last executing test programs: 4.910709162s ago: executing program 3 (id=2859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0xeeee0000) 4.781726157s ago: executing program 3 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028005000400c600000008000300ac"], 0x40}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') socket(0x26, 0x3, 0x0) mmap(&(0x7f00006b7000/0x3000)=nil, 0x3000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x76d000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x1000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) openat$cgroup_ro(r1, 0x0, 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@empty, 0x4e23, 0x1, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) 4.720876752s ago: executing program 3 (id=2861): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.451327308s ago: executing program 2 (id=2871): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a00)={0x84, &(0x7f00000015c0)={0x0, 0xf, 0x52, "eeb8cfeafca2c5bd917f73645eaeef8c77f91084ba454b4a0ec831b759b75c70bbc34245e16277bc792ca415d2a38f673d4707165d7aac847ad7108e072367bc8f6ec5815bf177038cecb7b4aa0dbcd76d98"}, 0x0, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000001700)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000001740)={0x40, 0x7, 0x2, 0xab1d}, 0x0, &(0x7f00000017c0)={0x40, 0xb, 0x2, "6314"}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001840)={0x40, 0x13, 0x6, @local}, &(0x7f0000001880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x19, 0x2, "a343"}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001980)={0x40, 0x1e, 0x1, 0xca}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0x7}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r4 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0xfffffea5, 0x2, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 1.990612016s ago: executing program 1 (id=2875): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000022c0)=@delchain={0x5f4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5, 0x38, 0xfe}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xa}}, @filter_kind_options=@f_flower={{0xb}, {0x59c, 0x2, [@TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x9}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_ACT={0x560, 0x3, [@m_connmark={0x19c, 0x3, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x2, 0xe, 0x3}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x800, 0x7, 0x5, 0xf}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xc, 0x6, 0x13c11ed6, 0x6}, 0x4f99}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8001, 0x2, 0x73e9, 0xfd}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xfffffff7, 0x10000000, 0x6, 0x6b7}, 0x7}}]}, {0xe0, 0x6, "298087a514b9ece474ecca2af72b1b6cbaf657fd1bb4e19a0478abda2e99cebde36fd3244e4ff1219c4c5780785c66183731f35d24079aea2d612e37be799d8717a7c998ddd64816d2812c011ac6558a0aca511dfb9dc104459f6a3ef46f0c69b4df42195a58e1468345befdcb2a8c45e86c32cc74f51ed481cf1eaf006e82da63df5a44e538c7513d5a7d79574743733da4946b2e9e54850d20087ba5b0d8b5b40176ff6e5c7658e4803f6419ae1bc48a6c1feaaaa7187549e6558ab46555d085da479d8f2f80ea78f1d756f1cebb8a99d7251ce0063ca5c50237b4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x98, 0x3, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4b1276c70ef6a1e4d6415080b82d63fc"}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "71a845a7cd2d0ca6d6fd84c60fb24999"}]}, {0x1c, 0x6, "f09f9c76bb7422f959ef8543dc16553a363cb80ac36ec516"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0xbfa0b9dd581cd952}}}}, @m_xt={0x20c, 0x1a, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10d, 0x6, {0x9, 'filter\x00', 0x24, 0x4, "af257f29c92eb9a0041809c2e9cf56842adac89e2d0ddc8207bb22d630d3e6f69a926f55bcfdd29a607275e4121da510dc591260e6b384547af2c16023750552c1c801bd72e8ab1485a20b338507a4135fc35ad1727fcc44349a83454ec3c7bcc03c59e3491d1062a7ade153ce3dd8540a941a6e428c38844d323158909615280f0235e2a0c9cad2f3af1f71afe98a26eba0b4df845e767dc5849e0151b2e1a8b71fc70c401e5117f2d6f5d0b2d3d89ef6cce968be4a31833deb4403327cc9cff4eb4fbdd331fd6b804f971620e36bddffea6544c33fcfc46e34d5df7d3b306a9ad9c6"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x51, 0x6, {0x9, 'mangle\x00', 0x7, 0xe, "f3438a7f52c2a4d852b90e44496f98409d372340984fa4baa5a60bafd918120a1caa3a76661cae"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x91e7}]}, {0x5d, 0x6, "c82f69632dd2362f1b2e53e1b3afb209828c6a22110cf4c12a5c913bee5e9b35ee603e77345e533d39a3543fbd031c890bf5e318795a30a53f86b1ea473d6f2bf0f9b922328af02d8517ae6489ac0f6df9af70aa74fc612a9c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x9375b112a5bb84d1}}}}, @m_tunnel_key={0x11c, 0x1c, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xb5, 0x6, "471822097d5170d62581a0d6e20e13175dff1ea59d137a56d25bed00ba22779795c9c8cbf41253c24230541aa7ba98b5c688504a699250ac286e8ca79d706aee020809566ccfc287208e9b20717fe2c756970f508bef9facdf8fe3569c64e8bb326beb7598815f07b644ebb039029eac634d5dc58f6f1ce4fad1e78a1b500fd303c6b4a1153a2f1bd23c2bda40e3299400a4aca860e43142ba8124f0fdd9d9999d5070bc3117120d0e3304456ee0f7e0c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x8}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x880}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.910900318s ago: executing program 1 (id=2876): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x2c, r0, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 1.910548779s ago: executing program 1 (id=2877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x4801) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002500)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) 1.821355297s ago: executing program 1 (id=2878): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 1.821027013s ago: executing program 1 (id=2879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) 1.751543349s ago: executing program 1 (id=2880): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x4, 0x201, 0x50, &(0x7f0000000840)="08ea"}], 0x1}) 1.681843092s ago: executing program 3 (id=2881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.491659954s ago: executing program 3 (id=2882): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.119987056s ago: executing program 0 (id=2888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x7fff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) accept(r0, 0x0, 0x0) 611.498432ms ago: executing program 3 (id=2889): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 381.888773ms ago: executing program 2 (id=2890): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 319.985866ms ago: executing program 2 (id=2891): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x80) unshare(0x2a020400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x8000000000000000, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f000000000000000000000000000000000014"], 0x6c}}, 0x0) 319.606694ms ago: executing program 2 (id=2892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x9ac, 0x6}) 219.613084ms ago: executing program 0 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x5c}, 0x1, 0x300, 0x0, 0x4040058}, 0x40000) 219.329382ms ago: executing program 0 (id=2894): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 156.740937ms ago: executing program 2 (id=2895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r10, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r7, 0x8922, 0x0) 81.808334ms ago: executing program 0 (id=2896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 81.461873ms ago: executing program 0 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r1, &(0x7f0000000000)=""/182, 0xb6) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 403.414ยตs ago: executing program 0 (id=2898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x1dbb, &(0x7f0000000480)={0x0, 0x5125, 0x0, 0x0, 0x2c9}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_setup(0x5626, &(0x7f0000000500)={0x0, 0x2d36, 0x2, 0x3, 0x9f, 0x0, r3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r3, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1) syz_io_uring_setup(0x489, &(0x7f0000000600)={0x0, 0x3f73, 0x10, 0x0, 0x1a}, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x262, 0x0, {0x1}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 0s ago: executing program 2 (id=2899): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0xc, 0x2e, "73f6ee3daad71e2c247c6b60f3a9264cc83a144a116d2fe8166cdd21e166215e9266ef3067336ccd17aa3198943a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=2900): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kernel console output (not intermixed with test programs): gadget.0 gadget.0: failed to queue resume event [ 281.257197][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.335793][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.357850][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.421562][ T72] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 281.426696][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.446863][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.515851][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.536706][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.607694][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.627111][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.695917][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.717615][ T6020] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.796182][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.816866][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.822947][ T1023] usb 6-1: USB disconnect, device number 26 [ 281.906089][T12151] raw-gadget.0 gadget.0: failed to queue resume event [ 281.942440][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 281.950944][T12151] raw-gadget.0 gadget.0: failed to queue disconnect event [ 281.966049][ T9] usb 5-1: USB disconnect, device number 27 [ 282.484651][T12213] fuse: Unknown parameter '0x0000000000000003' [ 282.986367][ T6021] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 283.155825][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 283.159054][ T6021] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 283.165361][ T6021] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 283.169522][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 283.173182][ T6021] usb 6-1: Product: syz [ 283.175464][ T6021] usb 6-1: Manufacturer: syz [ 283.177942][ T6021] usb 6-1: SerialNumber: syz [ 283.182367][ T6021] usb 6-1: config 0 descriptor?? [ 283.186001][T12220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 283.189414][ T6021] hub 6-1:0.0: bad descriptor, ignoring hub [ 283.191754][ T6021] hub 6-1:0.0: probe with driver hub failed with error -5 [ 283.444993][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.449329][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.167080][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.188941][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2069'. [ 284.235775][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.257217][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.325850][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.345728][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 284.346714][ T6020] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.416179][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.438401][ T6020] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.495830][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 284.499721][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 284.502640][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.506102][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.507116][ T9] usb 5-1: config 0 descriptor?? [ 284.526416][ T6021] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.595780][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.616771][ T6021] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.696135][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.716581][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 284.722252][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.726842][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 284.729205][ T9] usb 5-1: media controller created [ 284.738646][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.744215][ T1023] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.769940][ T9] DVB: Unable to find symbol dib7000p_attach() [ 284.772775][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 284.835815][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.835942][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 284.841923][ T9] Registered IR keymap rc-empty [ 284.843771][ T9] dvb-usb: could not initialize remote control. [ 284.845980][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 284.867009][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 284.955766][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 284.988329][ T1023] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.056343][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.086864][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.155879][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.177102][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.255776][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.288757][ T6020] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.356457][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.376802][ T6020] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.446051][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.466926][ T6020] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.535892][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.556650][ T1337] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.636462][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.656888][ T72] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.736216][T12220] raw-gadget.0 gadget.1: failed to queue resume event [ 285.756667][ T2303] raw-gadget.0 gadget.1: failed to queue suspend event [ 285.772483][T12220] raw-gadget.0 gadget.1: failed to queue disconnect event [ 285.777733][ T6020] usb 6-1: USB disconnect, device number 27 [ 286.950493][T12259] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 287.004124][ T9] usb 5-1: USB disconnect, device number 28 [ 287.025073][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 287.068773][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'. [ 287.113980][T12270] fuse: Unknown parameter 'fd0x0000000000000003' [ 287.385956][ T72] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 287.445741][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 287.545762][ T72] usb 6-1: Using ep0 maxpacket: 16 [ 287.549096][ T72] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 287.554274][ T72] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.557952][ T72] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.561282][ T72] usb 6-1: Product: syz [ 287.563109][ T72] usb 6-1: Manufacturer: syz [ 287.564943][ T72] usb 6-1: SerialNumber: syz [ 287.568203][ T72] usb 6-1: config 0 descriptor?? [ 287.571943][ T72] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 287.575085][ T72] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 287.626457][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 287.630465][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 287.636282][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 287.639656][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 287.642596][ T9] usb 5-1: Product: syz [ 287.644214][ T9] usb 