last executing test programs: 6m14.464086382s ago: executing program 3 (id=23298): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES8=r1], 0x54}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6m14.385727219s ago: executing program 3 (id=23299): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) lchown(0x0, 0x0, 0xee01) 6m14.385470643s ago: executing program 3 (id=23300): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002"], 0xd4}}, 0x0) 6m14.322331592s ago: executing program 3 (id=23303): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000, {r0}}, 0x20) 6m14.265254452s ago: executing program 3 (id=23304): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="53cd1aca6e8bd9fbb40916f97078f44876a6e738448f9a395d1ad83a5314bcbb8bb76b1c2e443eec36228f8eeba115001ea3d8120871e006f075bd272de13badeb5ced8cec0f80c373812f3abb2b78a93389a38b1dbf67b5d953f73ef9f876172ec2dcc1fb3f5d3bcc2628fa4c7fefbecab8", 0x72}], 0x1, 0x3, 0xaf6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4) 6m14.264951822s ago: executing program 3 (id=23305): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) 6m14.18636502s ago: executing program 32 (id=23305): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) 4m58.965388783s ago: executing program 4 (id=24316): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x6, '\x00', 0xb}, {0xff, 0xae, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x3, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0xec, 0xc}, {0xff, 0x5, 0xb, '\x00', 0x81}, {0xd7, 0x10, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x9, 0x2, '\x00', 0x8}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x11, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x6}, {0x1, 0x23, 0xb3, '\x00', 0x6}, {0x7, 0x2, 0x4}]}}) 4m58.015473345s ago: executing program 0 (id=24319): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="0001"], 0x32) 4m57.800957056s ago: executing program 0 (id=24320): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m56.774793581s ago: executing program 2 (id=24327): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000) 4m56.754201472s ago: executing program 2 (id=24328): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 4m56.63113682s ago: executing program 2 (id=24329): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) 4m55.82513386s ago: executing program 2 (id=24330): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 4m55.729845752s ago: executing program 1 (id=24332): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 4m55.624949697s ago: executing program 1 (id=24333): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000080)="c0", 0x1, 0x4080, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4m55.554757071s ago: executing program 1 (id=24334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') 4m55.342505193s ago: executing program 1 (id=24335): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 4m55.342339815s ago: executing program 1 (id=24336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a1"], 0x0}, 0x0) 4m54.509988645s ago: executing program 2 (id=24337): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 4m54.323540614s ago: executing program 0 (id=24338): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 4m54.31382286s ago: executing program 4 (id=24339): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m54.175042413s ago: executing program 0 (id=24340): r0 = fsopen(&(0x7f0000000000)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 4m54.174638965s ago: executing program 4 (id=24341): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4m54.04994011s ago: executing program 0 (id=24342): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000080)="c0", 0x1, 0x4080, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4m54.015895344s ago: executing program 4 (id=24343): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m53.666608721s ago: executing program 4 (id=24344): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$chown(0x4, r0, 0x0, 0x0) 4m52.75476474s ago: executing program 1 (id=24345): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m49.838146951s ago: executing program 4 (id=24346): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') 4m49.837800098s ago: executing program 0 (id=24347): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m43.120557024s ago: executing program 2 (id=24348): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4m21.340823625s ago: executing program 33 (id=24345): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m58.110894487s ago: executing program 34 (id=24347): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m57.283000351s ago: executing program 35 (id=24348): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 3m57.274486459s ago: executing program 36 (id=24346): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') 1.49681259s ago: executing program 6 (id=29844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 888.379452ms ago: executing program 8 (id=29869): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 818.445925ms ago: executing program 8 (id=29870): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[], 0x0) 808.153899ms ago: executing program 8 (id=29871): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x6a) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, 0x0, 0x0, 0x2010) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r5, 0x1) 728.392098ms ago: executing program 8 (id=29872): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 728.231371ms ago: executing program 8 (id=29873): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 659.410674ms ago: executing program 8 (id=29874): mknod$loop(0x0, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f56584839e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x10ac, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) 658.900581ms ago: executing program 7 (id=29875): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 589.299064ms ago: executing program 7 (id=29876): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCL_SETVESABLANK(r0, 0x800455cc, 0x0) 589.150244ms ago: executing program 7 (id=29877): r0 = syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000580)="13a2c3b3b1", {0x9, 0x2f87, 0x3447504d, 0x4, 0x0, 0xcd, 0xb, 0x2}}) 589.073805ms ago: executing program 7 (id=29878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000004a00010000000000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fefcff"], 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 518.604865ms ago: executing program 7 (id=29879): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 517.985749ms ago: executing program 7 (id=29881): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 279.590777ms ago: executing program 6 (id=29882): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 279.082092ms ago: executing program 6 (id=29884): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 278.92975ms ago: executing program 5 (id=29885): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x60000000000, 0x36003) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)) 219.176568ms ago: executing program 6 (id=29886): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 219.009563ms ago: executing program 6 (id=29887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x24, 0x2) 217.739439ms ago: executing program 5 (id=29888): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_gettime(0x1, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {r2, r3+60000000}}, 0x0) timer_gettime(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r5, &(0x7f0000000180)="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", 0x184) 158.704718ms ago: executing program 6 (id=29889): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) read(r3, &(0x7f00000002c0)=""/237, 0xed) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 158.395539ms ago: executing program 5 (id=29890): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000040)=0x80, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 80.171088ms ago: executing program 5 (id=29891): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}], 0x4}, 0x1009}], 0x2, 0x40012160, 0x0) 79.966278ms ago: executing program 5 (id=29892): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000780)=""/234, 0xea}], 0x6}, 0x1009}], 0x2, 0x40012160, 0x0) 0s ago: executing program 5 (id=29893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, 0x0}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1213.739394][ T40] audit: type=1400 audit(6294968274.558:666): avc: denied { ioctl } for pid=838 comm="syz.5.27375" path="socket:[385626]" dev="sockfs" ino=385626 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1213.827051][ T40] audit: type=1800 audit(6294968274.638:667): pid=851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.27380" name="blkio.bfq.group_wait_time" dev="overlay" ino=825 res=0 errno=0 [ 1213.873240][ T857] netlink: 'syz.6.27383': attribute type 1 has an invalid length. [ 1214.187065][T17558] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 1214.346989][T17558] usb 11-1: Using ep0 maxpacket: 8 [ 1214.353224][T17558] usb 11-1: config index 0 descriptor too short (expected 47, got 45) [ 1214.357259][T17558] usb 11-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1214.361384][T17558] usb 11-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1214.365183][T17558] usb 11-1: config 17 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 40750, setting to 64 [ 1214.377827][T17558] usb 11-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1214.381092][T17558] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.383704][T17558] usb 11-1: Product: syz [ 1214.390289][T17558] usb 11-1: Manufacturer: syz [ 1214.391921][T17558] usb 11-1: SerialNumber: syz [ 1214.398366][T17558] usbtouchscreen 11-1:17.0: probe with driver usbtouchscreen failed with error -8 [ 1214.432334][ T40] audit: type=1800 audit(6294968275.248:668): pid=877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.27394" name="blkio.bfq.group_wait_time" dev="overlay" ino=915 res=0 errno=0 [ 1214.598978][ T1462] usb 11-1: USB disconnect, device number 15 [ 1214.604567][ T889] virtio-fs: tag not found [ 1215.013107][ T40] audit: type=1800 audit(6294968275.828:669): pid=923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.27415" name="blkio.bfq.group_wait_time" dev="overlay" ino=1699 res=0 errno=0 [ 1215.078705][ T930] fuse: Unknown parameter '0x0000000000000007' [ 1215.220711][ T40] audit: type=1800 audit(6294968276.038:670): pid=947 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.27427" name="blkio.bfq.group_wait_time" dev="overlay" ino=1725 res=0 errno=0 [ 1215.373160][ T40] audit: type=1800 audit(6294968276.188:671): pid=985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.27440" name="blkio.bfq.group_wait_time" dev="overlay" ino=895 res=0 errno=0 [ 1215.483962][ T1000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27445'. [ 1215.532346][ T1004] fuse: Unknown parameter '0x0000000000000007' [ 1215.556976][T17558] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 1215.724455][ T1028] fuse: Unknown parameter '0x0000000000000007' [ 1215.727674][T17558] usb 13-1: Using ep0 maxpacket: 8 [ 1215.734808][T17558] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1215.739603][T17558] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1215.744703][T17558] usb 13-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1215.748189][T17558] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.752068][T17558] usb 13-1: Product: syz [ 1215.754099][T17558] usb 13-1: Manufacturer: syz [ 1215.756246][T17558] usb 13-1: SerialNumber: syz [ 1215.761770][T17558] usb 13-1: config 0 descriptor?? [ 1216.179669][T26352] usb 13-1: USB disconnect, device number 14 [ 1216.192304][ T1052] fuse: Unknown parameter '0x0000000000000007' [ 1216.662453][ T1084] fuse: Unknown parameter 'fd0x0000000000000007' [ 1216.887004][ T1462] usb 12-1: new full-speed USB device number 16 using dummy_hcd [ 1216.890687][ T1106] netlink: 'syz.8.27491': attribute type 4 has an invalid length. [ 1216.893266][ T1106] netlink: 'syz.8.27491': attribute type 5 has an invalid length. [ 1216.895877][ T1106] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.27491'. [ 1216.934847][ T1111] netlink: 'syz.6.27494': attribute type 4 has an invalid length. [ 1217.042237][ T1462] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1217.046329][ T1462] usb 12-1: not running at top speed; connect to a high speed hub [ 1217.051101][ T1462] usb 12-1: config 12 has an invalid interface number: 184 but max is 0 [ 1217.054732][ T1462] usb 12-1: config 12 has no interface number 0 [ 1217.058266][ T1462] usb 12-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1217.064997][ T1462] usb 12-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1217.070251][ T1462] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.073896][ T1462] usb 12-1: Product: syz [ 1217.075692][ T1462] usb 12-1: Manufacturer: syz [ 1217.078256][ T1462] usb 12-1: SerialNumber: syz [ 1217.163419][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 1217.163492][ T40] audit: type=1400 audit(6294968277.978:677): avc: denied { lock } for pid=1144 comm="syz.8.27504" path="socket:[388011]" dev="sockfs" ino=388011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1217.291252][ T1462] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 1217.315606][ T1462] usb 12-1: USB disconnect, device number 16 [ 1217.342773][T26206] udevd[26206]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.827018][ T1175] xt_CT: No such helper "netbios-ns" [ 1218.139649][ T1192] tipc: Started in network mode [ 1218.141279][ T1192] tipc: Node identity 4, cluster identity 4711 [ 1218.143314][ T1192] tipc: Node number set to 4 [ 1218.412953][ T1212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27528'. [ 1218.796967][ T40] audit: type=1800 audit(6294968279.608:678): pid=1242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.27542" name="blkio.bfq.group_wait_time" dev="overlay" ino=1129 res=0 errno=0 [ 1219.505818][ T40] audit: type=1400 audit(6294968280.318:679): avc: denied { read } for pid=1264 comm="syz.8.27552" path="socket:[389261]" dev="sockfs" ino=389261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1219.767922][ T1462] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1219.917110][ T1462] usb 10-1: Using ep0 maxpacket: 16 [ 1219.923589][ T1462] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.931906][ T1462] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1219.935883][ T1462] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1219.940885][ T1462] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1219.949078][ T1462] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1219.953149][ T1462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.956538][ T1462] usb 10-1: Product: syz [ 1219.959332][ T1462] usb 10-1: Manufacturer: syz [ 1219.961454][ T1462] usb 10-1: SerialNumber: syz [ 1220.035013][ T40] audit: type=1800 audit(6294968280.848:680): pid=1303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.27571" name="blkio.bfq.group_wait_time" dev="overlay" ino=1025 res=0 errno=0 [ 1220.174689][ T1462] usb 10-1: 0:2 : does not exist [ 1220.191627][ T1462] usb 10-1: USB disconnect, device number 5 [ 1220.214603][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.713454][ T40] audit: type=1800 audit(6294968281.528:681): pid=1323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.27581" name="blkio.bfq.group_wait_time" dev="overlay" ino=1909 res=0 errno=0 [ 1220.966976][ T9] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 1221.137049][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 1221.140578][ T9] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.141556][ T40] audit: type=1800 audit(6294968281.958:682): pid=1346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.27591" name="blkio.bfq.group_wait_time" dev="overlay" ino=1069 res=0 errno=0 [ 1221.143898][ T9] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1221.146214][ T9] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.159448][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.162147][ T9] usb 11-1: Product: syz [ 1221.163589][ T9] usb 11-1: Manufacturer: syz [ 1221.165404][ T9] usb 11-1: SerialNumber: syz [ 1221.380509][ T9] usb 11-1: 0:2 : does not exist [ 1221.385440][ T9] usb 11-1: 5:0: failed to get current value for ch 0 (-22) [ 1221.397439][ T9] usb 11-1: USB disconnect, device number 16 [ 1221.414773][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.627087][ T54] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 1221.777111][ T54] usb 13-1: Using ep0 maxpacket: 32 [ 1221.780524][ T54] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 1221.783447][ T54] usb 13-1: config 0 has no interface number 0 [ 1221.785653][ T54] usb 13-1: config 0 interface 184 has no altsetting 0 [ 1221.790000][ T54] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1221.793923][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.796626][ T54] usb 13-1: Product: syz [ 1221.798166][ T54] usb 13-1: Manufacturer: syz [ 1221.799791][ T54] usb 13-1: SerialNumber: syz [ 1221.803946][ T54] usb 13-1: config 0 descriptor?? [ 1221.809007][ T54] smsc75xx v1.0.0 [ 1222.008556][ T54] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1222.012038][ T54] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -71 [ 1222.020061][ T54] usb 13-1: USB disconnect, device number 15 [ 1222.240972][ T1410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.27619'. [ 1222.385807][ T40] audit: type=1400 audit(6294968283.198:683): avc: denied { name_bind } for pid=1428 comm="syz.7.27628" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1222.529098][ T6073] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1222.698136][ T6073] usb 10-1: Using ep0 maxpacket: 16 [ 1222.701175][ T6073] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.704518][ T6073] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1222.708812][ T6073] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1222.713727][ T6073] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1222.721846][ T6073] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.726865][ T6073] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.730998][ T6073] usb 10-1: Product: syz [ 1222.732896][ T6073] usb 10-1: Manufacturer: syz [ 1222.734999][ T6073] usb 10-1: SerialNumber: syz [ 1222.947974][ T6073] usb 10-1: 0:2 : does not exist [ 1222.962232][ T6073] usb 10-1: USB disconnect, device number 6 [ 1223.137354][ T1462] usb 11-1: new full-speed USB device number 17 using dummy_hcd [ 1223.299094][ T1462] usb 11-1: not running at top speed; connect to a high speed hub [ 1223.303725][ T1462] usb 11-1: config 95 has an invalid interface number: 1 but max is 0 [ 1223.307710][ T1462] usb 11-1: config 95 has no interface number 0 [ 1223.310059][ T1462] usb 11-1: config 95 interface 1 has no altsetting 0 [ 1223.314410][ T1462] usb 11-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1223.318732][ T1462] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.322243][ T1462] usb 11-1: Product: syz [ 1223.324142][ T1462] usb 11-1: Manufacturer: syz [ 1223.326117][ T1462] usb 11-1: SerialNumber: syz [ 1223.526975][T17558] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 1223.569672][ T1462] usb 11-1: USB disconnect, device number 17 [ 1223.603439][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.678829][T17558] usb 13-1: config 0 has no interfaces? [ 1223.683173][T17558] usb 13-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1223.686191][T17558] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.689627][T17558] usb 13-1: Product: syz [ 1223.691149][T17558] usb 13-1: Manufacturer: syz [ 1223.692843][T17558] usb 13-1: SerialNumber: syz [ 1223.695655][T17558] usb 13-1: config 0 descriptor?? [ 1224.002230][T17558] usb 13-1: USB disconnect, device number 16 [ 1224.006976][ T1462] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1224.120336][ T1579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1224.156968][ T1462] usb 10-1: Using ep0 maxpacket: 16 [ 1224.160864][ T1462] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.164491][ T1462] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.169064][ T1462] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.172629][ T1462] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1224.178783][ T1462] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.182163][ T1462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.185815][ T1462] usb 10-1: Product: syz [ 1224.188321][ T1462] usb 10-1: Manufacturer: syz [ 1224.190294][ T1462] usb 10-1: SerialNumber: syz [ 1224.220367][ T40] audit: type=1400 audit(6294968285.038:684): avc: denied { mount } for pid=1588 comm="syz.7.27698" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1224.403424][ T1462] usb 10-1: 0:2 : does not exist [ 1224.417856][ T1462] usb 10-1: USB disconnect, device number 7 [ 1224.435494][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.346970][ T54] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 1225.531243][ T54] usb 12-1: Using ep0 maxpacket: 16 [ 1225.534271][ T54] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.538681][ T54] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.541714][ T54] usb 12-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1225.545387][ T54] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1225.551664][ T54] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.554778][ T54] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.557639][ T54] usb 12-1: Product: syz [ 1225.559100][ T54] usb 12-1: Manufacturer: syz [ 1225.560690][ T54] usb 12-1: SerialNumber: syz [ 1225.769159][ T54] usb 12-1: 0:2 : does not exist [ 1225.778031][ T54] usb 12-1: USB disconnect, device number 17 [ 1225.793646][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1226.047058][ T40] audit: type=1800 audit(6294968286.858:685): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.27746" name="blkio.bfq.group_wait_time" dev="overlay" ino=1428 res=0 errno=0 [ 1226.382800][ T40] audit: type=1800 audit(6294968287.198:686): pid=1718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.27758" name="blkio.bfq.group_wait_time" dev="overlay" ino=1486 res=0 errno=0 [ 1226.692360][ T40] audit: type=1800 audit(6294968287.508:687): pid=1738 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.27768" name="blkio.bfq.group_wait_time" dev="overlay" ino=1163 res=0 errno=0 [ 1226.791962][ T40] audit: type=1326 audit(6294968287.608:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.6.27771" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cb0d8f6c9 code=0x0 [ 1227.856108][ T40] audit: type=1800 audit(6294968288.668:689): pid=1815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.27804" name="blkio.bfq.group_wait_time" dev="overlay" ino=1635 res=0 errno=0 [ 1228.033568][ T1831] netlink: 60 bytes leftover after parsing attributes in process `syz.5.27811'. [ 1228.041035][ T1833] tipc: Started in network mode [ 1228.042846][ T1833] tipc: Node identity 4, cluster identity 4711 [ 1228.044925][ T1833] tipc: Node number set to 4 [ 1228.222272][ T1856] tipc: Started in network mode [ 1228.224674][ T1856] tipc: Node identity 4, cluster identity 4711 [ 1228.228574][ T1856] tipc: Node number set to 4 [ 1228.967051][T26352] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1229.118566][T26352] usb 10-1: config 0 has an invalid interface number: 154 but max is 0 [ 1229.121868][T26352] usb 10-1: config 0 has no interface number 0 [ 1229.126303][T26352] usb 10-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 1229.130235][T26352] usb 10-1: New USB device strings: Mfr=123, Product=105, SerialNumber=3 [ 1229.136345][T26352] usb 10-1: Product: syz [ 1229.138233][T26352] usb 10-1: Manufacturer: syz [ 1229.140304][T26352] usb 10-1: SerialNumber: syz [ 1229.144939][T26352] usb 10-1: config 0 descriptor?? [ 1229.149487][T26352] flexcop_usb: set interface failed. [ 1229.151375][T26352] b2c2_flexcop_usb 10-1:0.154: probe with driver b2c2_flexcop_usb failed with error -22 [ 1229.191267][ T40] audit: type=1800 audit(6294968290.008:690): pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.27862" name="blkio.bfq.group_wait_time" dev="overlay" ino=1256 res=0 errno=0 [ 1229.351092][ T1462] usb 10-1: USB disconnect, device number 8 [ 1230.027348][ T2000] IPv6: NLM_F_CREATE should be specified when creating new route [ 1230.344170][ T2020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27881'. [ 1230.538515][ T2033] tipc: Started in network mode [ 1230.540228][ T2033] tipc: Node identity 4, cluster identity 4711 [ 1230.542811][ T2033] tipc: Node number set to 4 [ 1230.547174][ T1462] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 1230.614942][ T6073] kernel write not supported for file /slabinfo (pid: 6073 comm: kworker/3:5) [ 1230.707019][ T1462] usb 13-1: Using ep0 maxpacket: 32 [ 1230.714379][ T1462] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 1230.718564][ T1462] usb 13-1: config 0 has no interface number 0 [ 1230.722102][ T1462] usb 13-1: config 0 interface 184 has no altsetting 0 [ 1230.727547][ T46] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.732011][ T1462] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1230.735869][ T46] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.739562][ T46] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.743172][ T1462] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.743237][ T1462] usb 13-1: Product: syz [ 1230.743419][ T1462] usb 13-1: Manufacturer: syz [ 1230.747401][ T46] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.755570][ T1462] usb 13-1: SerialNumber: syz [ 1230.769461][ T1462] usb 13-1: config 0 descriptor?? [ 1230.779104][ T1462] smsc75xx v1.0.0 [ 1230.975860][ T1462] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1230.979586][ T1462] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -71 [ 1230.987187][ T1462] usb 13-1: USB disconnect, device number 17 [ 1231.498787][ T2097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27918'. [ 1231.892976][T26352] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 1231.973060][ T40] audit: type=1800 audit(6294968292.788:691): pid=2128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.27933" name="blkio.bfq.group_wait_time" dev="overlay" ino=2367 res=0 errno=0 [ 1232.067078][T26352] usb 13-1: Using ep0 maxpacket: 32 [ 1232.073197][T26352] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 1232.076835][T26352] usb 13-1: config 0 has no interface number 0 [ 1232.080446][T26352] usb 13-1: config 0 interface 184 has no altsetting 0 [ 1232.085317][T26352] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1232.089525][T26352] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.092468][T26352] usb 13-1: Product: syz [ 1232.094355][T26352] usb 13-1: Manufacturer: syz [ 1232.095798][ T2134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27937'. [ 1232.096297][T26352] usb 13-1: SerialNumber: syz [ 1232.104119][T26352] usb 13-1: config 0 descriptor?? [ 1232.110022][T26352] smsc75xx v1.0.0 [ 1232.311670][T26352] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1232.326508][T26352] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -71 [ 1232.331565][T26352] usb 13-1: USB disconnect, device number 18 [ 1232.764010][ T2195] vlan2: entered allmulticast mode [ 1233.787033][ T6023] usb 13-1: new full-speed USB device number 19 using dummy_hcd [ 1233.948172][ T6023] usb 13-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1233.951770][ T6023] usb 13-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1233.955187][ T6023] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1233.957741][ T6023] usb 13-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1233.960762][ T6023] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.972085][ T6023] usb 13-1: config 0 descriptor?? [ 1233.977173][ T2255] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1234.121412][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27997'. [ 1234.384799][ T6023] logitech 0003:046D:C24F.000F: unbalanced collection at end of report description [ 1234.388286][ T6023] logitech 0003:046D:C24F.000F: parse failed [ 1234.390386][ T6023] logitech 0003:046D:C24F.000F: probe with driver logitech failed with error -22 [ 1234.584837][ T53] usb 13-1: USB disconnect, device number 19 [ 1234.811400][ T6023] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 1234.957059][ T6023] usb 11-1: Using ep0 maxpacket: 16 [ 1234.962001][ T6023] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.966359][ T6023] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.970430][ T6023] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.975039][ T6023] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1234.986118][ T6023] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1234.989822][ T6023] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.992530][ T6023] usb 11-1: Product: syz [ 1234.994556][ T6023] usb 11-1: Manufacturer: syz [ 1234.996669][ T6023] usb 11-1: SerialNumber: syz [ 1235.021877][ T2354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.28019'. [ 1235.133824][ T2363] netlink: 44 bytes leftover after parsing attributes in process `syz.8.28023'. [ 1235.137869][ T2363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.28023'. [ 1235.206863][ T6023] usb 11-1: 0:2 : does not exist [ 1235.223524][ T6023] usb 11-1: USB disconnect, device number 18 [ 1235.238736][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.777587][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28029'. [ 1235.980962][ T40] audit: type=1800 audit(6294968296.798:692): pid=2386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.28032" name="blkio.bfq.group_wait_time" dev="overlay" ino=2036 res=0 errno=0 [ 1236.154284][ T40] audit: type=1800 audit(6294968296.968:693): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.28043" name="blkio.bfq.group_wait_time" dev="overlay" ino=2075 res=0 errno=0 [ 1236.497098][T17558] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 1236.507070][ T53] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 1236.656988][T17558] usb 13-1: Using ep0 maxpacket: 32 [ 1236.657090][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1236.660977][T17558] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 1236.663841][ T53] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.664707][T17558] usb 13-1: config 0 has no interface number 0 [ 1236.669272][ T53] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1236.671610][T17558] usb 13-1: config 0 interface 184 has no altsetting 0 [ 1236.674804][ T53] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.674819][ T53] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1236.679818][T17558] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1236.683049][ T53] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1236.685801][T17558] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.688803][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.688816][ T53] usb 11-1: Product: syz [ 1236.688824][ T53] usb 11-1: Manufacturer: syz [ 1236.688831][ T53] usb 11-1: SerialNumber: syz [ 1236.703738][T17558] usb 13-1: Product: syz [ 1236.705264][T17558] usb 13-1: Manufacturer: syz [ 1236.706940][T17558] usb 13-1: SerialNumber: syz [ 1236.710327][T17558] usb 13-1: config 0 descriptor?? [ 1236.714050][T17558] smsc75xx v1.0.0 [ 1236.900968][ T53] usb 11-1: 0:2 : does not exist [ 1236.909011][ T53] usb 11-1: USB disconnect, device number 19 [ 1236.915674][T17558] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1236.921640][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1236.924969][T17558] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -71 [ 1236.940035][T17558] usb 13-1: USB disconnect, device number 20 [ 1237.064563][ T2450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28060'. [ 1237.110972][ T40] audit: type=1800 audit(6294968297.928:694): pid=2454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.28061" name="blkio.bfq.group_wait_time" dev="overlay" ino=2174 res=0 errno=0 [ 1237.384385][ T40] audit: type=1800 audit(6294968298.198:695): pid=2480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.28073" name="blkio.bfq.group_wait_time" dev="overlay" ino=2629 res=0 errno=0 [ 1237.492286][ T2490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28078'. [ 1237.927420][ T53] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 1238.076979][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 1238.081036][ T53] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.091234][ T53] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.094557][ T53] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1238.099756][ T53] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1238.107329][ T53] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.111129][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.114491][ T53] usb 11-1: Product: syz [ 1238.116372][ T53] usb 11-1: Manufacturer: syz [ 1238.118580][ T53] usb 11-1: SerialNumber: syz [ 1238.203302][ T40] audit: type=1326 audit(6294968299.018:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.216488][ T40] audit: type=1326 audit(6294968299.018:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.228434][ T40] audit: type=1326 audit(6294968299.018:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.238686][ T40] audit: type=1326 audit(6294968299.018:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.247529][ T40] audit: type=1326 audit(6294968299.018:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.257406][ T40] audit: type=1326 audit(6294968299.018:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.5.28099" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb30f78f6c9 code=0x7ffc0000 [ 1238.286240][ T2542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28101'. [ 1238.327926][ T53] usb 11-1: 0:2 : does not exist [ 1238.343215][ T53] usb 11-1: USB disconnect, device number 20 [ 1238.360178][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.610037][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.612270][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.707049][ T6023] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 1238.857031][ T6023] usb 12-1: Using ep0 maxpacket: 32 [ 1238.861677][ T6023] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1238.867529][ T6023] usb 12-1: config 6 has an invalid interface number: 5 but max is 0 [ 1238.871094][ T6023] usb 12-1: config 6 has no interface number 0 [ 1238.875362][ T6023] usb 12-1: config 6 interface 5 has no altsetting 0 [ 1238.882100][ T6023] usb 12-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=ee.cc [ 1238.886065][ T6023] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.890378][ T6023] usb 12-1: Product: syz [ 1238.892564][ T6023] usb 12-1: Manufacturer: syz [ 1238.894598][ T6023] usb 12-1: SerialNumber: syz [ 1239.108046][ T6023] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1239.110582][ T6023] gspca_sn9c2028: read1 error -71 [ 1239.112604][ T6023] gspca_sn9c2028: read1 error -71 [ 1239.114503][ T6023] gspca_sn9c2028: read1 error -71 [ 1239.116206][ T6023] sn9c2028 12-1:6.5: probe with driver sn9c2028 failed with error -71 [ 1239.122320][ T6023] usb 12-1: USB disconnect, device number 18 [ 1239.226967][ T9] usb 13-1: new full-speed USB device number 21 using dummy_hcd [ 1239.388336][ T9] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1239.391918][ T9] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.395843][ T9] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1239.398957][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1239.401624][ T9] usb 13-1: SerialNumber: syz [ 1239.405935][ T9] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -22 [ 1239.409100][ T9] usb-storage 13-1:1.0: USB Mass Storage device detected [ 1239.425442][ T9] usb-storage 13-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1239.607854][ T6023] usb 13-1: USB disconnect, device number 21 [ 1241.089100][ T2676] overlayfs: missing 'workdir' [ 1241.154885][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 1241.154895][ T40] audit: type=1800 audit(6294968301.968:710): pid=2686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.28156" name="blkio.bfq.group_wait_time" dev="overlay" ino=2804 res=0 errno=0 [ 1241.288089][ T2704] overlayfs: missing 'workdir' [ 1241.483228][ T40] audit: type=1800 audit(6294968302.298:711): pid=2717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.28168" name="blkio.bfq.group_wait_time" dev="overlay" ino=2356 res=0 errno=0 [ 1241.522116][ T40] audit: type=1400 audit(6294968302.338:712): avc: denied { create } for pid=2718 comm="syz.7.28169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1241.769341][ T2756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1241.815110][ T2764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28186'. [ 1241.966376][ T2800] overlayfs: missing 'lowerdir' [ 1241.995896][ T2807] team_slave_0: entered promiscuous mode [ 1241.998361][ T2807] team_slave_1: entered promiscuous mode [ 1242.000959][ T2807] macsec1: entered allmulticast mode [ 1242.003373][ T2807] team0: entered allmulticast mode [ 1242.005514][ T2807] team_slave_0: entered allmulticast mode [ 1242.008450][ T2807] team_slave_1: entered allmulticast mode [ 1242.101118][ T2832] overlayfs: missing 'lowerdir' [ 1242.314256][ T2861] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1242.318197][ T2861] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1242.328067][T17558] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 1242.340482][ T40] audit: type=1800 audit(6294968303.158:713): pid=2863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.28224" name="blkio.bfq.group_wait_time" dev="overlay" ino=1989 res=0 errno=0 [ 1242.406618][ T2872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28227'. [ 1242.497005][T17558] usb 12-1: Using ep0 maxpacket: 8 [ 1242.500058][T17558] usb 12-1: too many endpoints for config 0 interface 0 altsetting 3: 64, using maximum allowed: 30 [ 1242.503688][T17558] usb 12-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1242.509322][T17558] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1242.513422][T17558] usb 12-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 1242.516983][T17558] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.520416][T17558] usb 12-1: Product: syz [ 1242.522302][T17558] usb 12-1: Manufacturer: syz [ 1242.524387][T17558] usb 12-1: SerialNumber: syz [ 1242.535078][T17558] usb 12-1: config 0 descriptor?? [ 1242.598432][ T2889] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1242.602410][ T2889] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1242.700665][ T40] audit: type=1400 audit(6294968303.518:714): avc: denied { bind } for pid=2876 comm="syz.5.28229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1242.740040][ T40] audit: type=1400 audit(6294968303.518:715): avc: denied { setopt } for pid=2876 comm="syz.5.28229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1242.776171][T17558] comedi comedi5: could not set alternate setting 3 in high speed [ 1242.796640][T17558] usbdux 12-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1242.809143][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28229'. [ 1242.811104][T17558] usbdux 12-1:0.0: probe with driver usbdux failed with error -71 [ 1242.815602][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28229'. [ 1242.816201][T17558] usb 12-1: USB disconnect, device number 19 [ 1242.838646][ T40] audit: type=1800 audit(6294968303.658:716): pid=2894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.28235" name="blkio.bfq.group_wait_time" dev="overlay" ino=1711 res=0 errno=0 [ 1242.916972][ T6023] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 1243.067041][ T6023] usb 13-1: Using ep0 maxpacket: 16 [ 1243.071009][ T6023] usb 13-1: config 0 has no interfaces? [ 1243.075174][ T6023] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1243.078867][ T6023] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.082074][ T6023] usb 13-1: Product: syz [ 1243.083761][ T6023] usb 13-1: Manufacturer: syz [ 1243.085669][ T6023] usb 13-1: SerialNumber: syz [ 1243.090089][ T6023] usb 13-1: config 0 descriptor?? [ 1243.296574][ T6023] usb 13-1: USB disconnect, device number 22 [ 1243.633975][ T40] audit: type=1800 audit(6294968304.448:717): pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.28258" name="blkio.bfq.group_wait_time" dev="overlay" ino=1807 res=0 errno=0 [ 1243.944938][ T40] audit: type=1800 audit(6294968304.758:718): pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.28268" name="blkio.bfq.group_wait_time" dev="overlay" ino=3071 res=0 errno=0 [ 1243.955278][ T6023] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 1244.097063][ T54] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 1244.127760][ T6023] usb 11-1: Using ep0 maxpacket: 8 [ 1244.131293][ T6023] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1244.134843][ T6023] usb 11-1: config 4 interface 0 has no altsetting 0 [ 1244.139413][ T6023] usb 11-1: string descriptor 0 read error: -22 [ 1244.141640][ T6023] usb 11-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee [ 1244.144764][ T6023] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.154689][ T6023] usb 11-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1244.164221][ T6023] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1244.169425][ T6023] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1244.172358][ T6023] usb 11-1: media controller created [ 1244.181878][ T6023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1244.227181][T26352] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1244.368319][ T54] usb 13-1: Using ep0 maxpacket: 16 [ 1244.376325][ T54] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.381938][ T54] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.385155][ T54] usb 13-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1244.387044][T26352] usb 10-1: Using ep0 maxpacket: 16 [ 1244.388181][ T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.391334][T26352] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.393754][ T54] usb 13-1: config 0 descriptor?? [ 1244.395982][T26352] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.400856][T26352] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1244.404708][T26352] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.411358][T26352] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.414646][T26352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.417470][T26352] usb 10-1: Product: syz [ 1244.418954][T26352] usb 10-1: Manufacturer: syz [ 1244.420655][T26352] usb 10-1: SerialNumber: syz [ 1244.563874][ T53] usb 11-1: USB disconnect, device number 21 [ 1244.629780][T26352] usb 10-1: 0:2 : does not exist [ 1244.669202][T26352] usb 10-1: USB disconnect, device number 9 [ 1244.809637][ T54] hid-multitouch 0003:1FD2:6007.0010: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1245.004499][ T6023] usb 13-1: USB disconnect, device number 23 [ 1245.341637][ T3032] overlayfs: failed to resolve './file0': -2 [ 1245.427404][ T3040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.28287'. [ 1245.847088][ T6073] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 1245.997293][ T6073] usb 13-1: Using ep0 maxpacket: 32 [ 1246.000466][ T6073] usb 13-1: config 0 has an invalid interface number: 38 but max is 0 [ 1246.003284][ T6073] usb 13-1: config 0 has no interface number 0 [ 1246.005393][ T6073] usb 13-1: config 0 interface 38 has no altsetting 0 [ 1246.009548][ T6073] usb 13-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1246.012650][ T6073] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.015346][ T6073] usb 13-1: Product: syz [ 1246.016813][ T6073] usb 13-1: Manufacturer: syz [ 1246.018785][ T6073] usb 13-1: SerialNumber: syz [ 1246.021601][ T6073] usb 13-1: config 0 descriptor?? [ 1246.025713][ T6073] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1246.058016][T26352] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 1246.207033][T26352] usb 11-1: Using ep0 maxpacket: 32 [ 1246.210981][T26352] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1246.214691][T26352] usb 11-1: config 0 has no interface number 0 [ 1246.217818][T26352] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1246.222702][T26352] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1246.226680][T26352] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.230194][T26352] usb 11-1: Product: syz [ 1246.232092][T26352] usb 11-1: Manufacturer: syz [ 1246.234159][T26352] usb 11-1: SerialNumber: syz [ 1246.238535][T26352] usb 11-1: config 0 descriptor?? [ 1246.243302][T26352] smsc75xx v1.0.0 [ 1246.443074][T26352] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1246.447874][T26352] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1246.452606][T26352] usb 11-1: USB disconnect, device number 22 [ 1246.831201][ T6073] input: gspca_pac7302 as /devices/platform/dummy_hcd.8/usb13/13-1/input/input67 [ 1247.035709][ T6073] usb 13-1: USB disconnect, device number 24 [ 1247.145138][ T3135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.28333'. [ 1247.296595][ T3148] 9pnet_fd: Insufficient options for proto=fd [ 1247.356125][ T40] audit: type=1400 audit(6294968308.168:719): avc: denied { bind } for pid=3151 comm="syz.7.28341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1247.365973][ T40] audit: type=1400 audit(6294968308.178:720): avc: denied { listen } for pid=3151 comm="syz.7.28341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1247.703617][ T3192] netlink: 272 bytes leftover after parsing attributes in process `syz.8.28359'. [ 1248.227277][ T3254] netlink: 260 bytes leftover after parsing attributes in process `syz.7.28387'. [ 1248.391296][ T3278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28399'. [ 1248.772152][ T3317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28414'. [ 1249.011866][ T40] audit: type=1400 audit(6294968309.828:721): avc: denied { create } for pid=3372 comm="syz.8.28436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1249.022515][ T40] audit: type=1400 audit(6294968309.828:722): avc: denied { setopt } for pid=3372 comm="syz.8.28436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1249.074542][ T3381] netlink: 'syz.6.28440': attribute type 4 has an invalid length. [ 1249.221380][ T3404] netlink: 104 bytes leftover after parsing attributes in process `syz.6.28451'. [ 1249.330620][ T3428] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1249.333253][ T3428] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1249.338349][ T3428] vhci_hcd vhci_hcd.0: Device attached [ 1249.384958][ T3429] vhci_hcd: connection closed [ 1249.388361][T18382] vhci_hcd: stop threads [ 1249.393832][T18382] vhci_hcd: release socket [ 1249.395925][T18382] vhci_hcd: disconnect device [ 1249.681682][ T3466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28474'. [ 1249.889846][ T40] audit: type=1400 audit(6294968310.708:723): avc: denied { map } for pid=3474 comm="syz.5.28478" path="socket:[400217]" dev="sockfs" ino=400217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1249.898593][ T40] audit: type=1400 audit(6294968310.708:724): avc: denied { read } for pid=3474 comm="syz.5.28478" path="socket:[400217]" dev="sockfs" ino=400217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1249.968814][ T3488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28483'. [ 1250.161564][ T3508] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28492'. [ 1250.183444][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.330051][T17558] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 1250.497024][T17558] usb 13-1: Using ep0 maxpacket: 32 [ 1250.500622][T17558] usb 13-1: config 0 has an invalid interface number: 184 but max is 0 [ 1250.503800][T17558] usb 13-1: config 0 has no interface number 0 [ 1250.505995][T17558] usb 13-1: config 0 interface 184 has no altsetting 0 [ 1250.510025][T17558] usb 13-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1250.513019][T17558] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.515796][T17558] usb 13-1: Product: syz [ 1250.517479][T17558] usb 13-1: Manufacturer: syz [ 1250.519121][T17558] usb 13-1: SerialNumber: syz [ 1250.522350][T17558] usb 13-1: config 0 descriptor?? [ 1250.526296][T17558] smsc75xx v1.0.0 [ 1250.567027][ T6073] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1250.727733][T17558] smsc75xx 13-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1250.732229][T17558] smsc75xx 13-1:0.184: probe with driver smsc75xx failed with error -71 [ 1250.733649][ T6073] usb 10-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1250.738887][ T6073] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.740406][T17558] usb 13-1: USB disconnect, device number 25 [ 1250.743136][ T6073] usb 10-1: config 0 descriptor?? [ 1251.165907][ T6073] lenovo 0003:17EF:6062.0011: hidraw1: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.5-1/input0 [ 1251.365171][ T3549] overlayfs: missing 'lowerdir' [ 1251.372997][ T53] usb 10-1: USB disconnect, device number 10 [ 1251.485239][ T3568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28515'. [ 1251.581546][ T3578] overlayfs: missing 'lowerdir' [ 1252.219880][ T3616] program syz.8.28539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1252.495370][ T3642] overlayfs: missing 'lowerdir' [ 1252.718831][ T3670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1252.721785][ T3670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1252.903807][ T40] audit: type=1400 audit(6294968313.718:725): avc: denied { ioctl } for pid=3687 comm="syz.7.28575" path="socket:[401145]" dev="sockfs" ino=401145 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1253.119744][ T40] audit: type=1400 audit(6294968313.928:726): avc: denied { read } for pid=3695 comm="syz.6.28578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1253.129010][ T3703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3703 comm=syz.7.28581 [ 1253.716327][ T3731] sctp: [Deprecated]: syz.7.28593 (pid 3731) Use of int in max_burst socket option. [ 1253.716327][ T3731] Use struct sctp_assoc_value instead [ 1253.847041][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1253.917035][T26185] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 1254.007426][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1254.017274][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.020702][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1254.023738][ T9] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1254.029707][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1254.039392][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1254.042365][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.045014][ T9] usb 10-1: Product: syz [ 1254.046422][ T9] usb 10-1: Manufacturer: syz [ 1254.048281][ T9] usb 10-1: SerialNumber: syz [ 1254.068062][T26185] usb 13-1: Using ep0 maxpacket: 16 [ 1254.072653][T26185] usb 13-1: config 0 has an invalid interface number: 163 but max is 0 [ 1254.076151][T26185] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.080639][T26185] usb 13-1: config 0 has no interface number 0 [ 1254.083301][T26185] usb 13-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1254.088280][T26185] usb 13-1: config 0 interface 163 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1254.093139][T26185] usb 13-1: config 0 interface 163 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1254.101146][T26185] usb 13-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=39.b6 [ 1254.105042][T26185] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.108874][T26185] usb 13-1: Product: syz [ 1254.110732][T26185] usb 13-1: Manufacturer: syz [ 1254.112767][T26185] usb 13-1: SerialNumber: syz [ 1254.118260][T26185] usb 13-1: config 0 descriptor?? [ 1254.124281][T26185] HFC-S_USB 13-1:0.163: probe with driver HFC-S_USB failed with error -5 [ 1254.194621][ T3757] SET target dimension over the limit! [ 1254.263256][ T9] usb 10-1: 0:2 : does not exist [ 1254.275082][ T9] usb 10-1: USB disconnect, device number 11 [ 1254.324225][T17558] usb 13-1: USB disconnect, device number 26 [ 1254.502569][ T3784] binder: Bad value for 'max' [ 1255.083371][ T3831] overlayfs: missing 'workdir' [ 1255.473677][ T3886] overlayfs: missing 'workdir' [ 1256.528346][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.543409][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.546627][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.550834][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.558885][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.661654][ T3995] chnl_net:caif_netlink_parms(): no params data found [ 1256.737143][ T3995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.740137][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.742529][ T3995] bridge_slave_0: entered allmulticast mode [ 1256.745617][ T3995] bridge_slave_0: entered promiscuous mode [ 1256.749924][ T3995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.752315][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.755270][ T3995] bridge_slave_1: entered allmulticast mode [ 1256.758553][ T3995] bridge_slave_1: entered promiscuous mode [ 1256.802084][ T3995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.811472][ T3995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.869094][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.873414][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.885799][ T3995] team0: Port device team_slave_0 added [ 1256.889904][ T3995] team0: Port device team_slave_1 added [ 1256.928725][ T3995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.931524][ T3995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.947327][ T3995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.961112][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.965301][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.974227][ T3995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.976745][ T3995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.987019][ T3995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.025641][ T3995] hsr_slave_0: entered promiscuous mode [ 1257.028399][ T3995] hsr_slave_1: entered promiscuous mode [ 1257.037105][ T6005] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 1257.081336][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.085559][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.151480][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.154886][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.187066][ T6005] usb 11-1: Using ep0 maxpacket: 16 [ 1257.190547][ T6005] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.194515][ T6005] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1257.198504][ T6005] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1257.202322][ T6005] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1257.209750][ T6005] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1257.213562][ T6005] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.217093][ T6005] usb 11-1: Product: syz [ 1257.218920][ T6005] usb 11-1: Manufacturer: syz [ 1257.220841][ T6005] usb 11-1: SerialNumber: syz [ 1257.274597][ T12] bridge_slave_1: left allmulticast mode [ 1257.276493][ T12] bridge_slave_1: left promiscuous mode [ 1257.278714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.282607][ T12] bridge_slave_0: left allmulticast mode [ 1257.284522][ T12] bridge_slave_0: left promiscuous mode [ 1257.286461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.430893][ T6005] usb 11-1: 0:2 : does not exist [ 1257.438249][ T6005] usb 11-1: USB disconnect, device number 23 [ 1257.453237][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.623693][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.630378][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.636245][ T12] bond0 (unregistering): Released all slaves [ 1257.711937][ T12] tipc: Left network mode [ 1257.920159][ T12] hsr_slave_0: left promiscuous mode [ 1257.922929][ T12] hsr_slave_1: left promiscuous mode [ 1257.925187][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.928473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.931559][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.934009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.951996][ T12] veth1_macvtap: left promiscuous mode [ 1257.953921][ T12] veth0_macvtap: left promiscuous mode [ 1257.955884][ T12] veth1_vlan: left promiscuous mode [ 1257.958091][ T12] veth0_vlan: left promiscuous mode [ 1258.619769][T26210] Bluetooth: hci1: command tx timeout [ 1258.751748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1258.850477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1259.539101][ T4046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1259.542490][ T4046] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1259.549829][ T4046] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1259.554548][ T4046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1259.557599][ T4046] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1259.564123][ T4046] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1259.572519][ T4046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1259.575106][ T4046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1259.585391][ T4046] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1259.588789][ T4046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1259.591292][ T4046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1259.598371][ T4046] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1259.667358][ T3995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1259.678868][ T3995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1259.686209][ T3995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1259.700372][ T3995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1259.777918][ T3995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.800703][ T3995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.813839][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.817069][T18382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.823220][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.825772][T18382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.940173][ T3995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.011616][ T40] audit: type=1400 audit(6294968320.828:727): avc: denied { ioctl } for pid=4132 comm="syz.7.28760" path="socket:[405032]" dev="sockfs" ino=405032 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1260.087001][ T40] audit: type=1400 audit(6294968320.898:728): avc: denied { wake_alarm } for pid=4139 comm="syz.7.28762" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.102392][ T3995] veth0_vlan: entered promiscuous mode [ 1260.111971][ T3995] veth1_vlan: entered promiscuous mode [ 1260.125439][ T40] audit: type=1326 audit(6294968320.938:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.7.28763" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce678f6c9 code=0x0 [ 1260.128489][ T3995] veth0_macvtap: entered promiscuous mode [ 1260.141316][ T3995] veth1_macvtap: entered promiscuous mode [ 1260.157185][ T3995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.168560][ T3995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.178499][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.182219][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.188934][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.199830][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.234732][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.238594][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.253782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.256441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.264807][ T40] audit: type=1400 audit(6294968321.078:730): avc: denied { mounton } for pid=3995 comm="syz-executor" path="/syzkaller.kQB9k6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=405065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1260.403261][ T4165] netlink: 'syz.7.28773': attribute type 4 has an invalid length. [ 1260.413165][ T4165] netlink: 'syz.7.28773': attribute type 17 has an invalid length. [ 1260.936220][ T4218] vivid-002: disconnect [ 1260.951167][ T4218] vivid-002: reconnect [ 1261.337086][ T4263] __nla_validate_parse: 1 callbacks suppressed [ 1261.337103][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28820'. [ 1261.361803][ T4265] tipc: Started in network mode [ 1261.363500][ T4265] tipc: Node identity 4, cluster identity 4711 [ 1261.365570][ T4265] tipc: Node number set to 4 [ 1261.512163][ T40] audit: type=1400 audit(6294968322.328:731): avc: denied { setopt } for pid=4281 comm="syz.7.28828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1261.515526][ T4285] netlink: 'syz.5.28830': attribute type 4 has an invalid length. [ 1261.521673][ T4285] netlink: 'syz.5.28830': attribute type 5 has an invalid length. [ 1261.524353][ T4285] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.28830'. [ 1261.577121][ T5949] Bluetooth: hci4: command 0x0c1a tx timeout [ 1261.579908][T26204] Bluetooth: hci3: command 0x0c1a tx timeout [ 1261.647279][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 1261.650770][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 1261.674780][ T4305] netlink: 'syz.6.28839': attribute type 4 has an invalid length. [ 1261.686714][ T4305] netlink: 'syz.6.28839': attribute type 17 has an invalid length. [ 1261.689307][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28841'. [ 1261.978113][ T34] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 1262.041955][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1262.047117][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1262.049992][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1262.052674][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1262.055194][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1262.147039][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 1262.154679][ T34] usb 11-1: config 0 has an invalid interface number: 48 but max is 0 [ 1262.157426][ T34] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.160604][ T34] usb 11-1: config 0 has no interface number 0 [ 1262.162616][ T34] usb 11-1: config 0 interface 48 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1262.169161][ T34] usb 11-1: New USB device found, idVendor=3d1f, idProduct=d13f, bcdDevice=ce.1e [ 1262.172102][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.174509][ T34] usb 11-1: Product: syz [ 1262.175809][ T34] usb 11-1: Manufacturer: syz [ 1262.184028][ T34] usb 11-1: SerialNumber: syz [ 1262.192633][ T34] usb 11-1: config 0 descriptor?? [ 1262.250937][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 