last executing test programs: 1.290642436s ago: executing program 0 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000005c0)="9a63dd068505f50216", 0x9, 0x24000045, &(0x7f0000000080)={0xa, 0x2, 0x9, @loopback, 0xe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) shutdown(r1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.290215672s ago: executing program 0 (id=902): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00\x00ync_\x00le\xf44.\xab:nN\xd4\xa2\x88\x00\xd1l,\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x241200, 0x0) getdents(r1, &(0x7f0000000400)=""/52, 0x34) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt(r4, 0x3, 0x3, &(0x7f0000000000)="8df5613fc4d0e01f8239b6f0b1cd4601e34619c83583e783d5b2c230345419bf0f05fb4a39130d11662cf7", 0x2b) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x18, 0x5, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r4, &(0x7f0000000140)={0x11, 0x19, r6, 0x1, 0x3}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) prlimit64(0x0, 0x9, &(0x7f0000000080)={0x6, 0xde}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 1.180451005s ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0x8}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x2, 0xfffffffc, 0x0, {0x11, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.180194422s ago: executing program 0 (id=904): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 1.059823427s ago: executing program 0 (id=907): setreuid(0x0, 0xee00) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0x9, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=@random={'security.', '/dev/video#\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1d}, @ptr={0x70742a85, 0x4000000, &(0x7f0000000280)=""/235, 0xeb, 0xffffffffffffffff, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 936.195716ms ago: executing program 0 (id=909): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0xffffff96, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20, 0x0, 0x32}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0xdca, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x7}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x1}}]}, 0x144}}, 0x20000000) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x48040) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f00000000c0)) 767.406009ms ago: executing program 1 (id=916): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x158}}, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000340)="a6551e7231fa8e4b8b7c69949c64bb3e7682c78d0f1400800000000000004e7dcbcccefb7321624a90ce72096d51c4d6ac5ffc709a58d277a75aa60c985986dc1e9e5e3c6c2712a5b4445976ce840777d0679c6b9ce192703a9b11a60e0b83171a6c722dee1b9ddcb0552c176f4d1f918f9ce632222b52bcec14e5daf69ba357d7bb64498bd053b3bffbf4907cb914dcb94c899053c9a8b99c46f88a2282d688152b8f4c3414fc399c9a3864a97228f38e852f4d41b9d6428647b53bdb419348cc017f36e29bc9d85af3c5818d4a2c19861894a325781b1b66e0c24cb02c54bb86a8808e", 0xe4, r0) 700.722922ms ago: executing program 3 (id=917): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e23, @multicast1}], 0x48) 676.549843ms ago: executing program 1 (id=918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$r', 0x2}], 0xfe, &(0x7f0000001a80)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4004804) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@deltaction={0x150, 0x31, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7b53}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000002, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x4000008, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 676.207542ms ago: executing program 3 (id=919): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="18f19c1c499d1aadec5342dc9ed44623d9270c708b05099e489eb4a5eab5eb00e0b0452455d023a7bfe00d139c562d5692cf517e7b0b32b7bbf892f0", 0x3c, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @remote}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="18f19c1c499d1aadec5342dc9ed44623d9270c708b05099e489eb4a5eab5eb00e0b0452455d023a7bfe00d139c562d5692cf517e7b0b32b7bbf892f0", 0x3c, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @remote}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 675.78094ms ago: executing program 1 (id=920): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000e97a510ae683aedad2a670bb29399272d5d6aa5beb4461645db0aa4fba8755ccbb937a9145c4af3b3f8809db6fa0", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250e0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000805}, 0x20040040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) write$tun(r3, &(0x7f00000003c0)={@void, @val={0x2, 0x4, 0xb, 0x4, 0xb, 0x51c5}, @x25={0x0, 0xe, 0xf, "4318349701f77a7853d2dc5294f6bf440011e228b6e207c5f33d44d298dc5b82fdeff721905e74a22653a506a3135e22b4e6d242dd7769afe1c00dae0a3713fda4b85294374dff6ae3873e8211dae8"}}, 0x5c) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r4, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8030) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x3a0, 0x83}, 0x50) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r11, &(0x7f0000000340), 0x8) r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IMDELTIMER(r12, 0x80044941, &(0x7f0000000140)=0x1) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r11) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r14, 0x20, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040010) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017090000fcffffffbf91000000000000b7020000020000008510000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) 674.17791ms ago: executing program 3 (id=921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) memfd_create(&(0x7f0000000140)='/dev/kvm\x00', 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0xffffffffffffffff, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x12bd, 0x3, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xeb, 0x80400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 559.931512ms ago: executing program 1 (id=922): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlinkat(&(0x7f0000000040)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)={[{@index_on}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x10000) unlinkat(r0, &(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 559.534208ms ago: executing program 1 (id=923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000880)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000007c0), 0x7) (async) write$cgroup_pid(r2, &(0x7f00000007c0), 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c"], 0x66) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040021d26b0686676f2700000000000000020000006c000480680001800a004100876e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0xc0}}, 0x0) 430.660779ms ago: executing program 1 (id=925): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) (async) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r9) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket$rds(0x15, 0x5, 0x0) (async) syz_io_uring_setup(0x20001e0b, &(0x7f0000000380)={0x0, 0xadde, 0x8, 0xfffffffe, 0xfffffffd}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0000151, 0x1, {0xfffd}}) (async) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x800, 0x4, 0x1b0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) (async) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x41, 0x0, 0xa, 0x3, &(0x7f00000002c0)="0c18b118f931ebd14205e54efa26d74d9ef297d7b21482fed22c66560f2332c2324cee789552274fe458aa6f57703cea647c803efcfeab0245c14194979e9229f13e9382d5d77ea67da2c9f9821b0ce056d0fc7b0314d49332e1496e390fa28164d9dde77c00b3c114719021ed4c356f8e316bcf647df81e6aaf4dabf2f6bdd92e7fc963762b", 0x5, 0x0, 0x0, {0x2}}) (async) ioctl$EVIOCGKEYCODE_V2(r11, 0x80284504, &(0x7f0000000040)=""/185) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r9) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1ffe2, 0xe}, {0xe, 0xfff1}, {0x1}}, [{0x8, 0xb, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) 430.376266ms ago: executing program 3 (id=926): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "b28695fb00f5251de213fe5ad66ba6f6d3b74f8bc1fe"}, 0x21) (async, rerun: 32) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x80010, r0, 0x86706000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 429.907355ms ago: executing program 3 (id=927): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000600776c616e31000000000000000000000014000300fe8000000000000000000000000000aa040002"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0) 350.707337ms ago: executing program 3 (id=928): r0 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) write$dsp(r1, &(0x7f0000001640)="2805b6febf89e728b22ece70e702b7eb18015ad4107a7eca3333bc494075d8a74e8b6412edd5693599b7303049f7ee95ba6cb2b60c2e365599409c7de34fe7b93cc28f9c590590975ddd5d", 0x4b) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0) r4 = getpgid(0x0) write$cgroup_pid(r3, &(0x7f0000001840)=r4, 0x12) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) write$dsp(r1, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = socket$qrtr(0x2a, 0x2, 0x0) recvfrom(r5, &(0x7f00000016c0)=""/48, 0x30, 0x161, &(0x7f0000001700)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x100000000003, 0x0, 0x6, 0x7fffffff}) write$P9_RSTATu(r6, &(0x7f0000001780)=ANY=[@ANYBLOB="600000007d020000004300610006000000200200d33878f140d5007deb5687cf46f63e73d6443b00070000000000000000008028ff7f000001800000000000000000000001002b0200272d2829235b2a080075737271756f7461", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x60) close(r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[&(0x7f0000000240)="ad5b4b72df5391167271da4733f367d0d38b6b23b4ff87301cd47d53a711fab8bd34cb72c0c78c361f2839722187ebf69046a8469aa166af1b3123a360ea18315691b94df16b6d281c90c57973cd5cadfef6403604f20a8366f666b808d4c80a204969f1dcaaa90db2ee8c7dcef6d3cca3667a94d793f422b65185ac27dd103588ab66a1d7b10cf0c6633f8a0c609f28ba58a381e2a5bc2279bb02b7ec2029673bef2ab378325dadd9b89bbf3d59aa42e8e9e1c34cfc97c233f62eb0e55ee15b96fa24ef5fde58a37b35c398417152fa8fb2e73250e224cf71db40542fbc7c98ec695f", &(0x7f0000000340)="39e69dc668727174cce629aed1b0acd1db8a89d5ad7c8291284106a4f060dc8a777313159ffa1a72528161bac2de49f70804925e32c4bf05d3a611fae8986436ec2e0d852de568a224c6e2da2fa8888f6978acdb2dc5032ed2ba4d912fa139e5a2040dba919fc9410498199350f26b50ccb2428a33d4a72121cf940cbd76487c02be9ec4fe42fb12459e28432e8a03b1f3bd7611f1b1884ef4e037185799813ad408f47ebfb1531f41fefa32d92cb2f529b96c699a27c7b0ed20511fd99245d10a04f42bc38d2e112203e296b99103ebfaa123690a0947819920c86484bbc7fe1a3330de878762ed6b03ef62d9910c3b9d", &(0x7f0000000440)="df169c3fba05a29043fa90018bd1f026ecd9c115ad0369718f40e1ac915217658c6de43fd113e02225d9e894c9a80b4bacf7ac5357f083972afee756d25f8f652218be8939a158cc680a9529eb15e454da0f79e2b4f25f38aa61b2143d458fd429052480508e23070ff0b4297d28843c32368b5060fa8fb787d4fecf1426d679401c51d725b1f364063046fd673e241cd267c80ef2f55b002f7275d0ac1f931b18a553f5cb02d2f4b6ef528fe812e6af84123973448426df5ff23be7e9f03a1721209b6c50978fb480cb97201d464a32e20df5235eec179155de85505470fb5ae3cc61f71c424d4b87963bac", &(0x7f0000000540)="b0e7d9ff1b4e3d8643f85b4fbc21d084b68baf657222f4ae5603b042192c6319df77ec773b67755e451225a04c24048df3ddd9f9eb7de9f2942408733e596a0ab224c9c68f82bafdc1e671d67f56fc9e3afc91568dafedeaa88689dc3ffa4e9452fd63891184c85340feb8edbaf95df025a90acbf57ba15bbf697652ebfada0cf7479a79f1667a3df4b7bbc18fb406fd31b8b5c7b392669f8018645e7642283c75745a8fa358866bb54250284f02fa9c56e1916c9bb503ef439894a861ffbaa4c100804877bcaddc029c3f7ebc0894ee137588410b2e9216568198d8ddebf6abcbb7eb61a004692be0a6ec1b63d35fd07d068a2f17f3f2f8d5079e5a880ff335f99ddedea79544867cd68b472f6970bf82616f27f3fb8555dedc799624c5154e4467dfcea7711d268882b6a66cd399cdb3073e9c645cb89537d858f7ab51193050810beb1bef5f80ac2528f46ee07cd315bb6b4b5faf4b1f817dae6ff0b386