5-1: Manufacturer: syz [ 287.645893][ T9] usb 5-1: SerialNumber: syz [ 287.649787][ T9] usb 5-1: config 0 descriptor?? [ 287.652237][T12273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 287.657122][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 287.659642][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 287.911886][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.916778][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.175198][ T72] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 288.178824][ T40] audit: type=1400 audit(1759255506.982:1363): avc: denied { mount } for pid=12281 comm="syz.3.2083" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 288.288171][T12284] openvswitch: netlink: Multiple metadata blocks provided [ 288.577277][ T6020] raw-gadget.0 gadget.0: failed to queue suspend event [ 288.584995][ T72] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 288.587763][ T72] em28xx 6-1:0.0: board has no eeprom [ 288.655796][ T72] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 288.655895][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 288.658579][ T72] em28xx 6-1:0.0: dvb set to bulk mode. [ 288.658625][ T9] em28xx 6-1:0.0: Binding DVB extension [ 288.667816][ T72] usb 6-1: USB disconnect, device number 28 [ 288.671265][ T72] em28xx 6-1:0.0: Disconnecting em28xx [ 288.679336][ T1472] raw-gadget.0 gadget.0: failed to queue suspend event [ 288.702908][ T9] em28xx 6-1:0.0: Registering input extension [ 288.707419][ T72] em28xx 6-1:0.0: Closing input extension [ 288.714976][ T72] em28xx 6-1:0.0: Freeing device [ 288.765864][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 288.786674][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 288.855992][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 288.876594][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 288.946019][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 288.966632][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.036151][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.057484][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.127275][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.147709][ T6020] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.235936][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.258223][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.336094][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.357418][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.425848][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.447118][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.516057][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.536486][ T2303] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.608984][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.627479][ T72] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.696209][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.716618][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.730156][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2088'. [ 289.761405][T12305] fuse: Unknown parameter 'fd0x0000000000000003' [ 289.785992][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.806616][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.877802][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.896518][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 289.966164][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 289.987744][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 290.045793][ T2303] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 290.057870][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 290.088205][ T1023] raw-gadget.0 gadget.0: failed to queue suspend event [ 290.155900][T12273] raw-gadget.0 gadget.0: failed to queue resume event [ 290.176695][ T6020] raw-gadget.0 gadget.0: failed to queue suspend event [ 290.189078][T12273] raw-gadget.0 gadget.0: failed to queue disconnect event [ 290.196782][ T2303] usb 6-1: Using ep0 maxpacket: 16 [ 290.200219][ T2303] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.202746][ T2303] usb 6-1: config 0 has no interface number 0 [ 290.204757][ T2303] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.206013][ T1023] usb 5-1: USB disconnect, device number 29 [ 290.209925][ T2303] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.218552][ T2303] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 290.221669][ T2303] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 290.224381][ T2303] usb 6-1: Product: syz [ 290.226208][ T2303] usb 6-1: SerialNumber: syz [ 290.229827][ T2303] usb 6-1: config 0 descriptor?? [ 290.234755][ T2303] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 290.239309][ T2303] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input28 [ 290.354932][T12314] loop6: detected capacity change from 0 to 2640 [ 290.357953][T12314] buffer_io_error: 27 callbacks suppressed [ 290.357966][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.364188][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.367491][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.370900][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.373487][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.377135][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.380069][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.382549][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.385062][T12314] ldm_validate_partition_table(): Disk read failed. [ 290.387633][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.391916][T12314] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.395749][T12314] Dev loop6: unable to read RDB block 0 [ 290.397915][T12314] loop6: unable to read partition table [ 290.400213][T12314] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 290.439277][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.442762][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.445207][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.447670][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.450050][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.452401][ T2303] usb 6-1: USB disconnect, device number 29 [ 290.454413][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.454425][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 290.464873][ T2303] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 290.988771][T12328] fuse: Unknown parameter 'fd0x0000000000000003' [ 291.087013][ T40] audit: type=1400 audit(1759255509.892:1364): avc: denied { create } for pid=12325 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 291.463622][T12339] tipc: Enabled bearer , priority 0 [ 291.486892][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 291.495884][T12339] syzkaller0: entered promiscuous mode [ 291.498276][T12339] syzkaller0: entered allmulticast mode [ 291.635785][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 291.639765][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 291.645135][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 291.648573][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 291.651386][ T24] usb 6-1: Product: syz [ 291.652954][ T24] usb 6-1: Manufacturer: syz [ 291.654625][ T24] usb 6-1: SerialNumber: syz [ 291.657845][ T24] usb 6-1: config 0 descriptor?? [ 291.663541][T12337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.667748][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 291.669706][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 292.556243][T12337] usb 6-1: reset high-speed USB device number 30 using dummy_hcd [ 292.712812][T12341] tipc: Resetting bearer [ 292.728878][T12338] tipc: Resetting bearer [ 292.733342][T12337] usb 6-1: device firmware changed [ 292.737575][ T6020] usb 6-1: USB disconnect, device number 30 [ 292.817224][T12338] tipc: Disabling bearer [ 292.875725][ T6020] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 293.063801][ T6020] usb 6-1: Using ep0 maxpacket: 32 [ 293.074299][ T6020] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 293.085332][ T6020] usb 6-1: string descriptor 0 read error: -22 [ 293.088109][ T6020] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.091766][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.102212][ T6020] usb 6-1: config 0 descriptor?? [ 293.106630][T12343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.110705][ T6020] hub 6-1:0.0: bad descriptor, ignoring hub [ 293.113146][ T6020] hub 6-1:0.0: probe with driver hub failed with error -5 [ 293.428558][ T24] usb 6-1: USB disconnect, device number 31 [ 293.872236][T12368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2109'. [ 293.875304][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 294.735523][T12389] loop6: detected capacity change from 0 to 2640 [ 294.738609][T12389] ldm_validate_partition_table(): Disk read failed. [ 294.740954][T12389] Dev loop6: unable to read RDB block 0 [ 294.742946][T12389] loop6: unable to read partition table [ 294.744995][T12389] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 295.781098][T12395] loop6: detected capacity change from 0 to 524287999 [ 295.820181][ T5959] buffer_io_error: 32 callbacks suppressed [ 295.820194][ T5959] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 295.868874][T12399] tipc: Enabled bearer , priority 0 [ 295.913211][T12399] syzkaller0: entered promiscuous mode [ 295.915371][T12399] syzkaller0: entered allmulticast mode [ 296.382062][T12418] loop6: detected capacity change from 0 to 2640 [ 296.389993][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.395009][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.398769][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.401388][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.404948][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.407541][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.410609][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.413781][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.417223][T12418] ldm_validate_partition_table(): Disk read failed. [ 296.419652][T12418] Buffer I/O error on dev loop6, logical block 0, async page read [ 296.422504][T12418] Dev loop6: unable to read RDB block 0 [ 296.431303][T12418] loop6: unable to read partition table [ 296.434422][T12418] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 296.585961][ T1023] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 296.740098][ T1023] usb 6-1: Using ep0 maxpacket: 16 [ 296.744046][ T1023] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 296.747555][ T1023] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.751568][ T1023] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.757606][ T1023] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 296.761331][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.772078][ T1023] usb 6-1: config 0 descriptor?? [ 296.777274][ T1023] pxrc 6-1:0.0: Could not find endpoint [ 296.780601][ T1023] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 296.980086][ T9] usb 6-1: USB disconnect, device number 32 [ 297.339199][T12403] tipc: Resetting bearer [ 297.344154][T12398] tipc: Resetting bearer [ 297.389358][T12398] tipc: Disabling bearer [ 297.775854][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 297.904090][T12449] loop6: detected capacity change from 0 to 2640 [ 297.909855][ T5959] ldm_validate_partition_table(): Disk read failed. [ 297.912252][ T5959] Dev loop6: unable to read RDB block 0 [ 297.914403][ T5959] loop6: unable to read partition table [ 297.920201][T12449] ldm_validate_partition_table(): Disk read failed. [ 297.922917][T12449] Dev loop6: unable to read RDB block 0 [ 297.925555][T12449] loop6: unable to read partition table [ 297.926514][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 297.927993][T12449] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 297.930581][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 297.935421][ T24] usb 6-1: config 0 has no interface number 0 [ 297.937610][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.941371][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 297.947273][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 297.951031][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 297.953583][ T24] usb 6-1: Product: syz [ 297.954922][ T24] usb 6-1: SerialNumber: syz [ 297.958178][ T24] usb 6-1: config 0 descriptor?? [ 297.962274][ T24] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 297.965463][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input29 [ 298.011710][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2131'. [ 298.164575][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 298.165377][ T6020] usb 6-1: USB disconnect, device number 33 [ 298.166774][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 298.173591][ T6020] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 298.700950][T12457] tipc: Enabled bearer , priority 0 [ 298.719826][T12457] syzkaller0: entered promiscuous mode [ 298.722213][T12457] syzkaller0: entered allmulticast mode [ 299.889941][T12459] tipc: Resetting bearer [ 299.892884][T12456] tipc: Resetting bearer [ 299.962604][T12456] tipc: Disabling bearer [ 300.563766][T12471] loop6: detected capacity change from 0 to 2640 [ 300.567994][T12471] ldm_validate_partition_table(): Disk read failed. [ 300.570249][T12471] Dev loop6: unable to read RDB block 0 [ 300.572180][T12471] loop6: unable to read partition table [ 300.575836][T12471] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 300.586439][ T72] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 300.745766][ T72] usb 6-1: Using ep0 maxpacket: 16 [ 300.750023][ T72] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 300.753781][ T72] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.756950][T12480] tipc: Enabled bearer , priority 0 [ 300.758817][ T72] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.765295][ T72] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 300.769016][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.774200][ T72] usb 6-1: config 0 descriptor?? [ 300.777072][T12480] syzkaller0: entered promiscuous mode [ 300.778841][T12480] syzkaller0: entered allmulticast mode [ 300.783218][ T72] pxrc 6-1:0.0: Could not find endpoint [ 300.786637][ T72] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 300.982207][ T1023] usb 6-1: USB disconnect, device number 34 [ 301.765938][ T72] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 301.917494][ T72] usb 6-1: Using ep0 maxpacket: 16 [ 301.921917][ T72] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 301.924675][ T72] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.928143][ T72] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.931055][ T72] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 301.934575][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.940134][ T72] usb 6-1: config 0 descriptor?? [ 302.023210][T12482] tipc: Resetting bearer [ 302.026393][T12479] tipc: Resetting bearer [ 302.100045][T12479] tipc: Disabling bearer [ 302.144572][ T72] usb 6-1: USB disconnect, device number 35 [ 302.683969][T12497] loop6: detected capacity change from 0 to 2640 [ 302.686808][T12497] buffer_io_error: 70 callbacks suppressed [ 302.686818][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.691974][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.695383][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.698146][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.700843][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.703442][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.707347][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.711682][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.714749][T12497] ldm_validate_partition_table(): Disk