last executing test programs: 54.772334437s ago: executing program 0 (id=805): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x42) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d75eff653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) 53.872972396s ago: executing program 0 (id=813): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1e0}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 53.783616858s ago: executing program 0 (id=814): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 53.667817303s ago: executing program 0 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0xff03, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0x0, 0x7, 0x1, 0x7}) 53.523480035s ago: executing program 0 (id=819): mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000008c0)={0x100084, 0x8}, 0x20) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00=\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000c0002000000"], 0x34}}, 0x0) 52.838994563s ago: executing program 0 (id=823): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) syz_pidfd_open(r1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40101, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0x3ffc}) 52.448833426s ago: executing program 32 (id=823): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) syz_pidfd_open(r1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40101, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0x3ffc}) 4.087936019s ago: executing program 3 (id=1207): syz_emit_ethernet(0x9e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000680600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00401049078000013125a213255fc14f131de9a65cf2bec6042fe06e2d4c3d9fe13f9893cca39fd810b37fec0a178de23ac972212286406481100973ca4458d8ee4506a52859b6a8873491e0bb0c3fffffe7983fd8ab0ff0003ca010504123d05"], 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x1000000000003b) (async) shutdown(r1, 0x2) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(r5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000840)={0x0, 0x6, 0xc, 0x5, 0x6, 0xfe, 0x55, 0x8, 0x1, 0x4, 0x80, "91ce638d01850fe58317c00768dcd35b7b73b146825afb9852078088dd14c3d4"}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x912, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7d1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r6}, &(0x7f00000014c0), &(0x7f0000001500)=r5}, 0x20) (async) close(0x3) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) getpeername$packet(r9, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl1\x00', r10, 0x0, 0x80, 0xfff, 0xfffffffc, {{0x17, 0x4, 0x2, 0x3d, 0x5c, 0x67, 0x0, 0x6, 0x29, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x3, 0xb}, @cipso={0x86, 0x42, 0xfffffffffffffffe, [{0x7, 0xb, "ac678c04c6917cb97a"}, {0x0, 0xa, "e029e374170176ec"}, {0x6, 0x7, "37da0d6d1e"}, {0x0, 0xc, "923dc6e206771e37c789"}, {0x0, 0x3, "cc"}, {0x2, 0x11, "e739a79c9d969356dff5bf4990a3e3"}]}, @end]}}}}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x29}, 0x1c) (async) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) migrate_pages(r2, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 3.872592835s ago: executing program 3 (id=1210): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0xb5315241, 0x7, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) setreuid(0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x9, &(0x7f00000000c0)={0x9, 0x3, 0x1000001}) process_vm_readv(r1, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/154, 0x9a}], 0x8, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/106, 0x6a}], 0x2, 0x0) ptrace(0x4208, r2) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 3.669605775s ago: executing program 3 (id=1211): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1e0}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.78444832s ago: executing program 3 (id=1213): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={0x0, 0x1b8}, 0x1, 0x0, 0x0, 0x40041}, 0x20000010) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x8, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x4, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) 2.518988711s ago: executing program 2 (id=1215): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0xa4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b80)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(0xffffffffffffffff) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) sendto$inet(r5, &(0x7f0000000180)="1eac4acea926ff8cea5bae5943e203531934e7932f5f42d4a7a12413e341591e8acd0b1e37d78b4f5fdc1976f362d92da98d057bd6116d75012912a9628ab3c3b9ed1753f84005fa048f631b57748c71cf1f7c06", 0x54, 0x8000000, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x8a940) ioctl$EVIOCSABS2F(r6, 0x401845ef, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb", 0x20}, {&(0x7f00000003c0)="d95e4e766eebf92f5bb0d07ae42461121fdbd5c951274027bdb2818365bc317dc9930c7428fd71bab4e367f6338007ba804ec475b5870002f2e54cf285a6536e286a417d585c0008000000000000f0a24bebcab75e17a53326be5162206fbfcbb321210a2a09997f291bd742d1b63341ab0fe47c88ea4313c0afdbe14e21d0772b6243e93399602077b6c268b970895f065ec83e3a26272ffc23d8d31bd758cba5b6a0ac2c6feddcc12890a53ec8da9ebf799df6e3c5211af4698577f0905970e41fbdc5f0c05ef36708131bf36e058e5382c892d58479cc6b0e22203278bcf2", 0xe0}], 0x2}}], 0x1, 0x20048851) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00007fe9ff0f0109050b362e0000000000000000000000000000fd0c83d239c5ce4fdbf1e0e8769449361067c4bfb4f7aa6f251297acfb7e05e202a5b19d1cd51b45b47036c1877931d4f7b6d3fa33a6ff603b3445bc9ce761ebdbfc526df0fcf1d7145b8fa2062bf8e18669bf", @ANYRESDEC=r0], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3fffc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r10, r11}, 0xc) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) 2.016232913s ago: executing program 4 (id=1218): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x1, @capture={0x0, 0x1, {0x3, 0x1}, 0x1, 0x1}}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') (async) r2 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x0) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 32) readlinkat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) (rerun: 32) 1.825855272s ago: executing program 4 (id=1220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000080), 0x800400, 0x0) 1.702855021s ago: executing program 1 (id=1221): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1e0}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.571738429s ago: executing program 4 (id=1222): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730480538d129103721cb6c6e44cb44679576a3d6b0", 0x60}], 0x2}], 0x1, 0x40800) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10010008, 0x0, 0x8}}, 0x50) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000000480)) creat(&(0x7f00000001c0)='./file0\x00', 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000180)=""/239, 0xef}], 0x2}, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r1], 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000002c0)={&(0x7f0000000200)=[r1], 0x6, 0x1}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000600)={0x110, 0x0, r7, [{0x2, 0x4, 0x7, 0x2ef, '/-,*%/]'}, {0x6, 0x84, 0x1, 0x7, '\x00'}, {0x5, 0x0, 0xa, 0x9, 'syzkaller\x00'}, {0x1, 0x915b, 0xa, 0x6, '/dev/fuse\x00'}, {0x0, 0x0, 0xa, 0xf, '/dev/fuse\x00'}, {0x4, 0xc, 0x5, 0xfffffff9, '&}\'\'^'}, {0x5, 0x9, 0xf, 0x4, '/dev/dri/card#\x00'}]}, 0x110) 1.000224592s ago: executing program 2 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r1, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb25, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x20000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) 869.083737ms ago: executing program 2 (id=1224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newtclass={0x3c, 0x28, 0x300, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x7, 0x6}, {0xb, 0xfff2}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000100)={@default, @default}) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0xc0000) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$int_out(r0, 0x5462, &(0x7f0000000240)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x110, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3023}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7378}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x360}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1051}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4884}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00'}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000580)=0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000a80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x3a4, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x33a, 0x2a, [@random_vendor={0xdd, 0xb8, "532d40e544bb6cb79c7263535e4376f040d2eb43235b6499cc5af239a2203f5f6f4c794d0b1d9817f368fc08cd7092c8b45383c75ef2b450fac9e0f4778e78e2451dee9767e43458562b0afff0cb1e130483e1f0c4353ca24dd51a79f891b1ad18581c727b1daafd232f6b481803511e33642164492645b57916b259e78bdb3dd71ff78d3618d68119d0fce976c4b21d6c03d5a8202b94806e78bca31a0129f8e113ac8436199c327eeb8481fa6b8d9b7354d956a2feff3f"}, @prep={0x83, 0x1f, {{}, 0x81, 0x4, @broadcast, 0xfffffff9, @void, 0x4}}, @chsw_timing={0x68, 0x4, {0x5, 0x4}}, @random_vendor={0xdd, 0x84, "b15ca3994b185a7203ef794ded209155a72ddb7a4ccee7c1cdaa135bcb5f1e0b6d79428dcd73c8dc4f81bbbb862f30add7ff2427ff35ff0b448c3b94a1abe145735f70a469c57248cfc42d707ba78fc1110d659b3faaf0d547266ec3023078257e302c7a13ff5341212b37926ef542b89aeb675adf688265f841f7ffdddc78927cd6caed"}, @random={0x5, 0x78, "b7085dc91adb46eb9597923e0068c650450c8361d3f4bb6fcbda73fd24aabc8ee5356727cc84a9898eef24650bcf9742ca6356d28496539a0e46f1961c99608370ddcfaa66ee383b0b235513d91920b19a2fca84963bd4efc2a015b46c1a48a691765495b4479c8ee365693ff04a633512e8be8e91676564"}, @prep={0x83, 0x1f, {{}, 0x40, 0x7, @broadcast, 0xffffff46, @void, 0xc37, 0x5, @device_b, 0x2}}, @measure_req={0x26, 0xb3, {0x10, 0x6, 0x1, "ba98cabffc5411acf73c73be6191f2d936e1007ad67ea282110a9dc42c52d559cc5d15601e50a8a1c855036002c55ea89b97845abaf9440faed8c7aaf5c253862f8b2c3a46238cddca920e51f1167f98d2dc45176640edf1feaaec7fd7bfd5ce5ce38f996f5cf685f2516390303a8411d9b63ad85e624257317d01e798e5253345e0882c6a7fb45aa1ad1d6d5c445ce88432aeacb780c10e401abc90efb9f5d3fb85229d5c6f6c7b588e923664f41756"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x2, "8bee3418a27aec1847d2b39f638c8694", "dcf1b602bfb78a497810946ab737d489260e8804732a6e92600a146647e0d853", "77f656e1cad462d6d4b55792661c26f2974982d64c300a8c809a7eee98243d57", [{0x3, 0x6, "8ced32fd41a3"}, {0x4, 0xa, "8b578be5bea77d87a8d8"}]}}, @rann={0x7e, 0x15, {{0x1, 0x75}, 0x20, 0x1b, @device_a, 0xaf, 0x4, 0x1}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_IE={0x22, 0x2a, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x14, {0x0, 0x9, @void, @void, @val="d4d7d9be4f1fa28e8be5540857f47398"}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x40891}, 0x40000) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x8, 0x1a843fc4}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000ec0)={r6, "911e65309573cc70e4e123ab0cfce6de"}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001ec0)=0x0) fcntl$lock(r2, 0x24, &(0x7f0000001f00)={0x2, 0x0, 0x1, 0x8000000000000000, r7}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000001f40)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001fc0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000002200)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002000)={0x1bc, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x42, 0xa9, @random="dbdf142b75a0bf48af0f13c7f82fa285f3a14110b17e78d92f14ff733de699261dc6c142e2923f81d80fc79c300db905b8dbd780116ba10d2846b3f9b12e"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xdf, 0xa9, @random="80cef337eee19df9e9e1451fb7dc4ca6162f05b7db728093ce1e44bdc9bc1b08a0e19dbd14610fbb9d68120ac16ce7656ffb095be41bfdadc48356a1154c7624f2635431381e7ad98ea95caaea636dee6b5c7c2e6d48864f0d75245901b1ba792d7b9553cbf1500f04768b98224d05f6ec7099caf7858292e36e4e4651881f25cd261fdfd506617a47f71d5351a331624dd5447d8139fceb74d7be172d6c1db251bbd098ed2ca15ae821fd7656c6b9f135b46559e6716ebb66ed37b3435f6c39330f1b5dfe32b555f7a0710d1f3f46692001d5ae6fb872ca3a34d2"}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20040000}, 0x1000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000002240)) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000002280)=0x1, 0x4) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000022c0)='./file0\x00', 0x5) rename(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)='./file0\x00') sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0xb0, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) 850.932356ms ago: executing program 1 (id=1225): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 847.075127ms ago: executing program 2 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) close(r2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r4, 0x0, &(0x7f0000001b40)) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 's\x05\x00\\\x00ller\x00', 0x3a, 'Sy\x00[\xea\xe1lq\x00\x00\x00\x002#', 0x3a, './file0', 0x3a, [0x46]}, 0x40) truncate(&(0x7f0000000040)='./file0\x00', 0x600) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = getpid() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x10, r6}) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x0, 0xffffffffffffffff) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1, r1, 0x1, 0x6, 0x6, @random="8c4fed1a44ca"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100677470000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) 656.029463ms ago: executing program 1 (id=1227): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) 655.729681ms ago: executing program 2 (id=1228): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001580)=""/4108, 0x100c) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 64) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read(r1, &(0x7f0000000140)=""/73, 0x49) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x70594000) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x77}, "d10a5a8c8a6f8cc0553d7169211562f5a014aa3773572374d5f1b6d912e13705e76b879257dca282f6955f8be62ea6df5f2a907013188ae2925e6a1fe456859aa77ab32065697f3df194e6817d7f201761948b0003ca53bfdb8ad469ab265065da6f19bc513cf26af7158ad9ddc19b8d3cae70936d3f23"}, 0x7b) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1bdb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb051}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x98}}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 655.174227ms ago: executing program 3 (id=1229): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000080)={{r4}, "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"}) (async) r5 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r7, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="50a2f6076a3f"}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x15c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8221ec3ae73d"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xf8, 0x84, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xe}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9e}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) ppoll(&(0x7f0000000e80)=[{r5, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0) 654.020507ms ago: executing program 4 (id=1230): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)={r0, 0x8, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)={r0, 0x8, 0x7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) (async) 481.312755ms ago: executing program 3 (id=1231): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0x89, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}], 0x1c) sendmsg$inet_sctp(r0, 0x0, 0x1) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x10, "02e10fba070ee9af99b79cfdd2370e7c"}, &(0x7f0000000180)=0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x500, 0x4000000, 0x0, 0x3, 0x0, &(0x7f0000000580)="59c3c9"}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109026a00020102a07f0904000001020d00000b240600011b9e2abef4c10524008f090d240f0105000000000001004106241a00002108241c010002620209058103400005020f0904010000020d00000904010102020d0000090582020800020724180beecf41a422f410"], &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x4, 0x9, 0x4, 0xff, 0x4}, 0x2b, &(0x7f0000000300)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x5, 0x9e, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb7, 0x9, 0x2, 0x6, 0x70}, @ssp_cap={0x10, 0x10, 0xa, 0xce, 0x1, 0x5, 0x0, 0x5, [0xdf80]}]}, 0x5, [{0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="8103480e6b1284f51974d0a5aa9d6470565baad17842b2be6cdc6fe3f51b4926de78aa358b4239b4be91f1ab1076ba1c8e6566e3aebaaf62cee6e2a30876920a0000ef9fde73102e7ea974d4f95839f312f841ed4239da2b11bd24a4aca9c527f6ee53c63c163270718a538fcb4adc826a3a316514139b91a2fca364e0f1b8e84d"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2801}}, {0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="37030000caf92352e3086b8931ae59989e623810886bc22ff033b9a7d8fcdf2eab90fd6b25a9f38af7ebef3ab6ae3d17920359af67282c"]}, {0x98, &(0x7f0000000640)=ANY=[@ANYBLOB="9803babb57e7cf6154855a7d7878a2b8731ee45fd6ebad0467b4450ff6853c6a81ebfe6d955c7b139d2ac761a917af7d693a220f5385638926d9a2f1d85813b7cd91c28f39046a9376d7a2dafeaf1cc37f64a7189b40c23c35255e0cdd7050e1457ee62d38d4a5563e90db2b145f31297fc0ecfad9d3a259c1398f35e0358d2feff546f6d2f4653f"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_disconnect(r8) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000000)={'dt2814\x00', [0x260, 0xfffffff9, 0x1000, 0x8, 0x9, 0x3, 0x5980e5e2, 0x6, 0x8b, 0xc, 0x7, 0x6, 0x8, 