da26c15e7fc1919e4fc43a93c57af59a3a73699aa244172658973b8eba798be983ddfe6b1f79f9e512eb004a22e43e123f98642bda4b05479d62cea04f8a38c052aa2965091fa416fdc97effba31d5d28d5e8e33e4c845b152d3c0d8791364e64f77655a74218d153c9aa54ba8e6a68e8fcdc725009806dfb4ecf25068fbe48cd0214a00d9a206bd4a9d2a7f67ec04c270ebe709c28751f7cd3110ede983a1f77ca3e4ce99210c4ff327477d6f07a7a20e4d9ff1d4a9aa68393c6b281b2f42502044959ae26c782165b4d117618015ff2d7064034b1e3f00d1a75319d7c4b31dcbb0c1fc61fa50734aeb155ea84c1c4c74141ce303075d3dab074261d4ed1c712dbbeebb87999d368e18dccd6a90c0383c66d527d1a1b63ff453757dadf2de0e79b15fe0d60aba756c6bbcdbdbdf7d18dd60b6f8569c63ec7937f374897c4e49c564612bba5c06020983d4a51fa687d7fa4e3b7ff3b80c8fbe84535b3eb47f6a248bc21745699098f2508cae927270550cf8813150efc2e9d4a511f836a3c1b286d6684117671343d46ca8b4e01c02e2be89d711b46b09a53e620189f6aa154138e54677ad1b0dbdad1082383ceb7d3e4d5e34516a4e24fc928bbcefde6ec24c630fcee7699057866ad57be9e523c4306395ccd7a611fe8e78e64ca9f54d76c0cae55bc6a350876ae178936f7caa24839bd13bf01355ed4848528970e6b83f514611f3fb8a984ce4b9819389913e5edbf38e2a15af821ef2156b9272f12fa60f7ca445a3ce42bedcc8770a1be9808bacc281f0fc4532c250ac45c3b4872cf8ae695e6ca21345fce3989f5fe7e269f9225e81d0ac8b6aa8258386314496d32c62febbacbb4184565c54f91718d5344ebadd8d26645c5c90e92f2ddf46271d5cf4320a64a1ab4ad5d5d4d5ef34dc74b5014aeb02428d1cafb1a6a30cf83f19dc548ce7eee0315882076fbc61bcbacb7ca3a0c6182a3ff2cc60916ee8fb4ca1d2ccb6b3b9a972f763619638d664d685fd51192a35cf806f700b735c26e4e4c9b09452ad95a679accf482ca366b496fa10e7abb2ee1e4df547559cf1657df21ea1a1277fa0d4111fa4e07090cff9778d5a4e9fe502c7a43401852024aaaeb9d38e7e1f88290d8127a483a6e782f3f2072fd47fe0a890c20d438f841c90e1e09c9e565c837d52f695a50c3bc2a36c00a3796cc385416fa97182a7ebda0134d5feda26dd4c3c574628a1363d60549cd5560b69c8d3e37e5cf7c44bb0c976c40ab343c86b3d6efc6e17d2fc55ec08ba25a4363954e903ba3d0f364e0cc84978b02bbe7a65ac17bd9f931fb8347a482c9ec6f0d7a3c867e2983de8418bc217a0703a35a12e62de5d93d08bbeb11d1c7b6dbdf6dfc537e4099835e13806a8310d0797388428816c4c3793b345781b110700e7ac6e1e29bf4a1182520daa2e2c5c5fab3b48ccf1299b3a5ab3f5651e2aa269705deeff5bd10a22361b376b2c80ae6739d9be5d6dcd6b58fbbb6b5a9c0d8fd27d04f114ec5fcf1e80b51c6af390784169c7f9b9dba74ce049782408178c0d8b04203928987390a7e3deee5fc5328a243ff4c07eb680cb08f5553c297e64927233dacdb40861ebda641ab6a2cfd345cb7b66880e0d77b1c01bd48cc2bae56045956005495c39b32e31677f4218a18fe71d539f97c18b170039f2cfee6cb02ce2aa4d1cfb3559a22747b8a33f66bedeffcb29ee925083a866ef9a3c3aa2dbecd4bff4132f55c73bba23babbeb90634399c9b128e929d890536d0ab50df6dc0e82bd98836f2bc4f969e64459e885135020dd3b38560d0af0a2948ac1c90beae728dc4edc0fe51c698d06bb44644e1a76433b3d13a2b80444028597b27042915633648bf3e9933d4ddbc9072ec88180f2598212569ea992d97ceec8e2bfd0a82772525173aca7faf442289e15166d957f2c2ca647b9c96c84b04cc34e7e2ebeaa187f8d93a6807e25ff097b7660d42c1d6500b2f956de15e3137ee8c19d25c3c64dfa50e569b79e39bf04ab58a9539bc5fde3ecbd88c7ae3049d43ea241e685a133608a1625d830348883e1ddaaf0a0852bbcd02a68388d9fcac97ef603930294350b34f1c276cee0a02a3b4a05b167e6a0178860519d5136528c200fa8f44b88e8cf030611ece4169f8abc167e576f8d394037fd2f86e8638c899f79d431b1b21710b4de00bdefa22e8bd51584e0ac5b215e7e7d3eed42b03a19c56c6180ca88343a1a034b87c29d79e3bd9e5aa15099ed6ce8b47555e075e18e0e804ad98881d905f130805ef3a45bcefb7310ec2d07d3ae9b1d65d643344ff51e04344010feef8a1ba6a38ad38ebbcc832f7bfedc25e4f23deb0173ecd721bb74d5126d64fe9b69f2c6e5b5ad3463c99b52b52e9d053014f409c010037f833829b370356026ca1e1c1455fb57551327c39d677470aae1272008cda5a4382adebf0a5b0e8213b9058a8533ca246704e58021c6d6d9ce0f9b9343ff3a278ffb74b7fd04eb11ac7b011cd2bc8b518067ba0c6228498432a63c6f9ac79d03e4509259ab832e845137865d3333892910ab452cdedf930fb17d40ff472e84665692c8c810b85fcd801a1571add20629fdd4f4d4b1fcc5c46351e562042c2317150b8399cb9437afd25685ef58df394e4a5b26e8f7055e2aa95e153e483e8b4e9638e690c47efad355e4218aaa028140d13a0a3982534eb7533a2d9dbe5fa8cfd513527ef3720c55108a6fe5267f3fc0c7a028ea3c57925fbd81adc09170778e29222cab5a235d5610578188a1b1ba0446a7224d3f2106b48d537065d5ddc18008a1d77542cc261e88296ebbc6884bcba441a5551fdf882be8136cfee16349ae37e6eca71d46899d26c86081fcfb9d74e793a7cd60509fb00e8f68bea5996abb9a54a65c4d48adeab79330529473f7d18c68316f039b24b4af0e07b1c56bc128f3d92a3c2f71e12745bdb232c2bdfd640680cd12cec11f456e98a275c24b233c7b8af4037ca6474ead3355eb74f1113ab79fc89a172204c4e8138e831fdfc79ddad3fa9fbc28b71041b913f33f052d2d7c220dfb14a52b55f4b3629fc99845317aea00769b031dd6ec8d5530e945214648b9d1f1d995c2a5427d72235b7b5fb4a156afa83416df1338c372de41ef641beaf81d9fbb47516529bef39fed78f4ef533bc62681803104a4176f160960b14f3bd42507f140a94b027a665abd3a7522ec5fb67b688d4386c6520532e497117d1200813f5c4ce38fcd3abd69420cff1cf71fbc5a3e96b1c67b2cac7d13a0f1c0cfc11744c4c1b957cbdfb3391f3a1730fc6b273ccb111e376db5998ce4908f292cd8594b02064aaf37e150f632fce58c607a38ca16b9d2ccc16fb574314d9ca4a43596572cc52b7af4e9a2efb312f5f68a49f9741e45a756fb6f70c2b6a808d84920ffd97f4f38688e82b95b22c36b83c044ea1db47473ab7009251071cfc142056ebeb27260c78028d1f05a5d0c5c3652cc529c85104495fcc76ccb0394caa910c73ea6ad924088724d02ba1ccc3efb53d088e21eb61aa64a4a499da26fb8c6295d754879d038843ed1b52d75b23087638e521879fd96b9d572608cdafcfa3dc31549f3d2faec0107741296a25b253ba03eabdc62b9a2f4e74ec25f1bfd1145c4196dfc7b444a3f1aeb92825bd420f962a7375a10eae041803a9b7ac26b05bb72a1c1471b533d064bd9b37af02d3fc70f197f77928ca4707897634df1cf70cd200748991bb569e15c2a2e5a0e9b0936f84a92e3a0d9b0e30d253c3762aae3825ebbb9fc0f42fa57650321362e77d1fcb1745c2f4a61777e2540b57b19202872048d56b8dfd3bae244137ee85b950b3dcdfa723a58baae74b47dbd654b6e4614d61a676abf8ad42da98b4a8cabcb32a57d0b67facf65a38242864141c049fabb1d61cc9d88490c0e5aade91236e7a033b02ad3104b97a6241293029e7296f97940347f2cad3ca3d8374896bb0839b19c9372bd7e09b20e25c57a52548606771033bedd6723b31fccb2daedb0d710ec64808a40ef7dac48ee5689029ce30d245bcd87ae289ab936e2bce79558b5378df21b281c29d45ed90458510c971101ab51c79058dcc4751b71ab3601a55af0ec68eddd62862fcd7ce40e08a741faff5cd8f8108e57a559317cc2c15e5b727adbdfee86f8840e2e79670cfe9006c7bea1fed50bc05e369411ae5f7636e778fead89ed3d586d71b2a07c52f988b035f839b07363529e008434a35d576c71774164d15dcf8f85af66e0d09d194e0134b3a37cc57de4e64a07cd3105fce164052ccdba00087f8012fcf47d187fbd5be1f82aa6a26edc46701318cff603ed5fabcfcd4b4593d1043cf2d2a0a0a3149950d2e3c164d1196b104a3b8173c7356e21c402cae1bca1fb1e3e5a6917fc78901f8fd616c2f5d3babfb53187c00bb7784f139487ea20a0282630730b541d746f55af745107641bef24c15fe1796be8aff3373c4c90726dbb96676a03bf6e951ca36b35b1825adadecb7a0c96d0a18b03161bf8be7f306a9f41859bb2b65d3c21c777354d81afcd13d74b35c541bf7980340685b017558352ebda048a45c3c328b7e9cccd9135d67423db93fca68054964c3e2f32fb0546f278b06742c9998fcf1b5bc3c38d16cc9fc7a9bd45d4be507c7906b055f022ac2e48c186f372ba78fb852e9ed14857c05e54ccde3990966719f1ed35f8a114a935011f87cc4cb46939cef2e4a466adfd908f11207b2cea30bf64837761cccccce8d0b4cd7d07b509f5b81b801f2cae5a29442a4cb516010eaf78c0c3864195061f5166da441bc2a9290f488cd5bc694c4d65c909aa54ead87da9064c08c3c4e325a133e6255bcbc06eb56a486f0a6dda916fb5331dddad1e6c2c8fd0b63bc24a578b14686320d33d6f103a77c6452e590558776858994cb6f158546951759ed8a272b1508e164e578b82df584c41703148c8064bb0c046691d18a352b9abf3bc06419fc0a1054ec14f95a81727438a5cec4ca92c2a0328f50149f73bb249859adacd4111c94465c4173a1a048561b181e3c35970e569a8a2f0f932b78b0fa0c43210f449313318479d112a9da95bf3b3a9ba36c3e524b925e17a33c34174f532adf76fe2bd957aec647308ff3ddeb0b217f09ee5d27ae9190e2285d68027ab2e6c2539a76535d45cf0a7a36765f51edc77326935d048092254f9dd93d2698d6e8940386aa94e688429508cc8b0d9dc30f370ddb459ec9139e133b8352a2cab69f8cfca1e4a19553e3efc02a692ac0f7d090dbd9b296ed74b8c83a4", &(0x7f0000001540)="e5567f36cb83bc750ebb0ca1cda570b6918efd63d292c9f9fefd4bc3be2ce8bfae2cc7af32090b1e56630c894e54d41385d287804e3691429151d76a8e669758ae299e72e75ce3883f49bc797f44bd611799722602065389bde6f91dc0ca1cdae4036cbdc8e3b6a92dd159dac60049c1e514e70ea4f1efb187ae93dc405c98aea2e52c5a21788d7fb389413d3ef650584094fa57b4b4b77ce5f6656a235df05f8bdffad97691588df2e49e3cc0571ed7e80a8339047338fb9ded4ddedd9b08799f53de96ba368285b242f046dd81f97f661dfd9b60b396947e28e8acc7ee947da6c501a83d5bbc"]}) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x2000003, 0x82012, r0, 0x83000000) 199.992389ms ago: executing program 2 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180)=0xfffffff9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000034000701fffffffffecc43ff027c00003d52076280a3fa878302cac3795170d74fd47eeae12e1d3e0c72c9b660d6a258d7ff3679fef4fb46c80bad1f1392a514e30dae0e767aa94413dc5cc27ed2daaa418bfc80ffd851631ad54f659fe7bd72edae79be69d9b17f7b7db486d590661e5bdfad622f046a"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 198.816423ms ago: executing program 2 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000ecd769a10029bd7000fedbdf2500000000000000000800000000004000080001000100000007fff6000000000008000100060000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000082) close_range(r0, r0, 0x0) 139.81073ms ago: executing program 2 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x64, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000440)={0x3}) select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x5, 0x0, 0x0, 0x0, 0x16}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x80000000, 0x0, 0x80d, 0x2004c9, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x362d, 0x0, 0x4], 0x0, 0x200306}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) timerfd_create(0x2, 0x80800) 80.152867ms ago: executing program 2 (id=934): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa388, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x80409e, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c61e753f5005f6f746865728a5f"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="c9f4b53004d111b9943452ca81c18ca0dcccd23c3750a2f3358710ef712ceb4dbefb6cd83ee89d85a1dc1618fdbc4d61aa5a12ee1e1176f647d4314cb6dff930ede50e6cbbbcc4353f43bd51cf524902f87a4109b52220f0cda5186f704397238422cd90e55d3bc128c24a3ee5011dbaa3abfd8f89702cfd2279b707751ae7baf9483a65182fdcff31ce270860f2f696610ebc890d6ea60cd309a25de18484d2e120faa76ece927680c791c6749dd58e70240d8f5f58155f39573424d2cab750eb6b350fc5c179ce"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x9, 0x1, 0x2, "8eb8a868e93b59fbba176fb1dea0708c68d900", 0x55595659}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000001c0)=@fd={0x9, 0x2, 0x4, 0x4, 0x9, {0x0, 0x2710}, {0x2, 0x2, 0x40, 0x4, 0x80, 0x3, "b0090eb1"}, 0x10001, 0x4, {}, 0xf, 0x0, r3}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x101002) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3fc, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x0, 0x1}, {0x0, 0x1}}], 0x30) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) 79.605584ms ago: executing program 2 (id=935): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x488100, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYRES8=r1]) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 0s ago: executing program 2 (id=936): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x1, 0x84) kernel console output (not intermixed with test programs): ew USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.664803][ T34] usb 7-1: config 0 descriptor?? [ 71.723814][ T5949] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input49 [ 71.894860][ T34] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 71.921645][ T40] audit: type=1400 audit(1753651417.091:371): avc: denied { read } for pid=6689 comm="syz.1.203" name="event4" dev="devtmpfs" ino=3263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.934724][ T6690] netlink: 'syz.1.203': attribute type 2 has an invalid length. [ 71.937154][ T6690] netlink: 100 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.937540][ T40] audit: type=1400 audit(1753651417.091:372): avc: denied { ioctl } for pid=6689 comm="syz.1.203" path="/dev/input/event4" dev="devtmpfs" ino=3263 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.940543][ T6690] netlink: 'syz.1.203': attribute type 2 has an invalid length. [ 71.954295][ T6690] netlink: 100 bytes leftover after parsing attributes in process `syz.1.203'. [ 71.961990][ T6690] fuse: Unknown parameter 'group_iX' [ 71.965863][ T24] usb 6-1: USB disconnect, device number 7 [ 71.965914][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 71.972195][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 71.993202][ T40] audit: type=1326 audit(1753651417.161:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.0.208" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddd518e9a9 code=0x0 [ 72.044061][ T40] audit: type=1400 audit(1753651417.211:374): avc: denied { bind } for pid=6705 comm="syz.0.