read failed. [ 302.717976][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.721487][T12497] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.724870][T12497] Dev loop6: unable to read RDB block 0 [ 302.727697][T12497] loop6: unable to read partition table [ 302.730262][T12497] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 303.731850][T12501] loop6: detected capacity change from 0 to 524287999 [ 304.636343][T12522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2159'. [ 305.915837][ T1337] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 306.066099][ T1337] usb 6-1: Using ep0 maxpacket: 32 [ 306.069187][ T1337] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 306.072184][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.077889][ T1337] usb 6-1: config 0 descriptor?? [ 306.187172][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2164'. [ 306.240579][T12540] vivid-007: disconnect [ 306.243454][T12539] vivid-007: reconnect [ 306.284555][ T1337] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 306.288403][ T1337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.291902][ T1337] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 306.294207][ T1337] usb 6-1: media controller created [ 306.306994][ T1337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.337058][ T1337] DVB: Unable to find symbol dib7000p_attach() [ 306.339048][ T1337] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 306.396104][ T1337] rc_core: IR keymap rc-dib0700-rc5 not found [ 306.398830][ T1337] Registered IR keymap rc-empty [ 306.401396][ T1337] dvb-usb: could not initialize remote control. [ 306.404006][ T1337] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 307.385220][T12554] tipc: Enabled bearer , priority 0 [ 307.402276][T12554] tipc: Resetting bearer [ 307.414558][T12553] tipc: Disabling bearer [ 307.523451][T12562] loop6: detected capacity change from 0 to 2640 [ 307.528590][T12562] ldm_validate_partition_table(): Disk read failed. [ 307.531680][T12562] Dev loop6: unable to read RDB block 0 [ 307.534498][T12562] loop6: unable to read partition table [ 307.537580][T12562] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 308.650610][ T1337] usb 6-1: USB disconnect, device number 36 [ 308.668040][ T1337] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 308.956367][ T1337] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 309.105785][ T1337] usb 6-1: Using ep0 maxpacket: 8 [ 309.109227][ T1337] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.113895][ T1337] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.117362][ T1337] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.120577][ T1337] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.124688][ T1337] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.128440][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.340907][ T1337] usb 6-1: usb_control_msg returned -32 [ 309.342998][ T1337] usbtmc 6-1:16.0: can't read capabilities [ 309.471742][T12582] syzkaller0: entered promiscuous mode [ 309.474443][T12582] syzkaller0: entered allmulticast mode [ 309.663348][T12586] tipc: Enabled bearer , priority 0 [ 309.682770][T12586] tipc: Resetting bearer [ 309.698742][T12585] tipc: Disabling bearer [ 309.757396][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 309.820006][T12592] loop6: detected capacity change from 0 to 2640 [ 309.823400][T12592] buffer_io_error: 33 callbacks suppressed [ 309.823414][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.830296][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.833690][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.837816][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.842081][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.845603][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.849118][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.852470][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.856894][T12592] ldm_validate_partition_table(): Disk read failed. [ 309.859740][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.863369][T12592] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.867099][T12592] Dev loop6: unable to read RDB block 0 [ 309.869774][T12592] loop6: unable to read partition table [ 309.872263][T12592] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 311.673867][ T9] usb 6-1: USB disconnect, device number 37 [ 311.757709][T12603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2189'. [ 312.094058][T12614] loop6: detected capacity change from 0 to 2640 [ 312.098345][T12614] ldm_validate_partition_table(): Disk read failed. [ 312.101171][T12614] Dev loop6: unable to read RDB block 0 [ 312.103898][T12614] loop6: unable to read partition table [ 312.106069][T12614] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 312.235953][ T1337] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 312.365826][ T1337] usb 6-1: device descriptor read/64, error -71 [ 312.605974][ T1337] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 312.736061][ T1337] usb 6-1: device descriptor read/64, error -71 [ 312.845931][ T1337] usb usb6-port1: attempt power cycle [ 313.151692][T12623] binder: 12622:12623 ioctl 4018620d 0 returned -22 [ 313.186132][ T1337] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 313.212772][ T1337] usb 6-1: device descriptor read/8, error -71 [ 313.456496][ T1337] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 313.476486][ T1337] usb 6-1: device descriptor read/8, error -71 [ 313.586682][ T1337] usb usb6-port1: unable to enumerate USB device [ 314.709296][T12637] loop6: detected capacity change from 0 to 2640 [ 314.713041][ T5959] ldm_validate_partition_table(): Disk read failed. [ 314.716780][ T5959] Dev loop6: unable to read RDB block 0 [ 314.718848][ T5959] loop6: unable to read partition table [ 314.724592][T12637] ldm_validate_partition_table(): Disk read failed. [ 314.728925][T12637] Dev loop6: unable to read RDB block 0 [ 314.731438][T12637] loop6: unable to read partition table [ 314.734120][T12637] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 314.829354][T12644] netlink: 'syz.1.2205': attribute type 3 has an invalid length. [ 314.833577][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 314.873072][ T40] audit: type=1400 audit(1759255533.672:1365): avc: denied { search } for pid=12645 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.884125][ T40] audit: type=1400 audit(1759255533.682:1366): avc: denied { search } for pid=12645 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.895285][ T40] audit: type=1400 audit(1759255533.682:1367): avc: denied { search } for pid=12645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1900 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.902644][ T40] audit: type=1400 audit(1759255533.682:1368): avc: denied { search } for pid=12645 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.909925][ T40] audit: type=1400 audit(1759255533.682:1369): avc: denied { read open } for pid=12648 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.918321][ T40] audit: type=1400 audit(1759255533.682:1370): avc: denied { getattr } for pid=12648 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.927036][ T40] audit: type=1400 audit(1759255533.692:1371): avc: denied { add_name } for pid=12645 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.935055][ T40] audit: type=1400 audit(1759255533.692:1372): avc: denied { create } for pid=12645 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.942698][ T40] audit: type=1400 audit(1759255533.692:1373): avc: denied { write open } for pid=12645 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=7616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.951724][ T40] audit: type=1400 audit(1759255533.692:1374): avc: denied { append } for pid=12645 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=7616 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 315.201772][T12618] delete_channel: no stack [ 315.664286][T12644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.666738][T12644] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 315.676964][T12644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.679085][T12644] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 315.686971][T12644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.689186][T12644] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 315.695207][T12644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.702765][T12644] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 315.894878][T12687] fuse: Unknown parameter 'grou00000000000000000000' [ 316.793811][T12695] loop6: detected capacity change from 0 to 2640 [ 316.798845][ T5959] buffer_io_error: 69 callbacks suppressed [ 316.798864][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.805219][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.808083][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.810571][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.813090][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.816149][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.819058][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.822310][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.825802][ T5959] ldm_validate_partition_table(): Disk read failed. [ 316.829464][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.832393][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.835115][ T5959] Dev loop6: unable to read RDB block 0 [ 316.837244][ T5959] loop6: unable to read partition table [ 316.840359][T12695] ldm_validate_partition_table(): Disk read failed. [ 316.843049][T12695] Dev loop6: unable to read RDB block 0 [ 316.845265][T12695] loop6: unable to read partition table [ 316.848674][T12695] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 318.146036][ T1337] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 318.291946][T12711] binder: 12710:12711 ioctl c0306201 0 returned -14 [ 318.298723][ T1337] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 318.304504][ T1337] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 318.309203][ T1337] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.312935][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.439220][T12715] fuse: Unknown parameter 'grou00000000000000000000' [ 319.485296][T12723] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2225'. [ 320.229178][T12727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2226'. [ 320.829272][T12705] delete_channel: no stack [ 320.831826][ T9] usb 6-1: USB disconnect, device number 42 [ 321.241499][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2235'. [ 321.287238][T12753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2236'. [ 321.575943][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 321.745771][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 321.749405][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.753349][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.756931][ T24] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 321.760067][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.764873][ T24] usb 6-1: config 0 descriptor?? [ 322.180410][ T24] smartjoyplus 0003:0925:8866.0009: hidraw1: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 322.186183][ T24] smartjoyplus 0003:0925:8866.0009: Force feedback for SmartJoy PLUS PS2/USB adapter [ 322.318061][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.320687][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.374321][ T1337] usb 6-1: USB disconnect, device number 43 [ 322.407560][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 322.407578][ T40] audit: type=1804 audit(1759255541.212:1457): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2243" name="file1" dev="ramfs" ino=43995 res=1 errno=0 [ 323.145917][ T1337] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 323.295855][ T1337] usb 6-1: Using ep0 maxpacket: 16 [ 323.300349][ T1337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 323.305032][ T1337] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.308230][ T1337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.310735][ T1337] usb 6-1: Product: syz [ 323.312073][ T1337] usb 6-1: Manufacturer: syz [ 323.313477][ T1337] usb 6-1: SerialNumber: syz [ 323.316934][ T1337] usb 6-1: config 0 descriptor?? [ 323.321397][ T1337] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.324307][ T1337] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 323.930575][ T1337] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 324.338728][ T1337] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.341861][ T1337] em28xx 6-1:0.0: board has no eeprom [ 324.405824][ T1337] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.408829][ T1337] em28xx 6-1:0.0: dvb set to bulk mode. [ 324.414528][ T1023] em28xx 6-1:0.0: Binding DVB extension [ 324.417453][ T1337] usb 6-1: USB disconnect, device number 44 [ 324.420375][ T1337] em28xx 6-1:0.0: Disconnecting em28xx [ 324.459615][ T1023] em28xx 6-1:0.0: Registering input extension [ 324.461996][ T1337] em28xx 6-1:0.0: Closing input extension [ 324.468536][ T1337] em28xx 6-1:0.0: Freeing device [ 324.666618][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2252'. [ 324.867796][ T40] audit: type=1400 audit(1759255543.672:1458): avc: denied { append } for pid=12792 comm="syz.1.2254" name="video7" dev="devtmpfs" ino=973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.165795][ T2303] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 325.315821][ T2303] usb 6-1: Using ep0 maxpacket: 16 [ 325.320004][ T2303] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 325.323385][ T2303] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.327965][ T2303] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.332672][ T2303] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 325.337019][ T2303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.343135][ T2303] usb 6-1: config 0 descriptor?? [ 325.348440][ T2303] pxrc 6-1:0.0: Could not find endpoint [ 325.351329][ T2303] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 325.547937][ T2303] usb 6-1: USB disconnect, device number 45 [ 325.574400][T12797] loop6: detected capacity change from 0 to 2640 [ 325.577436][T12797] buffer_io_error: 27 callbacks suppressed [ 325.577446][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.583441][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.587002][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.589804][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.592322][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.595154][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.600906][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.604655][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.607987][T12797] ldm_validate_partition_table(): Disk read failed. [ 325.610117][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.613181][T12797] Buffer I/O error on dev loop6, logical block 0, async page read [ 325.616578][T12797] Dev loop6: unable to read RDB block 0 [ 325.618789][T12797] loop6: unable to read partition table [ 325.620942][T12797] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 325.689573][T12799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2257'. [ 