0x4, 0x4, 0x0, 0x1, 0x7, 0x10004, 0x7, 0x10, 0x5, 0x10000, 0x6, 0xfffffffd, 0x6, 0xffffffff, 0x3, 0x54, 0x8, 0x4]}) ioctl$SIOCSIFHWADDR(r7, 0x891d, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="fd2f9087586543c4885b097ef187090149e7bc5fcddfa14687126b6699732ee55c59b4b17c88064130e20a00d0ad5ec358f56c8a327d3e430d93ecd226a3fc7bc6d278604d600cc4372c2a1d8ad69e99f92df1222fecb1914bcaad0a464f0cb122a3166164e8378fa648c39b77b2fe3016403598d34725f8e899bd40925f1ab5d1879706c7964136bb5baef067b52dbb8660d8ed5761723f07f3e0bcbe5229c9bdf70cc4ded1562ea457537e43449672dab2b1e0ce9cab1f7b93f93a5c4774fb288e47c47610bc715851a431458c12c3817aadbf3e6755c19fb88c1c5ba8391cf58fe706ef176682865dad5d76a882f0", @ANYBLOB="b6b4c0934f50fc944a1e8878888918a0a18560b4f11edd0cdd8ccb42442e8c0654aaa190be5c7d0cdfc42e6ea22d9010ce25aecb198c99e6abda85f9befcd2d98be406d022a7a55a79d9d4c2c28687e76d6ed5460130cd2722f7588c3117908b4d79fe9cdea38a122eb8caf52d44a6f86fbd"], 0x3c}}, 0x0) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x52) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r10) 480.346494ms ago: executing program 1 (id=1232): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (rerun: 64) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x104) linkat(r7, &(0x7f0000000000)='./file0\x00', r9, &(0x7f0000000140)='./file0\x00', 0x1400) recvfrom(r8, 0x0, 0x0, 0x101, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010000410000000000000001000000040001"], 0x18}}, 0x0) 478.941284ms ago: executing program 2 (id=1233): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1e0}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 312.441597ms ago: executing program 4 (id=1234): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8480, 0x0) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000080)={0x2}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffff) 197.496376ms ago: executing program 1 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 126.742221ms ago: executing program 1 (id=1236): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'netpci0\x00', {}, 0x44}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 0s ago: executing program 4 (id=1237): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b5112f05d0a104bfdea6724efdf02d6394a2aa7c6863c9cf488308309682cc8bcf6a8f2334e86f732f3391bb9e8121a298617abb5cb2eca893d797a654b7d88ffa66f9580e3ca29f3dc7b3502cfe49a3368c463408fac22aa6efca256ddb0085204c452c06b0a2b194f31aa00a4d923a798b407c4ed082205bf19bf2bef45b8f2bbe36cc37ecc2db2d0324340dfd2be301d96115ae7fd965f2bab2ad83437ba6f28647208262b2d8a4d9c6fd2186acccf5d433a40b347cf75b9b954dbf699624eba6ef3c1f559dc814c6322f10a91a7046", 0xd1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="62d13909cacaa195c6e7bad5029580bda8a04d68fcdf42b12800341affbaf27a69e3e846ab40c04d51ab96e0822a12a38472313fe128164a399359c0814fde5d30034c375d87164432125241a2b150b4e93fac869c25ad97cbd5c91f1c99b98a160b1964841f8e43a33b3fcdb7921b82ab348884f9efc6da70a622f8052c1ae61e972a0068812d2278e2437aacf9237c9dfc41c39533b039147b48de97dbce2e9c94cf761ff8c342c044c6cb10b6d49885e0ded955a99d6604fa84c4d49967802329a6545f", 0xc5, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, r2, r6}, &(0x7f0000000500)=""/225, 0xe1, &(0x7f0000000440)={&(0x7f00000003c0)={'cryptd(sha224-asm)\x00'}, &(0x7f0000000400)}) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r7, 0x0, &(0x7f0000000640)='syz\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d6673"]) kernel console output (not intermixed with test programs): ocess `syz.2.564'. [ 174.835542][ T8015] overlayfs: missing 'lowerdir' [ 174.847759][ T40] audit: type=1400 audit(1757385122.726:515): avc: denied { map } for pid=8016 comm="syz.3.562" path="socket:[21730]" dev="sockfs" ino=21730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.872413][ T40] audit: type=1400 audit(1757385122.726:516): avc: denied { read } for pid=8016 comm="syz.3.562" path="socket:[21730]" dev="sockfs" ino=21730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.178356][ T8039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.569'. [ 175.199593][ T8039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.569'. [ 175.227546][ T8039] netlink: 84 bytes leftover after parsing attributes in process `syz.2.569'. [ 175.349615][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.597622][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.697785][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.805521][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 175.805539][ T40] audit: type=1400 audit(1757385123.716:521): avc: denied { listen } for pid=8054 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.213910][ T40] audit: type=1400 audit(1757385124.126:522): avc: denied { read write } for pid=8065 comm="syz.2.577" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.235844][ T40] audit: type=1400 audit(1757385124.126:523): avc: denied { open } for pid=8065 comm="syz.2.577" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.278506][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.279325][ T40] audit: type=1400 audit(1757385124.126:524): avc: denied { map } for pid=8065 comm="syz.2.577" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.318846][ T8074] netlink: 'syz.0.579': attribute type 21 has an invalid length. [ 176.340354][ T8074] netlink: 152 bytes leftover after parsing attributes in process `syz.0.579'. [ 176.357361][ T40] audit: type=1400 audit(1757385124.126:525): avc: denied { execute } for pid=8065 comm="syz.2.577" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.357412][ T40] audit: type=1400 audit(1757385124.146:526): avc: denied { mount } for pid=8070 comm="syz.3.578" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 176.357447][ T40] audit: type=1400 audit(1757385124.146:527): avc: denied { unmount } for pid=8070 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 176.357509][ T40] audit: type=1400 audit(1757385124.236:528): avc: denied { bind } for pid=8072 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.386442][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.400281][ T40] audit: type=1400 audit(1757385124.316:529): avc: denied { ioctl } for pid=8070 comm="syz.3.578" path="socket:[22882]" dev="sockfs" ino=22882 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.441687][ T5986] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 176.442461][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'. [ 176.477585][ C1] vkms_vblank_simulate: vblank timer overrun usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 176.808006][ T40] audit: type=1400 audit(1757385124.706:530): avc: denied { ioctl } for pid=8084 comm="syz.0.583" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 176.844908][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.878960][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.942497][ T8099] netlink: 'syz.3.586': attribute type 15 has an invalid length. [ 176.999443][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.586'. [ 177.043615][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.065319][ T8107] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 177.103081][ T8107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.170284][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 177.180482][ T8107] bond1: (slave geneve2): making interface the new active one [ 177.215033][ T8107] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.242523][ T8114] bond1: entered promiscuous mode [ 177.265481][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.313586][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.313596][ T8114] geneve2: entered promiscuous mode [ 177.333944][ T8119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8119 comm=syz.1.590 [ 177.539310][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.569499][ T8127] bridge0: port 3(dummy0) entered disabled state [ 177.665249][ T8127] dummy0 (unregistering): left allmulticast mode [ 177.670654][ T8127] bridge0: port 3(dummy0) entered disabled state [ 177.731588][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.740620][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.744148][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.748960][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.756973][ T8134] netlink: 'syz.0.595': attribute type 7 has an invalid length. [ 177.792946][ T8142] bridge0: entered promiscuous mode [ 177.803779][ T8142] macsec1: entered promiscuous mode [ 177.808860][ T8142] bridge0: port 3(macsec1) entered blocking state [ 177.814294][ T8142] bridge0: port 3(macsec1) entered disabled state [ 177.819842][ T8142] macsec1: entered allmulticast mode [ 177.822196][ T8142] bridge0: entered allmulticast mode [ 177.833249][ T8142] macsec1: left allmulticast mode [ 177.835965][ T8142] bridge0: left allmulticast mode [ 177.852938][ T8142] bridge0: left promiscuous mode [ 177.872923][ T8145] ufs: You didn't specify the type of your ufs filesystem [ 177.872923][ T8145] [ 177.872923][ T8145] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 177.872923][ T8145] [ 177.872923][ T8145] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 177.896224][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.900531][ T8145] ufs: ufstype=old is supported read-only [ 177.908032][ T8145] nbd_handle_cmd: 2 callbacks suppressed [ 177.908052][ T8145] block nbd2: Attempted send on invalid socket [ 177.914523][ T8145] blk_print_req_error: 2 callbacks suppressed [ 177.914540][ T8145] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.079188][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.129590][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.209581][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.297612][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.326398][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 178.881565][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.001594][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.081605][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.124077][ T8186] __nla_validate_parse: 62 callbacks suppressed [ 179.124096][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 179.131985][ C0] vcan0: j1939_session_tx_dat: 0xffff8880475fa400: queue data error: -100 [ 179.204806][ T8191] validate_nla: 24 callbacks suppressed [ 179.204826][ T8191] netlink: 'syz.2.609': attribute type 3 has an invalid length. [ 179.214546][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 179.247790][ T8174] erofs (device nbd0): cannot find valid erofs superblock [ 181.993744][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.244768][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.796598][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.127207][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.797531][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.963969][ T8220] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 192.973743][ T8220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.611'. [ 193.129417][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.556192][ T6047] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.677492][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.759727][ T8246] ALSA: seq fatal error: cannot create timer (-19) [ 193.785790][ T6047] usb 8-1: Using ep0 maxpacket: 32 [ 193.805111][ T6047] usb 8-1: config 0 has an invalid interface number: 247 but max is 0 [ 193.820147][ T6047] usb 8-1: config 0 has no interface number 0 [ 193.831631][ T6047] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 193.842327][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 193.847896][ T6047] usb 8-1: Product: syz [ 193.851631][ T6047] usb 8-1: Manufacturer: syz [ 193.878726][ T6047] usb 8-1: config 0 descriptor?? [ 194.262951][ T6047] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 194.432708][ T6047] usb 7-1: device descriptor read/64, error -71 [ 194.473882][ T8265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.511744][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.689469][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.702602][ T6047] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 194.884515][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.915281][ T8265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.922386][ T6047] usb 7-1: device descriptor read/64, error -71 [ 194.945566][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.981421][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.057360][ T6047] usb usb7-port1: attempt power cycle [ 195.241325][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 195.241342][ T40] audit: type=1804 audit(1757385143.146:533): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.624" name="file0" dev="ramfs" ino=20305 res=1 errno=0 [ 195.274422][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 195.289718][ T8265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.329845][ T6051] usb 8-1: USB disconnect, device number 8 [ 195.415875][ T6047] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 195.451676][ T8265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.461658][ T6047] usb 7-1: device descriptor read/8, error -71 [ 195.556707][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 195.560615][ T8288] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 195.564547][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.609850][ T91] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.655837][ T91] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.674301][ T91] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.692998][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.710449][ T6047] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 195.744510][ T6047] usb 7-1: device descriptor read/8, error -71 [ 195.856224][ T6047] usb usb7-port1: unable to enumerate USB device [ 196.323563][ T8308] NILFS (loop0): device size too small [ 196.501510][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.581471][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.649371][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.839172][ T8320] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 196.841733][ T40] audit: type=1400 audit(1757385144.746:534): avc: denied { read } for pid=8319 comm="syz.3.632" laddr=::ac14:14aa lport=33045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.074936][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.121948][ T8337] fuse: Unknown parameter 'g`oup_id' [ 197.142887][ T8337] fuse: Unknown parameter 'gro' [ 197.172883][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 197.231089][ T8346] tipc: Started in network mode [ 197.238708][ T8346] tipc: Node identity , cluster identity 4711 [ 197.241069][ T8346] tipc: Failed to set node id, please configure manually [ 197.254996][ T8346] tipc: Enabling of bearer rejected, failed to enable media [ 197.579121][ T8362] ALSA: seq fatal error: cannot create timer (-19) [ 197.813521][ T8372] usb usb8: check_ctrlrecip: process 8372 (syz.2.647) requesting ep 01 but needs 81 [ 197.844471][ T8372] usb usb8: usbfs: process 8372 (syz.2.647) did not claim interface 0 before use [ 197.851745][ T8377] usb usb8: check_ctrlrecip: process 8377 (syz.2.647) requesting ep 01 but needs 81 [ 197.862660][ T8377] usb usb8: usbfs: process 8377 (syz.2.647) did not claim interface 0 before use [ 198.007969][ T8385] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.649'. [ 198.028565][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.056833][ T8385] vcan0: entered allmulticast mode [ 198.066242][ T6051] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.066266][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.089039][ T8389] overlayfs: workdir and upperdir must be separate subtrees [ 198.217739][ T6051] usb 5-1: device descriptor read/64, error -71 [ 198.228441][ T8399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12208 sclass=netlink_route_socket pid=8399 comm=syz.3.653 [ 198.231305][ T8397] mmap: syz.1.652 (8397) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.251910][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 198.329772][ T8401] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 198.442419][ T40] audit: type=1400 audit(1757385146.356:535): avc: denied { append } for pid=8402 comm="syz.2.655" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 198.475840][ T6051] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.503662][ T40] audit: type=1400 audit(1757385146.416:536): avc: denied { name_bind } for pid=8402 comm="syz.2.655" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 198.525391][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.560079][ T40] audit: type=1400 audit(1757385146.446:537): avc: denied { node_bind } for pid=8402 comm="syz.2.655" saddr=10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 198.606467][ T6051] usb 5-1: device descriptor read/64, error -71 [ 198.641357][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.697334][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.726991][ T6051] usb usb5-port1: attempt power cycle [ 198.761356][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.066734][ T6051] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.099040][ T6051] usb 5-1: device descriptor read/8, error -71 [ 199.231107][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.249924][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.308849][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.356934][ T6051] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.393530][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.404508][ T6051] usb 5-1: device descriptor read/8, error -71 [ 199.526108][ T6051] usb usb5-port1: unable