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.320369][ T55] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 72.471676][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.475831][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.479673][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.484779][ T55] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 72.489385][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.493791][ T55] usb 5-1: config 0 descriptor?? [ 72.515565][ T40] audit: type=1400 audit(1753651417.681:375): avc: denied { setopt } for pid=6710 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.522371][ T40] audit: type=1400 audit(1753651417.691:376): avc: denied { listen } for pid=6710 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.530097][ T40] audit: type=1400 audit(1753651417.691:377): avc: denied { accept } for pid=6710 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.724771][ T6719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.736671][ T6720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1301391048 (2602782096 ns) > initial count (2518190486 ns). Using initial count to start timer. [ 72.899857][ T55] hid-udraw 0003:20D6:CB17.000F: unknown main item tag 0x0 [ 72.904256][ T55] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.000F/input/input51 [ 72.973861][ T55] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.000F/input/input52 [ 72.986449][ T55] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.000F/input/input53 [ 73.007914][ T55] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:20D6:CB17.000F/input/input54 [ 73.031347][ T55] hid-udraw 0003:20D6:CB17.000F: hidraw2: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 73.164218][ T34] usb 5-1: USB disconnect, device number 9 [ 73.194447][ T6695] usb 7-1: string descriptor 0 read error: -71 [ 73.720634][ T6731] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 73.902893][ T6753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.904528][ T6752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.973461][ T24] usb 7-1: USB disconnect, device number 5 [ 74.010393][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.161013][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 74.165175][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.168449][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.172330][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.174968][ T5949] usb 8-1: USB disconnect, device number 7 [ 74.175916][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.182871][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.186510][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.191664][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.195986][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.199091][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.202165][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.205831][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.209437][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.212537][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.214691][ T6763] netlink: zone id is out of range [ 74.215567][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.221278][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.224907][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.227854][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.230937][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.234522][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.238338][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.238909][ T6763] netlink: set zone limit has 4 unknown bytes [ 74.241832][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.246784][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.250585][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.254144][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.257150][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.260762][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.264269][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.268029][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.273008][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.276191][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.279852][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 74.284054][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.289317][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.293232][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.296792][ T10] usb 5-1: Product: syz [ 74.298583][ T10] usb 5-1: Manufacturer: syz [ 74.300623][ T10] usb 5-1: SerialNumber: syz [ 74.305462][ T10] usb 5-1: config 0 descriptor?? [ 74.308073][ T6737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.315290][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 74.371535][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.531932][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.536356][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.540516][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.545754][ T24] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 74.548928][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.560820][ T24] usb 7-1: config 0 descriptor?? [ 74.600220][ T10] usb 5-1: USB disconnect, device number 10 [ 74.605928][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 74.872427][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 74.966976][ T24] hid-udraw 0003:20D6:CB17.0010: unknown main item tag 0x0 [ 74.972007][ T24] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0010/input/input55 [ 75.035462][ T24] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0010/input/input56 [ 75.053597][ T24] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0010/input/input57 [ 75.056284][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'. [ 75.071575][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.074153][ T24] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:20D6:CB17.0010/input/input58 [ 75.091861][ T24] hid-udraw 0003:20D6:CB17.0010: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 75.135059][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.187581][ T6786] bridge1: entered allmulticast mode [ 75.251113][ T6761] FAULT_INJECTION: forcing a failure. [ 75.251113][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.257673][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.2.224 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 75.257697][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.257707][ T6761] Call Trace: [ 75.257713][ T6761] [ 75.257720][ T6761] dump_stack_lvl+0x16c/0x1f0 [ 75.257751][ T6761] should_fail_ex+0x512/0x640 [ 75.257781][ T6761] _copy_to_user+0x32/0xd0 [ 75.257800][ T6761] simple_read_from_buffer+0xcb/0x170 [ 75.257845][ T6761] proc_fail_nth_read+0x197/0x270 [ 75.257871][ T6761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.257897][ T6761] ? rw_verify_area+0xcf/0x680 [ 75.257918][ T6761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 75.257942][ T6761] vfs_read+0x1e1/0xc60 [ 75.257970][ T6761] ? __pfx___mutex_lock+0x10/0x10 [ 75.257987][ T6761] ? __pfx_vfs_read+0x10/0x10 [ 75.258017][ T6761] ? __fget_files+0x20e/0x3c0 [ 75.258040][ T6761] ksys_read+0x12a/0x250 [ 75.258063][ T6761] ? __pfx_ksys_read+0x10/0x10 [ 75.258095][ T6761] do_syscall_64+0xcd/0x4c0 [ 75.258113][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.258130][ T6761] RIP: 0033:0x7f60afd8d3bc [ 75.258143][ T6761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.258158][ T6761] RSP: 002b:00007f60b0b59030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.258175][ T6761] RAX: ffffffffffffffda RBX: 00007f60affb5fa0 RCX: 00007f60afd8d3bc [ 75.258186][ T6761] RDX: 000000000000000f RSI: 00007f60b0b590a0 RDI: 0000000000000004 [ 75.258195][ T6761] RBP: 00007f60b0b59090 R08: 0000000000000000 R09: 0000000000000000 [ 75.258204][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.258213][ T6761] R13: 0000000000000000 R14: 00007f60affb5fa0 R15: 00007ffc3d2d6df8 [ 75.258237][ T6761] [ 75.268286][ T10] usb 7-1: USB disconnect, device number 6 [ 75.574967][ T6806] hpfs: hpfs_map_sector(): read error [ 75.728296][ T6823] nfs: Bad value for 'source' [ 75.791316][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 75.865148][ T6829] loop4: detected capacity change from 0 to 2560 [ 75.910517][ T6831] Invalid logical block size (-1) [ 75.914575][ T5959] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.917439][ T5959] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.920136][ T5959] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.923249][ T5959] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.926502][ T5959] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.951244][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 75.958293][ T10] usb 7-1: config 0 has no interfaces? [ 75.961745][ T10] usb 7-1: config 0 has no interfaces? [ 75.964993][ T10] usb 7-1: config 0 has no interfaces? [ 75.968173][ T10] usb 7-1: config 0 has no interfaces? [ 75.983969][ T10] usb 7-1: config 0 has no interfaces? [ 75.987498][ T10] usb 7-1: config 0 has no interfaces? [ 75.997120][ T10] usb 7-1: config 0 has no interfaces? [ 76.000450][ T10] usb 7-1: config 0 has no interfaces? [ 76.011662][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.015343][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.018680][ T10] usb 7-1: Product: syz [ 76.019996][ T10] usb 7-1: Manufacturer: syz [ 76.021886][ T10] usb 7-1: SerialNumber: syz [ 76.026680][ T10] usb 7-1: config 0 descriptor?? [ 76.026763][ T6840] libceph: resolve '40' (ret=-3): failed [ 76.038643][ T6840] xt_hashlimit: overflow, rate too high: 0 [ 76.085754][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 76.085764][ T40] audit: type=1400 audit(1753651421.251:391): avc: denied { create } for pid=6841 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.094725][ T40] audit: type=1400 audit(1753651421.251:392): avc: denied { create } for pid=6841 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.101586][ T40] audit: type=1400 audit(1753651421.251:393): avc: denied { ioctl } for pid=6841 comm="syz.3.251" path="socket:[12784]" dev="sockfs" ino=12784 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.112088][ T40] audit: type=1400 audit(1753651421.261:394): avc: denied { sqpoll } for pid=6843 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.138725][ T40] audit: type=1400 audit(1753651421.301:395): avc: denied { shutdown } for pid=6843 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.199781][ T6862] Invalid source name [ 76.207802][ T6862] UBIFS error (pid: 6862): cannot open "ist-p384-generic) [ 76.207802][ T6862] module : kernel [ 76.207802][ T6862] priority : 100 [ 76.207802][ T6862] refcnt : 1 [ 76.207802][ T6862] selftest : passed [ 76.207802][ T6862] internal : no [ 76.207802][ T6862] type : sig [ 76.207802][ T6862] [ 76.207802][ T6862] name : pcbc(fcrypt) [ 76.207802][ T6862] driver : pcbc(fcrypt-generic) [ 