1262.330439][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.333385][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.336366][ T4343] bridge_slave_0: entered allmulticast mode [ 1262.340309][ T4343] bridge_slave_0: entered promiscuous mode [ 1262.344657][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.348678][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.352236][ T4343] bridge_slave_1: entered allmulticast mode [ 1262.356715][ T4343] bridge_slave_1: entered promiscuous mode [ 1262.399179][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.403236][ T34] usb-storage 11-1:0.48: USB Mass Storage device detected [ 1262.426787][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.439970][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.474096][ T34] usb 11-1: USB disconnect, device number 24 [ 1262.487640][ T4343] team0: Port device team_slave_0 added [ 1262.491987][ T4343] team0: Port device team_slave_1 added [ 1262.532332][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.564860][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.568318][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.577140][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.581577][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.583862][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.595025][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.612335][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.670556][ T4343] hsr_slave_0: entered promiscuous mode [ 1262.673189][ T4343] hsr_slave_1: entered promiscuous mode [ 1262.675467][ T4343] debugfs: 'hsr0' already exists in 'hsr' [ 1262.677635][ T4343] Cannot create hsr debugfs directory [ 1262.695737][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.847630][ T12] bridge_slave_1: left allmulticast mode [ 1262.849662][ T12] bridge_slave_1: left promiscuous mode [ 1262.851664][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.855421][ T12] bridge_slave_0: left promiscuous mode [ 1262.857753][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.243277][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.249301][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.253527][ T12] bond0 (unregistering): Released all slaves [ 1263.316851][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.28881'. [ 1263.378887][ T12] tipc: Left network mode [ 1263.565504][ T4421] 9pnet_fd: Insufficient options for proto=fd [ 1263.647496][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout [ 1263.673677][ T12] hsr_slave_0: left promiscuous mode [ 1263.675996][ T12] hsr_slave_1: left promiscuous mode [ 1263.679186][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.681802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.685641][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.688349][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.705257][ T12] veth1_macvtap: left promiscuous mode [ 1263.709881][ T12] veth0_macvtap: left promiscuous mode [ 1263.712376][ T12] veth1_vlan: left promiscuous mode [ 1263.714230][ T12] veth0_vlan: left promiscuous mode [ 1263.727114][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout [ 1263.727236][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1264.131143][T26210] Bluetooth: hci2: command tx timeout [ 1264.426273][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28896'. [ 1264.626436][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1264.752003][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1264.793950][ T40] audit: type=1400 audit(6294968325.608:732): avc: denied { append } for pid=4473 comm="syz.6.28902" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1264.927446][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28905'. [ 1265.081887][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28909'. [ 1265.132494][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28910'. [ 1265.498128][ T4343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1265.503579][ T4343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1265.508612][ T4343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1265.513645][ T4343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1265.518586][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28913'. [ 1265.571105][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.581067][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.586825][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.589579][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.597551][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.600657][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.727214][T26210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1265.807060][T26210] Bluetooth: hci0: command 0x0c1a tx timeout [ 1265.819230][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1265.820824][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.030640][ T4343] veth0_vlan: entered promiscuous mode [ 1266.035973][ T4343] veth1_vlan: entered promiscuous mode [ 1266.051714][ T4343] veth0_macvtap: entered promiscuous mode [ 1266.055477][ T4343] veth1_macvtap: entered promiscuous mode [ 1266.064761][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.071571][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.077224][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.080273][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.086588][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.089981][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.131441][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.134187][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.147918][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.151045][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.207657][T26210] Bluetooth: hci2: command tx timeout [ 1266.567115][ T6023] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1266.627437][ T6008] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 1266.727176][ T6023] usb 10-1: Using ep0 maxpacket: 32 [ 1266.730309][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.734450][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.744608][ T6023] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1266.747858][ T6023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.753376][ T6023] usb 10-1: config 0 descriptor?? [ 1266.758109][ T6028] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 1266.776979][ T6008] usb 11-1: Using ep0 maxpacket: 32 [ 1266.785645][ T6008] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1266.788567][ T6008] usb 11-1: config 0 has no interface number 0 [ 1266.790662][ T6008] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1266.794482][ T6008] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1266.797908][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.800895][ T6008] usb 11-1: Product: syz [ 1266.802302][ T6008] usb 11-1: Manufacturer: syz [ 1266.803864][ T6008] usb 11-1: SerialNumber: syz [ 1266.806569][ T6008] usb 11-1: config 0 descriptor?? [ 1266.810564][ T6008] smsc75xx v1.0.0 [ 1266.907018][ T6028] usb 12-1: Using ep0 maxpacket: 32 [ 1266.911249][ T6028] usb 12-1: config 36 has an invalid interface number: 228 but max is 0 [ 1266.914740][ T6028] usb 12-1: config 36 has no interface number 0 [ 1266.917806][ T6028] usb 12-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1266.921313][ T6028] usb 12-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 1266.924705][ T6028] usb 12-1: config 36 interface 228 has no altsetting 0 [ 1266.929975][ T6028] usb 12-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1266.933032][ T6028] usb 12-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1266.935857][ T6028] usb 12-1: Product: syz [ 1266.937560][ T6028] usb 12-1: Manufacturer: syz [ 1266.939242][ T6028] usb 12-1: SerialNumber: syz [ 1267.011763][ T6008] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1267.015263][ T6008] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1267.020039][ T6008] usb 11-1: USB disconnect, device number 25 [ 1267.118122][ T4602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.28952'. [ 1267.154662][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.28953'. [ 1267.163130][ T6028] usb 12-1: USB disconnect, device number 20 [ 1267.174770][ T6023] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1267.180514][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:36.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.419971][ T6008] usb 10-1: USB disconnect, device number 12 [ 1267.537495][ T4611] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.28956'. [ 1267.540675][ T4611] ksmbd: Unknown IPC event: 3, ignore. [ 1267.751602][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.28960'. [ 1267.842163][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.28962'. [ 1267.897212][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1268.159571][ T53] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 1268.287076][T26210] Bluetooth: hci2: command tx timeout [ 1268.327043][ T53] usb 12-1: Using ep0 maxpacket: 32 [ 1268.330154][ T53] usb 12-1: config 0 has an invalid interface number: 184 but max is 0 [ 1268.332869][ T53] usb 12-1: config 0 has no interface number 0 [ 1268.334818][ T53] usb 12-1: config 0 interface 184 has no altsetting 0 [ 1268.340936][ T53] usb 12-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1268.343997][ T53] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.347000][ T53] usb 12-1: Product: syz [ 1268.352244][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28971'. [ 1268.442765][ T53] usb 12-1: Manufacturer: syz [ 1268.445596][ T53] usb 12-1: SerialNumber: syz [ 1268.449341][ T53] usb 12-1: config 0 descriptor?? [ 1268.452966][ T53] smsc75xx v1.0.0 [ 1268.555982][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28980'. [ 1268.897084][ T53] smsc75xx 12-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1268.906033][ T53] smsc75xx 12-1:0.184: probe with driver smsc75xx failed with error -71 [ 1268.911915][ T53] usb 12-1: USB disconnect, device number 21 [ 1269.291133][ T4679] overlayfs: failed to resolve './file0': -2 [ 1269.406413][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28995'. [ 1269.969303][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1270.366617][T26210] Bluetooth: hci2: command tx timeout [ 1270.706980][ T40] audit: type=1400 audit(6294968560.529:733): avc: denied { bind } for pid=4754 comm="syz.5.29015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1270.713463][ T40] audit: type=1400 audit(6294968560.529:734): avc: denied { read } for pid=4754 comm="syz.5.29015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1270.905599][ T34] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 1271.037499][ T4759] Illegal XDP return value 4294967294 on prog (id 146) dev N/A, expect packet loss! [ 1271.057336][ T34] usb 13-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1271.060997][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.066722][ T34] usb 13-1: config 0 descriptor?? [ 1271.071942][ T34] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1271.472262][ T34] cpia1 13-1:0.0: unexpected state after lo power cmd: 00 [ 1271.876076][ T34] gspca_cpia1: usb_control_msg 02, error -71 [ 1271.878721][ T34] cpia1 13-1:0.0: only firmware version 1 is supported (got: 0) [ 1271.884726][ T34] usb 13-1: USB disconnect, device number 27 [ 1272.043868][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1272.153195][ T6005] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1272.183190][T15058] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 1272.302891][ T6005] usb 10-1: Using ep0 maxpacket: 16 [ 1272.305903][ T6005] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.309370][ T6005] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1272.313455][ T6005] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1272.318128][ T6005] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1272.326338][ T6005] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1272.330264][ T6005] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.332864][T15058] usb 11-1: Using ep0 maxpacket: 32 [ 1272.334015][ T6005] usb 10-1: Product: syz [ 1272.336861][T15058] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1272.337578][ T6005] usb 10-1: Manufacturer: syz [ 1272.340350][T15058] usb 11-1: config 0 has no interface number 0 [ 1272.342431][ T6005] usb 10-1: SerialNumber: syz [ 1272.344597][T15058] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1272.350630][T15058] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1272.353765][T15058] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.356409][T15058] usb 11-1: Product: syz [ 1272.357828][T15058] usb 11-1: Manufacturer: syz [ 1272.359396][T15058] usb 11-1: SerialNumber: syz [ 1272.362376][T15058] usb 11-1: config 0 descriptor?? [ 1272.366536][T15058] smsc75xx v1.0.0 [ 1272.553622][ T6005] usb 10-1: 0:2 : does not exist [ 1272.559629][ T6005] usb 10-1: USB disconnect, device number 13 [ 1272.573011][T15058] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1272.576572][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1272.581253][T15058] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1272.592750][T15058] usb 11-1: USB disconnect, device number 26 [ 1272.819188][ T4790] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1272.827549][ T4790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1272.952125][ T4800] netlink: 16 bytes leftover after parsing attributes in process `syz.7.29043'. [ 1273.188448][ T4815] netlink: 72 bytes leftover after parsing attributes in process `syz.7.29052'. [ 1273.194980][ T4815] netlink: 16 bytes leftover after parsing attributes in process `syz.7.29052'. [ 1273.198903][ T4815] netlink: 72 bytes leftover after parsing attributes in process `syz.7.29052'. [ 1273.204901][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29050'. [ 1273.480638][T15058] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 1273.500652][ T6028] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1273.909790][ T6028] usb 10-1: Using ep0 maxpacket: 32 [ 1273.911768][T15058] usb 11-1: Using ep0 maxpacket: 16 [ 1273.915764][T15058] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.919146][T15058] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1273.922279][ T6028] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1273.925330][ T6028] usb 10-1: config 0 has no interface number 0 [ 1273.927461][ T6028] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1273.929974][T15058] usb 11-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1273.933628][T15058] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1273.940489][ T6028] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1273.944054][T15058] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.947269][T15058] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.950132][ T6028] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.952943][ T6028] usb 10-1: Product: syz [ 1273.954421][ T6028] usb 10-1: Manufacturer: syz [ 1273.956123][ T6028] usb 10-1: SerialNumber: syz [ 1273.958655][T15058] usb 11-1: Product: syz [ 1273.960271][T15058] usb 11-1: Manufacturer: syz [ 1273.962007][T15058] usb 11-1: SerialNumber: syz [ 1273.964928][ T6028] usb 10-1: config 0 descriptor?? [ 1273.969086][ T6028] smsc75xx v1.0.0 [ 1274.170722][ T6028] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1274.179922][ T6028] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1274.183665][T15058] usb 11-1: 0:2 : does not exist [ 1274.195852][ T6028] usb 10-1: USB disconnect, device number 14 [ 1274.198123][T15058] usb 11-1: USB disconnect, device number 27 [ 1274.215469][T26419] udevd[26419]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1274.423119][ T4853] netlink: 16 bytes leftover