to enumerate USB device [ 199.675938][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.848203][ T40] audit: type=1400 audit(1757385147.766:538): avc: denied { nlmsg_read } for pid=8448 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.073534][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 200.245403][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.266464][ T8460] netlink: 'syz.2.669': attribute type 32 has an invalid length. [ 200.325395][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.553400][ T40] audit: type=1400 audit(1757385148.466:539): avc: denied { sqpoll } for pid=8466 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.633995][ T839] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 200.809448][ T839] usb 7-1: Using ep0 maxpacket: 32 [ 200.814502][ T839] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.838233][ T839] usb 7-1: config 0 has no interface number 0 [ 200.841849][ T839] usb 7-1: too many endpoints for config 0 interface 1 altsetting 208: 72, using maximum allowed: 30 [ 200.868399][ T839] usb 7-1: config 0 interface 1 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 200.884304][ T839] usb 7-1: config 0 interface 1 has no altsetting 0 [ 200.897816][ T839] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 200.906486][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.911418][ T839] usb 7-1: Product: syz [ 200.918315][ T839] usb 7-1: Manufacturer: syz [ 200.923512][ T839] usb 7-1: SerialNumber: syz [ 200.937380][ T839] usb 7-1: config 0 descriptor?? [ 201.165421][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.234135][ T8462] netlink: 830 bytes leftover after parsing attributes in process `syz.2.669'. [ 201.709447][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.741390][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.757762][ T40] audit: type=1400 audit(1757385149.666:540): avc: denied { remount } for pid=8484 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 201.913648][ T40] audit: type=1400 audit(1757385149.826:541): avc: denied { unlink } for pid=8488 comm="syz.0.676" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 201.943590][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.978972][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.984076][ T40] audit: type=1400 audit(1757385149.836:542): avc: denied { remount } for pid=8488 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 202.039747][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.555550][ T8503] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 202.568783][ T40] audit: type=1400 audit(1757385150.466:543): avc: denied { mounton } for pid=8499 comm="syz.1.679" path="/156/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 202.600780][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.631197][ T40] audit: type=1400 audit(1757385150.526:544): avc: denied { mount } for pid=8499 comm="syz.1.679" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 202.673459][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.789255][ T8506] ALSA: seq fatal error: cannot create timer (-19) [ 202.869388][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.969338][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.195964][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 203.227926][ T40] audit: type=1400 audit(1757385151.146:545): avc: denied { unmount } for pid=5990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 203.265489][ T839] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 203.285868][ T839] usb 7-1: selecting invalid altsetting 1 [ 203.289030][ T839] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.304365][ T839] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.309236][ T839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 203.313989][ T839] usb 7-1: media controller created [ 203.338369][ T24] usb 8-1: device descriptor read/64, error -71 [ 203.350710][ T839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.408247][ T839] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 203.411785][ T839] zl10353_read_register: readreg error (reg=127, ret==-71) [ 203.416511][ T839] usb 7-1: selecting invalid altsetting 0 [ 203.420232][ T839] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 203.476483][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 203.538818][ T839] usb 7-1: USB disconnect, device number 13 [ 203.554183][ T40] audit: type=1400 audit(1757385151.456:546): avc: denied { write } for pid=8525 comm="syz.0.684" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 203.596729][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 203.657039][ T40] audit: type=1326 audit(1757385151.576:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.2.685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090918ebe9 code=0x7ffc0000 [ 203.670058][ T40] audit: type=1326 audit(1757385151.586:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8529 comm="syz.2.685" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f090918d550 code=0x7ffc0000 [ 203.737276][ T24] usb 8-1: device descriptor read/64, error -71 [ 203.742343][ T1151] Bluetooth: Error in BCSP hdr checksum [ 203.743331][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.814124][ T8540] tmpfs: Bad value for 'mpol' [ 203.856020][ T24] usb usb8-port1: attempt power cycle [ 204.217854][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 204.238083][ T24] usb 8-1: device descriptor read/8, error -71 [ 204.296916][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.481915][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.692'. [ 204.489764][ T8560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.692'. [ 204.517574][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 204.579532][ T8564] program syz.1.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.586568][ T24] usb 8-1: device descriptor read/8, error -71 [ 204.591716][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.694'. [ 204.636379][ T8566] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 204.700516][ T24] usb usb8-port1: unable to enumerate USB device [ 204.843325][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.775937][ T5986] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.939071][ T8596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8596 comm=syz.1.703 [ 206.087673][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.102222][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.116427][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.147135][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 206.147151][ T40] audit: type=1400 audit(1757385154.056:593): avc: denied { bind } for pid=8597 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.150857][ T8598] Unsupported ieee802154 address type: 0 [ 206.325849][ T840] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 206.467947][ T840] usb 8-1: device descriptor read/64, error -71 [ 206.735847][ T840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 206.756010][ T6047] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 206.874837][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.925833][ T840] usb 8-1: device descriptor read/64, error -71 [ 206.955897][ T6047] usb 7-1: Using ep0 maxpacket: 32 [ 206.960055][ T6047] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 206.971203][ T6047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.979502][ T6047] usb 7-1: config 0 descriptor?? [ 207.011425][ T6047] as10x_usb: device has been detected [ 207.022348][ T6047] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 207.039096][ T840] usb usb8-port1: attempt power cycle [ 207.060236][ T6047] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 207.116947][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.124230][ T40] audit: type=1400 audit(1757385155.036:594): avc: denied { firmware_load } for pid=6047 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 207.142263][ T6047] as10x_usb: error during firmware upload part1 [ 207.148943][ T6047] Registered device nBox DVB-T Dongle [ 207.213080][ T6051] usb 7-1: USB disconnect, device number 14 [ 207.247723][ T6051] Unregistered device nBox DVB-T Dongle [ 207.251258][ T6051] as10x_usb: device has been disconnected [ 207.383518][ T840] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 207.407806][ T840] usb 8-1: device descriptor read/8, error -71 [ 207.657784][ T840] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 207.687688][ T840] usb 8-1: device descriptor read/8, error -71 [ 207.837915][ T840] usb usb8-port1: unable to enumerate USB device [ 207.986607][ T8624] ALSA: seq fatal error: cannot create timer (-19) [ 208.077788][ T8631] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.713'. [ 208.281760][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.715'. [ 208.333321][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.367312][ T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 208.391041][ T40] audit: type=1400 audit(1757385156.306:595): avc: denied { accept } for pid=8639 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.468050][ T40] audit: type=1400 audit(1757385156.386:596): avc: denied { read } for pid=8642 comm="syz.2.717" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 208.480970][ T40] audit: type=1400 audit(1757385156.386:597): avc: denied { open } for pid=8642 comm="syz.2.717" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 208.492635][ T40] audit: type=1400 audit(1757385156.386:598): avc: denied { ioctl } for pid=8642 comm="syz.2.717" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 208.529205][ T840] usb 6-1: device descriptor read/64, error -71 [ 208.817398][ T840] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.897932][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.946304][ T8656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8656 comm=syz.2.720 [ 208.954309][ T8656] netlink: 'syz.2.720': attribute type 25 has an invalid length. [ 208.958476][ T8656] netlink: 'syz.2.720': attribute type 8 has an invalid length. [ 208.964061][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.990281][ T840] usb 6-1: device descriptor read/64, error -71 [ 209.041472][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.146291][ T840] usb usb6-port1: attempt power cycle [ 209.226174][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.256618][ T40] audit: type=1400 audit(1757385157.156:599): avc: denied { ioctl } for pid=8660 comm="syz.2.722" path="socket:[24857]" dev="sockfs" ino=24857 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.283373][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.288187][ T40] audit: type=1400 audit(1757385157.156:600): avc: denied { getopt } for pid=8660 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.312707][ T8663] tmpfs: Unknown parameter 'nç6‚¡Ñæ' [ 209.394031][ T8668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8668 comm=syz.2.725 [ 209.516916][ T840] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 209.566551][ T840] usb 6-1: device descriptor read/8, error -71 [ 209.584530][ T8676] geneve1: entered allmulticast mode [ 209.685143][ T40] audit: type=1400 audit(1757385157.606:601): avc: denied { listen } for pid=8678 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.850426][ T840] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 209.887836][ T840] usb 6-1: device descriptor read/8, error -71 [ 209.996410][ T840] usb usb6-port1: unable to enumerate USB device [ 210.045974][ T839] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 210.219021][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.228889][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.236603][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.247420][ T40] audit: type=1400 audit(1757385158.166:602): avc: denied { setattr } for pid=8693 comm="syz.0.731" name="/" dev="9p" ino=35913917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.274775][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.276997][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.277021][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.279640][ T839] usb 8-1: config 0 descriptor?? [ 210.390650][ T8700] misc userio: The device must be registered before sending interrupts [ 210.603390][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.609747][ T8708] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 210.611675][ T8709] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 210.629744][ T8708] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.742529][ T839] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 210.797085][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 210.987914][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.993463][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.995351][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.009615][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.022271][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.034125][ T840] usb 8-1: USB disconnect, device number 17 [ 211.043218][ T8722] No source specified [ 211.144084][ T8721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 211.274470][ T8721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.351955][ T8729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 211.355054][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 211.372118][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 211.390820][ T8731] SELinux: ebitmap start bit (2147483840) is beyond the end of the bitmap (1472) [ 211.431150][ T8731] sel_write_load: 24 callbacks suppressed [ 211.431207][ T8731] SELinux: failed to load policy [ 211.450819][ T8721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.530248][ T8735] afs: Unknown parameter 'fsmagic' [ 211.541495][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 211.541511][ T40] audit: type=1400 audit(1757385159.456:605): avc: denied { write } for pid=8734 comm="syz.0.743" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 211.598458][ T10] vhci_hcd: vhci_device speed not set [ 211.686703][ T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 211.728233][ T8721] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.733901][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 211.784590][ T8747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.808656][ T8747] IPv6: NLM_F_CREATE should be set when creating new route [ 211.823879][ T8747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.828913][ T8747] IPv6: NLM_F_CREATE should be set when creating new route [ 211.909801][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 211.945769][ T8732] vhci_hcd: connection reset by peer [ 211.954602][ T1151] vhci_hcd: stop threads [ 211.974864][ T1151] vhci_hcd: release socket [ 211.978007][ T1151] vhci_hcd: disconnect device [ 211.985546][ T8754] ALSA: seq fatal error: cannot create timer (-19) [ 212.040844][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.046823][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.064185][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.102880][ T91] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.199490][ T40] audit: type=1400 audit(1757385160.106:606): avc: denied { connect } for pid=8758 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.269307][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.306082][ T40] audit: type=1400 audit(1757385160.206:607): avc: denied { listen } for pid=8758 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.325899][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.465912][ T53] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 212.635620][ T53] usb 8-1: device descriptor read/64, error -71 [ 212.808314][ T8772] 9pnet: Could not find request transport: fK [ 212.910129][ T53] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 212.978257][ T8783] overlayfs: empty lowerdir [ 212.999301][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'. [ 213.071462][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'. [ 213.093037][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.097627][ T53] usb 8-1: device descriptor read/64, error -71 [ 213.227609][ T53] usb usb8-port1: attempt power cycle [ 213.264524][ T40] audit: type=1400 audit(1757385161.176:608): avc: denied { create } for pid=8797 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.309003][ T40] audit: type=1400 audit(1757385161.176:609): avc: denied { write } for pid=8797 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.395589][ T8806] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 213.409903][ T8804] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 213.418988][ T8804] block device autoloading is deprecated and will be removed. [ 213.419314][ T8806] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 213.432293][ T8806] trusted_key: syz.0.763 sent an empty control message without MSG_MORE. [ 213.454285][ T40] audit: type=1400 audit(1757385161.366:610): avc: denied { read } for pid=8805 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.490342][ T40] audit: type=1400 audit(1757385161.386:611): avc: denied { mount } for pid=8810 comm="syz.1.766" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 213.508289][ T40] audit: type=1400 audit(1757385161.396:612): avc: denied { search } for pid=8810 comm="syz.1.766" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 213.520071][ T40] audit: type=1400 audit(1757385161.396:613): avc: denied { search } for pid=8810 comm="syz.1.766" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 213.539712][ T40] audit: type=1400 audit(1757385161.396:614): avc: denied { read open } for pid=8810 comm="syz.1.766" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 