326.136645][T12814] fuse: Unknown parameter 'group_id00000000000000000000' [ 326.949690][T12821] syzkaller1: entered promiscuous mode [ 326.952125][T12821] syzkaller1: entered allmulticast mode [ 327.101980][T12829] loop6: detected capacity change from 0 to 2640 [ 327.106706][ T5959] ldm_validate_partition_table(): Disk read failed. [ 327.109276][ T5959] Dev loop6: unable to read RDB block 0 [ 327.111400][ T5959] loop6: unable to read partition table [ 327.116061][T12829] ldm_validate_partition_table(): Disk read failed. [ 327.118879][T12829] Dev loop6: unable to read RDB block 0 [ 327.121037][T12829] loop6: unable to read partition table [ 327.122958][T12829] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 327.323211][ T40] audit: type=1326 audit(1759255546.122:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.2272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0dd8eec9 code=0x7fc00000 [ 327.333011][ T40] audit: type=1326 audit(1759255546.122:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.2272" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f8f0dd8eec9 code=0x7fc00000 [ 327.343118][ T40] audit: type=1326 audit(1759255546.122:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.2272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0dd8eec9 code=0x7fc00000 [ 327.354179][ T40] audit: type=1326 audit(1759255546.122:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.2272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0dd8eec9 code=0x7fc00000 [ 327.479993][T12842] fuse: Unknown parameter 'group_id00000000000000000000' [ 328.281432][ T40] audit: type=1400 audit(1759255547.082:1463): avc: denied { execute } for pid=12850 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 328.289566][ T40] audit: type=1400 audit(1759255547.082:1464): avc: denied { execute_no_trans } for pid=12850 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 328.456733][ T5966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.463170][ T5966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.468020][ T5966] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.474828][ T5966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.479255][ T5966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.485925][ T5957] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.488622][ T5957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.491781][ T5957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.499958][ T5957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.503380][ T5957] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.511196][ T40] audit: type=1400 audit(1759255547.312:1465): avc: denied { mounton } for pid=12851 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 328.624383][T12851] chnl_net:caif_netlink_parms(): no params data found [ 328.711507][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.714049][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.717313][T12851] bridge_slave_0: entered allmulticast mode [ 328.721177][T12851] bridge_slave_0: entered promiscuous mode [ 328.724677][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.727075][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.729239][T12851] bridge_slave_1: entered allmulticast mode [ 328.731936][T12851] bridge_slave_1: entered promiscuous mode [ 328.773253][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.778780][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.823646][T12851] team0: Port device team_slave_0 added [ 328.827983][T12851] team0: Port device team_slave_1 added [ 328.889550][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.892337][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.902241][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.908482][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.910996][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.919951][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.961680][T12851] hsr_slave_0: entered promiscuous mode [ 328.963988][T12851] hsr_slave_1: entered promiscuous mode [ 328.966385][T12851] debugfs: 'hsr0' already exists in 'hsr' [ 328.968994][T12851] Cannot create hsr debugfs directory [ 329.090520][T12851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.175428][T12851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.251542][T12851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.326383][T12851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.435453][T12851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.441610][T12851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.448758][T12851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.456851][T12851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.482598][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.485754][T12851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.489159][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.491916][T12851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.517268][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.524954][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.566998][T12851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.579200][T12851] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.585404][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.589129][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.593840][ T40] audit: type=1400 audit(1759255548.382:1466): avc: denied { setattr } for pid=12869 comm="syz.3.2279" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.603763][ T40] audit: type=1400 audit(1759255548.392:1467): avc: denied { write } for pid=12869 comm="syz.3.2279" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.607005][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.611289][ T40] audit: type=1400 audit(1759255548.392:1468): avc: denied { open } for pid=12869 comm="syz.3.2279" path="/584/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.614181][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.629637][ T40] audit: type=1400 audit(1759255548.432:1469): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.718852][T12874] loop6: detected capacity change from 0 to 2640 [ 329.725036][ T5959] ldm_validate_partition_table(): Disk read failed. [ 329.728882][ T5959] Dev loop6: unable to read RDB block 0 [ 329.732128][ T5959] loop6: unable to read partition table [ 329.738203][T12874] ldm_validate_partition_table(): Disk read failed. [ 329.741261][T12874] Dev loop6: unable to read RDB block 0 [ 329.743360][T12874] loop6: unable to read partition table [ 329.747465][T12874] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 329.793713][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.840757][T12851] veth0_vlan: entered promiscuous mode [ 329.849603][T12851] veth1_vlan: entered promiscuous mode [ 329.881909][T12851] veth0_macvtap: entered promiscuous mode [ 329.889712][T12851] veth1_macvtap: entered promiscuous mode [ 329.898837][T12880] syzkaller0: entered promiscuous mode [ 329.901496][T12880] syzkaller0: entered allmulticast mode [ 329.998266][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.008145][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.017146][ T6265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.020362][ T6265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.025965][ T6265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.029040][ T6265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.078842][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.081820][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.110967][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.114314][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.125073][ T40] audit: type=1400 audit(1759255548.922:1470): avc: denied { mounton } for pid=12851 comm="syz-executor" path="/syzkaller.8bPuX3/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 330.134124][ T40] audit: type=1400 audit(1759255548.922:1471): avc: denied { mount } for pid=12851 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 330.137349][T12893] loop6: detected capacity change from 0 to 2640 [ 330.141272][ T40] audit: type=1400 audit(1759255548.922:1472): avc: denied { mounton } for pid=12851 comm="syz-executor" path="/syzkaller.8bPuX3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 330.148911][T12893] ldm_validate_partition_table(): Disk read failed. [ 330.156766][T12893] Dev loop6: unable to read RDB block 0 [ 330.159572][T12893] loop6: unable to read partition table [ 330.163968][T12893] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 330.200436][ T5360] ldm_validate_partition_table(): Disk read failed. [ 330.203163][ T5360] Dev loop6: unable to read RDB block 0 [ 330.205350][ T5360] loop6: unable to read partition table [ 330.458529][T12908] trusted_key: syz.0.2293 sent an empty control message without MSG_MORE. [ 330.499325][T12910] syzkaller0: entered promiscuous mode [ 330.502443][T12910] syzkaller0: entered allmulticast mode [ 330.515863][ T9] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 330.555934][ T5957] Bluetooth: hci4: command tx timeout [ 330.687507][ T9] usb 6-1: config 0 has no interfaces? [ 330.691739][ T9] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 330.695550][ T9] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 330.702419][ T9] usb 6-1: Product: syz [ 330.704706][ T9] usb 6-1: Manufacturer: syz [ 330.707435][ T9] usb 6-1: SerialNumber: syz [ 330.712541][ T9] usb 6-1: config 0 descriptor?? [ 331.028417][ T24] usb 6-1: USB disconnect, device number 46 [ 331.601775][T12920] loop6: detected capacity change from 0 to 2640 [ 331.605034][T12920] buffer_io_error: 122 callbacks suppressed [ 331.605047][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.611284][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.614935][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.620411][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.623880][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.627520][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.631441][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.635858][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.638865][T12920] ldm_validate_partition_table(): Disk read failed. [ 331.641368][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.644368][T12920] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.647601][T12920] Dev loop6: unable to read RDB block 0 [ 331.649916][T12920] loop6: unable to read partition table [ 331.651833][T12920] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 331.714613][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2300'. [ 332.008659][T12931] loop6: detected capacity change from 0 to 2640 [ 332.012132][T12931] ldm_validate_partition_table(): Disk read failed. [ 332.015025][T12931] Dev loop6: unable to read RDB block 0 [ 332.020196][T12931] loop6: unable to read partition table [ 332.022809][T12931] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 332.405064][T12940] fuse: Bad value for 'user_id' [ 332.407036][T12940] fuse: Bad value for 'user_id' [ 332.635771][ T5957] Bluetooth: hci4: command tx timeout [ 333.202048][T12946] loop6: detected capacity change from 0 to 2640 [ 333.205974][T12946] ldm_validate_partition_table(): Disk read failed. [ 333.208366][T12946] Dev loop6: unable to read RDB block 0 [ 333.210341][T12946] loop6: unable to read partition table [ 333.212272][T12946] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 333.276589][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2311'. [ 333.308095][T12953] binder: BINDER_SET_CONTEXT_MGR already set [ 333.310647][T12953] binder: 12952:12953 ioctl 4018620d 200000000040 returned -16 [ 333.326716][T12955] netlink: 'syz.2.2313': attribute type 3 has an invalid length. [ 333.330585][T12955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2313'. [ 333.397723][T12962] tipc: Started in network mode [ 333.399976][T12962] tipc: Node identity 7205a4f4fb3e, cluster identity 4711 [ 333.402420][T12962] tipc: Enabled bearer , priority 0 [ 333.405117][T12962] syzkaller0: entered promiscuous mode [ 333.407310][T12962] syzkaller0: entered allmulticast mode [ 333.422653][T12962] tipc: Resetting bearer [ 333.430156][T12961] tipc: Resetting bearer [ 333.440796][T12961] tipc: Disabling bearer [ 333.490413][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 333.490426][ T40] audit: type=1400 audit(1759255552.292:1478): avc: denied { execute } for pid=12969 comm="syz.3.2320" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 333.537359][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2322'. [ 333.751946][T12986] syzkaller0: entered promiscuous mode [ 333.755605][T12986] syzkaller0: entered allmulticast mode [ 334.012809][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2332'. [ 334.203279][T12998] loop6: detected capacity change from 0 to 524287999 [ 334.454180][T13008] binder: 13007:13008 ioctl c0306201 0 returned -14 [ 334.715960][ T5957] Bluetooth: hci4: command tx timeout [ 334.735871][ T6067] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 334.885799][ T6067] usb 6-1: Using ep0 maxpacket: 8 [ 334.888820][ T6067] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 334.891993][ T6067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.898669][ T6067] usb 6-1: config 0 descriptor?? [ 335.196944][ T6067] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 335.201040][ T6067] asix 6-1:0.0: probe with driver asix failed with error -71 [ 335.205486][ T6067] usb 6-1: USB disconnect, device number 47 [ 336.302395][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 336.487660][T13022] netlink: 'syz.2.2346': attribute type 3 has an invalid length. [ 336.490811][T13022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2346'. [ 336.616218][ T1337] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 336.755967][ T1337] usb 6-1: device descriptor read/64, error -71 [ 336.796039][ T5957] Bluetooth: hci4: command tx timeout [ 336.997140][ T1337] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 337.126948][ T1337] usb 6-1: device descriptor read/64, error -71 [ 337.236454][ T1337] usb usb6-port1: attempt power cycle [ 337.261849][T13032] netlink: 'syz.0.2351': attribute type 11 has an invalid length. [ 337.265111][T13032] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2351'. [ 337.409612][T13036] fuse: Bad value for 'fd' [ 337.586080][ T1337] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 337.606728][ T1337] usb 6-1: device descriptor read/8, error -71 [ 337.846067][ T1337] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 337.866502][ T1337] usb 6-1: device descriptor read/8, error -71 [ 337.988334][ T1337] usb usb6-port1: unable to enumerate USB device [ 339.720578][T13048] netlink: 'syz.1.2357': attribute type 3 has an invalid length. [ 339.722749][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'. [ 339.724040][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2357'. [ 339.808558][T13054] tipc: Enabled bearer , priority 0 [ 339.811235][T13054] syzkaller0: entered promiscuous mode [ 339.813550][T13054] syzkaller0: entered allmulticast mode [ 339.830650][T13054] tipc: Resetting bearer [ 339.835968][T13053] tipc: Resetting bearer [ 339.847256][T13053] tipc: Disabling bearer [ 339.946557][T13060] fuse: Bad value for 'fd' [ 340.422720][T13074] netlink: 'syz.1.2369': attribute type 3 has an invalid length. [ 340.425561][T13074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2369'. [ 340.507834][T13078] tipc: Enabled bearer , priority 