76.207802][ T6862] module : kernel [ 76.207802][ T6862] priority : 0 [ 76.207802][ T6862] refcnt : 2 [ 76.207802][ T6862] selftest : passed [ 76.207802][ T6862] internal : no [ 76.207802][ T6862] type : skcipher [ 76.207802][ T6862] async : no [ 76.207802][ T6862] blocksize : 8 [ 76.207802][ T6862] min keysize : 8 [ 76.207802][ T6862] max keysize : 8 [ 76.207802][ T6862] ivsize : 8 [ 76.207802][ T6862] chunksize : 8 [ 76.207802][ T6862] walksize : 8 [ 76.207802][ T6862] statesize : 0 [ 76.207802][ T6862] [ 76.207802][ T6862] name : hmac(sha256) [ 76.207802][ T6862] driver : hmac-shash(sha256-x86_64) [ 76.207802][ T6862] module : kernel [ 76.207802][ T6862] priority : 300 [ 76.207802][ T6862] refcnt : 9 [ 76.207802][ T6862] selftest : passed [ 76.207802][ T6862] internal : no [ 76.207802][ T6862] type : shash [ 76.207802][ T6862] blocksize : 64 [ 76.207802][ T6862] digestsize : 32 [ 76.207802][ T6862] [ 76.207802][ T6862] name : hmac(sha1) [ 76.207802][ T6862] driver : hmac-shash(sha1-ni) [ 76.207802][ T6862] module : kernel [ 76.207802][ T6862] priority : 250 [ 76.207802][ T6862] refcnt : 9 [ 76.207802][ T6862] selftest : passed [ 76.207802][ T6862] internal : no [ 76.207802][ T6862] type : shash [ 76.207802][ T6862] blocksize : 64 [ 76.207802][ T6862] digestsize : 20 [ 76.207802][ T6862] [ 76.216165][ T6862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6862 comm=syz.3.256 [ 76.233247][ T6037] usb 7-1: USB disconnect, device number 7 [ 76.332728][ T6866] netlink: 'syz.3.259': attribute type 2 has an invalid length. [ 76.335170][ T6866] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.259'. [ 76.338108][ T6866] nbd: must specify a device to reconfigure [ 76.484400][ T6875] Bluetooth: hci4: Frame reassembly failed (-90) [ 76.487851][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 76.603754][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.606803][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.700882][ T6889] netlink: 'syz.1.266': attribute type 29 has an invalid length. [ 76.733381][ T40] audit: type=1400 audit(1753651421.901:396): avc: denied { accept } for pid=6892 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.860669][ T6899] netlink: 112 bytes leftover after parsing attributes in process `syz.1.269'. [ 76.863689][ T6899] capability: warning: `syz.1.269' uses 32-bit capabilities (legacy support in use) [ 76.909194][ T40] audit: type=1326 audit(1753651422.071:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.272" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8e9a9 code=0x0 [ 76.961766][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 76.964752][ T6907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.273'. [ 76.996881][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.003821][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.007593][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.011961][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.017249][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.021973][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.025921][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.032216][ T6910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.139810][ T40] audit: type=1400 audit(1753651422.301:398): avc: denied { bind } for pid=6919 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.147298][ T6920] tmpfs: Bad value for 'mpol' [ 77.176788][ T40] audit: type=1400 audit(1753651422.341:399): avc: denied { name_connect } for pid=6921 comm="syz.1.277" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 77.185864][ T40] audit: type=1400 audit(1753651422.341:400): avc: denied { listen } for pid=6921 comm="syz.1.277" lport=53147 faddr=::ffff:172.20.255.187 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.310016][ T6931] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 77.485786][ T6937] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 77.580679][ T6944] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 77.583205][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.586928][ T6944] vhci_hcd vhci_hcd.0: Device attached [ 77.592127][ T6944] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 77.598514][ T6944] netlink: 'syz.1.282': attribute type 29 has an invalid length. [ 77.604965][ T6946] vhci_hcd: connection closed [ 77.607681][ T1140] vhci_hcd: stop threads [ 77.611909][ T1140] vhci_hcd: release socket [ 77.613816][ T1140] vhci_hcd: disconnect device [ 77.796330][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.799046][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.810544][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.821226][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.823898][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.830451][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.832978][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.835321][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.837671][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.839971][ T6037] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 77.845231][ T6037] hid-generic 00A0:0008:0003.0011: hidraw1: HID v0.05 Device [syz1] on syz0 [ 77.984741][ T6953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.242390][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.252479][ T6962] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 78.489750][ T6969] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6969 comm=syz.1.289 [ 78.489806][ T6968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6968 comm=syz.1.289 [ 78.497940][ T6967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6967 comm=syz.1.289 [ 78.502253][ T6968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6968 comm=syz.1.289 [ 78.503875][ T6967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6967 comm=syz.1.289 [ 78.511557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.515125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.517982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.520551][ T5310] Bluetooth: hci4: command 0x1003 tx timeout [ 78.520956][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 78.550493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.565159][ T6967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=101 sclass=netlink_audit_socket pid=6967 comm=syz.1.289 [ 78.571775][ T6967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=59 sclass=netlink_audit_socket pid=6967 comm=syz.1.289 [ 78.612189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.750429][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 78.797215][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.803406][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.845499][ T6991] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.848285][ T6991] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.852747][ T6991] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.856441][ T6991] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.933439][ T5949] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 78.936599][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.940900][ T5949] usb 5-1: language id specifier not provided by device, defaulting to English [ 78.946132][ T5949] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.950188][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.951413][ T5958] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 78.955679][ T5949] usb 5-1: Product: syz [ 78.958878][ T5949] usb 5-1: Manufacturer: syz [ 78.960445][ T5949] usb 5-1: SerialNumber: syz [ 78.984914][ T7006] batadv_slave_0: entered promiscuous mode [ 78.987374][ T7006] batadv_slave_0: left promiscuous mode [ 78.996956][ T7007] batadv_slave_0: entered promiscuous mode [ 79.001059][ T7007] batadv_slave_0: left promiscuous mode [ 79.179988][ T5949] usb 5-1: 0:2 : does not exist [ 79.195040][ T5949] usb 5-1: USB disconnect, device number 11 [ 79.369514][ T7016] bond0: entered promiscuous mode [ 79.371673][ T7016] bond_slave_0: entered promiscuous mode [ 79.373594][ T7016] bond_slave_1: entered promiscuous mode [ 79.376140][ T7016] batadv0: entered promiscuous mode [ 79.378651][ T7016] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 79.382049][ T7016] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 79.386510][ T7016] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 79.391353][ T7016] bond0: left promiscuous mode [ 79.393158][ T7016] bond_slave_0: left promiscuous mode [ 79.395416][ T7016] bond_slave_1: left promiscuous mode [ 79.398838][ T7016] batadv0: left promiscuous mode [ 79.530918][ T7022] NILFS (nbd3): device size too small [ 79.590017][ T7031] random: crng reseeded on system resumption [ 79.598406][ T7031] program syz.2.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.934504][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.938560][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.180402][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.343170][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 80.347716][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.351791][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.356416][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.361706][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.368485][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.373346][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.377191][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.381324][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.386099][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.390356][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.394184][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.398868][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.402803][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.406691][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.411367][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.415487][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.418870][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.422621][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.425657][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.428699][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.432224][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.435307][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.438350][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 80.443047][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.446851][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.449651][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.452333][ T10] usb 7-1: Product: syz [ 80.453653][ T10] usb 7-1: Manufacturer: syz [ 80.455148][ T10] usb 7-1: SerialNumber: syz [ 80.458020][ T10] usb 7-1: config 0 descriptor?? [ 80.464270][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 80.488561][ T7065] wireguard0: entered promiscuous mode [ 80.490373][ T7065] wireguard0: entered allmulticast mode [ 80.665517][ T7070] dummy0: entered allmulticast mode [ 80.714459][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 80.717530][ T10] usb 7-1: USB disconnect, device number 8 [ 80.722595][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 81.069973][ T7080] Cannot find add_set index 0 as target [ 81.558544][ T7104] capability: warning: `syz.2.333' uses deprecated v2 capabilities in a way that may be insecure [ 81.777099][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 81.777111][ T40] audit: type=1326 audit(1753651426.941:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.2.337" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60afd8e9a9 code=0x0 [ 82.254681][ T40] audit: type=1400 audit(1753651427.421:428): avc: denied { write } for pid=7120 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.255055][ T7121] __nla_validate_parse: 62 callbacks suppressed [ 82.255072][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'. [ 82.271974][ T7121] veth0: entered promiscuous mode [ 82.275262][ T7120] veth0: left promiscuous mode [ 82.313037][ T40] audit: type=1400 audit(1753651427.481:429): avc: denied { map } for pid=7122 comm="syz.1.339" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.320657][ T40] audit: type=1400 audit(1753651427.481:430): avc: denied { execute } for pid=7122 comm="syz.1.339" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.358825][ T7125] netlink: 'syz.1.340': attribute type 7 has an invalid length. [ 82.362580][ T7125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.340'. [ 82.422393][ T40] audit: type=1400 audit(1753651427.591:431): avc: denied { mount } for pid=7127 comm="syz.1.341" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.441231][ T40] audit: type=1400 audit(1753651427.611:432): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.483558][ T7136] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 82.646077][ T7151] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 82.648590][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.348'. [ 82.756099][ T40] audit: type=1400 audit(1753651427.921:433): avc: denied { write } for pid=7148 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.840475][ T54] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.941188][ T40] audit: type=1400 audit(1753651428.111:434): avc: denied { read write } for pid=7162 comm="syz.2.351" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.948914][ T7165] binder: BC_ATTEMPT_ACQUIRE not supported [ 82.951539][ T40] audit: type=1400 audit(1753651428.111:435): avc: denied { open } for pid=7162 comm="syz.2.351" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.953636][ T7165] binder: 7162:7165 ioctl c0306201 200000000c40 returned -22 [ 82.963417][ T40] audit: type=1400 audit(1753651428.111:436): avc: denied { accept } for pid=7162 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.003656][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.006997][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.009960][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.014202][ T54] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 83.017022][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.024163][ T54] usb 8-1: config 0 descriptor?? [ 83.046369][ T7175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.284908][ T7192] bond0: Error: Cannot enslave bond to itself. [ 83.362240][ T7203] netlink: 84 bytes leftover after parsing attributes in process `syz.1.361'. [ 83.399936][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 83.439964][ T7205] IPv6: sit1: Disabled Multicast RS [ 83.474590][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 83.481126][ T7212] bridge1: entered promiscuous mode [ 83.482841][ T7212] bridge1: entered allmulticast mode [ 83.489048][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 83.498146][ T7212] bridge2: entered promiscuous mode [ 83.499834][ T7212] bridge2: entered allmulticast mode [ 83.715203][ T54] usbhid 8-1:0.0: can't add hid device: -71 [ 83.717157][ T54] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 83.721627][ T54] usb 8-1: USB disconnect, device number 8 [ 83.733535][ T7239] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 83.797843][ T7243] overlayfs: upper fs does not support file handles, falling back to index=off. [ 83.910103][ T7254] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 83.917709][ T7252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.923237][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.927578][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 83.930622][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 83.940879][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 83.946959][ T7252] chnl_net:caif_netlink_parms(): no params data found [ 84.233240][ T7272] unsupported nlmsg_type 40 [ 84.360463][ T5958] Bluetooth: hci3: command tx timeout [ 84.409116][ T1143] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 84.599862][ T7309] netlink: 'syz.3.397': attribute type 5 has an invalid length. [ 84.603402][ T7309] netlink: 'syz.3.397': attribute type 6 has an invalid length. [ 84.629973][ T7313] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 84.697483][ T7323] loop2: detected capacity change from 0 to 7 [ 84.705896][ T7323] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.708432][ T7323] loop2: partition table partially beyond EOD, truncated [ 84.712026][ T7323] loop2: p1 size 872559382 extends beyond EOD, truncated [ 84.878312][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.880200][ T5360] loop2: partition table partially beyond EOD, truncated [ 84.882744][ T5360] loop2: p1 size 872559382 extends beyond EOD, truncated [ 84.913833][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.915537][ T5360] loop2: partition table partially beyond EOD, truncated [ 84.917845][ T5360] loop2: p1 size 872559382 extends beyond EOD, truncated [ 84.932329][ T6194] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 84.964610][ T7329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.968280][ T7329] IPv6: NLM_F_CREATE should be set when creating new route [ 84.988256][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.990022][ T5360] loop2: partition table partially beyond EOD, truncated [ 84.993348][ T5360] loop2: p1 size 872559382 extends beyond EOD, truncated [ 84.999196][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.003487][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.032325][ T7335] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 85.036658][ T7336] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 85.100462][ T6194] usb 6-1: Using ep0 maxpacket: 8 [ 85.105569][ T6194] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.108977][ T6194] usb 6-1: can't read configurations, error -61 [ 85.250344][ T6194] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.250411][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 85.391568][ T24] usb 7-1: device descriptor read/64, error -71 [ 85.410493][ T6194] usb 6-1: Using ep0 maxpacket: 8 [ 85.414947][ T6194] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.418239][ T6194] usb 6-1: can't read configurations, error -61 [ 85.421321][ T6194] usb usb6-port1: attempt power cycle [ 85.650225][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 85.780409][ T6194] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 85.790398][ T24] usb 7-1: device descriptor read/64, error -71 [ 85.806752][ T6194] usb 6-1: Using ep0 maxpacket: 8 [ 85.813301][ T6194] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.816513][ T6194] usb 6-1: can't read configurations, error -61 [ 85.900591][ T24] usb usb7-port1: attempt power cycle [ 85.960408][ T6194] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.980916][ T6194] usb 6-1: Using ep0 maxpacket: 8 [ 85.991327][ T6194] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.993890][ T6194] usb 6-1: can't read configurations, error -61 [ 85.996318][ T6194] usb usb6-port1: unable to enumerate USB device [ 86.250408][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.271152][ T24] usb 7-1: device descriptor read/8, error -71 [ 86.520429][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 86.540771][ T24] usb 7-1: device descriptor read/8, error -71 [ 86.657109][ T7373] netlink: 'syz.3.414': attribute type 21 has an invalid length. [ 86.658333][ T7371] cgroup: fork rejected by pids controller in /syz3 [ 86.661608][ T24] usb usb7-port1: unable to enumerate USB device [ 86.842004][ T1021] cfg80211: failed to load regulatory.db [ 86.996002][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 86.996013][ T40] audit: type=1400 audit(1753651432.161:453): avc: denied { execute } for pid=7480 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 87.007614][ T40] audit: type=1400 audit(1753651432.161:454): avc: denied { execute_no_trans } for pid=7480 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 87.012492][ T7482] overlay: Bad value for 'uuid' [ 87.017938][ T40] audit: type=1400 audit(1753651432.181:455): avc: denied { mounton } for pid=7481 comm="syz.0.418" path="/93/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 87.034225][ T7482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.060099][ T40] audit: type=1400 audit(1753651432.221:456): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.075949][ T7484] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 87.122302][ T5310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.125496][ T5310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.128649][ T5310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.131714][ T5310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.134260][ T5310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.231521][ T40] audit: type=1400 audit(1753651432.391:457): avc: denied { read } for pid=5662 comm="dhcpcd" name="n104" dev="tmpfs" ino=4122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.238868][ T40] audit: type=1400 audit(1753651432.391:458): avc: denied { open } for pid=5662 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.248506][ T40] audit: type=1400 audit(1753651432.391:459): avc: denied { getattr } for pid=5662 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.287466][ T1148] bridge_slave_1: left allmulticast mode [ 87.290124][ T1148] bridge_slave_1: left promiscuous mode [ 87.293477][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.297850][ T1148] bridge_slave_0: left allmulticast mode [ 87.299686][ T1148] bridge_slave_0: left promiscuous mode [ 87.301805][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.327937][ T40] audit: type=1400 audit(1753651432.491:460): avc: denied { read open } for pid=7497 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.337638][ T40] audit: type=1400 audit(1753651432.501:461): avc: denied { getattr } for pid=7497 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.347441][ T40] audit: type=1400 audit(1753651432.501:462): avc: denied { add_name } for pid=7496 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.589630][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.593757][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.597524][ T1148] bond0 (unregistering): Released all slaves [ 87.604887][ T1148] bond1 (unregistering): Released all slaves [ 87.648777][ T7485] chnl_net:caif_netlink_parms(): no params data found [ 87.818442][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.823279][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.825957][ T7485] bridge_slave_0: entered allmulticast mode [ 87.828643][ T7485] bridge_slave_0: entered promiscuous mode [ 87.832239][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.834686][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.837468][ T7485] bridge_slave_1: entered allmulticast mode [ 87.840029][ T7485] bridge_slave_1: entered promiscuous mode [ 87.906017][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.920933][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.994091][ T7523] fuse: Bad value for 'fd' [ 87.995688][ T7524] fuse: Bad value for 'fd' [ 88.029663][ T7485] team0: Port device team_slave_0 added [ 88.036574][ T7485] team0: Port device team_slave_1 added [ 88.036686][ T7523] __nla_validate_parse: 10 callbacks suppressed [ 88.036697][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 88.088575][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 88.091684][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 88.098010][ T7532] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 