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 66.452595][ T6689] pwc: recv_control_msg error -32 req 02 val 2b00 [ 66.455416][ T6689] pwc: recv_control_msg error -32 req 02 val 2700 [ 66.458027][ T6689] pwc: recv_control_msg error -32 req 02 val 2c00 [ 66.460596][ T6689] pwc: recv_control_msg error -32 req 04 val 1000 [ 66.463238][ T6689] pwc: recv_control_msg error -32 req 04 val 1300 [ 66.465789][ T6689] pwc: recv_control_msg error -32 req 04 val 1400 [ 66.468343][ T6689] pwc: recv_control_msg error -32 req 02 val 2000 [ 66.470751][ T6689] pwc: recv_control_msg error -32 req 02 val 2100 [ 66.473365][ T6689] pwc: recv_control_msg error -32 req 04 val 1500 [ 66.475822][ T6689] pwc: recv_control_msg error -32 req 02 val 2500 [ 66.478233][ T6689] pwc: recv_control_msg error -32 req 02 val 2400 [ 66.480683][ T6689] pwc: recv_control_msg error -32 req 02 val 2600 [ 66.619893][ T54] pwc: recv_control_msg error -32 req 02 val 2b00 [ 66.624148][ T54] pwc: recv_control_msg error -32 req 02 val 2700 [ 66.628896][ T54] pwc: recv_control_msg error -32 req 02 val 2c00 [ 66.631397][ T54] pwc: recv_control_msg error -32 req 04 val 1000 [ 66.634452][ T54] pwc: recv_control_msg error -32 req 04 val 1300 [ 66.637070][ T54] pwc: recv_control_msg error -32 req 04 val 1400 [ 66.642120][ T54] pwc: recv_control_msg error -32 req 02 val 2000 [ 66.647536][ T54] pwc: recv_control_msg error -32 req 02 val 2100 [ 66.651944][ T54] pwc: recv_control_msg error -32 req 04 val 1500 [ 66.656630][ T54] pwc: recv_control_msg error -32 req 02 val 2500 [ 66.661825][ T54] pwc: recv_control_msg error -32 req 02 val 2400 [ 66.684152][ T6689] pwc: recv_control_msg error -71 req 02 val 2800 [ 66.686461][ T6689] pwc: recv_control_msg error -71 req 04 val 1100 [ 66.689372][ T6689] pwc: recv_control_msg error -71 req 04 val 1200 [ 66.694903][ T6689] pwc: Registered as video103. [ 66.697492][ T6689] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 66.709778][ T6689] usb 6-1: USB disconnect, device number 6 [ 66.865798][ T54] pwc: recv_control_msg error -32 req 02 val 2900 [ 66.868323][ T54] pwc: recv_control_msg error -32 req 02 val 2800 [ 66.946692][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 66.946702][ T40] audit: type=1400 audit(1752757964.619:376): avc: denied { transfer } for pid=6830 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.073297][ T54] pwc: recv_control_msg error -71 req 04 val 1200 [ 67.077245][ T54] pwc: Registered as video103. [ 67.079918][ T54] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/input/input10 [ 67.087560][ T54] usb 7-1: USB disconnect, device number 9 [ 67.225637][ T40] audit: type=1400 audit(1752757964.899:377): avc: denied { watch watch_reads } for pid=6840 comm="syz.1.253" path="/86/bus" dev="overlay" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.337492][ T40] audit: type=1400 audit(1752757965.009:378): avc: denied { create } for pid=6848 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.344948][ T40] audit: type=1400 audit(1752757965.009:379): avc: denied { bind } for pid=6848 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.350715][ T40] audit: type=1400 audit(1752757965.009:380): avc: denied { write } for pid=6848 comm="syz.3.257" path="socket:[15450]" dev="sockfs" ino=15450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 67.541562][ T6035] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 67.691487][ T6035] usb 6-1: Using ep0 maxpacket: 8 [ 67.697037][ T6035] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 67.700751][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.704051][ T6035] usb 6-1: Product: syz [ 67.705379][ T6035] usb 6-1: Manufacturer: syz [ 67.706876][ T6035] usb 6-1: SerialNumber: syz [ 67.709933][ T6035] usb 6-1: config 0 descriptor?? [ 67.917250][ T6035] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 68.287926][ T6857] syz.2.260 (6857): drop_caches: 2 [ 68.431569][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 68.583893][ T9] usb 8-1: config 255 has an invalid interface number: 38 but max is 0 [ 68.586482][ T9] usb 8-1: config 255 has no interface number 0 [ 68.590947][ T9] usb 8-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 68.593734][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.596166][ T9] usb 8-1: Product: syz [ 68.597494][ T9] usb 8-1: Manufacturer: syz [ 68.599013][ T9] usb 8-1: SerialNumber: syz [ 68.808798][ T9] dvb-usb: found a 'DiBcom STK7070P reference design' in warm state. [ 68.821922][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.823042][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.835923][ T9] dvbdev: DVB: registering new adapter (DiBcom STK7070P reference design) [ 68.839267][ T9] usb 8-1: media controller created [ 68.852049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 68.864829][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.895933][ T9] DVB: Unable to find symbol dib7000p_attach() [ 68.897902][ T9] dvb-usb: no frontend was attached by 'DiBcom STK7070P reference design' [ 68.951516][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 68.953674][ T9] Registered IR keymap rc-empty [ 68.955870][ T9] dvb-usb: could not initialize remote control. [ 68.957920][ T9] dvb-usb: DiBcom STK7070P reference design successfully initialized and connected. [ 69.210769][ T9] usb 8-1: USB disconnect, device number 9 [ 69.229320][ T9] dvb-usb: DiBcom STK7070P reference design successfully deinitialized and disconnected. [ 69.331347][ T6035] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 69.335418][ T6035] usb 6-1: USB disconnect, device number 7 [ 69.516378][ T40] audit: type=1400 audit(1752757967.189:381): avc: denied { mounton } for pid=6878 comm="syz.0.267" path="/proc/199/task" dev="proc" ino=15547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.605192][ T5958] Bluetooth: Wrong link type (-22) [ 69.719240][ T40] audit: type=1400 audit(1752757967.389:382): avc: denied { mount } for pid=6889 comm="syz.0.271" name="/" dev="autofs" ino=14845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.730019][ T40] audit: type=1400 audit(1752757967.399:383): avc: denied { mounton } for pid=6889 comm="syz.0.271" path="/73/file1/file0" dev="autofs" ino=16471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 69.753741][ T40] audit: type=1400 audit(1752757967.429:384): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.856015][ T6900] comedi comedi1: Minor 513 is invalid! [ 69.971597][ T6379] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 70.122874][ T6379] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 70.125653][ T6379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.129250][ T6379] usb 7-1: config 0 descriptor?? [ 70.132458][ T6379] cp210x 7-1:0.0: cp210x converter detected [ 70.181722][ T6689] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 70.301591][ T6034] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.332854][ T6689] usb 8-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.336429][ T6689] usb 8-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.339371][ T6689] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.341606][ T6689] usb 8-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 70.344407][ T6689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.351928][ T6689] usb 8-1: config 0 descriptor?? [ 70.452791][ T6034] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 70.455526][ T6034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.460477][ T6034] usb 6-1: config 0 descriptor?? [ 70.463724][ T6034] cp210x 6-1:0.0: cp210x converter detected [ 70.536983][ T6379] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 70.542840][ T6379] usb 7-1: cp210x converter now attached to ttyUSB0 [ 70.742570][ T53] usb 7-1: USB disconnect, device number 10 [ 70.747032][ T53] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 70.752614][ T53] cp210x 7-1:0.0: device disconnected [ 70.763416][ T6689] hid-led 0003:04D8:F372.0006: unknown main item tag 0x0 [ 70.768509][ T6689] hid-led 0003:04D8:F372.0006: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 70.788673][ T6689] hid-led 0003:04D8:F372.0006: Greynut Luxafor initialized [ 70.871106][ T6034] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 70.877623][ T6034] usb 6-1: cp210x converter now attached to ttyUSB0 [ 70.960964][ T6034] usb 8-1: USB disconnect, device number 10 [ 70.966750][ T60] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 70.971821][ T60] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 70.975482][ T60] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 70.979086][ T60] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 70.983740][ T60] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 70.987545][ T1154] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 70.990769][ T1154] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 70.993991][ T1154] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 70.997259][ T1154] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 71.001002][ T1154] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 71.004353][ T1154] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 71.007598][ T1154] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 71.010818][ T1154] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 71.014457][ T1154] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 71.017726][ T1154] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 71.020924][ T1154] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 71.024740][ T1154] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 71.028665][ T1154] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 