0 [ 340.510455][T13078] syzkaller0: entered promiscuous mode [ 340.512255][T13078] syzkaller0: entered allmulticast mode [ 340.524027][T13078] tipc: Resetting bearer [ 340.528896][T13077] tipc: Resetting bearer [ 340.537680][T13077] tipc: Disabling bearer [ 340.874156][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.887688][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.896824][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.900639][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.903585][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.914231][T13097] tipc: Enabled bearer , priority 0 [ 340.918088][T13097] syzkaller0: entered promiscuous mode [ 340.920255][T13097] syzkaller0: entered allmulticast mode [ 340.940957][T13097] tipc: Resetting bearer [ 340.948797][T13096] tipc: Resetting bearer [ 340.958800][T13096] tipc: Disabling bearer [ 341.039809][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 341.065488][T13094] chnl_net:caif_netlink_parms(): no params data found [ 341.120765][T13104] syzkaller0: entered promiscuous mode [ 341.123034][T13104] syzkaller0: entered allmulticast mode [ 341.179640][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.290866][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.293469][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.297959][T13094] bridge_slave_0: entered allmulticast mode [ 341.301974][T13094] bridge_slave_0: entered promiscuous mode [ 341.321316][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.329426][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.332295][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.335441][T13094] bridge_slave_1: entered allmulticast mode [ 341.339570][T13094] bridge_slave_1: entered promiscuous mode [ 341.395593][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.407168][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.419583][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.460984][T13094] team0: Port device team_slave_0 added [ 341.466119][T13094] team0: Port device team_slave_1 added [ 341.511617][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.520249][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.522447][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.530472][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.535299][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.537534][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.545447][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.592400][T13094] hsr_slave_0: entered promiscuous mode [ 341.595464][T13094] hsr_slave_1: entered promiscuous mode [ 341.598594][T13094] debugfs: 'hsr0' already exists in 'hsr' [ 341.600699][T13094] Cannot create hsr debugfs directory [ 341.615902][ T72] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 341.666222][ T40] audit: type=1400 audit(1759255560.472:1479): avc: denied { read } for pid=5662 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 341.720315][ T1142] bridge_slave_1: left allmulticast mode [ 341.722587][ T1142] bridge_slave_1: left promiscuous mode [ 341.726674][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.731778][ T1142] bridge_slave_0: left allmulticast mode [ 341.733629][ T1142] bridge_slave_0: left promiscuous mode [ 341.736825][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.779166][ T72] usb 6-1: no configurations [ 341.781266][ T72] usb 6-1: can't read configurations, error -22 [ 341.916076][ T72] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 342.080456][ T72] usb 6-1: no configurations [ 342.082444][ T72] usb 6-1: can't read configurations, error -22 [ 342.085588][ T72] usb usb6-port1: attempt power cycle [ 342.117052][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.122873][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.127212][ T1142] bond0 (unregistering): Released all slaves [ 342.191794][ T1142] : left promiscuous mode [ 342.263980][ T1142] tipc: Left network mode [ 342.427619][ T72] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 342.462065][ T72] usb 6-1: no configurations [ 342.464055][ T72] usb 6-1: can't read configurations, error -22 [ 342.543657][ T1142] hsr_slave_0: left promiscuous mode [ 342.546891][ T1142] hsr_slave_1: left promiscuous mode [ 342.549209][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.552665][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.557840][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.560278][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.600239][ T1142] veth1_macvtap: left promiscuous mode [ 342.602734][ T1142] veth0_macvtap: left promiscuous mode [ 342.604624][ T1142] veth1_vlan: left promiscuous mode [ 342.606924][ T1142] veth0_vlan: left promiscuous mode [ 342.615901][ T72] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 342.647893][ T72] usb 6-1: no configurations [ 342.650273][ T72] usb 6-1: can't read configurations, error -22 [ 342.653200][ T72] usb usb6-port1: unable to enumerate USB device [ 342.960824][ T5966] Bluetooth: hci1: command tx timeout [ 343.338416][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 343.410337][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 344.042956][T13094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.061917][T13094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.071291][T13094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.077801][T13094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.136841][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.147547][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.152742][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.155857][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.174949][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.177875][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.314196][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.353420][T13094] veth0_vlan: entered promiscuous mode [ 344.360308][T13094] veth1_vlan: entered promiscuous mode [ 344.376579][T13094] veth0_macvtap: entered promiscuous mode [ 344.381227][T13094] veth1_macvtap: entered promiscuous mode [ 344.395498][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.405346][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.416312][ T6274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.419833][ T6274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.428118][ T6274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.431678][ T6274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.439538][T13152] tipc: Enabled bearer , priority 0 [ 344.442494][T13152] syzkaller0: entered promiscuous mode [ 344.444356][T13152] syzkaller0: entered allmulticast mode [ 344.463427][T13152] tipc: Resetting bearer [ 344.464815][T13156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2390'. [ 344.476766][T13151] tipc: Resetting bearer [ 344.491278][T13151] tipc: Disabling bearer [ 344.514780][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.519644][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.534435][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.537914][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.714500][T13169] fuse: Bad value for 'fd' [ 344.765548][T13173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2396'. [ 344.769708][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2396'. [ 344.843255][T13177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2398'. [ 344.997810][T13186] tipc: Started in network mode [ 344.999911][T13186] tipc: Node identity 3e701ca1b3a1, cluster identity 4711 [ 345.003106][T13186] tipc: Enabled bearer , priority 0 [ 345.009650][T13186] syzkaller0: entered promiscuous mode [ 345.011958][T13186] syzkaller0: entered allmulticast mode [ 345.025415][T13186] tipc: Resetting bearer [ 345.030413][T13185] tipc: Resetting bearer [ 345.040353][T13185] tipc: Disabling bearer [ 345.045851][ T5966] Bluetooth: hci1: command tx timeout [ 345.761647][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2406'. [ 345.765000][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2406'. [ 345.836935][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2408'. [ 345.874144][T13202] sctp: [Deprecated]: syz.2.2409 (pid 13202) Use of int in maxseg socket option. [ 345.874144][T13202] Use struct sctp_assoc_value instead [ 346.374271][T13217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2416'. [ 346.377955][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2416'. [ 346.447950][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2418'. [ 346.815879][ T55] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 346.969383][ T55] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.973946][ T55] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 346.977532][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.981412][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.089689][T13235] tipc: Enabling of bearer rejected, already enabled [ 347.116194][ T5966] Bluetooth: hci1: command tx timeout [ 349.205803][ T5966] Bluetooth: hci1: command tx timeout [ 349.493866][ T24] usb 6-1: USB disconnect, device number 56 [ 349.496533][T13225] delete_channel: no stack [ 349.521997][T13261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2436'. [ 349.526426][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 349.526845][T13263] loop6: detected capacity change from 0 to 2640 [ 349.535307][ T5959] buffer_io_error: 54 callbacks suppressed [ 349.535318][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.541031][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.544188][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.547126][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.550562][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.553077][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.556042][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.558737][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.567455][ T5959] ldm_validate_partition_table(): Disk read failed. [ 349.567528][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.567601][ T5959] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.567756][ T5959] Dev loop6: unable to read RDB block 0 [ 349.567966][ T5959] loop6: unable to read partition table [ 349.569970][T13263] ldm_validate_partition_table(): Disk read failed. [ 349.570138][T13263] Dev loop6: unable to read RDB block 0 [ 349.570319][T13263] loop6: unable to read partition table [ 349.571290][T13263] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 349.892905][T13280] Bluetooth: MGMT ver 1.23 [ 349.896368][ T40] audit: type=1400 audit(1759255568.692:1480): avc: denied { write } for pid=13279 comm="syz.3.2443" path="socket:[49244]" dev="sockfs" ino=49244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.898207][T13280] Bluetooth: hci0: unsupported parameter 178 [ 349.913685][T13280] Bluetooth: hci0: invalid len left 3, exp >= 100 [ 350.755760][ T6020] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 350.918502][ T6020] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 350.921478][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.924175][ T6020] usb 6-1: Product: syz [ 350.925783][ T6020] usb 6-1: Manufacturer: syz [ 350.927444][ T6020] usb 6-1: SerialNumber: syz [ 351.154810][ T6020] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 351.158847][ T6020] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 351.162105][ T6020] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.166968][ T6020] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 351.171914][ T6020] usb 6-1: USB disconnect, device number 57 [ 352.223363][T13340] fuse: Bad value for 'rootmode' [ 352.365550][ T40] audit: type=1400 audit(1759255571.162:1481): avc: denied { getopt } for pid=13344 comm="syz.0.2471" lport=44820 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.389459][T13347] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2472'. [ 352.610894][T13357] input: syz1 as /devices/virtual/input/input32 [ 352.645936][ T1472] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 352.817776][ T1472] usb 6-1: config 0 has an invalid interface number: 217 but max is 1 [ 352.821284][ T1472] usb 6-1: config 0 has no interface number 1 [ 352.823852][ T1472] usb 6-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 352.828429][ T1472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.843510][ T1472] usb 6-1: config 0 descriptor?? [ 352.848635][ T1472] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 353.055546][ T1472] gspca_sn9c20x: Write register 1000 failed -71 [ 353.059569][ T1472] gspca_sn9c20x: Device initialization failed [ 353.062469][ T1472] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 353.071623][ T1472] usb 6-1: USB disconnect, device number 58 [ 353.135933][T13374] kvm: pic: non byte write [ 353.139728][T13374] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 353.359250][T13383] loop6: detected capacity change from 0 to 2640 [ 353.362676][T13383] ldm_validate_partition_table(): Disk read failed. [ 353.364961][T13383] Dev loop6: unable to read RDB block 0 [ 353.367622][T13383] loop6: unable to read partition table [ 353.369888][T13383] loop_reread_partitions: partition scan of loop6 (3Ÿ พ‚ณ˜) failed (rc=-5) [ 353.599076][T13389] kernel read not supported for file /file1 (pid: 13389 comm: syz.1.2492) [ 353.602575][ T40] audit: type=1800 audit(1759255572.402:1482): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2492" name="file1" dev="mqueue" ino=51224 res=0 errno=0 [ 354.636546][T13403] sctp: [Deprecated]: syz.1.2497 (pid 13403) Use of int in maxseg socket option. [ 354.636546][T13403] Use struct sctp_assoc_value instead [ 354.672861][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 354.945966][ T6021] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 355.105826][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 355.110742][ T6021] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 355.116545][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 355.121254][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.125251][ T6021] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.131236][ T6021] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.135967][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.348922][ T6021] usb 6-1: usb_control_msg returned -32 [ 355.350809][ T6021] usbtmc 6-1:16.0: can't read capabilities [ 355.759777][ C3] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 355.763574][ C3] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 355.961631][ T40] audit: type=1400 audit(1759255574.762:1483): avc: denied { read write } for pid=13412 comm="syz.0.2500" name="mouse0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 355.971570][ T40] audit: type=1400 audit(1759255574.762:1484): avc: denied { open } for pid=13412 comm="syz.0.2500" path="/dev/input/mouse0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 356.396243][T13421] bpf: Bad value for 'gid' [ 356.719026][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.723994][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.729413][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.734343][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.740216][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.922851][ T6265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.940784][T13428] chnl_net:caif_netlink_parms(): no params data found [ 357.020440][ T6265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.075068][T13428] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.078452][T13428] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.081659][T13428] bridge_slave_0: entered allmulticast mode [ 357.085081][T13428] bridge_slave_0: entered promiscuous mode [ 357.089921][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.092536][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.095589][T13428] bridge_slave_1: entered allmulticast mode [ 357.100149][T13428] bridge_slave_1: entered promiscuous mode [ 357.119143][ T6265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.191243][T13395] delete_channel: no stack [ 357.232332][T13438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'. [ 357.233050][ T6265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.249955][T13428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.258365][T13428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.320778][T13428] team0: Port device team_slave_0 added [ 357.325242][T13428] team0: Port device team_slave_1 added [ 357.361576][T13428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.364628][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.375427][T13428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.392027][T13428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.394820][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.404564][T13428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.510275][T13428] hsr_slave_0: entered promiscuous mode [ 357.512944][T13428] hsr_slave_1: entered promiscuous mode [ 357.714135][ T1472] usb 6-1: USB disconnect, device number 59 [ 357.922139][ T6265] bond0 (unregistering): Released all slaves [ 358.014854][ T6265] : left promiscuous mode [ 358.101299][ T6265] tipc: Disabling bearer [ 358.105757][ T6265] tipc: Left network mode [ 358.115911][ T1472] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 358.258836][ T1472] usb 6-1: device descriptor read/64, error -71 [ 358.363922][ T6265] hsr_slave_0: left promiscuous mode [ 358.366627][ T6265] hsr_slave_1: left promiscuous mode [ 358.388776][ T6265] veth1_macvtap: left promiscuous mode [ 358.390915][ T6265] veth0_macvtap: left promiscuous mode [ 358.394170][ T6265] veth1_vlan: left promiscuous mode [ 358.396310][ T6265] veth0_vlan: left promiscuous mode [ 358.507332][ T1472] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 358.648507][ T1472] usb 6-1: device descriptor read/64, error -71 [ 358.758390][ T1472] usb usb6-port1: attempt power cycle [ 358.806820][ T5966] Bluetooth: hci0: command tx timeout [ 359.098262][ T1472] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 359.136598][ T1472] usb 6-1: device descriptor read/8, error -71 [ 359.407151][ T1472] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 359.436245][ T1472] usb 6-1: device descriptor read/8, error -71 [ 359.556067][ T1472] usb usb6-port1: unable to enumerate USB device [ 359.942183][T13428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.956613][T13428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.963257][T13428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.973939][T13428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.034368][T13428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.050572][T13428] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.065120][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.068637][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.089484][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.091785][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.195121][ T6265] IPVS: stop unused estimator thread 0... [ 360.233798][T13428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.266914][T13428] veth0_vlan: entered promiscuous mode [ 360.274514][T13428] veth1_vlan: entered promiscuous mode [ 360.291462][T13428] veth0_macvtap: entered promiscuous mode [ 360.296339][T13428] veth1_macvtap: entered promiscuous mode [ 360.308598][T13428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.318111][T13428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.321088][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2515'. [ 360.324514][ T6263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.328360][ T6263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.332398][ T6263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.335551][ T6263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.378546][ T6263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.381080][ T6263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.404395][ T6263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.407052][ T6263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.517809][ T40] audit: type=1400 audit(1759255579.322:1485): avc: denied { mount } for pid=13502 comm="syz.2.2520" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 360.812221][T13510] syzkaller0: entered promiscuous mode [ 360.814076][T13510] syzkaller0: entered allmulticast mode [ 360.877214][ T5966] Bluetooth: hci0: command tx timeout [ 361.282920][T13525] sctp: [Deprecated]: syz.1.2530 (pid 13525) Use of int in max_burst socket option. [ 361.282920][T13525] Use struct sctp_assoc_value instead [ 361.413726][T13529] syzkaller0: entered promiscuous mode [ 361.418643][T13529] syzkaller0: entered allmulticast mode [ 362.955786][ T5966] Bluetooth: hci0: command tx timeout [ 364.101352][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2556'. [ 364.385248][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880550e2000: rx timeout, send abort [ 364.390590][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880550e2000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.400785][ T40] audit: type=1400 audit(1759255583.202:1486): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 364.410250][ T40] audit: type=1400 audit(1759255583.202:1487): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.419763][ T40] audit: type=1400 audit(1759255583.202:1488): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.432064][ T40] audit: type=1400 audit(1759255583.202:1489): avc: denied { add_name } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.440360][ T40] audit: type=1400 audit(1759255583.202:1490): avc: denied { create } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.448564][ T40] audit: type=1400 audit(1759255583.202:1491): avc: denied { append open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.457453][ T40] audit: type=1400 audit(1759255583.202:1492): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 364.815790][ T1337] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 364.978892][ T1337] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.981997][ T1337] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 364.984624][ T1337] usb 6-1: Product: syz [ 364.986189][ T1337] usb 6-1: Manufacturer: syz [ 364.988190][ T1337] usb 6-1: SerialNumber: syz [ 364.995992][ T1337] usb 6-1: config 0 descriptor?? [ 364.999274][ T1337] ch341 6-1:0.0: ch341-uart converter detected [ 365.036135][ T5966] Bluetooth: hci0: command tx timeout [ 365.404628][ T1337] usb 6-1: failed to send control message: -71 [ 365.407301][ T1337] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 365.412182][ T1337] usb 6-1: USB disconnect, device number 64 [ 365.417704][ T1337] ch341 6-1:0.0: device disconnected [ 365.654977][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2577'. [ 365.997264][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2587'. [ 366.247797][ T55] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 366.308791][T13675] binder: 13673:13675 ioctl c0306201 0 returned -14 [ 366.313430][T13676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2596'. [ 366.348866][T13680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 366.417937][ T55] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 366.422452][ T55] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.428683][ T55] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.432032][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.436047][ T55] usb 6-1: Product: syz [ 366.438085][ T55] usb 6-1: Manufacturer: syz [ 366.440296][ T55] usb 6-1: SerialNumber: syz [ 366.651478][ T55] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 366.668112][ T55] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 366.676030][ T55] usb 6-1: USB disconnect, device number 65 [ 366.688633][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.090931][T13703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2607'. [ 367.130410][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2608'. [ 367.434321][T13719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.478885][T13721] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2615'. [ 367.486040][ T1472] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 367.554204][T13725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2617'. [ 367.603265][T13727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2618'. [ 367.635910][ T1472] usb 6-1: Using ep0 maxpacket: 32 [ 367.640615][ T1472] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 367.644776][ T1472] usb 6-1: config 0 has no interface number 0 [ 367.653205][ T1472] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 367.657047][ T1472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.660316][ T1472] usb 6-1: Product: syz [ 367.662135][ T1472] usb 6-1: Manufacturer: syz [ 367.664239][ T1472] usb 6-1: SerialNumber: syz [ 367.670522][ T1472] usb 6-1: config 0 descriptor?? [ 367.676784][ T1472] smsc95xx v2.0.0 [ 368.001253][T13741] syzkaller0: entered promiscuous mode [ 368.003499][T13741] syzkaller0: entered allmulticast mode [ 368.884809][ T1472] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 368.886212][T13751] syz_tun: entered allmulticast mode [ 368.889595][ T1472] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 368.895231][ T1472] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 368.898510][T13750] syz_tun: left allmulticast mode [ 368.899792][ T1472] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 368.907887][ T1472] usb 6-1: USB disconnect, device number 66 [ 369.013469][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2633'. [ 369.062573][T13759] syzkaller0: entered promiscuous mode [ 369.065609][T13759] syzkaller0: entered allmulticast mode [ 369.832766][T13793] fuse: Unknown parameter 'user_id00000000000000000000' [ 371.149726][T13814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2656'. [ 371.445807][ T2303] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 371.575032][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 371.582706][ T40] audit: type=1400 audit(1759255590.382:1493): avc: denied { read append } for pid=13830 comm="syz.2.2664" name="loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 371.592382][T13836] tipc: Enabled bearer , priority 0 [ 371.597716][ T40] audit: type=1400 audit(1759255590.382:1494): avc: denied { open } for pid=13830 comm="syz.2.2664" path="/dev/loop-control" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 371.607852][ T40] audit: type=1400 audit(1759255590.382:1495): avc: denied { ioctl } for pid=13830 comm="syz.2.2664" path="/dev/loop-control" dev="devtmpfs" ino=656 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 371.623638][T13836] tipc: Resetting bearer [ 371.626242][ T2303] usb 6-1: Using ep0 maxpacket: 8 [ 371.630100][ T2303] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 371.634672][ T2303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 371.639986][ T2303] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.640185][T13835] tipc: Disabling bearer [ 371.644412][ T2303] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.651692][ T2303] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.654557][ T2303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.676800][T13834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.725023][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2667'. [ 371.871859][ T2303] usb 6-1: usb_control_msg returned -32 [ 371.873886][ T2303] usbtmc 6-1:16.0: can't read capabilities [ 372.089658][ T2303] IPVS: starting estimator thread 0... [ 372.166418][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.170842][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.174346][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.178136][T13863] IPVS: using max 37 ests per chain, 88800 per kthread [ 372.180673][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.184118][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.285543][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 372.291005][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 372.295251][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 372.340668][ T40] audit: type=1400 audit(1759255591.142:1496): avc: denied { shutdown } for pid=13875 comm="syz.2.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.371667][T13866] chnl_net:caif_netlink_parms(): no params data found [ 372.481759][T13866] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.485361][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.489561][T13866] bridge_slave_0: entered allmulticast mode [ 372.493682][T13866] bridge_slave_0: entered promiscuous mode [ 372.499220][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.502336][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.505240][T13866] bridge_slave_1: entered allmulticast mode [ 372.508390][T13866] bridge_slave_1: entered promiscuous mode [ 372.571063][T13866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.578762][T13866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.636596][T13866] team0: Port device team_slave_0 added [ 372.641876][T13866] team0: Port device team_slave_1 added [ 372.709833][T13866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.713289][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.725828][T13866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.732443][T13866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.738387][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.749274][T13866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.808126][T13866] hsr_slave_0: entered promiscuous mode [ 372.812078][T13866] hsr_slave_1: entered promiscuous mode [ 372.818649][T13866] debugfs: 'hsr0' already exists in 'hsr' [ 372.820986][T13866] Cannot create hsr debugfs directory [ 372.848233][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2685'. [ 372.876568][T13894] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2687'. [ 372.896403][ T40] audit: type=1400 audit(1759255591.702:1497): avc: denied { map } for pid=13895 comm="syz.2.2688" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 372.957072][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2690'. [ 372.960211][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 373.015567][T13866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.062300][ T40] audit: type=1400 audit(1759255591.862:1498): avc: denied { getopt } for pid=13907 comm="syz.2.