213.636400][ T53] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 213.666887][ T53] usb 8-1: device descriptor read/8, error -71 [ 213.937609][ T53] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 213.958134][ T53] usb 8-1: device descriptor read/8, error -71 [ 214.076673][ T53] usb usb8-port1: unable to enumerate USB device [ 214.184559][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.242600][ T8862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.343604][ T8862] netlink: 'syz.0.778': attribute type 21 has an invalid length. [ 214.431387][ T8868] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 214.453601][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 214.744849][ T8874] random: crng reseeded on system resumption [ 214.983162][ T8883] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.134354][ T8885] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 215.145994][ T8893] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 215.171612][ T6047] IPVS: starting estimator thread 0... [ 215.325889][ T8894] IPVS: using max 28 ests per chain, 67200 per kthread [ 215.442529][ T8913] cgroup: Need name or subsystem set [ 215.509429][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.566125][ T8922] netlink: 168 bytes leftover after parsing attributes in process `syz.1.797'. [ 215.571180][ T8922] netlink: 168 bytes leftover after parsing attributes in process `syz.1.797'. [ 215.590994][ T8919] ALSA: seq fatal error: cannot create timer (-19) [ 215.643934][ T8924] netlink: 'syz.2.798': attribute type 5 has an invalid length. [ 215.716971][ T8928] openvswitch: netlink: Flow key attribute not present in set flow. [ 215.886856][ T8929] kvm: pic: non byte read [ 216.018015][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 216.158143][ T24] usb 8-1: device descriptor read/64, error -71 [ 216.329310][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.406092][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 216.507872][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.576077][ T24] usb 8-1: device descriptor read/64, error -71 [ 216.716793][ T24] usb usb8-port1: attempt power cycle [ 216.728535][ T8953] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.747879][ T8953] MINIX-fs: unable to read superblock [ 216.765303][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.789875][ T8955] bridge_slave_0: left allmulticast mode [ 216.809451][ T8955] bridge_slave_0: left promiscuous mode [ 216.812908][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.835823][ T10] vhci_hcd: vhci_device speed not set [ 216.850094][ T8955] bridge_slave_1: left allmulticast mode [ 216.852451][ T8955] bridge_slave_1: left promiscuous mode [ 216.887517][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.945566][ T8955] bond0: (slave bond_slave_0): Releasing backup interface [ 216.997238][ T8955] bond0: (slave bond_slave_1): Releasing backup interface [ 217.032214][ T8955] team0: Port device team_slave_0 removed [ 217.046155][ T8955] team0: Port device team_slave_1 removed [ 217.049258][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.059418][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.073494][ T24] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 217.079075][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.097053][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.110032][ T8956] team0: Mode changed to "activebackup" [ 217.121712][ T24] usb 8-1: device descriptor read/8, error -71 [ 217.165799][ T8962] tipc: Started in network mode [ 217.184833][ T8962] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 217.188642][ T8962] tipc: Enabled bearer , priority 0 [ 217.225345][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 217.225361][ T40] audit: type=1326 audit(1757385165.136:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8954 comm="syz.2.809" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f090918ebe9 code=0x0 [ 217.255454][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 217.262217][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 217.263459][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.315822][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.375769][ T24] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 217.418108][ T24] usb 8-1: device descriptor read/8, error -71 [ 217.477324][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.529757][ T40] audit: type=1400 audit(1757385165.446:627): avc: denied { setattr } for pid=8977 comm="syz.1.815" name="ALG" dev="sockfs" ino=26385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 217.548665][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 217.554293][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'. [ 217.562249][ T24] usb usb8-port1: unable to enumerate USB device [ 217.581230][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 217.592504][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.815'. [ 217.673758][ T40] audit: type=1400 audit(1757385165.586:628): avc: denied { mounton } for pid=8983 comm="syz.1.818" path="/201/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 217.725441][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.796571][ T8989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.820'. [ 217.821045][ T8989] netlink: 44 bytes leftover after parsing attributes in process `syz.2.820'. [ 217.861433][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.929485][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.271263][ T53] tipc: Node number set to 11578026 [ 218.338114][ T40] audit: type=1400 audit(1757385166.256:629): avc: denied { accept } for pid=9000 comm="syz.2.821" path="socket:[27348]" dev="sockfs" ino=27348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.842555][ T40] audit: type=1400 audit(1757385166.756:630): avc: denied { execute } for pid=9007 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 218.860084][ T40] audit: type=1400 audit(1757385166.766:631): avc: denied { execute_no_trans } for pid=9007 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 218.900860][ T40] audit: type=1400 audit(1757385166.806:632): avc: denied { write } for pid=9008 comm="syz.2.826" path="socket:[27364]" dev="sockfs" ino=27364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.921698][ T40] audit: type=1400 audit(1757385166.836:633): avc: denied { mounton } for pid=9008 comm="syz.2.826" path="/215/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.926888][ T9009] fuse: Unknown parameter '000000000000000000070x0000000000000007' [ 218.957683][ T40] audit: type=1400 audit(1757385166.836:634): avc: denied { remount } for pid=9008 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 219.185392][ T40] audit: type=1400 audit(1757385167.086:635): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 219.204130][ T5985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.215897][ T5985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.240528][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.246528][ T5985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.251017][ T5985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.313159][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.340715][ T9025] Unsupported ieee802154 address type: 0 [ 219.649235][ T9020] chnl_net:caif_netlink_parms(): no params data found [ 219.888181][ T9043] netlink: zone id is out of range [ 219.891212][ T9043] netlink: zone id is out of range [ 219.894137][ T9043] netlink: zone id is out of range [ 219.898494][ T9043] netlink: del zone limit has 4 unknown bytes [ 220.179820][ T9058] ALSA: seq fatal error: cannot create timer (-19) [ 220.228936][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.233049][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.240013][ T9020] bridge_slave_0: entered allmulticast mode [ 220.244167][ T9020] bridge_slave_0: entered promiscuous mode [ 220.252822][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.256279][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.259400][ T9020] bridge_slave_1: entered allmulticast mode [ 220.273828][ T9020] bridge_slave_1: entered promiscuous mode [ 220.293246][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.465877][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.485827][ T8997] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 220.490598][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.620994][ T9071] bridge0: entered promiscuous mode [ 220.623205][ T9071] macsec1: entered promiscuous mode [ 220.635872][ T8997] usb 7-1: Using ep0 maxpacket: 8 [ 220.654746][ T8997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.671255][ T8997] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.676343][ T8997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.679331][ T9020] team0: Port device team_slave_0 added [ 220.683079][ T8997] usb 7-1: config 0 descriptor?? [ 220.699379][ T9020] team0: Port device team_slave_1 added [ 220.880706][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.883510][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.909815][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.913491][ T9020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.924081][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.928619][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.943004][ T9020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.073170][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.113685][ T8997] usbhid 7-1:0.0: can't add hid device: -71 [ 221.115913][ T8997] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 221.139539][ T8997] usb 7-1: USB disconnect, device number 15 [ 221.156968][ T9020] hsr_slave_0: entered promiscuous mode [ 221.183364][ T9020] hsr_slave_1: entered promiscuous mode [ 221.187362][ T9020] debugfs: 'hsr0' already exists in 'hsr' [ 221.193666][ T9020] Cannot create hsr debugfs directory [ 221.306130][ T5985] Bluetooth: hci2: command tx timeout [ 221.380491][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 221.425229][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.645138][ T9095] MINIX-fs: blocksize too small for device [ 221.664771][ T9095] smb3: Unknown parameter 'rdmax' [ 221.674833][ T9094] MINIX-fs: blocksize too small for device [ 221.737898][ T9020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.768891][ T9020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.823618][ T9020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.867039][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.879473][ T9020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.003289][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.047883][ T9020] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.091129][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.091523][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.104435][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 222.117843][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.117995][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.118086][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.118173][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.118266][ T9115] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 222.165509][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.174057][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.181216][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.443237][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.675737][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.728688][ T9121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 222.756883][ T9121] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 222.767339][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.781303][ T9121] vhci_hcd vhci_hcd.0: Device attached [ 222.824221][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 222.824238][ T40] audit: type=1800 audit(1757385170.736:640): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.854" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 222.908042][ T9147] ALSA: seq fatal error: cannot create timer (-19) [ 222.965794][ T29] vhci_hcd: vhci_device speed not set [ 223.000808][ T9020] veth0_vlan: entered promiscuous mode [ 223.079948][ T29] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 223.084625][ T9020] veth1_vlan: entered promiscuous mode [ 223.160819][ T9020] veth0_macvtap: entered promiscuous mode [ 223.219629][ T9020] veth1_macvtap: entered promiscuous mode [ 223.244713][ T9136] vhci_hcd: connection reset by peer [ 223.248740][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.251634][ T46] vhci_hcd: stop threads [ 223.279885][ T46] vhci_hcd: release socket [ 223.297894][ T46] vhci_hcd: disconnect device [ 223.303024][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.337671][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.341531][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.345825][ T839] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 223.366153][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.397048][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.397501][ T5985] Bluetooth: hci2: command tx timeout [ 223.569764][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.573524][ T839] usb 7-1: device descriptor read/64, error -71 [ 223.619471][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.628120][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.686921][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.691376][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.755389][ T40] audit: type=1400 audit(1757385171.666:641): avc: denied { mounton } for pid=9020 comm="syz-executor" path="/syzkaller.STAUnk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 223.820179][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.843836][ T40] audit: type=1400 audit(1757385171.676:642): avc: denied { mounton } for pid=9020 comm="syz-executor" path="/syzkaller.STAUnk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 223.885202][ T40] audit: type=1400 audit(1757385171.796:643): avc: denied { mount } for pid=9020 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.066124][ T839] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 224.247938][ T839] usb 7-1: device descriptor read/64, error -71 [ 224.276878][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.309312][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.445868][ T839] usb usb7-port1: attempt power cycle [ 224.823632][ T839] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 224.855243][ T9190] usb usb8: usbfs: process 9190 (syz.4.867) did not claim interface 0 before use [ 224.877216][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.896959][ T839] usb 7-1: device descriptor read/8, error -71 [ 224.926286][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.173191][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.241412][ T839] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 225.286555][ T839] usb 7-1: device descriptor read/8, error -71 [ 225.399611][ T839] usb usb7-port1: unable to enumerate USB device [ 225.468757][ T5334] Bluetooth: hci2: command tx timeout [ 225.583490][ T40] audit: type=1326 audit(1757385173.496:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.4.869" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x0 [ 225.959593][ T9212] cdrom: dropping to single frame dma [ 226.001185][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.073126][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.486859][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 226.491484][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.881'. [ 226.545221][ T9236] ipip0: entered promiscuous mode [ 226.877170][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.913889][ T5334] Bluetooth: hci1: command 0x0406 tx timeout [ 226.914274][ T5985] Bluetooth: hci0: command 0x0406 tx timeout [ 226.950451][ T9242] binder: binder_mmap: 9241 200000ffb000-200000fff000 bad vm_flags failed -1 [ 227.098383][ T9245] usb usb8: check_ctrlrecip: process 9245 (syz.1.886) requesting ep 01 but needs 81 [ 227.109186][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.116557][ T9245] usb usb8: usbfs: process 9245 (syz.1.886) did not claim interface 0 before use [ 227.145179][ T9245] fuse: Bad value for 'fd' [ 227.273135][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.521522][ T9261] ALSA: seq fatal error: cannot create timer (-19) [ 227.523163][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.547703][ T5986] Bluetooth: hci2: command tx timeout [ 227.629151][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.641851][ T9278] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 227.729491][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.785126][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.928130][ T6047] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 228.119928][ T6047] usb 7-1: Using ep0 maxpacket: 8 [ 228.162489][ T6047] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.165165][ T6047] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 228.168969][ T6047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.189977][ T6047] usb 7-1: config 0 descriptor?? [ 228.200067][ T29] vhci_hcd: vhci_device speed not set [ 228.637157][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.657520][ T6047] usbhid 7-1:0.0: can't add hid device: -71 [ 228.661746][ T6047] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 228.684581][ T6047] usb 7-1: USB disconnect, device number 20 [ 228.995642][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.000672][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.901'. [ 