71.065017][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.067023][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.075372][ T9] usb 6-1: USB disconnect, device number 8 [ 71.078671][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 71.082000][ T9] cp210x 6-1:0.0: device disconnected [ 71.307268][ T40] audit: type=1400 audit(1752757968.979:385): avc: denied { bind } for pid=6915 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.309143][ T6916] __nla_validate_parse: 2 callbacks suppressed [ 71.309157][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 71.382866][ T6917] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 71.397573][ T6917] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.736418][ T6933] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 71.847655][ T6941] hsr0: entered allmulticast mode [ 71.849285][ T6941] hsr_slave_0: entered allmulticast mode [ 71.851000][ T6941] hsr_slave_1: entered allmulticast mode [ 71.876285][ T6943] comedi comedi1: Cannot bond this driver to itself! [ 72.051550][ T6034] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 72.203405][ T6034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.207756][ T6034] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.211547][ T2298] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 72.212257][ T6034] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.217348][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.233136][ T6034] usb 8-1: config 0 descriptor?? [ 72.364334][ T2298] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 72.367147][ T2298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.369541][ T2298] usb 6-1: Product: syz [ 72.370833][ T2298] usb 6-1: Manufacturer: syz [ 72.372523][ T2298] usb 6-1: SerialNumber: syz [ 72.375567][ T2298] usb 6-1: config 0 descriptor?? [ 72.772963][ T5989] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 72.782298][ T2298] airspy 6-1:0.0: Board ID: 00 [ 72.783745][ T2298] airspy 6-1:0.0: Firmware version: [ 72.932888][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.935889][ T5989] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 72.938590][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.942653][ T5989] usb 7-1: config 0 descriptor?? [ 72.946432][ T5989] pwc: Askey VC010 type 2 USB webcam detected. [ 73.148818][ T5989] pwc: send_video_command error -71 [ 73.150536][ T5989] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 73.152947][ T5989] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 73.156742][ T5989] usb 7-1: USB disconnect, device number 11 [ 73.246534][ T6034] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 73.250217][ T6034] usb 8-1: USB disconnect, device number 11 [ 73.601492][ T5989] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 73.766400][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.769482][ T5989] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 73.773656][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.779219][ T5989] usb 7-1: config 0 descriptor?? [ 73.786663][ T5989] pwc: Askey VC010 type 2 USB webcam detected. [ 73.788935][ T2298] airspy 6-1:0.0: Registered as swradio24 [ 73.790776][ T2298] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 73.986022][ T2298] usb 6-1: USB disconnect, device number 9 [ 74.184464][ T5989] pwc: recv_control_msg error -32 req 02 val 2b00 [ 74.186963][ T5989] pwc: recv_control_msg error -32 req 02 val 2700 [ 74.189512][ T5989] pwc: recv_control_msg error -32 req 02 val 2c00 [ 74.192011][ T5989] pwc: recv_control_msg error -32 req 04 val 1000 [ 74.194424][ T5989] pwc: recv_control_msg error -32 req 04 val 1300 [ 74.196769][ T5989] pwc: recv_control_msg error -32 req 04 val 1400 [ 74.199094][ T5989] pwc: recv_control_msg error -32 req 02 val 2000 [ 74.201524][ T5989] pwc: recv_control_msg error -32 req 02 val 2100 [ 74.203892][ T5989] pwc: recv_control_msg error -32 req 04 val 1500 [ 74.206200][ T5989] pwc: recv_control_msg error -32 req 02 val 2500 [ 74.208546][ T5989] pwc: recv_control_msg error -32 req 02 val 2400 [ 74.210943][ T5989] pwc: recv_control_msg error -32 req 02 val 2600 [ 74.213508][ T5989] pwc: recv_control_msg error -32 req 02 val 2900 [ 74.221586][ T6002] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 74.385141][ T6002] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.388256][ T6002] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.391855][ T6002] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.394763][ T6002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.397093][ T6002] usb 8-1: SerialNumber: syz [ 74.416500][ T5989] pwc: recv_control_msg error -71 req 04 val 1100 [ 74.418880][ T5989] pwc: recv_control_msg error -71 req 04 val 1200 [ 74.425421][ T5989] pwc: Registered as video103. [ 74.428056][ T5989] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/input/input12 [ 74.435508][ T5989] usb 7-1: USB disconnect, device number 12 [ 74.528689][ T6978] overlayfs: failed to clone lowerpath [ 74.612497][ T6002] usb 8-1: 0:2 : does not exist [ 74.614516][ T6002] usb 8-1: unit 255 not found! [ 74.626755][ T6002] usb 8-1: 5:0: cannot get min/max values for control 1 (id 5) [ 74.635424][ T6002] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 74.642317][ T6002] usb 8-1: 5:0: cannot get min/max values for control 6 (id 5) [ 74.648226][ T6002] usb 8-1: 5:0: cannot get min/max values for control 7 (id 5) [ 74.652937][ T6002] usb 8-1: 5:0: cannot get min/max values for control 13 (id 5) [ 74.659873][ T6002] usb 8-1: USB disconnect, device number 12 [ 74.675207][ T6358] udevd[6358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.762281][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 74.956456][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 75.101542][ T6002] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.149762][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 75.149775][ T40] audit: type=1326 audit(1752757972.819:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.3.320" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741258e929 code=0x0 [ 75.159449][ T6034] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 75.160931][ T40] audit: type=1400 audit(1752757972.829:388): avc: denied { read write } for pid=7000 comm="syz.2.321" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.172796][ T6034] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 75.174574][ T40] audit: type=1400 audit(1752757972.829:389): avc: denied { open } for pid=7000 comm="syz.2.321" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.261593][ T6002] usb 6-1: Using ep0 maxpacket: 32 [ 75.265139][ T6002] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 75.268397][ T6002] usb 6-1: config 0 has no interface number 0 [ 75.270898][ T6002] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 75.275150][ T6002] usb 6-1: config 0 interface 196 has no altsetting 0 [ 75.279851][ T6002] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 75.283667][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.287011][ T6002] usb 6-1: Product: syz [ 75.288292][ T6002] usb 6-1: Manufacturer: syz [ 75.289929][ T6002] usb 6-1: SerialNumber: syz [ 75.293576][ T6002] usb 6-1: config 0 descriptor?? [ 75.295704][ T6990] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.505008][ T6002] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 75.507413][ T6002] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 75.511995][ T6002] usb 6-1: USB disconnect, device number 10 [ 75.801605][ T6689] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 75.961495][ T6689] usb 7-1: Using ep0 maxpacket: 16 [ 75.964588][ T6689] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 75.967181][ T6689] usb 7-1: config 0 has no interface number 0 [ 75.969188][ T6689] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 75.972223][ T6689] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.975274][ T6689] usb 7-1: config 0 interface 41 has no altsetting 0 [ 75.982038][ T6689] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 75.984838][ T6689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.987441][ T6689] usb 7-1: Product: syz [ 75.988683][ T6689] usb 7-1: Manufacturer: syz [ 75.990376][ T6689] usb 7-1: SerialNumber: syz [ 75.993459][ T6689] usb 7-1: config 0 descriptor?? [ 75.995648][ T7014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.998185][ T7014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.204016][ T7014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.206664][ T7014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.365537][ T40] audit: type=1400 audit(1752757974.039:390): avc: denied { connect } for pid=7032 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.371396][ T40] audit: type=1400 audit(1752757974.039:391): avc: denied { listen } for pid=7032 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.781568][ T53] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 76.812082][ T6689] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 76.831497][ T2298] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 76.953629][ T53] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.957351][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.960842][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 76.964100][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.968032][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.970760][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.974815][ T53] usb 8-1: config 0 descriptor?? [ 76.981858][ T2298] usb 6-1: Using ep0 maxpacket: 16 [ 76.986120][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.989950][ T2298] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.992807][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.996562][ T2298] usb 6-1: config 0 descriptor?? [ 77.217425][ T6689] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 77.220702][ T6689] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 77.223825][ T6689] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 77.228316][ T6689] usb 7-1: USB disconnect, device number 13 [ 77.388571][ T53] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 77.402978][ T2298] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 77.405148][ T2298] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 77.407272][ T2298] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 77.409410][ T2298] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 77.411769][ T2298] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 77.414269][ T2298] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 77.603107][ T6035] usb 6-1: USB disconnect, device number 11 [ 77.644552][ T6689] usb 8-1: USB disconnect, device number 13 [ 77.756666][ T40] audit: type=1400 audit(1752757975.429:392): avc: denied { name_bind } for pid=7037 comm="syz.2.335" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.962894][ T7061] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 4, id = 0 [ 79.312226][ T6689] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 79.463878][ T6689] usb 6-1: Using ep0 maxpacket: 8 [ 79.466816][ T6689] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.469865][ T6689] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.472956][ T6689] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.476043][ T6689] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.480069][ T6689] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.483069][ T6689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.581519][ T6002] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 79.691264][ T6689] usb 6-1: GET_CAPABILITIES returned 0 [ 79.693294][ T6689] usbtmc 6-1:16.0: can't read capabilities [ 79.733456][ T6002] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.736135][ T6002] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.739349][ T6002] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.742293][ T6002] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 79.745678][ T6002] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 79.750776][ T6002] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.753829][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.756441][ T6002] usb 8-1: Product: syz [ 79.757814][ T6002] usb 8-1: Manufacturer: syz [ 79.763683][ T6002] cdc_wdm 8-1:1.0: skipping garbage [ 79.765422][ T6002] cdc_wdm 8-1:1.0: skipping garbage [ 79.768843][ T6002] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 79.770846][ T6002] cdc_wdm 8-1:1.0: Unknown control protocol [ 79.896775][ T6002] usb 6-1: USB disconnect, device number 12 [ 79.965390][ T9] usb 8-1: USB disconnect, device number 14 [ 80.399270][ T40] audit: type=1400 audit(1752757978.069:393): avc: denied { connect } for pid=7080 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.811607][ T6034] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 80.941530][ T6002] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 80.961530][ T6034] usb 6-1: Using ep0 maxpacket: 32 [ 80.965322][ T6034] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.970560][ T6034] usb 6-1: config 0 interface 0 has no altsetting 0 [ 80.973526][ T6034] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 80.977116][ T6034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.984350][ T6034] usb 6-1: config 0 descriptor?? [ 81.091560][ T6002] usb 8-1: Using ep0 maxpacket: 32 [ 81.094376][ T6002] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.097427][ T6002] usb 8-1: config 0 has no interfaces? [ 81.101069][ T6002] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 81.104836][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 81.108181][ T6002] usb 8-1: Product: syz [ 81.109622][ T6002] usb 8-1: Manufacturer: syz [ 81.111625][ T6002] usb 8-1: SerialNumber: syz [ 81.114477][ T6002] usb 8-1: config 0 descriptor?? [ 81.121598][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 81.302065][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 81.306409][ T54] usb 7-1: config index 0 descriptor too short (expected 6683, got 27) [ 81.309024][ T54] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 81.311978][ T54] usb 7-1: config 0 has no interface number 0 [ 81.313931][ T54] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.318093][ T54] usb 7-1: config 0 interface 85 has no altsetting 0 [ 81.318134][ T7096] binder: 7095:7096 ioctl c0306201 200000000640 returned -22 [ 81.322244][ T54] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 81.323489][ T6002] usb 8-1: USB disconnect, device number 15 [ 81.325386][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.329747][ T54] usb 7-1: Product: syz [ 81.331105][ T54] usb 7-1: Manufacturer: syz [ 81.333302][ T54] usb 7-1: SerialNumber: syz [ 81.336762][ T54] usb 7-1: config 0 descriptor?? [ 81.393658][ T6034] aquacomputer_d5next 0003:0C70:F011.000B: item fetching failed at offset 5/7 [ 81.397863][ T6034] aquacomputer_d5next 0003:0C70:F011.000B: probe with driver aquacomputer_d5next failed with error -22 [ 81.592475][ T6034] usb 6-1: USB disconnect, device number 13 [ 81.944665][ T54] appletouch 7-1:0.85: Geyser mode initialized. [ 81.947960][ T54] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.85/input/input14 [ 82.101729][ T6689] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 82.147957][ T6034] usb 7-1: USB disconnect, device number 14 [ 82.163558][ T6034] appletouch 7-1:0.85: input: appletouch disconnected [ 82.261581][ T6689] usb 8-1: Using ep0 maxpacket: 32 [ 82.265697][ T6689] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.270665][ T6689] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.273765][ T6689] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.276743][ T6689] usb 8-1: Product: syz [ 82.278470][ T6689] usb 8-1: Manufacturer: syz [ 82.280117][ T6689] usb 8-1: SerialNumber: syz [ 82.283303][ T6689] usb 8-1: config 0 descriptor?? [ 82.288945][ T7103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.292625][ T6689] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.294655][ T6689] hub 8-1:0.0: probe with driver hub failed with error -5 [ 82.601739][ T6034] usb 8-1: USB disconnect, device number 16 [ 82.760919][ T7115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.267575][ T7135] kvm: pic: non byte write [ 83.275840][ T7135] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 83.287929][ T7135] kvm: pic: non byte write [ 83.441652][ T2298] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 83.495691][ T7143] comedi comedi1: Minor 47 could not be opened [ 83.611679][ T2298] usb 6-1: Using ep0 maxpacket: 32 [ 83.615423][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.618886][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.622873][ T2298] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.625777][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.637899][ T2298] usb 6-1: config 0 descriptor?? [ 83.642496][ T2298] hub 6-1:0.0: USB hub found [ 83.663574][ T40] audit: type=1400 audit(1752757981.339:394): avc: denied { append } for pid=7147 comm="syz.2.379" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.665792][ T7148] program syz.2.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.711533][ T6689] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 83.846309][ T2298] hub 6-1:0.0: 2 ports detected [ 83.881536][ T6689] usb 8-1: Using ep0 maxpacket: 16 [ 83.885932][ T6689] usb 8-1: unable to get BOS descriptor or descriptor too short [ 83.890896][ T6689] usb 8-1: config 129 has an invalid interface number: 147 but max is 0 [ 83.895033][ T6689] usb 8-1: config 129 has no interface number 0 [ 83.897681][ T6689] usb 8-1: config 129 interface 147 altsetting 133 endpoint 0x9 has invalid wMaxPacketSize 0 [ 83.901974][ T6689] usb 8-1: config 129 interface 147 has no altsetting 0 [ 83.909024][ T6689] usb 8-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=80.af [ 83.912959][ T6689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.916734][ T6689] usb 8-1: Product: syz [ 83.918510][ T6689] usb 8-1: Manufacturer: syz [ 83.920461][ T6689] usb 8-1: SerialNumber: syz [ 84.134993][ T6689] usb 8-1: USB disconnect, device number 17 [ 84.368447][ T2298] usb 6-1: USB disconnect, device number 14 [ 84.401657][ T6034] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 84.571519][ T6034] usb 7-1: Using ep0 maxpacket: 16 [ 84.574592][ T6034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.578433][ T6034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.582732][ T6034] usb 7-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 84.586406][ T6034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.594788][ T6034] usb 7-1: config 0 descriptor?? [ 84.908541][ T40] audit: type=1400 audit(1752757982.579:395): avc: denied { execute } for pid=7170 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 84.919529][ T40] audit: type=1400 audit(1752757982.579:396): avc: denied { execute_no_trans } for pid=7170 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 85.009275][ T6034] kye 0003:0458:5014.