88.098010][ T7532] The task syz.2.427 (7532) triggered the difference, watch for misbehavior. [ 88.127064][ T7524] gretap0: entered promiscuous mode [ 88.129419][ T7524] batadv_slave_1: entered promiscuous mode [ 88.134430][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.136769][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.145468][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.156880][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.159207][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.167770][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.220880][ T7485] hsr_slave_0: entered promiscuous mode [ 88.223134][ T7485] hsr_slave_1: entered promiscuous mode [ 88.225183][ T7485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.227585][ T7485] Cannot create hsr debugfs directory [ 88.236319][ T1148] hsr_slave_0: left promiscuous mode [ 88.239560][ T1148] hsr_slave_1: left promiscuous mode [ 88.243444][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.248412][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.300662][ T6194] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 88.451310][ T6194] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 88.463401][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.466431][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.469984][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.474030][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.476976][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.480099][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.483721][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.487371][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.490898][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.493975][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.497524][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.501276][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.504347][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.507212][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.511298][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.515043][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.517925][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.521115][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.524664][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.528217][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.531234][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.534282][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.537769][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.541338][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.544256][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.547295][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.550810][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.554571][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.557472][ T6194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.560457][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.563988][ T6194] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 33926, setting to 1024 [ 88.567566][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.571468][ T6194] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 88.574581][ T6194] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 88.577272][ T6194] usb 6-1: Product: syz [ 88.578747][ T6194] usb 6-1: Manufacturer: syz [ 88.580413][ T6194] usb 6-1: SerialNumber: syz [ 88.583268][ T6194] usb 6-1: config 0 descriptor?? [ 88.586152][ T7531] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.592834][ T6194] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 88.809424][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 88.847247][ T7539] binder: Bad value for 'max' [ 88.850710][ T7539] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 88.853289][ T7539] netlink: 220 bytes leftover after parsing attributes in process `syz.1.428'. [ 88.856534][ T7539] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 88.876805][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 89.170927][ T5958] Bluetooth: hci0: command tx timeout [ 89.342308][ T7538] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 89.382009][ T1021] usb 6-1: USB disconnect, device number 12 [ 89.388920][ T1021] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 89.391996][ T7551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.433'. [ 89.411872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.416010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.419825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.423017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.425930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.575837][ T7570] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 89.880513][ T54] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 90.042558][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 90.045285][ T54] usb 7-1: config 0 has no interfaces? [ 90.046856][ T54] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 90.049519][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.060851][ T54] usb 7-1: config 0 descriptor?? [ 90.107731][ T7485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.122474][ T7485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.129809][ T7485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.229699][ T7485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.300861][ T9] usb 7-1: USB disconnect, device number 13 [ 90.359679][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.374868][ T7485] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.384250][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.386926][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.395954][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.398391][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.433315][ T7619] fuse: Unknown parameter 'rootm03000000' [ 90.434010][ T7485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.468379][ T1141] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 90.540154][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.564803][ T7485] veth0_vlan: entered promiscuous mode [ 90.569715][ T7485] veth1_vlan: entered promiscuous mode [ 90.586906][ T7485] veth0_macvtap: entered promiscuous mode [ 90.590599][ T7485] veth1_macvtap: entered promiscuous mode [ 90.598771][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.604626][ T7485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.608442][ T7485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.611615][ T7485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.614239][ T7485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.616975][ T7485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.653953][ T7641] : renamed from lo (while UP) [ 90.658765][ T7641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.446'. [ 90.662579][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.665212][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.684599][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.687838][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.735526][ T7643] tmpfs: Unknown parameter 'dont_hash' [ 90.808793][ T7649] can0: slcan on ptm0. [ 90.861745][ T7648] can0 (unregistered): slcan off ptm0. [ 90.926813][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 91.034553][ T7672] netlink: 'syz.2.450': attribute type 12 has an invalid length. [ 91.037993][ T7672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.450'. [ 91.250433][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 91.328301][ T7695] dlm: no locking on control device [ 91.334681][ T7695] binder: 7694:7695 ioctl c0306201 200000001a80 returned -11 [ 91.549219][ T7702] bond_slave_0: mtu less than device minimum [ 91.551218][ T7703] bond_slave_0: mtu less than device minimum [ 91.806968][ T7717] fuse: Bad value for 'fd' [ 91.809248][ T7718] fuse: Bad value for 'fd' [ 91.862597][ T7720] dlm: no locking on control device [ 91.873038][ T7720] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 91.875854][ T7720] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.879867][ T7720] vhci_hcd vhci_hcd.0: Device attached [ 91.887714][ T7720] syz.0.468: attempt to access beyond end of device [ 91.887714][ T7720] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 91.894902][ T7720] syz.0.468: attempt to access beyond end of device [ 91.894902][ T7720] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 91.906391][ T7720] Mount JFS Failure: -5 [ 91.908217][ T7720] jfs_mount failed w/return code = -5 [ 91.930896][ T7722] vhci_hcd: connection closed [ 91.931158][ T1235] vhci_hcd: stop threads [ 91.934091][ T1235] vhci_hcd: release socket [ 91.935565][ T1235] vhci_hcd: disconnect device [ 92.057539][ T7738] netlink: 'syz.2.472': attribute type 3 has an invalid length. [ 92.059957][ T7738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.472'. [ 92.130029][ T7738] kvm: kvm [7734]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 92.141171][ T7738] kvm: kvm [7734]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 92.216922][ T7645] Set syz1 is full, maxelem 65536 reached [ 92.241726][ T7738] kvm_intel: kvm [7734]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 92.243829][ T7743] SELinux: security policydb version 18 (MLS) not backwards compatible [ 92.247305][ T7743] SELinux: failed to load policy [ 92.256721][ T7738] kvm: kvm [7734]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 92.259929][ T7738] kvm: kvm [7734]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 92.280222][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 92.280237][ T40] audit: type=1400 audit(1753651437.441:500): avc: denied { mount } for pid=7744 comm="syz.3.474" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.292590][ T7747] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 92.295128][ T7747] netlink: 220 bytes leftover after parsing attributes in process `syz.1.475'. [ 92.295395][ T40] audit: type=1400 audit(1753651437.451:501): avc: denied { remount } for pid=7744 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.298955][ T7747] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 92.312132][ T7747] batadv_slave_0: entered promiscuous mode [ 92.314908][ T7747] batadv_slave_0: left promiscuous mode [ 92.319993][ T40] audit: type=1400 audit(1753651437.481:502): avc: denied { unmount } for pid=7485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.342756][ T40] audit: type=1400 audit(1753651437.511:503): avc: denied { read } for pid=7748 comm="syz.3.476" path="socket:[17320]" dev="sockfs" ino=17320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.368580][ T40] audit: type=1400 audit(1753651437.531:504): avc: denied { create } for pid=7745 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.377014][ T40] audit: type=1400 audit(1753651437.531:505): avc: denied { ioctl } for pid=7745 comm="syz.1.475" path="socket:[18270]" dev="sockfs" ino=18270 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.523341][ T7769] ipvlan2: entered promiscuous mode [ 92.525771][ T7769] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.528588][ T7769] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.697179][ T7787] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 92.717071][ T7787] syz_tun: entered promiscuous mode [ 92.731972][ T7787] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.734291][ T7796] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 92.754451][ T7796] vlan2: entered allmulticast mode [ 92.756109][ T7796] veth1: entered allmulticast mode [ 92.756941][ T7792] ALSA: seq fatal error: cannot create timer (-19) [ 92.767811][ T7787] loop4: detected capacity