229.189532][ T9307] erspan0: entered promiscuous mode [ 229.223170][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.289916][ T40] audit: type=1326 audit(1757385177.206:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.3.904" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb67b8ebe9 code=0xffff0000 [ 229.599921][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 229.657052][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.660154][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 229.802115][ T40] audit: type=1400 audit(1757385177.716:646): avc: denied { getopt } for pid=9336 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.812009][ T9337] netlink: 536 bytes leftover after parsing attributes in process `syz.2.911'. [ 229.817316][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 229.823485][ T9337] netlink: 536 bytes leftover after parsing attributes in process `syz.2.911'. [ 229.827574][ T9331] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 229.862805][ T9331] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 229.870698][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 229.999018][ T9348] program syz.1.914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.009801][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.017009][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.236771][ T6353] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 230.281653][ T9358] ALSA: seq fatal error: cannot create timer (-19) [ 230.406277][ T6353] usb 6-1: device descriptor read/64, error -71 [ 230.505283][ T9364] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 230.567773][ T9364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.594435][ T9366] vlan2: entered promiscuous mode [ 230.603346][ T9366] bond1: entered promiscuous mode [ 230.606415][ T9366] vlan2: entered allmulticast mode [ 230.613663][ T9366] bond1: entered allmulticast mode [ 230.627876][ T9364] gretap1: entered promiscuous mode [ 230.637886][ T9364] bond1: (slave gretap1): making interface the new active one [ 230.641474][ T9364] gretap1: entered allmulticast mode [ 230.645235][ T9364] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 230.720292][ T6353] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 230.745070][ T40] audit: type=1400 audit(1757385178.656:647): avc: denied { getopt } for pid=9367 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.857665][ T6353] usb 6-1: device descriptor read/64, error -71 [ 230.989151][ T6353] usb usb6-port1: attempt power cycle [ 231.326721][ T6353] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 231.346887][ T6353] usb 6-1: device descriptor read/8, error -71 [ 231.417106][ T9376] sctp: [Deprecated]: syz.3.920 (pid 9376) Use of int in maxseg socket option. [ 231.417106][ T9376] Use struct sctp_assoc_value instead [ 231.623538][ T6353] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 231.693698][ T9379] netlink: 'syz.4.922': attribute type 11 has an invalid length. [ 231.694512][ T6055] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 231.754461][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.763150][ T6353] usb 6-1: device descriptor read/8, error -71 [ 231.893892][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.901784][ T6353] usb usb6-port1: unable to enumerate USB device [ 231.928275][ T6055] usb 8-1: Invalid ep0 maxpacket: 32 [ 232.067034][ T6055] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 232.236732][ T6055] usb 8-1: Invalid ep0 maxpacket: 32 [ 232.239590][ T6055] usb usb8-port1: attempt power cycle [ 232.392662][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.523899][ T9396] ALSA: seq fatal error: cannot create timer (-19) [ 232.621746][ T6055] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 232.654896][ T6055] usb 8-1: Invalid ep0 maxpacket: 32 [ 232.745042][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.806205][ T6055] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 232.850691][ T6055] usb 8-1: Invalid ep0 maxpacket: 32 [ 232.856546][ T6055] usb usb8-port1: unable to enumerate USB device [ 232.926436][ T40] audit: type=1400 audit(1757385180.846:648): avc: denied { create } for pid=9404 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 232.931666][ T9405] cgroup: release_agent respecified [ 232.944672][ T40] audit: type=1400 audit(1757385180.846:649): avc: denied { ioctl } for pid=9404 comm="syz.2.930" path="socket:[28433]" dev="sockfs" ino=28433 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 232.998414][ T9405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'. [ 233.019036][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 233.042931][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.127289][ T5986] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 233.127387][ T5986] Bluetooth: Unexpected continuation frame (len 12) [ 233.137860][ T5986] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 233.196722][ T9412] mkiss: ax0: crc mode is auto. [ 233.465746][ T8996] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 233.625906][ T8996] usb 7-1: Using ep0 maxpacket: 8 [ 233.637062][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.645867][ T7763] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 233.654319][ T8996] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 233.654377][ T8996] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.654396][ T8996] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.654416][ T8996] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.654433][ T8996] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.654463][ T8996] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.654480][ T8996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.665492][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.905786][ T7763] usb 6-1: Using ep0 maxpacket: 8 [ 233.924962][ T7763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 233.963375][ T7763] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 233.969108][ T8996] usb 7-1: GET_CAPABILITIES returned 0 [ 233.976520][ T7763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.995874][ T8996] usbtmc 7-1:16.0: can't read capabilities [ 234.006672][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.016543][ T7763] usb 6-1: config 0 descriptor?? [ 234.240414][ T9412] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 234.269826][ T6055] usb 7-1: USB disconnect, device number 21 [ 234.326024][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.470358][ T9439] ªªªªªª: renamed from wg2 (while UP) [ 234.501693][ T9437] netlink: 'syz.4.940': attribute type 9 has an invalid length. [ 234.619657][ T9439] netem: incorrect gi model size [ 234.623931][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9441 comm=syz.3.941 [ 234.627290][ T9439] netem: change failed [ 234.664612][ C1] vkms_vblank_simulate: vblank timer overrun usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 234.714189][ T7763] usbhid 6-1:0.0: can't add hid device: -71 [ 234.761294][ T7763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.784198][ T7763] usb 6-1: USB disconnect, device number 16 [ 234.974465][ T9443] ALSA: seq fatal error: cannot create timer (-19) [ 235.306078][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.477288][ T40] audit: type=1400 audit(1757385183.386:650): avc: denied { read } for pid=9457 comm="syz.2.948" path="socket:[28474]" dev="sockfs" ino=28474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.504874][ T40] audit: type=1400 audit(1757385183.416:651): avc: denied { name_bind 0x1000000 } for pid=9456 comm="syz.1.947" path="socket:[29135]" dev="sockfs" ino=29135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 235.526680][ T40] audit: type=1400 audit(1757385183.416:652): avc: denied { read } for pid=9456 comm="syz.1.947" path="socket:[31395]" dev="sockfs" ino=31395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.570602][ T9456] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 235.672807][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.696891][ T9466] net_ratelimit: 49 callbacks suppressed [ 235.696907][ T9466] IPVS: sed: FWM 3 0x00000003 - no destination available [ 235.717954][ C3] IPVS: sed: FWM 3 0x00000003 - no destination available [ 235.830186][ T6353] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 235.849058][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.993053][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.030336][ T6353] usb 7-1: Invalid ep0 maxpacket: 64 [ 236.114186][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.160466][ T6353] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 236.219325][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.244219][ T9482] netlink: 'syz.3.955': attribute type 21 has an invalid length. [ 236.247853][ T5986] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 236.281156][ T9482] netlink: 156 bytes leftover after parsing attributes in process `syz.3.955'. [ 236.333114][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.386276][ T6353] usb 7-1: Invalid ep0 maxpacket: 64 [ 236.389828][ T6353] usb usb7-port1: attempt power cycle [ 236.582544][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.735791][ T6353] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 236.742841][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.768959][ T6353] usb 7-1: Invalid ep0 maxpacket: 64 [ 236.901628][ T9501] ALSA: seq fatal error: cannot create timer (-19) [ 236.914391][ T6353] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 236.956135][ T6353] usb 7-1: Invalid ep0 maxpacket: 64 [ 236.972756][ T6353] usb usb7-port1: unable to enumerate USB device [ 236.974583][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.054104][ T9507] netlink: 'syz.4.962': attribute type 3 has an invalid length. [ 237.157488][ T7763] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 237.241032][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.291863][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.361039][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.407355][ T7763] usb 6-1: Using ep0 maxpacket: 8 [ 237.411656][ T7763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.415479][ T7763] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 237.420287][ T7763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.463382][ T7763] usb 6-1: config 0 descriptor?? [ 237.560927][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 237.578226][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 237.589437][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 237.670040][ T9517] autofs4:pid:9517:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc018937a) [ 237.679311][ T9517] autofs4:pid:9517:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) [ 237.795593][ T40] audit: type=1400 audit(1757385185.706:653): avc: denied { read append open } for pid=9516 comm="syz.3.965" path="/219/file0/net_prio.prioidx" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.800026][ T9518] block device autoloading is deprecated and will be removed. [ 237.831513][ T9514] infiniband syz2: set active [ 237.835425][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.836699][ T9514] infiniband syz2: added vxcan1 [ 237.857647][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.859202][ T6353] vxcan1 speed is unknown, defaulting to 1000 [ 237.896180][ T7763] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 237.955318][ T40] audit: type=1400 audit(1757385185.856:654): avc: denied { unmount } for pid=5984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 237.958175][ T9514] RDS/IB: syz2: added [ 237.974975][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.993689][ T9514] smc: adding ib device syz2 with port count 1 [ 237.998008][ T9514] smc: ib device syz2 port 1 has pnetid [ 238.013160][ T6353] vxcan1 speed is unknown, defaulting to 1000 [ 238.035287][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 238.118495][ T7763] usb 6-1: USB disconnect, device number 17 [ 238.135613][ T40] audit: type=1400 audit(1757385186.046:655): avc: denied { remount } for pid=9521 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.155832][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.229779][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 238.229812][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 238.272324][ T9525] input: syz1 as /devices/virtual/input/input13 [ 238.457204][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 238.605428][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 238.677509][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 238.677548][ T9536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9536 comm=syz.2.971 [ 238.724382][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.837574][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.975'. [ 238.879328][ T40] audit: type=1400 audit(1757385186.796:656): avc: denied { mount } for pid=9548 comm="syz.1.975" name="/" dev="rpc_pipefs" ino=30393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 238.893039][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.923289][ T40] audit: type=1400 audit(1757385186.836:657): avc: denied { getopt } for pid=9548 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.074006][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 239.288297][ T9514] vxcan1 speed is unknown, defaulting to 1000 [ 239.371995][ T9564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9564 comm=syz.2.980 [ 239.665922][ T40] audit: type=1400 audit(1757385187.586:658): avc: denied { remount } for pid=9573 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 239.692149][ T9575] debugfs: Bad value for 'uid' [ 239.694928][ T9575] debugfs: Bad value for 'uid' [ 239.707016][ T40] audit: type=1400 audit(1757385187.616:659): avc: denied { ioctl } for pid=9573 comm="syz.4.984" path="socket:[29298]" dev="sockfs" ino=29298 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.712978][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.722338][ T9575] bridge1: entered promiscuous mode [ 239.722371][ T9575] bridge1: entered allmulticast mode [ 239.784404][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.805992][ T9574] ALSA: seq fatal error: cannot create timer (-19) [ 239.956188][ T838] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 240.182083][ T6055] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 240.188705][ T838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 240.219630][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.259023][ T838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.270294][ T5986] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 240.276481][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.298018][ T5986] Bluetooth: hci1: Injecting HCI hardware error event [ 240.299762][ T5986] Bluetooth: hci1: hardware error 0x00 [ 240.363597][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.366155][ T6055] usb 7-1: Using ep0 maxpacket: 8 [ 240.389091][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.394882][ T838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 240.422558][ T6055] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.429364][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.429396][ T838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.429418][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.429438][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.430640][ T838] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 240.451357][ T6055] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 240.457895][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 240.485817][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.486187][ T6055] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.503516][ T6055] usb 7-1: config 0 descriptor?? [ 240.524325][ T838] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.569428][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.577435][ T838] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 240.592667][ T838] usb 8-1: string descriptor 0 read error: -22 [ 240.598158][ T838] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.605540][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.649221][ T838] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 240.660690][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.840029][ T9579] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.985'. [ 240.849548][ T838] usb 8-1: USB disconnect, device number 30 [ 241.000807][ T6055] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 241.033135][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.080238][ T9600] netlink: 96 bytes leftover after parsing attributes in process `syz.4.990'. [ 241.201789][ T838] usb 7-1: USB disconnect, device number 26 [ 241.473031][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.511839][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.673595][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 241.673611][ T40] audit: type=1400 audit(1757385189.576:662): avc: denied { create } for pid=9618 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 241.719454][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.733752][ T40] audit: type=1400 audit(1757385189.576:661): avc: denied { setopt } for pid=9616 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.777416][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.786543][ T40] audit: type=1400 audit(1757385189.606:663): avc: denied { execmod } for pid=9616 comm="syz.3.994" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 241.813004][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.823136][ T40] audit: type=1400 