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 85.013595][ T6034] kye 0003:0458:5014.000C: item fetching failed at offset 5/7 [ 85.016636][ T6034] kye 0003:0458:5014.000C: parse failed [ 85.019012][ T6034] kye 0003:0458:5014.000C: probe with driver kye failed with error -22 [ 85.061308][ T40] audit: type=1400 audit(1752757982.729:397): avc: denied { ioctl } for pid=7174 comm="syz-executor" path="socket:[17009]" dev="sockfs" ino=17009 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.061733][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.074255][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.078556][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.083209][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.087654][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.205507][ T29] usb 7-1: USB disconnect, device number 15 [ 85.237942][ T7181] block device autoloading is deprecated and will be removed. [ 85.248149][ T40] audit: type=1400 audit(1752757982.919:398): avc: denied { ioctl } for pid=7178 comm="syz.1.391" path="/124/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.291368][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 85.402085][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.412570][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.422774][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.425860][ T7174] bridge_slave_0: entered allmulticast mode [ 85.431922][ T7174] bridge_slave_0: entered promiscuous mode [ 85.435975][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.438302][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.440572][ T7174] bridge_slave_1: entered allmulticast mode [ 85.443631][ T7174] bridge_slave_1: entered promiscuous mode [ 85.483336][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.523040][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.529398][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.556061][ T40] audit: type=1400 audit(1752757983.229:399): avc: denied { execute } for pid=7194 comm="syz.1.395" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.577730][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.631764][ T7174] team0: Port device team_slave_0 added [ 85.636501][ T7174] team0: Port device team_slave_1 added [ 85.701130][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.707742][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.710625][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.723421][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.729015][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.733440][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.741274][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.800067][ T7208] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 85.837695][ T7174] hsr_slave_0: entered promiscuous mode [ 85.837750][ T40] audit: type=1400 audit(1752757983.509:400): avc: denied { create } for pid=7206 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.840138][ T7174] hsr_slave_1: entered promiscuous mode [ 85.845837][ T40] audit: type=1400 audit(1752757983.509:401): avc: denied { getopt } for pid=7206 comm="syz.2.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.848416][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.856531][ T7174] Cannot create hsr debugfs directory [ 85.863149][ T5954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 85.863653][ T40] audit: type=1400 audit(1752757983.539:402): avc: denied { map } for pid=7209 comm="syz.3.401" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.866768][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: kworker/u33:2 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 85.866785][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.866794][ T5954] Workqueue: hci3 hci_rx_work [ 85.866829][ T5954] Call Trace: [ 85.866834][ T5954] [ 85.866838][ T5954] dump_stack_lvl+0x16c/0x1f0 [ 85.866856][ T5954] sysfs_warn_dup+0x7f/0xa0 [ 85.866884][ T5954] sysfs_create_dir_ns+0x24b/0x2b0 [ 85.866900][ T5954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 85.866915][ T5954] ? find_held_lock+0x2b/0x80 [ 85.866933][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 85.866947][ T5954] kobject_add_internal+0x2c4/0x9b0 [ 85.866968][ T5954] kobject_add+0x16e/0x240 [ 85.866985][ T5954] ? __pfx_kobject_add+0x10/0x10 [ 85.867009][ T5954] ? do_raw_spin_unlock+0x172/0x230 [ 85.867025][ T5954] ? kobject_put+0xab/0x5a0 [ 85.867045][ T5954] device_add+0x288/0x1a70 [ 85.867056][ T5954] ? __pfx_dev_set_name+0x10/0x10 [ 85.867067][ T5954] ? __pfx_device_add+0x10/0x10 [ 85.867079][ T5954] ? mgmt_send_event_skb+0x2fb/0x460 [ 85.867109][ T5954] hci_conn_add_sysfs+0x17e/0x230 [ 85.867133][ T5954] le_conn_complete_evt+0x1075/0x1d70 [ 85.867161][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 85.867175][ T5954] ? hci_event_packet+0x459/0x11c0 [ 85.867194][ T5954] hci_le_conn_complete_evt+0x23c/0x370 [ 85.867221][ T5954] hci_le_meta_evt+0x357/0x5e0 [ 85.867245][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 85.867270][ T5954] hci_event_packet+0x685/0x11c0 [ 85.867293][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 85.867318][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 85.867342][ T5954] ? kcov_remote_start+0x3c9/0x6d0 [ 85.867357][ T5954] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.867385][ T5954] hci_rx_work+0x2c5/0x16b0 [ 85.867410][ T5954] ? rcu_is_watching+0x12/0xc0 [ 85.867434][ T5954] process_one_work+0x9cf/0x1b70 [ 85.867459][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 85.867485][ T5954] ? assign_work+0x1a0/0x250 [ 85.867504][ T5954] worker_thread+0x6c8/0xf10 [ 85.867533][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 85.867549][ T5954] kthread+0x3c5/0x780 [ 85.867565][ T5954] ? __pfx_kthread+0x10/0x10 [ 85.867583][ T5954] ? rcu_is_watching+0x12/0xc0 [ 85.867603][ T5954] ? __pfx_kthread+0x10/0x10 [ 85.867621][ T5954] ret_from_fork+0x5d7/0x6f0 [ 85.867646][ T5954] ? __pfx_kthread+0x10/0x10 [ 85.867663][ T5954] ret_from_fork_asm+0x1a/0x30 [ 85.867690][ T5954] [ 85.867711][ T5954] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 85.876730][ T40] audit: type=1400 audit(1752757983.539:403): avc: denied { execute } for pid=7209 comm="syz.3.401" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.878923][ T5954] Bluetooth: hci3: failed to register connection device [ 85.951052][ T40] audit: type=1400 audit(1752757983.619:404): avc: denied { ioctl } for pid=7218 comm="syz.1.403" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 85.978896][ T7207] syzkaller1: entered promiscuous mode [ 85.981289][ T7207] syzkaller1: entered allmulticast mode [ 86.007057][ T7211] geneve2: entered promiscuous mode [ 86.008724][ T7211] geneve2: entered allmulticast mode [ 86.020445][ T7217] geneve2: entered promiscuous mode [ 86.023140][ T7217] geneve2: entered allmulticast mode [ 86.174679][ T40] audit: type=1400 audit(1752757983.849:405): avc: denied { create } for pid=7230 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.184306][ T40] audit: type=1400 audit(1752757983.859:406): avc: denied { ioctl } for pid=7230 comm="syz.1.406" path="socket:[16229]" dev="sockfs" ino=16229 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.199329][ T1141] bridge_slave_1: left allmulticast mode [ 86.201171][ T1141] bridge_slave_1: left promiscuous mode [ 86.203679][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.208751][ T1141] bridge_slave_0: left allmulticast mode [ 86.210517][ T1141] bridge_slave_0: left promiscuous mode [ 86.214526][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.221827][ T1141] tipc: Resetting bearer [ 86.343014][ T1141] tipc: Disabling bearer [ 86.365654][ T2298] IPVS: starting estimator thread 0... [ 86.451636][ T7243] IPVS: using max 42 ests per chain, 100800 per kthread [ 86.574908][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.583116][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.587852][ T1141] bond0 (unregistering): Released all slaves [ 86.615875][ T7242] tipc: Started in network mode [ 86.618003][ T7242] tipc: Node identity ac1414aa, cluster identity 4711 [ 86.621874][ T7242] tipc: Enabled bearer , priority 10 [ 86.664721][ T1141] tipc: Left network mode [ 86.721522][ T40] audit: type=1400 audit(1752757984.389:407): avc: denied { create } for pid=7252 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 86.728292][ T40] audit: type=1400 audit(1752757984.399:408): avc: denied { bind } for pid=7252 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 86.733813][ T54] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 86.757504][ T7174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.763180][ T7174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.767961][ T7174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.776626][ T7174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.840845][ T7266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.876476][ T6689] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 86.877638][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.879407][ T6689] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 86.893245][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 86.896542][ T7269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.899789][ T1142] wlan1: authenticated [ 86.903606][ T54] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.908914][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 86.911840][ T54] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 86.912301][ T1142] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 86.917359][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.918553][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.923394][ T54] usb 7-1: config 0 descriptor?? [ 86.926596][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.930613][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.934084][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.951831][ T46] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 86.951891][ T7266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.954759][ T46] wlan1: associated [ 86.961262][ T1141] hsr0: left allmulticast mode [ 86.963276][ T1141] veth1_macvtap: left promiscuous mode [ 86.965838][ T1141] veth0_macvtap: left promiscuous mode [ 86.968275][ T1141] veth1_vlan: left promiscuous mode [ 86.970588][ T1141] veth0_vlan: left promiscuous mode [ 87.133441][ T54] usbhid 7-1:0.0: can't add hid device: -71 [ 87.135421][ T54] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 87.143840][ T5958] Bluetooth: hci4: command tx timeout [ 87.146649][ T54] usb 7-1: USB disconnect, device number 16 [ 87.220276][ T7277] binder: BC_ACQUIRE_RESULT not supported [ 87.222489][ T7277] binder: 7275:7277 ioctl c0306201 200000000180 returned -22 [ 87.508150][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 87.586623][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 87.606428][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.609567][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.614653][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.616981][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.619257][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.621890][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.625152][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.628140][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.630630][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.633166][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.636104][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.639001][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.643682][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.646778][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.649815][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.653259][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.656459][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.659584][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.662840][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.665937][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.669180][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.672907][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.676519][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.679651][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.682546][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.684921][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.687503][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.690775][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.694313][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.697563][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.700693][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.708578][ T7287] binder: 7286:7287 ioctl c0306201 200000000240 returned -11 [ 87.741623][ T6689] tipc: Node number set to 2886997162 [ 87.851791][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 88.002839][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 88.013540][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 88.017008][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 88.020354][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.024646][ T9] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 88.027492][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.039274][ T9] usb 8-1: config 0 descriptor?? [ 88.051117][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input15 [ 88.104714][ T5958] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 88.107437][ T5958] Bluetooth: hci0: Injecting HCI hardware error event [ 88.110402][ T5958] Bluetooth: hci0: hardware error 0x00 [ 88.197462][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.235100][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.238148][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.245808][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.248369][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.254021][ T6002] usb 8-1: USB disconnect, device number 18 [ 88.349079][ T7318] ipvlan1: entered allmulticast mode [ 88.351373][ T7318] veth0_vlan: entered allmulticast mode [ 88.357788][ T7318] input: syz1 as /devices/virtual/input/input16 [ 88.459999][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.508362][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 88.512640][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 88.522987][ T7330] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.526692][ T7330] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.530181][ T7330] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.534284][ T7330] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.544154][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 88.547883][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 88.620636][ T7174] veth0_vlan: entered promiscuous mode [ 88.626413][ T7174] veth1_vlan: entered promiscuous mode [ 88.640401][ T7174] veth0_macvtap: entered promiscuous mode [ 88.646072][ T7174] veth1_macvtap: entered promiscuous mode [ 88.656260][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.672701][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.677436][ T7174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.680279][ T7174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.684511][ T7174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.687265][ T7174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.723097][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.725556][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.739765][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.743548][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.799771][ T7347] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 88.817273][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 88.824596][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 88.853809][ T7354] netlink: 72 bytes leftover after parsing attributes in process `syz.3.426'. [ 89.041822][ T6689] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.117233][ T7376] : entered promiscuous mode [ 89.211609][ T6689] usb 9-1: Using ep0 maxpacket: 32 [ 89.223582][ T5954] Bluetooth: hci4: command tx timeout [ 89.228674][ T6689] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 89.231709][ T6689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.234517][ T6689] usb 9-1: Product: syz [ 89.256993][ T6689] usb 9-1: Manufacturer: syz [ 89.258976][ T6689] usb 9-1: SerialNumber: syz [ 89.265819][ T7394] netlink: 92 bytes leftover after parsing attributes in process `syz.2.433'. [ 89.269784][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 89.270430][ T6689] usb 9-1: config 0 descriptor?? [ 89.275806][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'. [ 89.280132][ T6689] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 89.366022][ T7412] netlink: 'syz.1.438': attribute type 10 has an invalid length. [ 89.369387][ T7412] dummy0: entered promiscuous mode [ 89.375832][ T7412] bridge0: port 3(dummy0) entered blocking state [ 89.378490][ T7412] bridge0: port 3(dummy0) entered disabled state [ 89.381140][ T7412] dummy0: entered allmulticast mode [ 89.396485][ T7412] bridge0: port 3(dummy0) entered blocking state [ 89.399726][ T7412] bridge0: port 3(dummy0) entered forwarding state [ 89.400231][ T7417] loop2: detected capacity change from 0 to 7 [ 89.406657][ T6086] loop2: [ 89.407667][ T6086] loop2: partition table partially beyond EOD, truncated [ 89.414665][ T7417] loop2: [ 89.415653][ T7417] loop2: partition table partially beyond EOD, truncated [ 89.564078][ T7426] kvm: pic: non byte write [ 89.661649][ T9] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 89.820788][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.824177][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 89.827687][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 89.831007][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.834070][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.840353][ T9] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 89.843377][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.845878][ T9] usb 7-1: Product: syz [ 89.847214][ T9] usb 7-1: Manufacturer: syz [ 89.848672][ T9] usb 7-1: SerialNumber: syz [ 89.851492][ T9] usb 7-1: config 0 descriptor?? [ 89.857607][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input17 [ 89.976329][ T7446] netlink: 'syz.3.446': attribute type 13 has an invalid length. [ 89.978787][ T7446] macvtap0: entered promiscuous mode [ 89.981365][ T7446] macvtap0: refused to change device tx_queue_len [ 90.106395][ T7452] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 90.128317][ T53] usb 7-1: USB disconnect, device number 17 [ 90.157596][ T7454] input: syz0 as /devices/virtual/input/input18 [ 90.181600][ T5958] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 90.228673][ T7458] IPVS: length: 246 != 8 [ 90.232486][ T7459] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 90.235700][ T7458] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 90.293291][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13840 sclass=netlink_route_socket pid=7463 comm=syz.3.452 [ 90.343708][ T7468] netlink: 'syz.3.454': attribute type 3 has an invalid length. [ 90.347278][ T7468] netlink: 'syz.3.454': attribute type 2 has an invalid length. [ 90.795045][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 90.795056][ T40] audit: type=1400 audit(1752757988.469:430): avc: denied { listen } for pid=7480 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.803814][ T40] audit: type=1400 audit(1752757988.469:431): avc: denied { accept } for pid=7480 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.846920][ T40] audit: type=1400 audit(1752757988.519:432): avc: denied { shutdown } for pid=7480 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.093670][ T7493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.098902][ T6689] gspca_stk1135: reg_w 0x200 err -71 [ 91.102440][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.104483][ T6689] gspca_stk1135: Sensor write failed [ 91.106197][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.108234][ T6689] gspca_stk1135: Sensor write failed [ 91.109895][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.112476][ T6689] gspca_stk1135: Sensor read failed [ 91.114129][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.116077][ T6689] gspca_stk1135: Sensor read failed [ 91.117718][ T6689] gspca_stk1135: Detected sensor type unknown (0x0) [ 91.119906][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.122184][ T6689] gspca_stk1135: Sensor read failed [ 91.124134][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.126149][ T6689] gspca_stk1135: Sensor read failed [ 91.127797][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.129759][ T6689] gspca_stk1135: Sensor write failed [ 91.135154][ T6689] gspca_stk1135: serial bus timeout: status=0x00 [ 91.137137][ T6689] gspca_stk1135: Sensor write failed [ 91.138830][ T6689] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 91.149888][ T6689] usb 9-1: USB disconnect, device number 2 [ 91.197293][ T7507] SELinux: Context system_u:object_r:faillog_t:s0 is not valid (left unmapped). [ 91.202244][ T40] audit: type=1400 audit(1752757988.869:433): avc: denied { relabelto } for pid=7506 comm="syz.1.464" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:faillog_t:s0" [ 91.210661][ T40] audit: type=1400 audit(1752757988.879:434): avc: denied { associate } for pid=7506 comm="syz.1.464" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:faillog_t:s0" [ 91.219449][ T40] audit: type=1400 audit(1752757988.889:435): avc: denied { ioctl } for pid=7506 comm="syz.1.464" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:faillog_t:s0" [ 91.250996][ T7509] sch_tbf: peakrate 620990189 is lower than or equals to rate 2831599472947593698 ! [ 91.302180][ T5958] Bluetooth: hci4: command tx timeout [ 91.392780][ T7521] vxfs: Unknown parameter 'discard' [ 91.393179][ T40] audit: type=1400 audit(1752757989.069:436): avc: denied { mounton } for pid=7520 comm="syz.3.468" path="/123/bus" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 91.400810][ T7523] xt_policy: output policy not valid in PREROUTING and INPUT [ 91.402350][ T40] audit: type=1400 audit(1752757989.069:437): avc: denied { ioctl } for pid=7520 comm="syz.3.468" path="socket:[18825]" dev="sockfs" ino=18825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 91.583604][ T7526] bridge: RTM_NEWNEIGH with invalid ether address [ 91.859490][ T40] audit: type=1400 audit(1752757989.529:438): avc: denied { ioctl } for pid=7540 comm="syz.4.474" path="socket:[18837]" dev="sockfs" ino=18837 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.992298][ T7558] FAULT_INJECTION: forcing a failure. [ 91.992298][ T7558] name failslab, interval 1, probability 0, space 0, times 1 [ 91.996289][ T7558] CPU: 2 UID: 0 PID: 7558 Comm: syz.4.477 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 91.996305][ T7558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.996312][ T7558] Call Trace: [ 91.996316][ T7558] [ 91.996320][ T7558] dump_stack_lvl+0x16c/0x1f0 [ 91.996355][ T7558] should_fail_ex+0x512/0x640 [ 91.996375][ T7558] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 91.996392][ T7558] should_failslab+0xc2/0x120 [ 91.996408][ T7558] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 91.996423][ T7558] ? getname_flags.part.0+0x4c/0x550 [ 91.996438][ T7558] getname_flags.part.0+0x4c/0x550 [ 91.996451][ T7558] getname_flags+0x93/0xf0 [ 91.996466][ T7558] do_sys_openat2+0xb8/0x1d0 [ 91.996480][ T7558] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.996492][ T7558] ? __fget_files+0x20e/0x3c0 [ 91.996509][ T7558] __x64_sys_open+0x153/0x1e0 [ 91.996520][ T7558] ? __pfx___x64_sys_open+0x10/0x10 [ 91.996534][ T7558] ? rcu_is_watching+0x12/0xc0 [ 91.996550][ T7558] do_syscall_64+0xcd/0x4c0 [ 91.996567][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.996578][ T7558] RIP: 0033:0x7f0aad78e929 [ 91.996587][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.996599][ T7558] RSP: 002b:00007f0aae54c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 91.996610][ T7558] RAX: ffffffffffffffda RBX: 00007f0aad9b6080 RCX: 00007f0aad78e929 [ 91.996617][ T7558] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 91.996623][ T7558] RBP: 00007f0aae54c090 R08: 0000000000000000 R09: 0000000000000000 [ 91.996629][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.996635][ T7558] R13: 0000000000000000 R14: 00007f0aad9b6080 R15: 00007ffde89d93a8 [ 91.996649][ T7558] [ 92.096731][ T40] audit: type=1400 audit(1752757989.769:439): avc: denied { read write } for pid=7562 comm="syz.2.480" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:faillog_t:s0" [ 92.152089][ T7570] orangefs_devreq_open: device cannot be opened in blocking mode [ 92.274474][ T7585] random: crng reseeded on system resumption [ 92.426247][ T7603] Bluetooth: MGMT ver 1.23 [ 92.429147][ T7601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.581497][ T54] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 92.601128][ T7608] orangefs_devreq_open: device cannot be opened in blocking mode [ 92.731521][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 92.735470][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.738503][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.742159][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.745270][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.749269][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.752375][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.961873][ T54] usb 8-1: GET_CAPABILITIES returned 0 [ 92.964019][ T54] usbtmc 8-1:16.0: can't read capabilities [ 92.991948][ T2298] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 92.997328][ T7638] input: syz0 as /devices/virtual/input/input21 [ 93.039540][ T7640] fuse: Bad value for 'fd' [ 93.142315][ T2298] usb 6-1: Using ep0 maxpacket: 32 [ 93.146139][ T2298] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.151864][ T2298] usb 6-1: config 0 interface 0 has no altsetting 0 [ 93.154330][ T2298] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 93.157107][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.161216][ T2298] usb 6-1: config 0 descriptor?? [ 93.166505][ T6689] usb 8-1: USB disconnect, device number 19 [ 93.355176][ T7655] FAULT_INJECTION: forcing a failure. [ 93.355176][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.359592][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.509 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 93.359615][ T7655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.359626][ T7655] Call Trace: [ 93.359632][ T7655] [ 93.359639][ T7655] dump_stack_lvl+0x16c/0x1f0 [ 93.359671][ T7655] should_fail_ex+0x512/0x640 [ 93.359699][ T7655] strncpy_from_user+0x3b/0x2e0 [ 93.359722][ T7655] getname_flags.part.0+0x8f/0x550 [ 93.359743][ T7655] getname_flags+0x93/0xf0 [ 93.359769][ T7655] do_sys_openat2+0xb8/0x1d0 [ 93.359786][ T7655] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.359804][ T7655] ? __fget_files+0x20e/0x3c0 [ 93.359830][ T7655] __x64_sys_open+0x153/0x1e0 [ 93.359844][ T7655] ? __pfx___x64_sys_open+0x10/0x10 [ 93.359864][ T7655] ? rcu_is_watching+0x12/0xc0 [ 93.359887][ T7655] do_syscall_64+0xcd/0x4c0 [ 93.359917][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.359936][ T7655] RIP: 0033:0x7fef9298e929 [ 93.359950][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.359967][ T7655] RSP: 002b:00007fef9383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 93.359985][ T7655] RAX: ffffffffffffffda RBX: 00007fef92bb6080 RCX: 00007fef9298e929 [ 93.359998][ T7655] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 93.360008][ T7655] RBP: 00007fef9383b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.360017][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.360026][ T7655] R13: 0000000000000000 R14: 00007fef92bb6080 R15: 00007ffde0cdb0f8 [ 93.360049][ T7655] [ 93.368421][ T2298] usbhid 6-1:0.0: can't add hid device: -71 [ 93.391608][ T5958] Bluetooth: hci4: command tx timeout [ 93.391858][ T2298] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 93.429299][ T2298] usb 6-1: USB disconnect, device number 15 [ 93.777452][ T7662] __nla_validate_parse: 7 callbacks suppressed [ 93.777463][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 93.888996][ T7668] input: syz0 as /devices/virtual/input/input22 [ 93.968764][ T7678] JFS: charset not found [ 94.228729][ T7700] netlink: 'syz.2.521': attribute type 2 has an invalid length. [ 94.251874][ T7694] program syz.2.