after parsing attributes in process `syz.7.29065'. [ 1274.968043][ T4887] netlink: 48 bytes leftover after parsing attributes in process `syz.7.29079'. [ 1274.971539][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz.7.29079'. [ 1274.974719][ T4887] netlink: 48 bytes leftover after parsing attributes in process `syz.7.29079'. [ 1274.976216][ T4888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.29078'. [ 1275.254390][ T4930] use of bytesused == 0 is deprecated and will be removed in the future, [ 1275.259988][ T4930] use the actual size instead. [ 1275.382196][ T4946] ip6gre1: entered allmulticast mode [ 1275.496753][ T6005] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1275.536976][ T40] audit: type=1400 audit(6294968565.369:735): avc: denied { read } for pid=4955 comm="syz.7.29112" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1275.545316][ T40] audit: type=1400 audit(6294968565.369:736): avc: denied { open } for pid=4955 comm="syz.7.29112" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1275.633770][ T40] audit: type=1400 audit(6294968565.459:737): avc: denied { read write } for pid=4957 comm="syz.7.29113" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1275.641468][ T40] audit: type=1400 audit(6294968565.459:738): avc: denied { open } for pid=4957 comm="syz.7.29113" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1275.646473][ T6005] usb 10-1: Using ep0 maxpacket: 8 [ 1275.652080][ T6005] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1275.655228][ T6005] usb 10-1: config 179 has no interface number 0 [ 1275.660247][ T6005] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1275.664123][ T6005] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1275.668308][ T6005] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1275.672587][ T6005] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1275.677978][ T6005] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1275.683788][ T6005] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1275.686421][ T6008] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 1275.688261][ T6005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.694577][ T4932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1275.836400][ T6008] usb 11-1: Using ep0 maxpacket: 8 [ 1275.840212][ T6008] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.845650][ T6008] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.851354][ T6008] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.859380][ T6008] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1275.863173][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.865819][ T6008] usb 11-1: Product: syz [ 1275.867391][ T6008] usb 11-1: Manufacturer: syz [ 1275.868986][ T6008] usb 11-1: SerialNumber: syz [ 1275.910869][ T6005] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input68 [ 1276.019913][ T4976] netlink: 'syz.7.29122': attribute type 4 has an invalid length. [ 1276.031267][ T4976] netlink: 'syz.7.29122': attribute type 4 has an invalid length. [ 1276.079497][ T6008] adutux 11-1:168.0: interrupt endpoints not found [ 1276.088113][ T6008] usb 11-1: USB disconnect, device number 28 [ 1276.103303][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.106937][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.314951][ T6005] usb 10-1: USB disconnect, device number 15 [ 1276.315000][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1276.315022][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1276.436094][ T40] audit: type=1400 audit(6294968566.260:739): avc: denied { listen } for pid=4989 comm="syz.8.29129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1276.594829][ T6008] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 1276.744338][ T6008] usb 12-1: Using ep0 maxpacket: 16 [ 1276.748639][ T6008] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.753171][ T6008] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.757238][ T6008] usb 12-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1276.761982][ T6008] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1276.770664][ T6008] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1276.774780][ T6008] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.778685][ T6008] usb 12-1: Product: syz [ 1276.780687][ T6008] usb 12-1: Manufacturer: syz [ 1276.782864][ T6008] usb 12-1: SerialNumber: syz [ 1276.991375][ T6008] usb 12-1: 0:2 : does not exist [ 1277.004533][ T6008] usb 12-1: USB disconnect, device number 22 [ 1277.019038][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.349521][ T40] audit: type=1400 audit(6294968567.172:740): avc: denied { write } for pid=5041 comm="syz.5.29154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1277.461064][ T5052] netlink: 'syz.8.29159': attribute type 4 has an invalid length. [ 1278.011937][ T6028] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 1278.165525][ T6028] usb 13-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1278.169452][ T6028] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.181860][ T6028] usb 13-1: config 0 descriptor?? [ 1278.186081][ T6028] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1278.368807][ T5146] overlayfs: failed to resolve './file0': -2 [ 1278.590584][ T6028] gspca_sunplus: reg_w_riv err -71 [ 1278.593285][ T6028] sunplus 13-1:0.0: probe with driver sunplus failed with error -71 [ 1278.601622][ T6028] usb 13-1: USB disconnect, device number 28 [ 1279.552094][ T40] audit: type=1400 audit(6294968569.386:741): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1279.758659][ T6008] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1279.929651][ T6008] usb 10-1: config 0 has no interfaces? [ 1279.931641][ T6008] usb 10-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1279.934664][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.943626][ T6008] usb 10-1: config 0 descriptor?? [ 1280.147620][ T6008] usb 10-1: USB disconnect, device number 16 [ 1281.344165][ T5231] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1281.346681][ T5231] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1281.349109][ T5231] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1281.351231][ T5231] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1281.353332][ T5231] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1281.358396][ T5231] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1281.398983][ T5253] netlink: 'syz.5.29253': attribute type 10 has an invalid length. [ 1281.414795][ T5253] team0: Port device macvlan0 added [ 1281.486801][ T5267] __nla_validate_parse: 4 callbacks suppressed [ 1281.486811][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29261'. [ 1281.636606][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29273'. [ 1281.699517][ T5311] batadv_slave_1: entered promiscuous mode [ 1281.702348][ T5310] batadv_slave_1: left promiscuous mode [ 1281.790587][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.29284'. [ 1282.333870][ T6008] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 1282.496992][ T6008] usb 11-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1282.501351][ T6008] usb 11-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1282.505089][ T6008] usb 11-1: Product: syz [ 1282.506923][ T6008] usb 11-1: Manufacturer: syz [ 1282.508999][ T6008] usb 11-1: SerialNumber: syz [ 1282.521444][ T6008] usb 11-1: config 0 descriptor?? [ 1282.527228][ T6008] asix 11-1:0.0: probe with driver asix failed with error -22 [ 1282.544720][ T40] audit: type=1400 audit(6294968572.372:742): avc: denied { write } for pid=5407 comm="syz.7.29320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1282.545353][T26352] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1282.673492][T26210] Bluetooth: hci3: command 0x0c1a tx timeout [ 1282.707309][T26352] usb 10-1: config 0 has an invalid interface number: 90 but max is 0 [ 1282.710816][T26352] usb 10-1: config 0 has no interface number 0 [ 1282.713923][T26352] usb 10-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=68.06 [ 1282.718902][T26352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.724326][T26352] usb 10-1: config 0 descriptor?? [ 1282.730319][T26352] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 1283.130829][T26352] gspca_stv06xx: I2C: Read error writing address: -71 [ 1283.136340][T26352] usb 10-1: unknown interface protocol 0x66, assuming v1 [ 1283.138780][T26352] usb 10-1: cannot find UAC_HEADER [ 1283.159082][T26352] snd-usb-audio 10-1:0.90: probe with driver snd-usb-audio failed with error -22 [ 1283.164488][T26352] usb 10-1: USB disconnect, device number 17 [ 1283.381914][T26210] Bluetooth: hci2: command 0x0c1a tx timeout [ 1283.382368][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 1283.382402][T26204] Bluetooth: hci0: command 0x0c1a tx timeout [ 1283.611544][ T54] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 1283.761152][ T54] usb 13-1: Using ep0 maxpacket: 16 [ 1283.764967][ T54] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.769436][ T54] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1283.773871][ T54] usb 13-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1283.778625][ T54] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1283.788910][ T54] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1283.793471][ T54] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.796982][ T54] usb 13-1: Product: syz [ 1283.798844][ T54] usb 13-1: Manufacturer: syz [ 1283.800912][ T54] usb 13-1: SerialNumber: syz [ 1284.008253][ T54] usb 13-1: 0:2 : does not exist [ 1284.025855][ T5471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29348'. [ 1284.026254][ T54] usb 13-1: USB disconnect, device number 29 [ 1284.260206][ T6028] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 1284.430432][ T6028] usb 12-1: Using ep0 maxpacket: 32 [ 1284.433568][ T6028] usb 12-1: config 0 has an invalid interface number: 184 but max is 0 [ 1284.436477][ T6028] usb 12-1: config 0 has no interface number 0 [ 1284.438631][ T6028] usb 12-1: config 0 interface 184 has no altsetting 0 [ 1284.442808][ T6028] usb 12-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1284.446112][ T6028] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.449096][ T6028] usb 12-1: Product: syz [ 1284.450770][ T6028] usb 12-1: Manufacturer: syz [ 1284.452815][ T6028] usb 12-1: SerialNumber: syz [ 1284.456799][ T6028] usb 12-1: config 0 descriptor?? [ 1284.460277][ T6028] smsc75xx v1.0.0 [ 1284.660642][ T6028] smsc75xx 12-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1284.664287][ T6028] smsc75xx 12-1:0.184: probe with driver smsc75xx failed with error -71 [ 1284.669125][ T6028] usb 12-1: USB disconnect, device number 23 [ 1285.082399][ T6028] usb 11-1: USB disconnect, device number 29 [ 1285.372210][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.7.29372'. [ 1285.403818][ T40] audit: type=1400 audit(6294968575.247:743): avc: denied { create } for pid=5524 comm="syz.7.29373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1285.410265][ T40] audit: type=1400 audit(6294968575.247:744): avc: denied { write } for pid=5524 comm="syz.7.29373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1285.458327][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 1285.487948][ T6028] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 1285.632512][ T40] audit: type=1400 audit(6294968575.478:745): avc: denied { firmware_load } for pid=5540 comm="syz.8.29382" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1285.657624][ T6028] usb 11-1: Using ep0 maxpacket: 8 [ 1285.666298][ T6028] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1285.670879][ T6028] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.674722][ T6028] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1285.693302][ T6028] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1285.696739][ T6028] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.703574][ T6028] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1285.707705][ T6028] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.779236][ T5554] veth0: entered promiscuous mode [ 1285.782886][ T5552] veth0: left promiscuous mode [ 1285.918364][ T6028] usb 11-1: usb_control_msg returned -32 [ 1285.920550][ T6028] usbtmc 11-1:16.0: can't read capabilities [ 1286.008910][ T5564] could not allocate digest TFM handle sha224-ssse3 [ 1286.272222][ T5569] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 1286.276773][T13581] usb 11-1: USB disconnect, device number 30 [ 1286.768253][ T5583] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1287.252497][ T5604] netlink: 'syz.5.29410': attribute type 11 has an invalid length. [ 1287.544296][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 1287.547174][ T5581] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1287.550067][ T5581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1287.552994][ T5581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1287.556019][ T5581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1288.616620][ T5644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1288.618805][ T5644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1288.620894][ T5644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1288.623178][ T5644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1288.655683][T26210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1288.668576][T26210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1288.674372][T26210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1288.678287][T26210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1288.681846][T26210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1288.842055][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 1288.950858][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.954332][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.957204][ T5668] bridge_slave_0: entered allmulticast mode [ 1288.961024][ T5668] bridge_slave_0: entered promiscuous mode [ 1288.966135][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.968643][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.971066][ T5668] bridge_slave_1: entered allmulticast mode [ 1288.975404][ T5668] bridge_slave_1: entered promiscuous mode [ 1289.023455][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.032698][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.097432][ T5702] overlayfs: missing 'lowerdir' [ 1289.098298][ T5668] team0: Port device team_slave_0 added [ 1289.104816][ T5668] team0: Port device team_slave_1 added [ 1289.168075][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.171558][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.186485][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.193166][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.196321][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.206755][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.268392][ T5668] hsr_slave_0: entered promiscuous mode [ 1289.270874][ T5668] hsr_slave_1: entered promiscuous mode [ 1289.275658][ T5668] debugfs: 'hsr0' already exists in 'hsr' [ 1289.277538][ T5668] Cannot create hsr debugfs directory [ 1289.448773][ T5668] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.500634][ T6005] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 1289.543970][ T5668] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.662483][ T6005] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1289.663375][ T40] audit: type=1400 audit(6294968579.515:746): avc: denied { ioctl } for pid=5730 comm="syz.5.29462" path="socket:[414604]" dev="sockfs" ino=414604 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1289.666976][ T6005] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1289.667014][ T6005] usb 