audit(1757385189.606:664): avc: denied { execute } for pid=9616 comm="syz.3.994" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 241.858194][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.864680][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 241.964818][ T40] audit: type=1400 audit(1757385189.876:665): avc: denied { map } for pid=9625 comm="syz.4.997" path="pipe:[27363]" dev="pipefs" ino=27363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 242.087892][ T9633] netlink: 'syz.2.999': attribute type 32 has an invalid length. [ 242.101212][ T9636] netlink: 'syz.2.999': attribute type 32 has an invalid length. [ 242.110042][ T40] audit: type=1400 audit(1757385190.006:666): avc: denied { ioctl } for pid=9634 comm="syz.3.1000" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 242.241938][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 242.272924][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 242.446488][ T5986] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 242.448390][ T9646] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 242.566828][ T9643] vxlan0: entered promiscuous mode [ 242.580488][ T1145] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.587040][ T1145] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.626442][ T1145] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.629871][ T1145] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.862944][ T6047] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 242.913314][ T9655] ALSA: seq fatal error: cannot create timer (-19) [ 243.040718][ T6047] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.046469][ T6047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.050422][ T6047] usb 7-1: Product: syz [ 243.057497][ T6047] usb 7-1: Manufacturer: syz [ 243.059026][ T6047] usb 7-1: SerialNumber: syz [ 243.084790][ T6047] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.133368][ T6353] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.143175][ T9662] tipc: Started in network mode [ 243.143206][ T9662] tipc: Node identity ba3003a48a5b, cluster identity 4711 [ 243.143403][ T9662] tipc: Enabled bearer , priority 0 [ 243.172332][ T9663] syzkaller0: entered promiscuous mode [ 243.175383][ T9663] syzkaller0: entered allmulticast mode [ 243.189100][ T9662] tipc: Enabling of bearer rejected, already enabled [ 243.268508][ T9662] tipc: Resetting bearer [ 243.276104][ T8995] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 243.343721][ T9164] usb 7-1: USB disconnect, device number 27 [ 243.412944][ T9662] tipc: Disabling bearer [ 243.475972][ T8995] usb 6-1: Using ep0 maxpacket: 8 [ 243.495547][ T8995] usb 6-1: config 0 interface 0 has no altsetting 0 [ 243.498998][ T8995] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 243.503966][ T8995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.523753][ T8995] usb 6-1: config 0 descriptor?? [ 243.764447][ T9672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1010'. [ 243.821917][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.939834][ T9674] netlink: 'syz.4.1011': attribute type 9 has an invalid length. [ 243.980172][ T8995] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 244.175787][ T6353] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 244.181650][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.210565][ T6353] ath9k_htc: Failed to initialize the device [ 244.220711][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.272361][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.283811][ T6055] usb 6-1: USB disconnect, device number 18 [ 244.307967][ T9164] usb 7-1: ath9k_htc: USB layer deinitialized [ 244.420106][ T40] audit: type=1326 audit(1757385192.316:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.2.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090918ebe9 code=0x7ffc0000 [ 244.429018][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.446373][ T40] audit: type=1326 audit(1757385192.316:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.2.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090918ebe9 code=0x7ffc0000 [ 244.462655][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.476234][ T40] audit: type=1326 audit(1757385192.316:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.2.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f090918ebe9 code=0x7ffc0000 [ 244.490452][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.552134][ T40] audit: type=1326 audit(1757385192.316:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.2.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090918ebe9 code=0x7ffc0000 [ 244.574927][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.671777][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 244.681130][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 244.790312][ T9703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9703 comm=syz.4.1021 [ 244.840572][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.925002][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.941961][ T9711] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1024'. [ 244.959383][ T9711] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1024'. [ 244.986496][ T9711] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1024'. [ 245.006568][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 245.204027][ T9720] random: crng reseeded on system resumption [ 245.393334][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.472984][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.544634][ T9729] hfs: can't find a HFS filesystem on dev sr0 [ 245.622635][ T9733] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 245.630619][ T9733] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 245.830522][ T9739] ALSA: seq fatal error: cannot create timer (-19) [ 245.960528][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.968979][ T6353] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 246.154244][ T6353] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.162437][ T6353] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 246.175556][ T6353] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.189110][ T8999] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 246.191013][ T6353] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 246.229747][ T6353] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.253342][ T6353] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.268240][ T6353] usb 9-1: Product: syz [ 246.273146][ T6353] usb 9-1: Manufacturer: syz [ 246.308797][ T6353] cdc_wdm 9-1:1.0: skipping garbage [ 246.322218][ T9758] tmpfs: Unknown parameter 'nr_int' [ 246.331844][ T6353] cdc_wdm 9-1:1.0: skipping garbage [ 246.341668][ T6353] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.378851][ T8999] usb 6-1: Using ep0 maxpacket: 8 [ 246.386291][ T8999] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.391204][ T8999] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.399574][ T8999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.413127][ T8999] usb 6-1: config 0 descriptor?? [ 246.552130][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 246.562631][ T9769] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1042'. [ 246.650121][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.657462][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.715760][ T6353] usb 9-1: USB disconnect, device number 2 [ 246.761707][ T9776] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 246.766806][ T9776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1043'. [ 246.827224][ T8999] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 247.025356][ T8999] usb 6-1: USB disconnect, device number 19 [ 247.256832][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.270268][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 247.270283][ T40] audit: type=1400 audit(1757385195.186:748): avc: denied { open } for pid=9796 comm="syz.3.1049" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.335733][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.440931][ T9802] netlink: 'syz.4.1050': attribute type 21 has an invalid length. [ 247.844970][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.889314][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.168625][ T7763] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 248.180593][ T9843] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 248.180611][ T9840] IPVS: stopping backup sync thread 9843 ... [ 248.326069][ T7763] usb 9-1: Using ep0 maxpacket: 8 [ 248.385779][ T7763] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 248.392463][ T7763] usb 9-1: config 179 has no interface number 0 [ 248.400253][ T7763] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 248.406677][ T7763] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 248.414737][ T7763] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 101, changing to 10 [ 248.426941][ T7763] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24697, setting to 1024 [ 248.435835][ T7763] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 248.448000][ T7763] usb 9-1: config 179 interface 65 has no altsetting 0 [ 248.448944][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.453769][ T7763] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 248.454006][ T7763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.503454][ T9852] ALSA: seq fatal error: cannot create timer (-19) [ 248.513090][ T7763] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input14 [ 248.642415][ T5369] input input14: unable to receive magic message: -110 [ 248.717739][ T5369] input input14: unable to receive magic message: -32 [ 248.829551][ T9833] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 248.844708][ T9833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.862479][ T59] usb 9-1: USB disconnect, device number 3 [ 248.875215][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 248.969988][ T6353] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 249.172380][ T6353] usb 8-1: Using ep0 maxpacket: 8 [ 249.214769][ T6353] usb 8-1: config 0 interface 0 has no altsetting 0 [ 249.220430][ T6353] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 249.236891][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.241209][ T6353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.259132][ T6353] usb 8-1: config 0 descriptor?? [ 249.684146][ T9886] hugetlbfs: Bad value for 'uid' [ 249.688581][ T9886] hugetlbfs: Bad value for 'uid' [ 249.699690][ T9886] usb 2-1: USB disconnect, device number 2 [ 249.725493][ T6353] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 249.815848][ T40] audit: type=1400 audit(1757385197.726:749): avc: denied { listen } for pid=9885 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.865047][ T40] audit: type=1400 audit(1757385197.726:750): avc: denied { ioctl } for pid=9885 comm="syz.4.1074" path="socket:[33167]" dev="sockfs" ino=33167 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.896574][ T40] audit: type=1400 audit(1757385197.726:751): avc: denied { accept } for pid=9885 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.967292][ T6353] usb 8-1: USB disconnect, device number 31 [ 250.069695][ T9890] hub 2-0:1.0: USB hub found [ 250.076559][ T9897] netlink: 'syz.2.1076': attribute type 12 has an invalid length. [ 250.080117][ T9897] __nla_validate_parse: 2 callbacks suppressed [ 250.080131][ T9897] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1076'. [ 250.086133][ T9890] hub 2-0:1.0: 6 ports detected [ 250.253927][ T9901] [U]  [ 250.319013][ T6055] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 250.389334][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.610077][ T9914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.681979][ T6055] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 250.705011][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.713463][ T6055] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 250.717040][ T6055] usb 2-1: Product: QEMU USB Tablet [ 250.720197][ T6055] usb 2-1: Manufacturer: QEMU [ 250.742027][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.749714][ T6055] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 250.770445][ T9922] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1084'. [ 250.880205][ T6055] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000E/input/input15 [ 251.010002][ T9934] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 251.014323][ T6055] hid-generic 0003:0627:0001.000E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 251.019859][ T9934] cramfs: wrong magic [ 251.260880][ T40] audit: type=1400 audit(1757385199.176:752): avc: denied { append } for pid=9943 comm="syz.3.1090" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.521437][ T40] audit: type=1800 audit(1757385199.436:753): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1091" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 251.526008][ T8996] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 251.561020][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.618668][ T9955] ALSA: seq fatal error: cannot create timer (-19) [ 251.625372][ T9960] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1094'. [ 251.651444][ T9962] random: crng reseeded on system resumption [ 251.726016][ T8996] usb 8-1: Using ep0 maxpacket: 32 [ 251.803611][ T8996] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 251.808043][ T9966] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 251.817629][ T8996] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 251.817656][ T8996] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 251.874077][ T8996] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.882740][ T8996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.896893][ T8996] usb 8-1: Product: syz [ 251.898678][ T8996] usb 8-1: Manufacturer: syz [ 251.900691][ T8996] usb 8-1: SerialNumber: syz [ 251.937503][ T6055] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 252.086092][ T6055] usb 6-1: Using ep0 maxpacket: 8 [ 252.091288][ T6055] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.097568][ T6055] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 252.111040][ T6055] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.120291][ T6055] usb 6-1: config 0 descriptor?? [ 252.139652][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.171884][ T8996] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 252.182996][ T8996] cdc_ncm 8-1:1.0: bind() failure [ 252.230975][ T8996] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 252.239753][ T8996] cdc_ncm 8-1:1.1: bind() failure [ 252.373531][ T8995] usb 8-1: USB disconnect, device number 32 [ 252.516002][ T9987] smc: net device bond0 applied user defined pnetid SYZ0 [ 252.520219][ T9987] smc: net device bond0 erased user defined pnetid SYZ0 [ 252.608267][ T6055] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 252.635594][ T9990] binder: 9988:9990 ioctl c0306201 200000000080 returned -14 [ 252.716320][ T9992] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1104'. [ 252.809304][ T6055] usb 6-1: USB disconnect, device number 20 [ 253.058387][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 253.074818][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 253.098445][T10001] random: crng reseeded on system resumption [ 253.108251][T10001] Restarting kernel threads ... [ 253.127105][T10001] Done restarting kernel threads. [ 253.177505][T10003] mkiss: ax0: crc mode is auto. [ 253.547839][T10008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.616661][T10018] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1113'. [ 253.677942][T10013] vxcan1 speed is unknown, defaulting to 1000 [ 253.737467][T10008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.744923][ T40] audit: type=1400 audit(1757385201.656:754): avc: denied { setattr } for pid=10019 comm="syz.4.1114" path="socket:[32479]" dev="sockfs" ino=32479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.879197][T10008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.972876][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.985278][T10028] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 253.986208][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 254.065942][ T840] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 254.119136][T10008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.253285][ T840] usb 9-1: Using ep0 maxpacket: 8 [ 254.258112][ T840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 254.292957][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.309122][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.316701][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 254.344888][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.353831][ T840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.414761][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.452904][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.461136][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.574807][ T840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 254.580323][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.601489][ T840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.606954][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.621231][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.655284][T10039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 254.669570][ T840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 254.674057][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 254.692969][ T840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.701269][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.722516][ T840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.757100][ T840] usb 9-1: string descriptor 0 read error: -22 [ 254.762629][ T840] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.805238][ T840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.833640][ T840] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 254.866608][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.892906][ T87] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.897657][ T87] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.898362][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.939453][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.972951][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.015746][ T1151] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.079425][ T91] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.079580][ T840] usb 9-1: USB disconnect, device number 4 [ 255.167462][T10043] ALSA: seq fatal error: cannot create timer (-19) [ 255.222903][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.552909][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.556913][ T8995] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 255.705843][ T8995] usb 8-1: Using ep0 maxpacket: 8 [ 255.710252][ T8995] usb 8-1: config 0 interface 0 has no altsetting 0 [ 255.712789][ T8995] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 255.716705][ T8995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.740846][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.751635][ T8995] usb 8-1: config 0 descriptor?? [ 255.806552][T10069] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1124'. [ 255.909563][T10070] mmap: syz.2.1125 (10070): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 256.059011][T10073] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 108 [ 256.210027][ T8995] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 256.338852][ T40] audit: type=1326 audit(1757385204.226:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.353309][ T40] audit: type=1326 audit(1757385204.226:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.364329][ T40] audit: type=1326 audit(1757385204.226:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.374091][ T40] audit: type=1326 audit(1757385204.226:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.384779][ T40] audit: type=1326 audit(1757385204.226:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.396342][ T40] audit: type=1326 audit(1757385204.226:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.407736][ T40] audit: type=1326 audit(1757385204.226:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.411243][ T53] usb 8-1: USB disconnect, device number 33 [ 256.420361][ T40] audit: type=1326 audit(1757385204.226:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.420406][ T40] audit: type=1326 audit(1757385204.226:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 256.492115][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.550533][T10080] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 256.556813][T10080] PKCS7: Only support pkcs7_signedData type [ 256.561333][T10080] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1129'. [ 256.946275][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.343739][T10093] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1133'. [ 257.622797][ T6353] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 257.629395][ T5986] Bluetooth: hci3: command 0x0406 tx timeout [ 257.796092][ T6353] usb 6-1: Using ep0 maxpacket: 8 [ 257.814080][ T6353] usb 6-1: config 0 has no interfaces? [ 257.822047][ T6353] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 257.836467][ T6353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.859923][ T6353] usb 6-1: Product: syz [ 257.862572][ T6353] usb 6-1: Manufacturer: syz [ 257.864393][ T6353] usb 6-1: SerialNumber: syz [ 257.898220][ T6353] usb 6-1: config 0 descriptor?? [ 258.055297][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.155803][ T59] usb 6-1: USB disconnect, device number 21 [ 258.422793][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.646108][ T59] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 258.656819][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.704934][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.746343][ T40] kauditd_printk_skb: 11635 callbacks suppressed [ 258.746360][ T40] audit: type=1326 audit(1757385206.656:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.790250][ T40] audit: type=1326 audit(1757385206.656:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.802461][ T40] audit: type=1326 audit(1757385206.656:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.824601][T10115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.839108][ T40] audit: type=1326 audit(1757385206.656:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.863904][ T40] audit: type=1326 audit(1757385206.656:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.878893][ T40] audit: type=1326 audit(1757385206.656:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.895612][ T40] audit: type=1326 audit(1757385206.656:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.895848][ T59] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.919837][ T40] audit: type=1326 audit(1757385206.656:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.935359][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 258.942000][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.947538][ T40] audit: type=1326 audit(1757385206.656:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.963012][ T59] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.965863][ T40] audit: type=1326 audit(1757385206.656:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.4.1128" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x7ff00000 [ 258.985624][ T59] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.018646][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.036555][ T59] usb 8-1: config 0 descriptor?? [ 259.258160][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.262873][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.268864][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.273840][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.274739][T10118] ALSA: seq fatal error: cannot create timer (-19) [ 259.280762][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.286892][T10124] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 259.308854][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.314965][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.318873][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.325275][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.341525][ T59] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 259.361160][ T59] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 259.485596][ T5983] Bluetooth: Unexpected continuation frame (len 12) [ 259.534610][ T6353] usb 8-1: USB disconnect, device number 34 [ 259.537071][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.576405][ T8996] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 259.726548][T10131] Can't find ip_set type bitmap:ip [ 259.778765][ T8996] usb 6-1: Using ep0 maxpacket: 8 [ 259.784223][ T8996] usb 6-1: config 0 interface 0 has no altsetting 0 [ 259.803505][ T8996] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.815456][ T8996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.827045][ T8996] usb 6-1: config 0 descriptor?? [ 259.990417][T10137] netlink: 198212 bytes leftover after parsing attributes in process `syz.4.1145'. [ 260.095835][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.141931][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.212976][ T53] psmouse serio2: Failed to reset mouse on : -5 [ 260.277665][ T8996] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 260.333241][T10144] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 260.337613][T10144] SELinux: failed to load policy [ 260.431051][T10149] ptrace attach of "/syz-executor exec"[5984] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 260.432638][T10149] xt_policy: neither incoming nor outgoing policy selected [ 260.469264][ T59] usb 6-1: USB disconnect, device number 22 [ 260.503519][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.661411][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.663791][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.843579][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.227102][T10162] io-wq is not configured for unbound workers [ 261.253020][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 261.373928][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 261.446711][T10177] random: crng reseeded on system resumption [ 261.686795][T10190] ALSA: seq fatal error: cannot create timer (-19) [ 261.956256][ T6055] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 262.130285][ T6055] usb 8-1: Using ep0 maxpacket: 8 [ 262.143656][ T6055] usb 8-1: config 0 interface 0 has no altsetting 0 [ 262.154384][ T6055] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.159801][ T6055] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.180375][ T6055] usb 8-1: config 0 descriptor?? [ 262.564469][T10215] tap0: tun_chr_ioctl cmd 1074025676 [ 262.567146][T10215] tap0: owner set to 1 [ 262.634328][ T6055] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 262.854442][ T838] usb 8-1: USB disconnect, device number 35 [ 264.047422][T10264] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 264.089847][ T53] misc userio: Buffer overflowed, userio client isn't keeping up [ 264.373244][ T40] kauditd_printk_skb: 1056 callbacks suppressed [ 264.373264][ T40] audit: type=1400 audit(1757385212.286:13465): avc: denied { relabelfrom } for pid=10275 comm="syz.1.1179" name="" dev="pipefs" ino=32747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 264.527238][ C2] vkms_vblank_simulate: vblank timer overrun [ 264.643215][T10284] ALSA: seq fatal error: cannot create timer (-19) [ 264.793949][T10287] evm: overlay not supported [ 264.830183][T10287] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 264.858416][ T40] audit: type=1400 audit(1757385212.776:13466): avc: denied { relabelto } for pid=10286 comm="syz.1.1182" name="/" dev="overlay" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 264.879720][ T40] audit: type=1400 audit(1757385212.796:13467): avc: denied { associate } for pid=10286 comm="syz.1.1182" name="file0" dev="tmpfs" ino=1540 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 264.932425][ T59] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 265.161401][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 265.167001][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.175898][ T59] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 265.180064][ T53] input: PS/2 Generic Mouse as /devices/serio2/input/input16 [ 265.199680][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.249399][ T59] usb 8-1: config 0 descriptor?? [ 265.475883][ T53] psmouse serio2: Failed to enable mouse on [ 265.492962][T10309] openvswitch: netlink: EtherType 0 is less than min 600 [ 265.500253][T10309] program syz.1.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.701292][ T59] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 265.719802][T10312] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 265.737651][T10311] tipc: Started in network mode [ 265.740127][T10311] tipc: Node identity ac1414aa, cluster identity 4711 [ 265.745063][T10311] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.757621][T10311] tipc: Enabled bearer , priority 10 [ 265.896024][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.923360][ T8999] usb 8-1: USB disconnect, device number 36 [ 266.035763][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.072791][ C2] vkms_vblank_simulate: vblank timer overrun [ 266.094699][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 266.192871][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.335900][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.476455][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.636939][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.753548][T10342] bridge6: entered promiscuous mode [ 266.770026][T10342] bridge6: entered allmulticast mode [ 266.797336][ T59] tipc: Node number set to 2886997162 [ 266.803514][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.809610][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.814212][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.835064][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.905761][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.946487][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.952848][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.966580][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.975271][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.988087][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 266.993758][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'. [ 267.216475][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.244857][T10370] netlink: 'syz.4.1209': attribute type 16 has an invalid length. [ 267.249279][T10370] netlink: 'syz.4.1209': attribute type 17 has an invalid length. [ 267.323824][T10373] ALSA: seq fatal error: cannot create timer (-19) [ 267.493621][T10370] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.499461][T10370] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.635779][ T6353] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 267.793372][T10370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.796856][ T6353] usb 6-1: Using ep0 maxpacket: 8 [ 267.801410][ T6353] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.804903][ T6353] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 267.819544][ T6353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.827570][T10370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.837705][ T6353] usb 6-1: config 0 descriptor?? [ 268.287304][ T6353] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 268.288357][T10370] vlan2: left promiscuous mode [ 268.311645][T10370] bond1: left promiscuous mode [ 268.315177][T10370] vlan2: left allmulticast mode [ 268.317759][T10370] bond1: left allmulticast mode [ 268.319766][T10370] gretap1: left allmulticast mode [ 268.325407][T10370] gretap1: left promiscuous mode [ 268.337502][T10370] bridge1: left promiscuous mode [ 268.339681][T10370] bridge1: left allmulticast mode [ 268.371047][ T8995] vxcan1 speed is unknown, defaulting to 1000 [ 268.373752][ T8995] syz2: Port: 1 Link DOWN [ 268.378360][ T91] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.388951][ T8996] vxcan1 speed is unknown, defaulting to 1000 [ 268.392003][ T91] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.408543][ T91] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.411666][ T91] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.516061][ T6055] usb 6-1: USB disconnect, device number 23 [ 268.624681][ C2] vkms_vblank_simulate: vblank timer overrun [ 268.846052][ T6353] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 268.962043][T10410] NILFS (loop4): device size too small [ 269.005107][ T6353] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.012529][ T6353] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.037045][ T6353] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.051220][ T6353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.116492][ T6055] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 269.277711][ T6353] usb 8-1: usb_control_msg returned -32 [ 269.279838][ T6353] usbtmc 8-1:16.0: can't read capabilities [ 269.287042][ T6055] usb 7-1: config 27 has an invalid descriptor of length 233, skipping remainder of the config [ 269.345351][ T6055] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 269.350987][ T6055] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.366691][ T6055] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.513704][T10423] 9pnet: Could not find request transport: virtiAdk9p200 [ 269.597041][ T6055] usb 7-1: USB disconnect, device number 28 [ 270.031031][ T7763] usb 8-1: USB disconnect, device number 37 [ 270.479457][ C2] vkms_vblank_simulate: vblank timer overrun [ 270.527207][ C2] vkms_vblank_simulate: vblank timer overrun [ 270.632745][ C2] vkms_vblank_simulate: vblank timer overrun [ 270.763556][ T40] audit: type=1326 audit(1757385218.676:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.4.1230" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99a638ebe9 code=0x0 [ 270.857640][T10466] net_ratelimit: 3 callbacks suppressed [ 270.857694][T10466] netlink: set zone limit has 4 unknown bytes [ 270.886104][ C2] vkms_vblank_simulate: vblank timer overrun [ 270.903125][ C3] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.074248][ T40] audit: type=1400 audit(1757385218.996:13469): avc: denied { read } for pid=10478 comm="syz.4.1234" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.106367][ T40] audit: type=1400 audit(1757385218.996:13470): avc: denied { open } for pid=10478 comm="syz.4.1234" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.158144][ T40] audit: type=1400 audit(1757385218.996:13471): avc: denied { ioctl } for pid=10478 comm="syz.4.1234" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.191291][ T59] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 271.250164][ T40] audit: type=1400 audit(1757385219.156:13472): avc: denied { bind } for pid=10483 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.376733][ T59] usb 8-1: Using ep0 maxpacket: 16 [ 271.400087][ T59] usb 8-1: config 1 has an invalid descriptor of