change from 0 to 7 [ 92.773545][ T5959] Dev loop4: unable to read RDB block 7 [ 92.780355][ T5959] loop4: AHDI p3 p4 [ 92.781644][ T5959] loop4: partition table partially beyond EOD, truncated [ 92.786306][ T5959] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 92.795800][ T7787] Dev loop4: unable to read RDB block 7 [ 92.797619][ T7787] loop4: AHDI p3 p4 [ 92.798879][ T7787] loop4: partition table partially beyond EOD, truncated [ 92.801435][ T7787] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 92.808322][ T40] audit: type=1400 audit(1753651437.971:506): avc: denied { create } for pid=7807 comm="syz.1.492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.830180][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.845084][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 92.866456][ T40] audit: type=1400 audit(1753651438.031:507): avc: denied { unlink } for pid=5956 comm="syz-executor" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.924934][ T40] audit: type=1400 audit(1753651438.091:508): avc: denied { setcurrent } for pid=7823 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.932416][ T40] audit: type=1401 audit(1753651438.091:509): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 93.237757][ T7857] syzkaller1: entered promiscuous mode [ 93.239487][ T7857] syzkaller1: entered allmulticast mode [ 93.280394][ T53] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 93.320609][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 93.430657][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 93.444730][ T53] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.447920][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 93.450945][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.454513][ T53] usb 7-1: config 0 descriptor?? [ 93.462734][ T53] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input61 [ 93.751901][ T5345] bcm5974 7-1:0.0: could not read from device [ 93.764029][ T5345] bcm5974 7-1:0.0: could not read from device [ 93.768070][ T53] usb 7-1: USB disconnect, device number 14 [ 93.830061][ T7866] binder: 7864:7866 ioctl c0306201 2000000001c0 returned -22 [ 93.919376][ T5958] Bluetooth: hci1: Malformed LE Event: 0x1b [ 93.943618][ T7876] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 94.178088][ T7877] __nla_validate_parse: 5 callbacks suppressed [ 94.178099][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 94.287577][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 94.291075][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 94.294675][ T7881] netlink: 'syz.0.512': attribute type 12 has an invalid length. [ 94.344510][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 94.355789][ T5360] pmem0: [POWERTEC] [ 94.468258][ T7892] syz.0.513 (7892): drop_caches: 2 [ 94.477943][ T7923] netlink: 'syz.2.518': attribute type 11 has an invalid length. [ 94.515231][ T7926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 94.562944][ T7939] veth1_virt_wifi: mtu less than device minimum [ 94.565918][ T7942] overlayfs: missing 'lowerdir' [ 94.572694][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 94.697633][ T7960] input: syz0 as /devices/virtual/input/input62 [ 94.901420][ T7983] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 94.903835][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'. [ 94.932177][ T7985] 9pnet_virtio: no channels available for device syz [ 95.037238][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 95.195628][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 95.200214][ T7981] syz.1.532 (7981) used greatest stack depth: 20488 bytes left [ 95.205647][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'. [ 95.320679][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.341074][ T8010] kvm: MONITOR instruction emulated as NOP! [ 95.400755][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 95.450374][ T10] usb 8-1: device descriptor read/64, error -71 [ 95.469424][ T8020] netlink: 'syz.2.551': attribute type 21 has an invalid length. [ 95.558630][ T8025] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 95.700673][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 95.749277][ T8036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 95.751384][ T8036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.760402][ T8036] vhci_hcd vhci_hcd.0: Device attached [ 95.766060][ T8042] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 95.769183][ T61] vhci_hcd: stop threads [ 95.770997][ T61] vhci_hcd: release socket [ 95.772789][ T61] vhci_hcd: disconnect device [ 95.844154][ T10] usb 8-1: device descriptor read/64, error -71 [ 95.950690][ T10] usb usb8-port1: attempt power cycle [ 96.224784][ T8073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.227859][ T8073] IPv6: NLM_F_CREATE should be set when creating new route [ 96.256300][ T8079] hpfs: Bad magic ... probably not HPFS [ 96.300861][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 96.321479][ T10] usb 8-1: device descriptor read/8, error -71 [ 96.580349][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 96.600869][ T10] usb 8-1: device descriptor read/8, error -71 [ 96.720821][ T10] usb usb8-port1: unable to enumerate USB device [ 96.850439][ T55] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 97.000382][ T55] usb 8-1: device descriptor read/64, error -71 [ 97.270502][ T55] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 97.400374][ T55] usb 8-1: device descriptor read/64, error -71 [ 97.480473][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 97.510681][ T55] usb usb8-port1: attempt power cycle [ 97.850392][ T55] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 97.876096][ T55] usb 8-1: device descriptor read/8, error -71 [ 97.932763][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.932774][ T40] audit: type=1400 audit(1753651443.101:525): avc: denied { listen } for pid=8091 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.940720][ T40] audit: type=1400 audit(1753651443.101:526): avc: denied { accept } for pid=8091 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.120388][ T55] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 98.257208][ T8104] netlink: 'syz.3.571': attribute type 5 has an invalid length. [ 98.330428][ T55] usb 8-1: device not accepting address 16, error -71 [ 98.334059][ T55] usb usb8-port1: unable to enumerate USB device [ 99.051713][ T8124] nft_compat: unsupported protocol 0 [ 99.108361][ T8133] syz.3.578: attempt to access beyond end of device [ 99.108361][ T8133] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 99.120390][ T8133] gfs2: error -5 reading superblock [ 99.147479][ T5958] Bluetooth: hci3: link tx timeout [ 99.150511][ T5958] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.195299][ T40] audit: type=1400 audit(1753651444.361:527): avc: denied { bind } for pid=8138 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.203497][ T40] audit: type=1400 audit(1753651444.361:528): avc: denied { bind } for pid=8138 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.247559][ T8148] tmpfs: Bad value for 'mpol' [ 99.347399][ T8153] __nla_validate_parse: 8 callbacks suppressed [ 99.347410][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.586'. [ 99.411821][ T8155] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.419424][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 99.439103][ T8155] bond1: entered promiscuous mode [ 99.442416][ T8155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.449277][ T8155] xt_HMARK: spi-set and port-set can't be combined [ 99.474774][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 99.750531][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 99.887241][ T40] audit: type=1326 audit(1753651445.051:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.894357][ T40] audit: type=1326 audit(1753651445.051:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.903343][ T40] audit: type=1326 audit(1753651445.051:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.911372][ T40] audit: type=1326 audit(1753651445.051:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.919810][ T40] audit: type=1326 audit(1753651445.051:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.922185][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.927091][ T40] audit: type=1326 audit(1753651445.051:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8125 comm="syz.3.578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5878e9a9 code=0x7fc00000 [ 99.930451][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.941862][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.944934][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 99.948483][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 99.953454][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.956521][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.972375][ T10] usb 7-1: Product: syz [ 99.973797][ T10] usb 7-1: Manufacturer: syz [ 99.988224][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 99.989882][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 99.993095][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 99.994980][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 100.068706][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz.1.591 [ 100.074295][ T8179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8179 comm=syz.1.591 [ 100.079244][ T8179] netlink: 'syz.1.591': attribute type 5 has an invalid length. [ 100.192700][ T54] usb 7-1: USB disconnect, device number 15 [ 100.237324][ T8189] futex_wake_op: syz.0.593 tries to shift op by -1; fix this program [ 100.241739][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 100.404863][ T24] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 100.408545][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.413621][ T24] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 100.417368][ T24] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 100.420803][ T24] usb 8-1: Manufacturer: syz [ 100.423933][ T24] usb 8-1: config 0 descriptor?? [ 100.470390][ T24] rc_core: IR keymap rc-hauppauge not found [ 100.472892][ T24] Registered IR keymap rc-empty [ 100.480873][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 100.490533][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input63 [ 100.532775][ T8200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.543234][ T8200] fuse: Unknown parameter 'ZA)>""y0+*Ҽj[u6óx&cOF ֪|.hf4\eB_. M>?