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.262376][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 94.320755][ T7705] input: syz0 as /devices/virtual/input/input23 [ 94.433651][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 94.437471][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.438852][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'. [ 94.441845][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.448512][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.454843][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.460255][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.464696][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.517799][ T7717] fuse: Bad value for 'fd' [ 94.576659][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 94.673332][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 94.675238][ T9] usbtmc 8-1:16.0: can't read capabilities [ 94.803824][ T7722] overlayfs: missing 'lowerdir' [ 94.810367][ T7723] overlayfs: missing 'lowerdir' [ 94.883820][ T6034] usb 8-1: USB disconnect, device number 20 [ 95.084830][ T7737] FAULT_INJECTION: forcing a failure. [ 95.084830][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 95.088825][ T7737] CPU: 2 UID: 0 PID: 7737 Comm: syz.1.532 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 95.088841][ T7737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.088848][ T7737] Call Trace: [ 95.088852][ T7737] [ 95.088857][ T7737] dump_stack_lvl+0x16c/0x1f0 [ 95.088876][ T7737] should_fail_ex+0x512/0x640 [ 95.088891][ T7737] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 95.088908][ T7737] should_failslab+0xc2/0x120 [ 95.088925][ T7737] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 95.088939][ T7737] ? alloc_empty_file+0x55/0x1e0 [ 95.088952][ T7737] alloc_empty_file+0x55/0x1e0 [ 95.088963][ T7737] path_openat+0xda/0x2cb0 [ 95.088977][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.088993][ T7737] ? __pfx_path_openat+0x10/0x10 [ 95.089012][ T7737] do_filp_open+0x20b/0x470 [ 95.089027][ T7737] ? __pfx_do_filp_open+0x10/0x10 [ 95.089051][ T7737] ? _raw_spin_unlock+0x28/0x50 [ 95.089064][ T7737] ? alloc_fd+0x471/0x7d0 [ 95.089083][ T7737] do_sys_openat2+0x11b/0x1d0 [ 95.089093][ T7737] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.089105][ T7737] ? __fget_files+0x20e/0x3c0 [ 95.089123][ T7737] __x64_sys_open+0x153/0x1e0 [ 95.089133][ T7737] ? __pfx___x64_sys_open+0x10/0x10 [ 95.089147][ T7737] ? rcu_is_watching+0x12/0xc0 [ 95.089163][ T7737] do_syscall_64+0xcd/0x4c0 [ 95.089179][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.089190][ T7737] RIP: 0033:0x7fb3f8b8e929 [ 95.089200][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.089210][ T7737] RSP: 002b:00007fb3f996a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 95.089221][ T7737] RAX: ffffffffffffffda RBX: 00007fb3f8db6080 RCX: 00007fb3f8b8e929 [ 95.089228][ T7737] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 95.089237][ T7737] RBP: 00007fb3f996a090 R08: 0000000000000000 R09: 0000000000000000 [ 95.089244][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.089250][ T7737] R13: 0000000000000000 R14: 00007fb3f8db6080 R15: 00007ffdc81ff9a8 [ 95.089263][ T7737] [ 95.179125][ C2] vkms_vblank_simulate: vblank timer overrun [ 95.405867][ T7740] random: crng reseeded on system resumption [ 95.430252][ T7740] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 95.626241][ T7752] /dev/sg0: Can't lookup blockdev [ 95.736703][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802700b000: rx timeout, send abort [ 95.740309][ C3] vcan0: j1939_tp_rxtimer: 0xffff888022c90000: rx timeout, send abort [ 95.743169][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802700b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.748365][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888022c90000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.858117][ T7766] team0: Device gtp0 is of different type [ 96.000317][ T7775] syz_tun: entered allmulticast mode [ 96.004039][ T7774] syz_tun: left allmulticast mode [ 96.039096][ T7776] orangefs_devreq_open: device cannot be opened in blocking mode [ 96.146881][ T7778] kvm: pic: non byte write [ 96.710080][ T7793] FAULT_INJECTION: forcing a failure. [ 96.710080][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 96.715295][ T7793] CPU: 3 UID: 0 PID: 7793 Comm: syz.3.551 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 96.715319][ T7793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.715330][ T7793] Call Trace: [ 96.715338][ T7793] [ 96.715344][ T7793] dump_stack_lvl+0x16c/0x1f0 [ 96.715375][ T7793] should_fail_ex+0x512/0x640 [ 96.715399][ T7793] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 96.715426][ T7793] should_failslab+0xc2/0x120 [ 96.715452][ T7793] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 96.715475][ T7793] ? security_file_alloc+0x34/0x2b0 [ 96.715506][ T7793] security_file_alloc+0x34/0x2b0 [ 96.715531][ T7793] init_file+0x93/0x4c0 [ 96.715549][ T7793] alloc_empty_file+0x73/0x1e0 [ 96.715568][ T7793] path_openat+0xda/0x2cb0 [ 96.715591][ T7793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.715618][ T7793] ? __pfx_path_openat+0x10/0x10 [ 96.715649][ T7793] do_filp_open+0x20b/0x470 [ 96.715673][ T7793] ? __pfx_do_filp_open+0x10/0x10 [ 96.715721][ T7793] ? _raw_spin_unlock+0x28/0x50 [ 96.715742][ T7793] ? alloc_fd+0x471/0x7d0 [ 96.715772][ T7793] do_sys_openat2+0x11b/0x1d0 [ 96.715791][ T7793] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.715811][ T7793] ? __fget_files+0x20e/0x3c0 [ 96.715839][ T7793] __x64_sys_open+0x153/0x1e0 [ 96.715857][ T7793] ? __pfx___x64_sys_open+0x10/0x10 [ 96.715879][ T7793] ? rcu_is_watching+0x12/0xc0 [ 96.715906][ T7793] do_syscall_64+0xcd/0x4c0 [ 96.715932][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.715950][ T7793] RIP: 0033:0x7f741258e929 [ 96.715965][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.715982][ T7793] RSP: 002b:00007f74103f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 96.715999][ T7793] RAX: ffffffffffffffda RBX: 00007f74127b6080 RCX: 00007f741258e929 [ 96.716010][ T7793] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 96.716021][ T7793] RBP: 00007f74103f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.716031][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.716042][ T7793] R13: 0000000000000000 R14: 00007f74127b6080 R15: 00007ffd36ce2068 [ 96.716065][ T7793] [ 97.034842][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 97.034854][ T40] audit: type=1400 audit(1752757994.709:472): avc: denied { map } for pid=7794 comm="syz.1.552" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.045297][ T40] audit: type=1400 audit(1752757994.709:473): avc: denied { execute } for pid=7794 comm="syz.1.552" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.480567][ T40] audit: type=1400 audit(1752757995.149:474): avc: denied { connect } for pid=7804 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.546533][ T40] audit: type=1400 audit(1752757995.219:475): avc: denied { write } for pid=7807 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.557486][ T40] audit: type=1400 audit(1752757995.229:476): avc: denied { remount } for pid=7807 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.770682][ T7825] kvm: pic: non byte write [ 98.615311][ T7836] FAULT_INJECTION: forcing a failure. [ 98.615311][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 98.619486][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.1.564 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 98.619501][ T7836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.619508][ T7836] Call Trace: [ 98.619513][ T7836] [ 98.619517][ T7836] dump_stack_lvl+0x16c/0x1f0 [ 98.619537][ T7836] should_fail_ex+0x512/0x640 [ 98.619551][ T7836] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 98.619569][ T7836] should_failslab+0xc2/0x120 [ 98.619585][ T7836] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 98.619601][ T7836] ? __d_alloc+0x31/0xaa0 [ 98.619618][ T7836] ? stack_trace_save+0x8e/0xc0 [ 98.619635][ T7836] __d_alloc+0x31/0xaa0 [ 98.619658][ T7836] d_alloc+0x4a/0x1e0 [ 98.619676][ T7836] d_alloc_parallel+0xe3/0x12e0 [ 98.619693][ T7836] ? find_held_lock+0x2b/0x80 [ 98.619708][ T7836] ? __pfx_d_alloc_parallel+0x10/0x10 [ 98.619723][ T7836] ? __d_lookup+0x266/0x4a0 [ 98.619739][ T7836] lookup_open.isra.0+0x665/0x1580 [ 98.619756][ T7836] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 98.619778][ T7836] ? lookup_fast+0x156/0x610 [ 98.619793][ T7836] path_openat+0x893/0x2cb0 [ 98.619813][ T7836] ? __pfx_path_openat+0x10/0x10 [ 98.619832][ T7836] do_filp_open+0x20b/0x470 [ 98.619848][ T7836] ? __pfx_do_filp_open+0x10/0x10 [ 98.619873][ T7836] ? _raw_spin_unlock+0x28/0x50 [ 98.619887][ T7836] ? alloc_fd+0x471/0x7d0 [ 98.619905][ T7836] do_sys_openat2+0x11b/0x1d0 [ 98.619916][ T7836] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.619928][ T7836] ? __fget_files+0x20e/0x3c0 [ 98.619946][ T7836] __x64_sys_open+0x153/0x1e0 [ 98.619957][ T7836] ? __pfx___x64_sys_open+0x10/0x10 [ 98.619970][ T7836] ? rcu_is_watching+0x12/0xc0 [ 98.619986][ T7836] do_syscall_64+0xcd/0x4c0 [ 98.620003][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.620015][ T7836] RIP: 0033:0x7fb3f8b8e929 [ 98.620024][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.620035][ T7836] RSP: 002b:00007fb3f996a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 98.620045][ T7836] RAX: ffffffffffffffda RBX: 00007fb3f8db6080 RCX: 00007fb3f8b8e929 [ 98.620052][ T7836] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 98.620058][ T7836] RBP: 00007fb3f996a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.620064][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.620071][ T7836] R13: 0000000000000000 R14: 00007fb3f8db6080 R15: 00007ffdc81ff9a8 [ 98.620084][ T7836] [ 98.801859][ T40] audit: type=1400 audit(1752757996.479:477): avc: denied { setattr } for pid=7842 comm="syz.3.567" path="/dev/ttyprintk" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 98.906792][ T9] IPVS: starting estimator thread 0... [ 98.963326][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 99.008311][ T7863] kvm: pic: non byte write [ 99.012017][ T7856] IPVS: using max 25 ests per chain, 60000 per kthread [ 99.019221][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 99.137667][ T40] audit: type=1400 audit(1752757996.809:478): avc: denied { write } for pid=7868 