12-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1289.685444][ T6005] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.690788][ T6005] usb 12-1: config 0 descriptor?? [ 1289.700932][ T6005] appletouch 12-1:0.0: Could not find int-in endpoint [ 1289.703940][ T6005] appletouch 12-1:0.0: probe with driver appletouch failed with error -5 [ 1289.710364][ T6005] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 1289.737397][ T5668] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.807961][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.29466'. [ 1289.836915][ T5668] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.904988][ T6005] usb 12-1: USB disconnect, device number 24 [ 1289.985556][ T5668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1289.990085][ T5668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1289.995637][ T5668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1290.001708][ T5668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1290.055994][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.066707][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.071764][T26179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.074647][T26179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.080556][T26179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.082913][T26179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.191366][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.337038][ T5668] veth0_vlan: entered promiscuous mode [ 1290.342555][ T5668] veth1_vlan: entered promiscuous mode [ 1290.359128][ T5668] veth0_macvtap: entered promiscuous mode [ 1290.363822][ T5668] veth1_macvtap: entered promiscuous mode [ 1290.374257][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.383438][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1290.391031][ T91] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.396273][ T91] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.401915][ T91] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.405605][ T91] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.464631][T26179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.467854][T26179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.492730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.496031][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.658776][T26210] Bluetooth: hci2: command 0x0c1a tx timeout [ 1290.658849][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 1290.661205][T26210] Bluetooth: hci0: command 0x0c1a tx timeout [ 1290.683773][ T40] audit: type=1400 audit(6294968580.537:747): avc: denied { map } for pid=5797 comm="syz.7.29484" path="socket:[417240]" dev="sockfs" ino=417240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1290.687541][ T5801] overlayfs: failed to resolve './file1/file0': -2 [ 1290.728746][T26210] Bluetooth: hci4: command tx timeout [ 1290.948125][ T54] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 1291.107910][ T54] usb 11-1: Using ep0 maxpacket: 32 [ 1291.113596][ T5828] netlink: 763 bytes leftover after parsing attributes in process `syz.7.29493'. [ 1291.129275][ T54] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1291.133511][ T54] usb 11-1: config 0 has no interface number 0 [ 1291.136055][ T54] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1291.164583][ T54] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1291.168706][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.171606][ T54] usb 11-1: Product: syz [ 1291.173253][ T54] usb 11-1: Manufacturer: syz [ 1291.174977][ T54] usb 11-1: SerialNumber: syz [ 1291.206126][ T54] usb 11-1: config 0 descriptor?? [ 1291.300645][ T54] smsc75xx v1.0.0 [ 1291.488844][ T54] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1291.496834][ T54] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1291.540922][ T54] usb 11-1: USB disconnect, device number 31 [ 1291.677376][ T5850] libceph: resolve '0' (ret=-3): failed [ 1291.707201][T26352] usb 12-1: new full-speed USB device number 25 using dummy_hcd [ 1291.728249][ T5854] program syz.8.29506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1291.858439][T26352] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.862850][T26352] usb 12-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.868962][T26352] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.873206][T26352] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.887908][T26352] usbtmc 12-1:16.0: bulk endpoints not found [ 1292.083590][ T6028] usb 12-1: USB disconnect, device number 25 [ 1292.515281][T26352] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1292.627681][ T40] audit: type=1400 audit(6294968582.480:748): avc: denied { getattr } for pid=5897 comm="syz.8.29527" name="secretmem" dev="secretmem" ino=417304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1292.684877][T26352] usb 10-1: Using ep0 maxpacket: 32 [ 1292.690764][T26352] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1292.694229][T26352] usb 10-1: config 0 has no interface number 0 [ 1292.697085][T26352] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1292.701417][T26352] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1292.706917][T26352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.709923][T26352] usb 10-1: Product: syz [ 1292.711447][T26352] usb 10-1: Manufacturer: syz [ 1292.713368][T26352] usb 10-1: SerialNumber: syz [ 1292.719565][T26352] usb 10-1: config 0 descriptor?? [ 1292.723753][T26352] smsc75xx v1.0.0 [ 1292.820335][T26210] Bluetooth: hci4: command tx timeout [ 1292.924779][T26352] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1292.929503][T26352] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 1292.939546][T26352] usb 10-1: USB disconnect, device number 18 [ 1294.707864][ T40] audit: type=1400 audit(6294968584.564:749): avc: denied { recv } for pid=6091 comm="syz.5.29611" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1294.812846][ T6102] netlink: 140 bytes leftover after parsing attributes in process `syz.5.29613'. [ 1294.881282][T26210] Bluetooth: hci4: command tx timeout [ 1295.660384][T26352] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1295.695518][ T40] audit: type=1400 audit(6294968585.556:750): avc: denied { write } for pid=6142 comm="syz.8.29632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1295.740426][T26185] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 1295.809394][T26352] usb 10-1: Using ep0 maxpacket: 16 [ 1295.812429][T26352] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.815930][T26352] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.818949][T26352] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1295.822985][T26352] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1295.828778][T26352] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1295.832268][T26352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.834963][T26352] usb 10-1: Product: syz [ 1295.836384][T26352] usb 10-1: Manufacturer: syz [ 1295.838035][T26352] usb 10-1: SerialNumber: syz [ 1295.899305][T26185] usb 12-1: Using ep0 maxpacket: 32 [ 1295.903275][T26185] usb 12-1: config 0 has an invalid interface number: 67 but max is 0 [ 1295.906773][T26185] usb 12-1: config 0 has no interface number 0 [ 1295.911617][T26185] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1295.915580][T26185] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.920243][T26185] usb 12-1: Product: syz [ 1295.922098][T26185] usb 12-1: Manufacturer: syz [ 1295.924151][T26185] usb 12-1: SerialNumber: syz [ 1295.928158][T26185] usb 12-1: config 0 descriptor?? [ 1295.932144][T26185] smsc95xx v2.0.0 [ 1296.044882][T26352] usb 10-1: 0:2 : does not exist [ 1296.054888][T26352] usb 10-1: USB disconnect, device number 19 [ 1296.069585][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.335373][T26185] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1296.340171][T26185] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1296.745679][T26185] smsc95xx 12-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1296.749449][T26185] smsc95xx 12-1:0.67: probe with driver smsc95xx failed with error -71 [ 1296.753980][T26185] usb 12-1: USB disconnect, device number 26 [ 1296.957351][T26210] Bluetooth: hci4: command tx timeout [ 1297.985629][ T40] audit: type=1400 audit(6294968587.860:751): avc: denied { listen } for pid=6215 comm="syz.5.29667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1298.067081][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.29673'. [ 1298.874575][ T40] audit: type=1400 audit(6294968588.741:752): avc: denied { read } for pid=6254 comm="syz.8.29685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1298.897023][ T6228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1298.899917][ T6228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1298.902777][ T6228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1298.907181][ T6228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1298.909299][ T6228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1298.912017][ T6228] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1299.227559][ T40] audit: type=1400 audit(6294968589.092:753): avc: denied { create } for pid=6290 comm="syz.8.29701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1299.994514][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.101739][T26352] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 1300.151890][T26210] Bluetooth: hci0: command 0x0c1a tx timeout [ 1300.241970][ T40] audit: type=1400 audit(6294968590.104:754): avc: denied { watch watch_reads } for pid=6362 comm="syz.5.29732" path="/264/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1300.253505][T26352] usb 12-1: Using ep0 maxpacket: 16 [ 1300.258582][T26352] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.262857][ T40] audit: type=1400 audit(6294968590.134:755): avc: denied { unmount } for pid=3995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1300.271094][T26352] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1300.275372][T26352] usb 12-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1300.279010][T26352] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1300.291504][T26352] usb 12-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1300.294560][T26352] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.297320][T26352] usb 12-1: Product: syz [ 1300.298797][T26352] usb 12-1: Manufacturer: syz [ 1300.300724][T26352] usb 12-1: SerialNumber: syz [ 1300.328470][ T40] audit: type=1400 audit(6294968590.194:756): avc: denied { unmount } for pid=3995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1300.512977][T26352] usb 12-1: 0:2 : does not exist [ 1300.533781][T26352] usb 12-1: USB disconnect, device number 27 [ 1300.547684][T26190] udevd[26190]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.646004][T26204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1300.650986][T26204] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1300.654908][T26204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1300.658780][T26204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1300.662525][T26204] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.837787][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 1300.843084][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29749'. [ 1300.954783][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.957737][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.960849][ T6389] bridge_slave_0: entered allmulticast mode [ 1300.961408][T26204] Bluetooth: hci4: command 0x0c1a tx timeout [ 1300.961451][T26210] Bluetooth: hci2: command 0x0c1a tx timeout [ 1300.961492][T26210] Bluetooth: hci1: command 0x040f tx timeout [ 1300.964275][ T6389] bridge_slave_0: entered promiscuous mode [ 1300.974869][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.978161][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.982601][ T6389] bridge_slave_1: entered allmulticast mode [ 1300.985568][ T6389] bridge_slave_1: entered promiscuous mode [ 1301.037579][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.044807][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.088793][ T6389] team0: Port device team_slave_0 added [ 1301.094573][ T6389] team0: Port device team_slave_1 added [ 1301.163363][T26179] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.177129][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.184439][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.199824][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.204348][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.209309][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.221049][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.306958][T26179] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.316386][ T6389] hsr_slave_0: entered promiscuous mode [ 1301.318764][ T6389] hsr_slave_1: entered promiscuous mode [ 1301.323382][ T6389] debugfs: 'hsr0' already exists in 'hsr' [ 1301.325298][ T6389] Cannot create hsr debugfs directory [ 1301.458322][T26179] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.541946][T26179] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.765469][T26179] bridge_slave_1: left allmulticast mode [ 1301.767472][T26179] bridge_slave_1: left promiscuous mode [ 1301.770194][T26179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.774953][T26179] bridge_slave_0: left allmulticast mode [ 1301.776923][T26179] bridge_slave_0: left promiscuous mode [ 1301.779252][T26179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.335611][T26179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.340231][T26179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.344054][T26179] bond0 (unregistering): Released all slaves [ 1302.409109][T26179] tipc: Left network mode [ 1302.694699][T26179] hsr_slave_0: left promiscuous mode [ 1302.699629][T26179] hsr_slave_1: left promiscuous mode [ 1302.703184][T26179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.707953][T26204] Bluetooth: hci3: command tx timeout [ 1302.710413][T26179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.713648][T26179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.716056][T26179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.736074][T26179] veth1_macvtap: left promiscuous mode [ 1302.738022][T26179] veth0_macvtap: left promiscuous mode [ 1302.740059][T26179] veth1_vlan: left promiscuous mode [ 1302.742499][T26179] veth0_vlan: left promiscuous mode [ 1303.029928][T26204] Bluetooth: hci4: command 0x0c1a tx timeout [ 1303.495445][ T6525] netlink: 277 bytes leftover after parsing attributes in process `syz.8.29796'. [ 1303.633869][T26179] team0 (unregistering): Port device team_slave_1 removed [ 1303.739502][T26179] team0 (unregistering): Port device team_slave_0 removed [ 1303.797973][ T6541] qnx4: unable to read the superblock [ 1304.666155][ T6527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1304.668275][ T6527] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1304.671518][ T6527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1304.673601][ T6527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1304.675699][ T6527] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1304.685772][ T6527] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1304.709629][ T6389] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1304.717263][ T6389] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1304.724185][ T6389] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1304.731964][ T6389] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1304.813276][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.822480][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.831217][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.833645][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.839737][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.842409][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.949712][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.102125][ T6389] veth0_vlan: entered promiscuous mode [ 1305.108032][ T6389] veth1_vlan: entered promiscuous mode [ 1305.123950][ T6389] veth0_macvtap: entered promiscuous mode [ 1305.131690][ T6389] veth1_macvtap: entered promiscuous mode [ 1305.142102][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.150171][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1305.156578][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.161007][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.167712][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.170762][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.758909][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1305.761066][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1305.763610][ T6613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1305.765848][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1305.790073][T26182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.796024][T26182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.813517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.816998][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.261187][ T6008] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 1306.267372][ T6689] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1306.410990][ T6008] usb 11-1: Using ep0 maxpacket: 32 [ 1306.414520][ T6008] usb 11-1: config 0 has an invalid interface number: 184 but max is 0 [ 1306.417927][ T6008] usb 11-1: config 0 has no interface number 0 [ 1306.420738][ T6008] usb 11-1: config 0 interface 184 has no altsetting 0 [ 1306.428227][ T6008] usb 11-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1306.432592][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.435829][ T6008] usb 11-1: Product: syz [ 1306.437571][ T6008] usb 11-1: Manufacturer: syz [ 1306.439524][ T6008] usb 11-1: SerialNumber: syz [ 1306.443375][ T6008] usb 11-1: config 0 descriptor?? [ 1306.446977][ T6008] smsc75xx v1.0.0 [ 1306.466408][ T6717] netlink: 'syz.8.29864': attribute type 3 has an invalid length. [ 1306.647453][ T6008] smsc75xx 11-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1306.651985][ T6008] smsc75xx 11-1:0.184: probe with driver smsc75xx failed with error -71 [ 1306.659891][ T6008] usb 11-1: USB disconnect, device number 32 [ 1307.029960][ T6028] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 1307.110226][ T5949] Bluetooth: hci1: command 0x040f tx timeout [ 1307.183995][ T6028] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.187745][ T6028] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.191402][ T6028] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.195891][ T6028] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.199022][ T6028] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.202982][T17558] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 1307.207327][ T6028] usb 13-1: config 0 descriptor?? [ 1307.364079][T17558] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1307.368984][T17558] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1307.373920][T17558] usb 12-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1307.380196][T17558] usb 12-1: config 1 interface 0 has no altsetting 0 [ 1307.385964][T17558] usb 12-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1307.390134][T17558] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.393712][T17558] usb 12-1: Product: syz [ 1307.395753][T17558] usb 12-1: Manufacturer: syz [ 1307.397916][T17558] usb 12-1: SerialNumber: syz [ 1307.517428][ T6776] ------------[ cut here ]------------ [ 1307.521237][ T6776] WARNING: CPU: 3 PID: 6776 at arch/x86/kvm/vmx/vmx.c:5264 handle_exception_nmi+0x14cf/0x1750 [ 1307.524878][ T6776] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1307.526618][ T6776] CPU: 3 UID: 0 PID: 6776 Comm: syz.5.29893 Not tainted syzkaller #0 PREEMPT(full) [ 1307.531746][ T6776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1307.535394][ T6776] RIP: 0010:handle_exception_nmi+0x14cf/0x1750 [ 1307.537620][ T6776] Code: 20 fe ff 31 ff 89 c5 89 c6 e8 ed 33 69 00 85 ed 0f 85 bd fd ff ff e8 a0 38 69 00 90 0f 0b 90 e9 af fd ff ff e8 92 38 69 00 90 <0f> 0b 90 e9 d0 f2 ff ff e8 84 38 69 00 31 f6 48 89 df e8 9a 15 ed [ 1307.544736][ T6776] RSP: 0018:ffffc900049b79e0 EFLAGS: 00010287 [ 1307.546803][ T6776] RAX: 000000000000ce09 RBX: ffff8880294a5280 RCX: ffffc9002b42f000 [ 1307.549773][ T6776] RDX: 0000000000080000 RSI: ffffffff8153af3e RDI: 0000000000000001 [ 1307.552638][ T6776] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1307.555527][ T6776] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000f69a2ea [ 1307.558343][ T6776] R13: 0000000000000007 R14: 0000000080000300 R15: ffff8880294a5358 [ 1307.561304][ T6776] FS: 00007fbb541f66c0(0000) GS:ffff8880d6d05000(0000) knlGS:0000000000000000 [ 1307.564567][ T6776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1307.567079][ T6776] CR2: 000000000300000a CR3: 00000000521d9000 CR4: 0000000000352ef0 [ 1307.570173][ T6776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300000a [ 1307.573068][ T6776] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1307.575935][ T6776] Call Trace: [ 1307.577170][ T6776] [ 1307.578266][ T6776] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1307.580563][ T6776] vmx_handle_exit+0x14bf/0x1c00 [ 1307.582452][ T6776] vcpu_run+0x33e1/0x54d0 [ 1307.584128][ T6776] ? __pfx_vcpu_run+0x10/0x10 [ 1307.585873][ T6776] ? rcu_is_watching+0x12/0xc0 [ 1307.587655][ T6776] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 1307.589793][ T6776] kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 1307.591821][ T6776] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1307.593584][ T6776] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1307.595608][ T6776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1307.598133][ T6776] ? do_vfs_ioctl+0x128/0x14f0 [ 1307.600054][ T6776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1307.602092][ T6776] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1307.605010][ T6776] ? hook_file_ioctl_common+0x145/0x410 [ 1307.607045][ T6776] ? selinux_file_ioctl+0x180/0x270 [ 1307.609093][ T6776] ? selinux_file_ioctl+0xb4/0x270 [ 1307.611078][ T6776] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1307.613326][ T6776] __x64_sys_ioctl+0x18e/0x210 [ 1307.615236][ T6776] do_syscall_64+0xcd/0xfa0 [ 1307.616898][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.619260][ T6776] RIP: 0033:0x7fbb55f8f6c9 [ 1307.620922][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.624588][T17558] smsusb:smsusb_probe: board id=8, interface number 0 [ 1307.627833][ T6776] RSP: 002b:00007fbb541f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.627863][ T6776] RAX: ffffffffffffffda RBX: 00007fbb561e5fa0 RCX: 00007fbb55f8f6c9 [ 1307.627871][ T6776] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1307.627879][ T6776] RBP: 00007fbb56011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1307.627887][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.641665][T17558] smsusb:smsusb_probe: Device initialized with return code -19 [ 1307.642869][ T6776] R13: 00007fbb561e6038 R14: 00007fbb561e5fa0 R15: 00007ffc8d65a2b8 [ 1307.642889][ T6776] [ 1307.642895][ T6776] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1307.642905][ T6776] CPU: 3 UID: 0 PID: 6776 Comm: syz.5.29893 Not tainted syzkaller #0 PREEMPT(full) [ 1307.642918][ T6776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1307.642925][ T6776] Call Trace: [ 1307.642930][ T6776] [ 1307.642935][ T6776] dump_stack_lvl+0x3d/0x1f0 [ 1307.642950][ T6776] vpanic+0x640/0x6f0 [ 1307.642968][ T6776] ? handle_exception_nmi+0x14cf/0x1750 [ 1307.642981][ T6776] panic+0xca/0xd0 [ 1307.642997][ T6776] ? __pfx_panic+0x10/0x10 [ 1307.643019][ T6776] check_panic_on_warn+0xab/0xb0 [ 1307.643031][ T6776] __warn+0xf6/0x3c0 [ 1307.643042][ T6776] ? handle_exception_nmi+0x14cf/0x1750 [ 1307.643055][ T6776] report_bug+0x3c3/0x580 [ 1307.643071][ T6776] ? handle_exception_nmi+0x14cf/0x1750 [ 1307.643083][ T6776] handle_bug+0x184/0x210 [ 1307.643095][ T6776] exc_invalid_op+0x17/0x50 [ 1307.643107][ T6776] asm_exc_invalid_op+0x1a/0x20 [ 1307.643137][ T6776] RIP: 0010:handle_exception_nmi+0x14cf/0x1750 [ 1307.643156][ T6776] Code: 20 fe ff 31 ff 89 c5 89 c6 e8 ed 33 69 00 85 ed 0f 85 bd fd ff ff e8 a0 38 69 00 90 0f 0b 90 e9 af fd ff ff e8 92 38 69 00 90 <0f> 0b 90 e9 d0 f2 ff ff e8 84 38 69 00 31 f6 48 89 df e8 9a 15 ed [ 1307.643168][ T6776] RSP: 0018:ffffc900049b79e0 EFLAGS: 00010287 [ 1307.643178][ T6776] RAX: 000000000000ce09 RBX: ffff8880294a5280 RCX: ffffc9002b42f000 [ 1307.643185][ T6776] RDX: 0000000000080000 RSI: ffffffff8153af3e RDI: 0000000000000001 [ 1307.643193][ T6776] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1307.643200][ T6776] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000f69a2ea [ 1307.643208][ T6776] R13: 0000000000000007 R14: 0000000080000300 R15: ffff8880294a5358 [ 1307.643220][ T6776] ? handle_exception_nmi+0x14ce/0x1750 [ 1307.643237][ T6776] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1307.643250][ T6776] vmx_handle_exit+0x14bf/0x1c00 [ 1307.643265][ T6776] vcpu_run+0x33e1/0x54d0 [ 1307.643283][ T6776] ? __pfx_vcpu_run+0x10/0x10 [ 1307.643297][ T6776] ? rcu_is_watching+0x12/0xc0 [ 1307.643313][ T6776] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 1307.643324][ T6776] kvm_arch_vcpu_ioctl_run+0xfd3/0x1920 [ 1307.643338][ T6776] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1307.643355][ T6776] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1307.643369][ T6776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1307.643384][ T6776] ? do_vfs_ioctl+0x128/0x14f0 [ 1307.643402][ T6776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1307.643417][ T6776] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1307.643435][ T6776] ? hook_file_ioctl_common+0x145/0x410 [ 1307.643453][ T6776] ? selinux_file_ioctl+0x180/0x270 [ 1307.643465][ T6776] ? selinux_file_ioctl+0xb4/0x270 [ 1307.643477][ T6776] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1307.643492][ T6776] __x64_sys_ioctl+0x18e/0x210 [ 1307.643508][ T6776] do_syscall_64+0xcd/0xfa0 [ 1307.643519][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.643530][ T6776] RIP: 0033:0x7fbb55f8f6c9 [ 1307.643539][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.643548][ T6776] RSP: 002b:00007fbb541f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.643558][ T6776] RAX: ffffffffffffffda RBX: 00007fbb561e5fa0 RCX: 00007fbb55f8f6c9 [ 1307.643565][ T6776] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1307.643571][ T6776] RBP: 00007fbb56011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1307.643577][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.643584][ T6776] R13: 00007fbb561e6038 R14: 00007fbb561e5fa0 R15: 00007ffc8d65a2b8 [ 1307.643597][ T6776] [ 1307.646681][ T6776] Kernel Offset: disabled VM DIAGNOSIS: 03:17:44 Registers: info registers vcpu 0 CPU#0 RAX=ffff8880289cd4d0 RBX=ffff88806a427c98 RCX=ffffc90000007edc RDX=0000000000000005 RSI=ffff88806a427c98 RDI=ffff8880289cd4d0 RBP=0000000000000046 RSP=ffffc90000007ed0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff81a9804f R13=0000000000000083 R14=ffff8880289cc900 R15=0000000000000005 RIP=ffffffff8198c39d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b165500 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff33a9a81c8 CR3=00000000242e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000022201200 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3aad5bc0 00007ffe3aad5bc0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3aad7ce0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b17ad85 000055555b17ab50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b195e24 000055555b195e20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b182380 000055555b182050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555b194ed8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75000a29732520 3a6425206f6e7272 652820000a732520 3a4c4941465a5953 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b50000a0c560005 1f4100054a4b5757 400d05000a560005 1f4c4941465a5953 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011f8e02a810000b 80040a1000060102 e00008000da00300 08000d9803200800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 000100000a080606 011f8e02a810000b 80040a1000060102 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e00008000da00300 08000d9803200800 0d90030fffffffff ffff040d80030fff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040cf0 030008000ce80300 08000ce003000800 0cd8030008000cd0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 040cc0032008000c b8030008000cb003 0fffffffffffff04 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=0000000000000002 RDX=0000000000000002 RSI=ffff888055b7d480 RDI=ffff888055b7c900 RBP=ffffc90003a36708 RSP=ffffc90003a36670 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000050 R11=0000000000000001 R12=ffff888055b7d480 R13=0000000000000004 R14=0000000000000000 R15=ffff888055b7c900 RIP=ffffffff81989bc8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fde9f2ab6c0 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000002ba01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c2ac0da77f14dbe3 f9d739987c2fec3f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9a6a18bee1cd1f02 1a679b6e1911c03e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7fb16691d8f8496 3161a4c7ac13f64f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9164e1ae35dead5a 46de463ce7d32e5f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000015c00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000318c500000000 9feaec0012b48a00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000318c6 f4d37a5f4e28ac46 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000318c5886f0200 27b24400838d0600 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7340410074b5b322 000318c71a162e00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77adc9c502face66 d01dd4ce74a5b790 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f7fbc2eb1f52197 4f6a096b669f1ee6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff88801dea4900 RCX=ffffc90000188000 RDX=ffff88801dea4900 RSI=ffffffff8da2c04c RDI=ffffffff8bf073c0 RBP=ffffc90000648a40 RSP=ffffc900006489a0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90000648a40 R11=0000000000000001 R12=ffffc900006489f0 R13=ffffc90000648a60 R14=ffffc90000648a40 R15=ffffc90000648a68 RIP=ffffffff8b608104 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6c05000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004b6af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf1ba66a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da13050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da1305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da13057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da1306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb58da131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85297215 RDI=ffffffff9addb780 RBP=ffffffff9addb740 RSP=ffffc900049b7350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addb740 R15=ffffffff852971b0 RIP=ffffffff8529723f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007fbb541f66c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6d05000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000300000a CR3=00000000521d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000300000a DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000