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.095613][ T40] audit: type=1400 audit(1759255591.892:1499): avc: denied { mounton } for pid=13909 comm="syz.2.2694" path="mnt:[4026532881]" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.119016][T13911] fuse: Bad value for 'fd' [ 373.132896][T13866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.204087][ T40] audit: type=1326 audit(1759255592.002:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.2.2697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddef8eec9 code=0x7ffc0000 [ 373.214177][ T40] audit: type=1326 audit(1759255592.002:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.2.2697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddef8eec9 code=0x7ffc0000 [ 373.217714][T13917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.227711][ T40] audit: type=1326 audit(1759255592.002:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13916 comm="syz.2.2697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddef8eec9 code=0x7ffc0000 [ 373.251132][T13866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.332549][T13866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.466299][T13866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 373.473203][T13866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 373.478584][T13866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 373.483220][T13866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.560255][T13866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.589709][T13866] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.596745][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.599219][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.616897][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.619304][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.622683][T13935] tipc: Started in network mode [ 373.624294][T13935] tipc: Node identity , cluster identity 4711 [ 373.627810][T13935] tipc: Failed to obtain node identity [ 373.629583][T13935] tipc: Enabling of bearer rejected, failed to enable media [ 373.634340][T13935] syzkaller0: entered promiscuous mode [ 373.636673][T13935] syzkaller0: entered allmulticast mode [ 373.819749][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.857630][T13866] veth0_vlan: entered promiscuous mode [ 373.870723][T13866] veth1_vlan: entered promiscuous mode [ 373.894820][T13866] veth0_macvtap: entered promiscuous mode [ 373.902818][T13866] veth1_macvtap: entered promiscuous mode [ 373.924273][T13866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.933305][T13866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.943613][ T6265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.949333][ T6265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.953630][ T6265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.959037][ T6265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.014028][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 374.016873][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.022469][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.043344][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.045953][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.215966][ T1472] usb 6-1: USB disconnect, device number 67 [ 374.236502][ T5966] Bluetooth: hci2: command tx timeout [ 374.250880][T13957] tipc: Enabled bearer , priority 0 [ 374.255429][T13957] syzkaller0: entered promiscuous mode [ 374.257770][T13957] syzkaller0: entered allmulticast mode [ 374.265459][T13957] tipc: Resetting bearer [ 374.270535][T13956] tipc: Resetting bearer [ 374.283133][T13956] tipc: Disabling bearer [ 374.350143][T13963] kvm: pic: non byte write [ 374.434822][T13966] fuse: root generation should be zero [ 374.773463][T13977] Bluetooth: MGMT ver 1.23 [ 374.776112][T13977] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 375.095803][ T55] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 375.246159][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 375.250555][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 375.259708][ T55] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 375.262901][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.265351][ T55] usb 6-1: Product: syz [ 375.267051][ T55] usb 6-1: Manufacturer: syz [ 375.268614][ T55] usb 6-1: SerialNumber: syz [ 375.271793][ T55] usb 6-1: config 0 descriptor?? [ 375.276102][ T55] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 375.280965][ T55] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 375.803830][T13998] tipc: Started in network mode [ 375.806390][T13998] tipc: Node identity , cluster identity 4711 [ 375.808624][T13998] tipc: Failed to obtain node identity [ 375.810972][T13998] tipc: Enabling of bearer rejected, failed to enable media [ 375.814578][T13998] syzkaller0: entered promiscuous mode [ 375.818854][T13998] syzkaller0: entered allmulticast mode [ 375.880995][ T55] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 376.288991][ T55] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 376.292054][ T55] em28xx 6-1:0.0: board has no eeprom [ 376.316220][ T5966] Bluetooth: hci2: command tx timeout [ 376.365788][ T55] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 376.368320][ T55] em28xx 6-1:0.0: dvb set to bulk mode. [ 376.376443][ T6067] em28xx 6-1:0.0: Binding DVB extension [ 376.380150][ T55] usb 6-1: USB disconnect, device number 68 [ 376.388093][ T55] em28xx 6-1:0.0: Disconnecting em28xx [ 376.406225][ T6067] em28xx 6-1:0.0: Registering input extension [ 376.409803][ T55] em28xx 6-1:0.0: Closing input extension [ 376.417526][ T55] em28xx 6-1:0.0: Freeing device [ 376.855427][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 376.855439][ T40] audit: type=1400 audit(1759255595.652:1520): avc: denied { create } for pid=14002 comm="syz.1.2729" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.869785][ T40] audit: type=1400 audit(1759255595.672:1521): avc: denied { unlink } for pid=12851 comm="syz-executor" name="file0" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 377.169125][T14013] fuse: Unknown parameter '0x0000000000000006' [ 378.044664][ T40] audit: type=1400 audit(1759255596.842:1522): avc: denied { write } for pid=14036 comm="syz.1.2744" path="socket:[55438]" dev="sockfs" ino=55438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 378.395738][ T6067] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 378.396131][ T5966] Bluetooth: hci2: command tx timeout [ 378.565813][ T6067] usb 6-1: Using ep0 maxpacket: 32 [ 378.570217][ T6067] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.577956][ T6067] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 378.581875][ T6067] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 378.584883][ T6067] usb 6-1: Product: syz [ 378.587136][ T6067] usb 6-1: Manufacturer: syz [ 378.589718][ T6067] usb 6-1: SerialNumber: syz [ 378.593956][ T6067] usb 6-1: config 0 descriptor?? [ 378.598796][ T6067] hub 6-1:0.0: bad descriptor, ignoring hub [ 378.601415][ T6067] hub 6-1:0.0: probe with driver hub failed with error -5 [ 378.906730][ T10] usb 6-1: USB disconnect, device number 69 [ 379.255809][ T6067] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 379.435793][ T6067] usb 6-1: Using ep0 maxpacket: 32 [ 379.439908][ T6067] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.448316][ T6067] usb 6-1: string descriptor 0 read error: -22 [ 379.450966][ T6067] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 379.454839][ T6067] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 379.459237][ T6067] usb 6-1: config 0 descriptor?? [ 379.462992][ T6067] hub 6-1:0.0: bad descriptor, ignoring hub [ 379.465505][ T6067] hub 6-1:0.0: probe with driver hub failed with error -5 [ 379.775953][ T6067] usb 6-1: USB disconnect, device number 70 [ 380.475855][ T5966] Bluetooth: hci2: command tx timeout [ 380.608363][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.613245][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.690925][T14062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.701317][T14062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.825965][ T6263] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.829574][ T6263] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.833341][ T6263] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.838336][ T6263] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.996105][ T2303] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 381.007131][T14078] fuse: Unknown parameter '0x0000000000000006' [ 381.145864][ T2303] usb 6-1: Using ep0 maxpacket: 32 [ 381.149565][ T2303] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 381.152763][ T2303] usb 6-1: config 0 has no interface number 0 [ 381.154897][ T2303] usb 6-1: config 0 interface 184 has no altsetting 0 [ 381.160028][ T2303] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 381.163776][ T2303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.168190][ T2303] usb 6-1: Product: syz [ 381.169765][ T2303] usb 6-1: Manufacturer: syz [ 381.171426][ T2303] usb 6-1: SerialNumber: syz [ 381.174424][ T2303] usb 6-1: config 0 descriptor?? [ 381.179363][ T2303] smsc75xx v1.0.0 [ 381.445156][T14084] Illegal XDP return value 4294967274 on prog (id 367) dev syz_tun, expect packet loss! [ 381.493124][T14086] tipc: Enabled bearer , priority 0 [ 381.496562][T14086] syzkaller0: entered promiscuous mode [ 381.498485][T14086] syzkaller0: entered allmulticast mode [ 381.506732][T14086] tipc: Resetting bearer [ 381.510825][T14085] tipc: Resetting bearer [ 381.520088][T14085] tipc: Disabling bearer [ 381.786365][ T2303] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 381.790676][ T2303] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 381.793942][ T2303] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 381.798030][ T2303] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 381.805267][ T2303] usb 6-1: USB disconnect, device number 71 [ 382.566486][ T6021] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 382.716120][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 382.719895][ T6021] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 382.724555][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 382.729266][ T6021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.733353][ T6021] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.739453][ T6021] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.743140][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.806511][T14099] delete_channel: no stack [ 382.953843][ T6021] usb 6-1: usb_control_msg returned -32 [ 382.956298][ T6021] usbtmc 6-1:16.0: can't read capabilities [ 383.001338][ T40] audit: type=1400 audit(1759255601.802:1523): avc: denied { create } for pid=14113 comm="syz.2.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 383.009637][ T40] audit: type=1400 audit(1759255601.802:1524): avc: denied { ioctl } for pid=14113 comm="syz.2.2776" path="socket:[55211]" dev="sockfs" ino=55211 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 383.368775][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 383.372579][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 383.376110][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 383.767664][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.769880][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.344305][ T6067] usb 6-1: USB disconnect, device number 72 [ 385.669164][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 386.939482][T14128] delete_channel: no stack [ 389.948987][ T2303] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 390.095773][ T2303] usb 6-1: Using ep0 maxpacket: 32 [ 390.099390][ T2303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 390.103522][ T2303] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 390.110340][ T2303] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.113992][ T2303] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.117765][ T2303] usb 6-1: Product: syz [ 390.119505][ T2303] usb 6-1: Manufacturer: syz [ 390.121377][ T2303] usb 6-1: SerialNumber: syz [ 390.124539][ T2303] usb 6-1: config 0 descriptor?? [ 390.127850][ T2303] hub 6-1:0.0: bad descriptor, ignoring hub [ 390.130003][ T2303] hub 6-1:0.0: probe with driver hub failed with error -5 [ 390.437445][ T2303] usb 6-1: USB disconnect, device number 73 [ 390.766228][ T2303] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 390.916326][ T2303] usb 6-1: Using ep0 maxpacket: 32 [ 390.921934][ T2303] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 390.925402][ T2303] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 390.933605][ T2303] usb 6-1: string descriptor 0 read error: -22 [ 390.939614][ T2303] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.943174][ T2303] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.949399][ T2303] usb 6-1: config 0 descriptor?? [ 390.953375][ T2303] hub 6-1:0.0: bad descriptor, ignoring hub [ 390.957901][ T2303] hub 6-1:0.0: probe with driver hub failed with error -5 [ 391.015876][T14229] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2825'. [ 391.119199][T14207] delete_channel: no stack [ 391.256078][ T2303] usb 6-1: USB disconnect, device number 74 [ 392.925818][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 393.095876][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 393.100216][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.104366][ T10] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 393.108081][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.112682][ T10] usb 6-1: config 0 descriptor?? [ 393.117201][ T10] dvb-usb: found a 'TeVii S662' in warm state. [ 393.119206][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 393.121806][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 393.131439][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.135963][ T10] dvbdev: DVB: registering new adapter (TeVii S662) [ 393.138011][ T10] usb 6-1: media controller created [ 393.139711][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.142192][ T10] dw2102: i2c transfer failed. [ 393.145152][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.147784][ T10] dw2102: i2c transfer failed. [ 393.150270][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.152706][ T10] dw2102: i2c transfer failed. [ 393.154720][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.160316][ T10] dw2102: i2c transfer failed. [ 393.161846][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.163638][ T10] dw2102: i2c transfer failed. [ 393.165083][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 393.169851][ T10] dw2102: i2c transfer failed. [ 393.171484][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 393.184744][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.231426][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 393.233264][ T10] dw2102: command 0x0e transfer failed. [ 393.235224][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 393.245844][ T10] dw2102: command 0x0e transfer failed. [ 393.555821][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 393.558244][ T10] dw2102: command 0x0e transfer failed. [ 393.560548][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 393.563174][ T10] dw2102: command 0x0e transfer failed. [ 393.565602][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 393.568360][ T10] dw2102: command 0x51 transfer failed. [ 393.570823][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 393.573118][ T10] dw2102: i2c probe for address 0x68 failed. [ 393.575571][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 393.578029][ T10] dw2102: i2c probe for address 0x69 failed. [ 393.580507][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 393.582742][ T10] dw2102: i2c probe for address 0x6a failed. [ 393.585141][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 393.588661][ T10] dvb-usb: no frontend was attached by 'TeVii S662' [ 393.635793][ T10] rc_core: IR keymap rc-tt-1500 not found [ 393.638324][ T10] Registered IR keymap rc-empty [ 393.644246][ T10] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 393.650731][ T10] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input34 [ 393.656924][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 393.659694][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 393.661884][ T10] dvb-usb: TeVii S662 successfully initialized and connected. [ 393.665907][ T10] usb 6-1: USB disconnect, device number 75 [ 393.684817][ T10] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 394.204516][ T40] audit: type=1400 audit(1759255613.002:1525): avc: denied { accept } for pid=14264 comm="syz.0.