length 24, skipping remainder of the config [ 271.412299][ T59] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 271.429078][T10487] 9p: Unknown Cache mode or invalid value fs [ 271.429122][T10487] 9pnet: Tag 65535 still in use [ 271.440250][ C3] ------------[ cut here ]------------ [ 271.440387][ C3] refcount_t: underflow; use-after-free. [ 271.440722][ C3] WARNING: CPU: 3 PID: 59 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 271.440783][ C3] Modules linked in: [ 271.440869][ C3] CPU: 3 UID: 0 PID: 59 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 271.440890][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.440902][ C3] Workqueue: usb_hub_wq hub_event [ 271.440932][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 271.440956][ C3] Code: ff 89 de e8 88 e0 d7 fc 84 db 0f 85 66 ff ff ff e8 9b e5 d7 fc c6 05 57 1e b0 0b 01 90 48 c7 c7 00 9c 15 8c e8 a7 88 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 e5 d7 fc 0f b6 1d 32 1e b0 0b 31 [ 271.440973][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010082 [ 271.440996][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 271.441008][ C3] RDX: ffff8880223d8000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 271.441019][ C3] RBP: ffff888032356ee8 R08: 0000000000000001 R09: 0000000000000000 [ 271.441029][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032356ee8 [ 271.441039][ C3] R13: ffff888039fc3400 R14: 0000000000000015 R15: 1ffff1100647b00c [ 271.441051][ C3] FS: 0000000000000000(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 271.441087][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.441100][ C3] CR2: 00007f0b9b1a9a84 CR3: 000000004ecb9000 CR4: 0000000000352ef0 [ 271.441111][ C3] Call Trace: [ 271.441117][ C3] [ 271.441126][ C3] p9_req_put+0x1ec/0x250 [ 271.441151][ C3] req_done+0x1dc/0x2e0 [ 271.441173][ C3] ? __pfx_req_done+0x10/0x10 [ 271.441192][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 271.441209][ C3] ? __pfx_req_done+0x10/0x10 [ 271.441227][ C3] vring_interrupt+0x31b/0x400 [ 271.441243][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 271.441261][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 271.441285][ C3] handle_irq_event+0xab/0x1e0 [ 271.441304][ C3] handle_edge_irq+0x3ca/0x9e0 [ 271.441328][ C3] __common_interrupt+0xcd/0x2f0 [ 271.441351][ C3] common_interrupt+0x61/0xe0 [ 271.441383][ C3] asm_common_interrupt+0x26/0x40 [ 271.441398][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 271.441417][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 33 18 0a 65 66 c7 05 26 7f 5a 12 00 00 e8 d9 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 271.441431][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000206 [ 271.441445][ C3] RAX: 0000000000033228 RBX: 00000000ffffffff RCX: 0000000000000002 [ 271.441454][ C3] RDX: 0000000000000000 RSI: ffffffff8de522e0 RDI: ffffffff8c162d00 [ 271.441464][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 271.441473][ C3] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000200 [ 271.441483][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed100447b000 [ 271.441507][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 271.441525][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 271.441553][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 271.441578][ C3] __irq_exit_rcu+0x109/0x170 [ 271.441597][ C3] irq_exit_rcu+0x9/0x30 [ 271.441616][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 271.441633][ C3] [ 271.441639][ C3] [ 271.441646][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.441664][ C3] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 271.441685][ C3] Code: 00 e8 f2 d5 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 30 ea 20 00 48 85 db 0f 85 55 01 00 00 e8 b2 ee 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 07 4f 87 [ 271.441700][ C3] RSP: 0018:ffffc90000acf188 EFLAGS: 00000293 [ 271.441714][ C3] RAX: ffffffff8f2ed5d8 RBX: 0000000000000000 RCX: ffffffff819aa010 [ 271.441725][ C3] RDX: ffff8880223d8000 RSI: ffffffff819aa01e RDI: 0000000000000007 [ 271.441736][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 271.441745][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ed5d8 [ 271.441756][ C3] R13: ffffffff8f2ed580 R14: ffffc90000acf218 R15: dffffc0000000000 [ 271.441773][ C3] ? console_flush_all+0x990/0xc60 [ 271.441793][ C3] ? console_flush_all+0x99e/0xc60 [ 271.441816][ C3] ? console_flush_all+0x99e/0xc60 [ 271.441842][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 271.441861][ C3] ? fc_attach_transport+0x4a47/0x5fb0 [ 271.441895][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 271.441926][ C3] console_unlock+0xd8/0x210 [ 271.441949][ C3] ? __pfx_console_unlock+0x10/0x10 [ 271.441975][ C3] ? dev_printk_emit+0xfa/0x140 [ 271.442002][ C3] ? __down_trylock_console_sem+0xb0/0x140 [ 271.442024][ C3] vprintk_emit+0x418/0x6d0 [ 271.442047][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 271.442076][ C3] dev_printk_emit+0xfa/0x140 [ 271.442097][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 271.442113][ C3] ? ret_from_fork+0x5d4/0x6f0 [ 271.442152][ C3] __dev_printk+0xf5/0x270 [ 271.442176][ C3] _dev_notice+0xe4/0x120 [ 271.442197][ C3] ? __pfx__dev_notice+0x10/0x10 [ 271.442224][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.442246][ C3] ? trace_kmalloc+0x2b/0xd0 [ 271.442268][ C3] ? __kmalloc_noprof+0x242/0x510 [ 271.442293][ C3] usb_get_configuration+0x4fb7/0x6530 [ 271.442350][ C3] ? __pfx_usb_get_configuration+0x10/0x10 [ 271.442375][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.442400][ C3] ? mark_held_locks+0x49/0x80 [ 271.442432][ C3] usb_new_device+0x11d3/0x1a60 [ 271.442460][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.442487][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.442507][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 271.442534][ C3] ? mark_held_locks+0x49/0x80 [ 271.442684][ C3] hub_event+0x2f34/0x4fe0 [ 271.442735][ C3] ? __pfx_hub_event+0x10/0x10 [ 271.442760][ C3] ? pool_move_batch+0x290/0x290 [ 271.442797][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.442822][ C3] process_one_work+0x9cc/0x1b70 [ 271.442853][ C3] ? __pfx_hcd_resume_work+0x10/0x10 [ 271.442881][ C3] ? __pfx_process_one_work+0x10/0x10 [ 271.442907][ C3] ? assign_work+0x1a0/0x250 [ 271.442927][ C3] worker_thread+0x6c8/0xf10 [ 271.442958][ C3] ? __pfx_worker_thread+0x10/0x10 [ 271.442977][ C3] kthread+0x3c2/0x780 [ 271.443008][ C3] ? __pfx_kthread+0x10/0x10 [ 271.443026][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.443048][ C3] ? __pfx_kthread+0x10/0x10 [ 271.443068][ C3] ret_from_fork+0x5d4/0x6f0 [ 271.443085][ C3] ? __pfx_kthread+0x10/0x10 [ 271.443104][ C3] ret_from_fork_asm+0x1a/0x30 [ 271.443140][ C3] [ 271.443152][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.443166][ C3] CPU: 3 UID: 0 PID: 59 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 271.443190][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.443204][ C3] Workqueue: usb_hub_wq hub_event [ 271.443228][ C3] Call Trace: [ 271.443235][ C3] [ 271.443241][ C3] dump_stack_lvl+0x3d/0x1f0 [ 271.443268][ C3] vpanic+0x6e8/0x7a0 [ 271.443294][ C3] ? __pfx_vpanic+0x10/0x10 [ 271.443327][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 271.443356][ C3] panic+0xca/0xd0 [ 271.443383][ C3] ? __pfx_panic+0x10/0x10 [ 271.443421][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 271.443443][ C3] check_panic_on_warn+0xab/0xb0 [ 271.443465][ C3] __warn+0xf6/0x3c0 [ 271.443483][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 271.443507][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 271.443537][ C3] report_bug+0x3c3/0x580 [ 271.443561][ C3] ? refcount_warn_saturate+0x14a/0x210 [ 271.443591][ C3] handle_bug+0x184/0x210 [ 271.443620][ C3] exc_invalid_op+0x17/0x50 [ 271.443647][ C3] asm_exc_invalid_op+0x1a/0x20 [ 271.443667][ C3] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 271.443694][ C3] Code: ff 89 de e8 88 e0 d7 fc 84 db 0f 85 66 ff ff ff e8 9b e5 d7 fc c6 05 57 1e b0 0b 01 90 48 c7 c7 00 9c 15 8c e8 a7 88 96 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 78 e5 d7 fc 0f b6 1d 32 1e b0 0b 31 [ 271.443712][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010082 [ 271.443727][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3388 [ 271.443739][ C3] RDX: ffff8880223d8000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 271.443751][ C3] RBP: ffff888032356ee8 R08: 0000000000000001 R09: 0000000000000000 [ 271.443762][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888032356ee8 [ 271.443774][ C3] R13: ffff888039fc3400 R14: 0000000000000015 R15: 1ffff1100647b00c [ 271.443792][ C3] ? __warn_printk+0x198/0x350 [ 271.443815][ C3] ? __warn_printk+0x1a5/0x350 [ 271.443845][ C3] p9_req_put+0x1ec/0x250 [ 271.443869][ C3] req_done+0x1dc/0x2e0 [ 271.443891][ C3] ? __pfx_req_done+0x10/0x10 [ 271.443913][ C3] ? debug_object_activate+0x2ec/0x4c0 [ 271.443932][ C3] ? __pfx_req_done+0x10/0x10 [ 271.443952][ C3] vring_interrupt+0x31b/0x400 [ 271.443971][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 271.443996][ C3] __handle_irq_event_percpu+0x22c/0x7d0 [ 271.444023][ C3] handle_irq_event+0xab/0x1e0 [ 271.444047][ C3] handle_edge_irq+0x3ca/0x9e0 [ 271.444073][ C3] __common_interrupt+0xcd/0x2f0 [ 271.444100][ C3] common_interrupt+0x61/0xe0 [ 271.444128][ C3] asm_common_interrupt+0x26/0x40 [ 271.444146][ C3] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 271.444174][ C3] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a8 ab 8b e8 c8 33 18 0a 65 66 c7 05 26 7f 5a 12 00 00 e8 d9 44 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 271.444194][ C3] RSP: 0018:ffffc900006f8f28 EFLAGS: 00000206 [ 271.444213][ C3] RAX: 0000000000033228 RBX: 00000000ffffffff RCX: 0000000000000002 [ 271.444227][ C3] RDX: 0000000000000000 RSI: ffffffff8de522e0 RDI: ffffffff8c162d00 [ 271.444240][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 271.444253][ C3] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000200 [ 271.444268][ C3] R13: 000000000000000a R14: 1ffff920000df1ed R15: ffffed100447b000 [ 271.444300][ C3] ? handle_softirqs+0x1d7/0x8e0 [ 271.444325][ C3] ? __pfx_sched_clock_cpu+0x10/0x10 [ 271.444362][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 271.444397][ C3] __irq_exit_rcu+0x109/0x170 [ 271.444420][ C3] irq_exit_rcu+0x9/0x30 [ 271.444445][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 271.444471][ C3] [ 271.444479][ C3] [ 271.444489][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.444513][ C3] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 271.444539][ C3] Code: 00 e8 f2 d5 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 30 ea 20 00 48 85 db 0f 85 55 01 00 00 e8 b2 ee 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 07 4f 87 [ 271.444560][ C3] RSP: 0018:ffffc90000acf188 EFLAGS: 00000293 [ 271.444611][ C3] RAX: ffffffff8f2ed5d8 RBX: 0000000000000000 RCX: ffffffff819aa010 [ 271.444626][ C3] RDX: ffff8880223d8000 RSI: ffffffff819aa01e RDI: 0000000000000007 [ 271.444639][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 271.444652][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ed5d8 [ 271.444666][ C3] R13: ffffffff8f2ed580 R14: ffffc90000acf218 R15: dffffc0000000000 [ 271.444689][ C3] ? console_flush_all+0x990/0xc60 [ 271.444714][ C3] ? console_flush_all+0x99e/0xc60 [ 271.444742][ C3] ? console_flush_all+0x99e/0xc60 [ 271.444773][ C3] ? __pfx_console_flush_all+0x10/0x10 [ 271.444797][ C3] ? fc_attach_transport+0x4a47/0x5fb0 [ 271.444836][ C3] ? is_printk_cpu_sync_owner+0x32/0x40 [ 271.444869][ C3] console_unlock+0xd8/0x210 [ 271.444894][ C3] ? __pfx_console_unlock+0x10/0x10 [ 271.444923][ C3] ? dev_printk_emit+0xfa/0x140 [ 271.444949][ C3] ? __down_trylock_console_sem+0xb0/0x140 [ 271.444975][ C3] vprintk_emit+0x418/0x6d0 [ 271.445013][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 271.445051][ C3] dev_printk_emit+0xfa/0x140 [ 271.445075][ C3] ? __pfx_dev_printk_emit+0x10/0x10 [ 271.445097][ C3] ? ret_from_fork+0x5d4/0x6f0 [ 271.445144][ C3] __dev_printk+0xf5/0x270 [ 271.445173][ C3] _dev_notice+0xe4/0x120 [ 271.445198][ C3] ? __pfx__dev_notice+0x10/0x10 [ 271.445230][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.445255][ C3] ? trace_kmalloc+0x2b/0xd0 [ 271.445281][ C3] ? __kmalloc_noprof+0x242/0x510 [ 271.445311][ C3] usb_get_configuration+0x4fb7/0x6530 [ 271.445376][ C3] ? __pfx_usb_get_configuration+0x10/0x10 [ 271.445404][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.445434][ C3] ? mark_held_locks+0x49/0x80 [ 271.445470][ C3] usb_new_device+0x11d3/0x1a60 [ 271.445503][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.445535][ C3] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.445560][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 271.445591][ C3] ? mark_held_locks+0x49/0x80 [ 271.445629][ C3] hub_event+0x2f34/0x4fe0 [ 271.445688][ C3] ? __pfx_hub_event+0x10/0x10 [ 271.445714][ C3] ? pool_move_batch+0x290/0x290 [ 271.445758][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.445788][ C3] process_one_work+0x9cc/0x1b70 [ 271.445822][ C3] ? __pfx_hcd_resume_work+0x10/0x10 [ 271.445855][ C3] ? __pfx_process_one_work+0x10/0x10 [ 271.445889][ C3] ? assign_work+0x1a0/0x250 [ 271.445914][ C3] worker_thread+0x6c8/0xf10 [ 271.445952][ C3] ? __pfx_worker_thread+0x10/0x10 [ 271.445975][ C3] kthread+0x3c2/0x780 [ 271.446007][ C3] ? __pfx_kthread+0x10/0x10 [ 271.446030][ C3] ? rcu_is_watching+0x12/0xc0 [ 271.446058][ C3] ? __pfx_kthread+0x10/0x10 [ 271.446083][ C3] ret_from_fork+0x5d4/0x6f0 [ 271.446104][ C3] ? __pfx_kthread+0x10/0x10 [ 271.446128][ C3] ret_from_fork_asm+0x1a/0x30 [ 271.446170][ C3] [ 271.457342][ C3] Kernel Offset: disabled VM DIAGNOSIS: 02:33:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880250c2440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d66b5000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000000e380000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000110208ffff ffffffff00000080 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67387876 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff67387876 00007fff6738787c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09093974a8 00007f09093974a0 00007f0909397498 00007f0909397470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0909efd100 00007f0909397460 00007f0909390004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09093974b8 00007f09093974b0 00007f09093974a8 00007f09093974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a1db549ec36be7c fddd5de6431284cf abe5168cd7124e9e 4834bdc82c8910d2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf186ca786eb6b0d c39861b0a3cb9a58 f3f512d69b0c7f0c 0e668e75a601141c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c4c321d13e49d63 268dab33d89ac57d a06474ddbe47d1d8 cd6e17ba1ba068d3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a1db549ec36be7c fddd5de6431284cf abe5168cd7124e9e 4834bdc82c8910d2 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84405c2feb196539 1659e4d978f8b348 0b3228bc6daa97f2 b93e4f2b39fdeaa7 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888022c9c880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f99a7173f98 CR3=00000000332a3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b2948cbc63699ad 60b93568bff4e5bc ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c3704b71fb4b79 363623e5cd175f61 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbe7babc589ffecf 93f533457a07e581 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3bc8750353e1dad 816aea1074745f95 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a5cb8c0000 00a5804b00000372 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b64992c4cbd0000 d042000076940000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e202000000a574a2 00a574719c94b042 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00a584ad000005c2 cd0c00006f5b8c72 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4043250a7a35c211 7accd3c5eeb08433 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 463ad8c0c704d1c0 ba6317cded82a346 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b4f7974a8 00007f3b4f7974a0 00007f3b4f797498 00007f3b4f797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b502fd100 00007f3b4f797460 00007f3b4f790004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3b4f7974b8 00007f3b4f7974b0 00007f3b4f7974a8 00007f3b4f7974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888027eac880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff8880d68b5000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f87241cd4e8 CR3=000000003495b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900006f85e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0b9b1a9a84 CR3=000000004ecb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb65dd2f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbdafb0c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbdafb0c6 00007ffcbdafb0cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb67c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000332e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c255c1a881994f97 04ece6dd3d519928 42fceca5654b2d93 aa5cfab49a7002f8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9a19ffc79b5ee4b cf2bc1b87bc222cf 00acf408e6346eb3 39ad9448493cccd9 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b172a9158cc6f3f e14c05a4c756f3f4 586b56aeb9114205 1f1e9a1f456a263a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04fe6636c957185b b1fbef2ca666cec9 de04ab3248520ea7 0d6ec255c1a88199 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f9704ece6dd3d51 992842fceca5654b 2d93aa5cfab49a70 02f81475e1fac4a7 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000