comm="syz.4.574" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.465255][ T7880] vxcan1: entered promiscuous mode [ 99.466256][ T40] audit: type=1400 audit(1752757997.139:479): avc: denied { nlmsg_write } for pid=7879 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 99.469029][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 99.473336][ T40] audit: type=1400 audit(1752757997.139:480): avc: denied { audit_write } for pid=7879 comm="syz.1.577" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.482435][ T40] audit: type=1107 audit(1752757997.139:481): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.967094][ T7931] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 100.032697][ T7923] uprobe: syz.4.589:7923 failed to unregister, leaking uprobe [ 100.071757][ T7943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.072487][ T6689] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 100.166061][ T7955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.221632][ T6689] usb 8-1: Using ep0 maxpacket: 32 [ 100.226489][ T6689] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.231885][ T6689] usb 8-1: config 0 interface 0 has no altsetting 0 [ 100.233188][ T7968] fuse: Bad value for 'group_id' [ 100.237903][ T7968] fuse: Bad value for 'group_id' [ 100.241385][ T7968] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 100.244700][ T6689] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 100.247495][ T7968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.247522][ T6689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.261081][ T6689] usb 8-1: config 0 descriptor?? [ 100.440865][ T7995] tipc: Started in network mode [ 100.443114][ T7995] tipc: Node identity ac1414aa, cluster identity 4711 [ 100.447254][ T7995] tipc: Enabled bearer , priority 10 [ 100.456919][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 100.460177][ T8001] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 100.463316][ T8001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8001 comm=syz.2.613 [ 100.472973][ T6689] usbhid 8-1:0.0: can't add hid device: -71 [ 100.474958][ T6689] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 100.479237][ T7995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7995 comm=syz.4.610 [ 100.482475][ T6689] usb 8-1: USB disconnect, device number 21 [ 100.656199][ T8016] ------------[ cut here ]------------ [ 100.658621][ T8016] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 100.662822][ T8016] shift exponent 2048 is too large for 32-bit type 'int' [ 100.667138][ T8016] CPU: 3 UID: 0 PID: 8016 Comm: syz.1.619 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 100.667162][ T8016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.667174][ T8016] Call Trace: [ 100.667182][ T8016] [ 100.667189][ T8016] dump_stack_lvl+0x16c/0x1f0 [ 100.667241][ T8016] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 100.667292][ T8016] pcl812_attach.cold+0x1a/0x1f [ 100.667323][ T8016] comedi_device_attach+0x3b0/0x900 [ 100.667356][ T8016] do_devconfig_ioctl+0x1a7/0x580 [ 100.667386][ T8016] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 100.667431][ T8016] ? find_held_lock+0x2b/0x80 [ 100.667459][ T8016] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 100.667480][ T8016] ? do_raw_spin_unlock+0xb4/0x230 [ 100.667503][ T8016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.667524][ T8016] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 100.667545][ T8016] ? do_vfs_ioctl+0x523/0x1a60 [ 100.667567][ T8016] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.667594][ T8016] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 100.667621][ T8016] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 100.667650][ T8016] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.667684][ T8016] ? hook_file_ioctl_common+0x145/0x410 [ 100.667710][ T8016] ? selinux_file_ioctl+0x180/0x270 [ 100.667743][ T8016] ? selinux_file_ioctl+0xb4/0x270 [ 100.667770][ T8016] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 100.667793][ T8016] __x64_sys_ioctl+0x18e/0x210 [ 100.667819][ T8016] do_syscall_64+0xcd/0x4c0 [ 100.667849][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.667867][ T8016] RIP: 0033:0x7fb3f8b8e929 [ 100.667883][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.667900][ T8016] RSP: 002b:00007fb3f998b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.667918][ T8016] RAX: ffffffffffffffda RBX: 00007fb3f8db5fa0 RCX: 00007fb3f8b8e929 [ 100.667930][ T8016] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 100.667942][ T8016] RBP: 00007fb3f8c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 100.667953][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.667964][ T8016] R13: 0000000000000000 R14: 00007fb3f8db5fa0 R15: 00007ffdc81ff9a8 [ 100.667989][ T8016] [ 100.667996][ T8016] ---[ end trace ]--- [ 100.711302][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.712074][ T8016] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 100.712090][ T8016] CPU: 3 UID: 0 PID: 8016 Comm: syz.1.619 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 100.712116][ T8016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.712129][ T8016] Call Trace: [ 100.712136][ T8016] [ 100.712144][ T8016] dump_stack_lvl+0x3d/0x1f0 [ 100.712174][ T8016] panic+0x71c/0x800 [ 100.712206][ T8016] ? __pfx_panic+0x10/0x10 [ 100.712240][ T8016] ? __pfx__printk+0x10/0x10 [ 100.712270][ T8016] check_panic_on_warn+0xab/0xb0 [ 100.712290][ T8016] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 100.712334][ T8016] pcl812_attach.cold+0x1a/0x1f [ 100.712364][ T8016] comedi_device_attach+0x3b0/0x900 [ 100.712398][ T8016] do_devconfig_ioctl+0x1a7/0x580 [ 100.712429][ T8016] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 100.712491][ T8016] ? find_held_lock+0x2b/0x80 [ 100.712522][ T8016] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 100.712548][ T8016] ? do_raw_spin_unlock+0xb4/0x230 [ 100.712573][ T8016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.712596][ T8016] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 100.712618][ T8016] ? do_vfs_ioctl+0x523/0x1a60 [ 100.712640][ T8016] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 100.712667][ T8016] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 100.712696][ T8016] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 100.712731][ T8016] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 100.712767][ T8016] ? hook_file_ioctl_common+0x145/0x410 [ 100.712794][ T8016] ? selinux_file_ioctl+0x180/0x270 [ 100.712819][ T8016] ? selinux_file_ioctl+0xb4/0x270 [ 100.712847][ T8016] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 100.712872][ T8016] __x64_sys_ioctl+0x18e/0x210 [ 100.712896][ T8016] do_syscall_64+0xcd/0x4c0 [ 100.712926][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.712946][ T8016] RIP: 0033:0x7fb3f8b8e929 [ 100.712962][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.712980][ T8016] RSP: 002b:00007fb3f998b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.713000][ T8016] RAX: ffffffffffffffda RBX: 00007fb3f8db5fa0 RCX: 00007fb3f8b8e929 [ 100.713014][ T8016] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 100.713027][ T8016] RBP: 00007fb3f8c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 100.713038][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.713049][ T8016] R13: 0000000000000000 R14: 00007fb3f8db5fa0 R15: 00007ffdc81ff9a8 [ 100.713074][ T8016] [ 100.714741][ T8016] Kernel Offset: disabled VM DIAGNOSIS: 13:13:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000172335 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fef9385bf98 CR3=00000000331f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92b86488 00007fef92b86480 00007fef92b86478 00007fef92b86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef936ed100 00007fef92b86440 00007fef92b86458 00007fef92b864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92b86498 00007fef92b86490 00007fef92b86488 00007fef92b86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006800000 RBX=ffff888029870000 RCX=ffffffff819ca957 RDX=1ffff1100530e25a RSI=ffffffff86a87aef RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a98460 R13=dffffc0000000000 R14=ffff8880298712d0 R15=0000000000000000 RIP=ffffffff86a87b17 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f584b CR3=00000000331f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92a11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92b86488 00007fef92b86480 00007fef92b86478 00007fef92b86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef936ed100 00007fef92b86440 00007fef92b86458 00007fef92b864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fef92b86498 00007fef92b86490 00007fef92b86488 00007fef92b86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=e8aa8c96731f6800 RBX=ffffffff8e5c4e00 RCX=ffffc900000f72fc RDX=0000000000000004 RSI=ffffffff8de0d975 RDI=ffffffff8c158f60 RBP=0000000000000001 RSP=ffffc900000f72f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000003e20a R12=ffffffff816adac4 R13=0000000000000206 R14=ffff88801ce9c880 R15=0000000000000005 RIP=ffffffff819884e3 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37da69 CR3=0000000053557000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd36ce23f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7412611df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc900236ff4c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb3f998b6c0 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c398d42 CR3=000000003c585000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc81ffd30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3f8c11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000