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.444771][T14277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2845'. [ 394.782110][T14283] tipc: Enabled bearer , priority 0 [ 394.785803][T14283] syzkaller0: entered promiscuous mode [ 394.787869][T14283] syzkaller0: entered allmulticast mode [ 394.805925][T14283] tipc: Resetting bearer [ 394.810559][T14282] tipc: Resetting bearer [ 394.822491][T14282] tipc: Disabling bearer [ 395.296187][ T1337] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 395.445892][ T1337] usb 6-1: Using ep0 maxpacket: 16 [ 395.449346][ T1337] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.456990][ T1337] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 395.461029][ T1337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.464669][ T1337] usb 6-1: Product: syz [ 395.466698][ T1337] usb 6-1: Manufacturer: syz [ 395.468772][ T1337] usb 6-1: SerialNumber: syz [ 395.474498][ T1337] usb 6-1: config 0 descriptor?? [ 396.044580][T14252] delete_channel: no stack [ 396.848733][T14311] tipc: Enabled bearer , priority 0 [ 396.852081][T14311] syzkaller0: entered promiscuous mode [ 396.854197][T14311] syzkaller0: entered allmulticast mode [ 396.867475][T14311] tipc: Resetting bearer [ 396.871473][T14310] tipc: Resetting bearer [ 396.881385][T14310] tipc: Disabling bearer [ 398.264541][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2865'. [ 398.302205][ T40] audit: type=1400 audit(1759255617.102:1526): avc: denied { read } for pid=14333 comm="syz.2.2866" name="nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.313205][ T40] audit: type=1400 audit(1759255617.102:1527): avc: denied { open } for pid=14333 comm="syz.2.2866" path="/dev/nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.851875][ T1023] usb 6-1: USB disconnect, device number 76 [ 398.882315][T14346] tipc: Enabled bearer , priority 0 [ 398.886834][T14346] syzkaller0: entered promiscuous mode [ 398.889813][T14346] syzkaller0: entered allmulticast mode [ 398.906469][T14346] tipc: Resetting bearer [ 398.910005][T14345] tipc: Resetting bearer [ 398.954691][T14345] tipc: Disabling bearer [ 399.896971][T14350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2874'. [ 400.190592][T14322] delete_channel: no stack [ 400.223664][T14364] tipc: Enabled bearer , priority 0 [ 400.228151][T14364] syzkaller0: entered promiscuous mode [ 400.230513][T14364] syzkaller0: entered allmulticast mode [ 400.251753][T14364] tipc: Resetting bearer [ 400.256301][T14363] tipc: Resetting bearer [ 400.302160][T14363] tipc: Disabling bearer [ 400.385782][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 400.545812][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 400.549080][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.555459][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 400.563791][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.567519][ T9] usb 6-1: Product: syz [ 400.570154][ T9] usb 6-1: Manufacturer: syz [ 400.571797][ T9] usb 6-1: SerialNumber: syz [ 400.577528][ T9] usb 6-1: config 0 descriptor?? [ 401.568339][T14389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2891'. [ 401.736533][T14397] tipc: Started in network mode [ 401.738157][T14397] tipc: Node identity , cluster identity 4711 [ 401.740108][T14397] tipc: Failed to obtain node identity [ 401.742035][T14397] tipc: Enabling of bearer rejected, failed to enable media [ 401.747176][T14397] syzkaller0: entered promiscuous mode [ 401.749580][T14397] syzkaller0: entered allmulticast mode [ 401.981909][T14408] tipc: Started in network mode [ 401.984270][T14408] tipc: Node identity 1ae7da932feb, cluster identity 4711 [ 401.991846][T14408] tipc: Enabled bearer , priority 0 [ 402.002735][T14403] tipc: Resetting bearer [ 403.015802][ T6067] tipc: Node number set to 890034835 [ 403.334909][T14403] tipc: Disabling bearer [ 403.463921][T14413] ------------[ cut here ]------------ [ 403.468133][T14413] WARNING: CPU: 2 PID: 14413 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 403.472202][T14413] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 403.474995][T14413] CPU: 2 UID: 0 PID: 14413 Comm: syz.0.2900 Not tainted syzkaller #0 PREEMPT(full) [ 403.482797][T14413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 403.485744][ T40] audit: type=1400 audit(1759255622.272:1528): avc: denied { write } for pid=5942 comm="syz-executor" path="pipe:[6560]" dev="pipefs" ino=6560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 403.489337][T14413] RIP: 0010:path_noexec+0x1ca/0x230 [ 403.499998][T14413] Code: ff 83 e3 02 48 89 de e8 d4 59 85 ff 48 85 db 41 0f 95 c4 e8 58 5e 85 ff 44 89 e0 5b 5d 41 5c e9 4c 10 1c 09 e8 47 5e 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 b9 cb eb ff e9 a8 fe ff ff e8 af cb eb [ 403.508759][T14413] RSP: 0018:ffffc9000376fc70 EFLAGS: 00010287 [ 403.511417][T14413] RAX: 00000000000000d7 RBX: ffff8880218e61e0 RCX: ffffc90007302000 [ 403.516407][T14413] RDX: 0000000000080000 RSI: ffffffff82357e99 RDI: 0000000000000007 [ 403.520124][T14413] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 403.523495][T14413] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 403.526781][T14413] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 403.529795][T14413] FS: 00007f55b3c856c0(0000) GS:ffff8880d7081000(0000) knlGS:0000000000000000 [ 403.534382][T14413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.537833][T14413] CR2: 00007f55b3c84f98 CR3: 00000000600f5000 CR4: 0000000000352ef0 [ 403.541658][T14413] Call Trace: [ 403.543156][T14413] [ 403.544422][T14413] do_mmap+0xd23/0x1210 [ 403.546728][T14413] ? __pfx_do_mmap+0x10/0x10 [ 403.548412][T14413] ? __pfx_down_write_killable+0x10/0x10 [ 403.550838][T14413] vm_mmap_pgoff+0x29e/0x470 [ 403.553528][T14413] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 403.557191][T14413] ? __fget_files+0x20e/0x3c0 [ 403.559173][T14413] ksys_mmap_pgoff+0x32c/0x5c0 [ 403.561129][T14413] __x64_sys_mmap+0x125/0x190 [ 403.563444][T14413] do_syscall_64+0xcd/0x4e0 [ 403.565450][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.568155][T14413] RIP: 0033:0x7f55b2d8eec9 [ 403.569985][T14413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.578877][T14413] RSP: 002b:00007f55b3c85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 403.583257][T14413] RAX: ffffffffffffffda RBX: 00007f55b2fe5fa0 RCX: 00007f55b2d8eec9 [ 403.624146][T14413] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 403.628753][T14413] RBP: 00007f55b2e11f91 R08: 0000000000000005 R09: 0000000000000000 [ 403.631974][T14413] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 403.635368][T14413] R13: 00007f55b2fe6038 R14: 00007f55b2fe5fa0 R15: 00007ffce02f2eb8 [ 403.639693][T14413] [ 403.641215][T14413] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 403.645560][T14413] CPU: 2 UID: 0 PID: 14413 Comm: syz.0.2900 Not tainted syzkaller #0 PREEMPT(full) [ 403.650457][T14413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 403.655025][T14413] Call Trace: [ 403.656447][T14413] [ 403.657690][T14413] dump_stack_lvl+0x3d/0x1f0 [ 403.659867][T14413] vpanic+0x6e8/0x7a0 [ 403.661566][T14413] ? __pfx_vpanic+0x10/0x10 [ 403.663503][T14413] ? path_noexec+0x1ca/0x230 [ 403.665424][T14413] panic+0xca/0xd0 [ 403.667018][T14413] ? __pfx_panic+0x10/0x10 [ 403.668886][T14413] check_panic_on_warn+0xab/0xb0 [ 403.671042][T14413] __warn+0xf6/0x3c0 [ 403.673018][T14413] ? path_noexec+0x1ca/0x230 [ 403.675449][T14413] report_bug+0x3c3/0x580 [ 403.677588][T14413] ? path_noexec+0x1ca/0x230 [ 403.679897][T14413] handle_bug+0x184/0x210 [ 403.681702][T14413] exc_invalid_op+0x17/0x50 [ 403.683633][T14413] asm_exc_invalid_op+0x1a/0x20 [ 403.685574][T14413] RIP: 0010:path_noexec+0x1ca/0x230 [ 403.687748][T14413] Code: ff 83 e3 02 48 89 de e8 d4 59 85 ff 48 85 db 41 0f 95 c4 e8 58 5e 85 ff 44 89 e0 5b 5d 41 5c e9 4c 10 1c 09 e8 47 5e 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 b9 cb eb ff e9 a8 fe ff ff e8 af cb eb [ 403.696016][T14413] RSP: 0018:ffffc9000376fc70 EFLAGS: 00010287 [ 403.699004][T14413] RAX: 00000000000000d7 RBX: ffff8880218e61e0 RCX: ffffc90007302000 [ 403.703046][T14413] RDX: 0000000000080000 RSI: ffffffff82357e99 RDI: 0000000000000007 [ 403.706938][T14413] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 403.710404][T14413] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 403.712946][T14413] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 403.716105][T14413] ? path_noexec+0x1c9/0x230 [ 403.717995][T14413] do_mmap+0xd23/0x1210 [ 403.720342][T14413] ? __pfx_do_mmap+0x10/0x10 [ 403.722899][T14413] ? __pfx_down_write_killable+0x10/0x10 [ 403.725283][T14413] vm_mmap_pgoff+0x29e/0x470 [ 403.726928][T14413] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 403.728581][T14413] ? __fget_files+0x20e/0x3c0 [ 403.730076][T14413] ksys_mmap_pgoff+0x32c/0x5c0 [ 403.731630][T14413] __x64_sys_mmap+0x125/0x190 [ 403.733328][T14413] do_syscall_64+0xcd/0x4e0 [ 403.735590][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.738323][T14413] RIP: 0033:0x7f55b2d8eec9 [ 403.740340][T14413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.747964][T14413] RSP: 002b:00007f55b3c85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 403.751860][T14413] RAX: ffffffffffffffda RBX: 00007f55b2fe5fa0 RCX: 00007f55b2d8eec9 [ 403.755144][T14413] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 403.758248][T14413] RBP: 00007f55b2e11f91 R08: 0000000000000005 R09: 0000000000000000 [ 403.761408][T14413] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 403.764608][T14413] R13: 00007f55b2fe6038 R14: 00007f55b2fe5fa0 R15: 00007ffce02f2eb8 [ 403.767905][T14413] [ 403.770290][T14413] Kernel Offset: disabled [ 403.772505][T14413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:07:02 Registers: info registers vcpu 0 CPU#0 RAX=000000005f18fb60 RBX=ffff8880293a0af0 RCX=00000000f48feea7 RDX=00000000e05a5eb3 RSI=ffff8880293a0b90 RDI=000000006f6b7890 RBP=0000000000000000 RSP=ffffc900046cf200 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000004 R11=0000000000000000 R12=ffff8880293a0b90 R13=ffff8880293a0000 R14=0000000012f955be R15=0000000000000001 RIP=ffffffff8196fab6 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e81000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55b3b9b9a0 CR3=000000005faf5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe441af176 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe441af176 00007ffe441af17c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141ac1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141adb74a8 00007f141adb74a0 00007f141adb7498 00007f141adb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141b91d100 00007f141adb7460 00007f141adb0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f141adb74b8 00007f141adb74b0 00007f141adb74a8 00007f141adb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff937b22a8 RCX=ffffc900006a1001 RDX=1ffffffff1b573d1 RSI=ffffffff8bcf9cc0 RDI=ffffffff8dab9e88 RBP=0000000000000001 RSP=ffffc9000069fac8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000004 R11=000000000008b4fb R12=ffffffff816a58a4 R13=ffffc9000069fb98 R14=ffffc900006a0658 R15=ffffc9000069fbcc RIP=ffffffff81a00413 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f81000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe712917d60 CR3=0000000028aff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe711db76c3 00007fe711db76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e315930 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557134c074 000055557134bf80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555713484a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555571357a50 0000555571357880 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0881c3d584080001 0000000806060428 d4028080100005a0 0300100005900302 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012e10000c808080 10000004060140be 0010000100000408 062210003080808e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100001c080100000 040c0141ce058004 0881c3d584080001 0000000806060428 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4028080100005a0 0300100005900302 0800058803010000 0208060580030e10 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010921000010000 020806060105d407 fffe100001000002 0806040107c80410 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ea265 RDI=ffffffff9ab43e20 RBP=ffffffff9ab43de0 RSP=ffffc9000376f5e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9ab43de0 R15=ffffffff851ea200 RIP=ffffffff851ea28f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f55b3c856c0 ffffffff 00c00000 GS =0000 ffff8880d7081000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f55b3c84f98 CR3=00000000600f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce02f33c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce02f33c6 00007ffce02f33cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2fb74a8 00007f55b2fb74a0 00007f55b2fb7498 00007f55b2fb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b3b1d100 00007f55b2fb7460 00007f55b2fb7478 00007f55b2fb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55b2fb74b8 00007f55b2fb74b0 00007f55b2fb74a8 00007f55b2fb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004f87a9 RBX=0000000000000003 RCX=ffffffff8b4e99a9 RDX=0000000000000000 RSI=ffffffff8d9b0735 RDI=ffffffff8bcf9d40 RBP=ffffed1003adc000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d526655 R10=ffff88806a9332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6e0000 R14=ffffffff905f0490 R15=0000000000000000 RIP=ffffffff8b4e84ef RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d7181000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d094d CR3=00000000255e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=3b66e0461ff6f5fa ced997569953ce16 3b66e0461ff6f5fa ced997569953ce16 3b66e0461ff6f5fa ced997569953ce16 3b66e0461ff6f5fa ced997569953ce16 ZMM18=2d12f67c9a9dc12f d87c0be6db4eecdf 2d12f67c9a9dc12f d87c0be6db4eecdf 2d12f67c9a9dc12f d87c0be6db4eecdf 2d12f67c9a9dc12f d87c0be6db4eecdf ZMM19=7212000000000000 0000000000000005 7212000000000000 0000000000000004 7212000000000000 0000000000000003 7212000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006100020100006 0170cc0fffffffff ffff040410000008 000210007c10000a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014d800fffffffff ffff040410000884 8c10000380040100 000008060a0156e6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000cb010005e c080040100000208 0608015996080288 0205080280000502 ZMM24=db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf db4eecdfdb4eecdf ZMM25=d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 d87c0be6d87c0be6 ZMM26=9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f 9a9dc12f9a9dc12f ZMM27=2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c 2d12f67c2d12f67c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7012000070120000 7012000070120000 7012000070120000 7012000070120000 7012000070120000 7012000070120000 7012000070120000 7012000070120000