~W^ES[cVf*Zh  [ 100.543234][ T8200] jjo|[lI0ڈC5rNZ[l@TOg0t$' [ 100.593082][ T8202] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 100.596076][ T8202] netlink: 'syz.1.598': attribute type 2 has an invalid length. [ 100.633786][ T24] usb 8-1: USB disconnect, device number 17 [ 100.738309][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.601'. [ 100.793819][ T8222] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.606'. [ 100.812520][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 100.815303][ T8224] netlink: 244 bytes leftover after parsing attributes in process `syz.2.604'. [ 101.160521][ T5310] Bluetooth: hci3: command 0x0406 tx timeout [ 101.615730][ T8250] netlink: 'syz.0.615': attribute type 7 has an invalid length. [ 101.618223][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 101.875672][ T8275] 9pnet_virtio: no channels available for device syz [ 101.990362][ T835] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 102.151673][ T835] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.154393][ T835] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.158980][ T835] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.162487][ T835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.166249][ T835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.180606][ T835] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.185637][ T835] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.188480][ T835] usb 8-1: Product: syz [ 102.190107][ T835] usb 8-1: Manufacturer: syz [ 102.191200][ T8313] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 102.194113][ T8313] netlink: 2 bytes leftover after parsing attributes in process `syz.2.633'. [ 102.196950][ T8313] team0: entered promiscuous mode [ 102.199190][ T8313] bond0: entered promiscuous mode [ 102.201702][ T8313] bridge0: port 1(team0) entered blocking state [ 102.201721][ T835] cdc_wdm 8-1:1.0: skipping garbage [ 102.203716][ T8313] bridge0: port 1(team0) entered disabled state [ 102.205591][ T835] cdc_wdm 8-1:1.0: skipping garbage [ 102.207429][ T8313] team0: entered allmulticast mode [ 102.211730][ T8313] bond0: entered allmulticast mode [ 102.217758][ T835] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 102.220234][ T835] cdc_wdm 8-1:1.0: Unknown control protocol [ 102.248516][ T8320] binder: 8319:8320 ioctl 89e3 200000000080 returned -22 [ 102.402503][ T8332] 9pnet_virtio: no channels available for device syz [ 102.410739][ T8263] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 102.418862][ T835] usb 8-1: USB disconnect, device number 18 [ 102.602268][ T8338] netlink: 52 bytes leftover after parsing attributes in process `syz.2.641'. [ 102.605026][ T8338] tipc: MTU too low for tipc bearer [ 102.726495][ T8341] Bluetooth: MGMT ver 1.23 [ 102.997635][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 102.997650][ T40] audit: type=1400 audit(1753651448.161:618): avc: denied { read } for pid=8361 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.011374][ T40] audit: type=1400 audit(1753651448.161:619): avc: denied { setcheckreqprot } for pid=8361 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 103.019333][ T40] audit: type=1400 audit(1753651448.171:620): avc: denied { setattr } for pid=8363 comm="syz.1.649" name="ALG" dev="sockfs" ino=23584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.028145][ T40] audit: type=1400 audit(1753651448.171:621): avc: denied { write } for pid=8363 comm="syz.1.649" path="socket:[23589]" dev="sockfs" ino=23589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.050384][ T54] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 103.207049][ T8344] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 103.212741][ T8344] NCSI netlink: No device for ifindex 0 [ 103.215327][ T40] audit: type=1326 audit(1753651448.381:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.651" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3a978e9a9 code=0x0 [ 103.293013][ T8376] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 103.297762][ T40] audit: type=1400 audit(1753651448.461:623): avc: denied { relabelto } for pid=8370 comm="syz.1.651" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:chfn_exec_t:s0" [ 103.308109][ T40] audit: type=1400 audit(1753651448.461:624): avc: denied { associate } for pid=8370 comm="syz.1.651" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:chfn_exec_t:s0" [ 103.309912][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.322453][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.330086][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.333979][ T54] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 103.336405][ T54] usb 5-1: can't read configurations, error -71 [ 103.441015][ T8384] geneve2: entered promiscuous mode [ 103.442985][ T8384] geneve2: entered allmulticast mode [ 103.469623][ T8389] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 103.529266][ T40] audit: type=1400 audit(1753651448.691:625): avc: denied { create } for pid=8397 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.535579][ T40] audit: type=1400 audit(1753651448.701:626): avc: denied { ioctl } for pid=8397 comm="syz.2.657" path="socket:[21027]" dev="sockfs" ino=21027 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.581875][ T40] audit: type=1400 audit(1753651448.751:627): avc: denied { map } for pid=8399 comm="syz.2.658" path="/proc/sys/vm/drop_caches" dev="proc" ino=21033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_vm_t tclass=file permissive=1 [ 103.830393][ T835] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 103.986186][ T835] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.993790][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.999457][ T835] usb 7-1: Product: syz [ 104.004108][ T835] usb 7-1: Manufacturer: syz [ 104.006465][ T835] usb 7-1: SerialNumber: syz [ 104.017387][ T835] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.042948][ T6194] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.387699][ T8439] __nla_validate_parse: 4 callbacks suppressed [ 104.387710][ T8439] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.672'. [ 104.403000][ T8439] netlink: zone id is out of range [ 104.404750][ T8439] netlink: get zone limit has 8 unknown bytes [ 104.450959][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.454006][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.458276][ T10] usb 7-1: USB disconnect, device number 16 [ 104.516642][ T8443] netlink: 'syz.0.672': attribute type 5 has an invalid length. [ 104.519448][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'. [ 104.525621][ T8443] fuse: Bad value for 'fd' [ 104.633795][ T8453] qnx4: no qnx4 filesystem (no root dir). [ 104.754280][ T8461] xt_ecn: cannot match TCP bits for non-tcp packets [ 104.757133][ T8461] netlink: 504 bytes leftover after parsing attributes in process `syz.1.678'. [ 104.760673][ T5958] Bluetooth: hci0: command 0x041b tx timeout [ 105.035896][ T8482] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 105.086003][ T6194] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 105.088534][ T6194] ath9k_htc: Failed to initialize the device [ 105.098306][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 105.131963][ T8496] syzkaller1: entered promiscuous mode [ 105.133796][ T8496] syzkaller1: entered allmulticast mode [ 105.141576][ T8496] bridge_slave_0: left allmulticast mode [ 105.143395][ T8496] bridge_slave_0: left promiscuous mode [ 105.145298][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.154321][ T8496] bridge_slave_1: left allmulticast mode [ 105.156242][ T8496] bridge_slave_1: left promiscuous mode [ 105.158094][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.164725][ T8496] bond0: (slave bond_slave_0): Releasing backup interface [ 105.169636][ T8496] bond0: (slave bond_slave_1): Releasing backup interface [ 105.186827][ T8496] team0: Port device team_slave_0 removed [ 105.196528][ T8496] team0: Port device team_slave_1 removed [ 105.199962][ T8496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.203389][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.212749][ T8496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.215844][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.260826][ T8500] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.264196][ T8500] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.267039][ T8500] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.269859][ T8500] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.279802][ T8496] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 105.299372][ T8496] CUSE: unknown device info "&b%ZW)3\my " [ 105.301866][ T8496] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 105.306604][ T8496] CUSE: DEVNAME unspecified [ 105.313310][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 105.396549][ T8514] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 105.396585][ T8516] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 105.931339][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 105.970389][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 105.974567][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 105.978713][ T8533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8533 comm=syz.1.696 [ 105.982656][ T8533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8533 comm=syz.1.696 [ 105.986491][ T8533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8533 comm=syz.1.696 [ 106.350393][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.441736][ T8549] binder: 8548:8549 ioctl c0306201 0 returned -14 [ 106.445079][ T8549] binder: 8548:8549 ioctl c0306201 200000000040 returned -11 [ 106.468129][ T8540] program syz.3.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.523137][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'. [ 106.528286][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.533392][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.537351][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.541918][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.546203][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.560029][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.563766][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.566862][ T54] usb 6-1: Product: syz [ 106.568533][ T54] usb 6-1: Manufacturer: syz [ 106.583696][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 106.585782][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 106.589961][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 106.593317][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 106.704111][ T8560] 9pnet_fd: Insufficient options for proto=fd [ 106.787306][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.792005][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.802535][ T24] usb 6-1: USB disconnect, device number 13 [ 107.250458][ T835] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 107.381189][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 107.402130][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.406564][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.410729][ T835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.416076][ T835] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 107.419581][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.423585][ T835] usb 5-1: config 0 descriptor?? [ 107.896369][ T835] usbhid 5-1:0.0: can't add hid device: -71 [ 107.898266][ T835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.902313][ T835] usb 5-1: USB disconnect, device number 14 [ 108.018110][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.021221][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.023780][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.026525][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.029135][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.032150][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.034660][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.036937][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.039471][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.046380][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.049054][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.052034][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.054785][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.057133][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.059549][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.062517][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.064932][ T6194] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 108.070486][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 108.070499][ T40] audit: type=1400 audit(1753651453.231:638): avc: denied { read } for pid=8571 comm="syz.2.708" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.073100][ T6194] hid-generic 0002:0004:0009.0012: hidraw1: HID v0.04 Device [syz0] on syz0 [ 108.119602][ T8574] fido_id[8574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.334532][ T8581] netlink: 'syz.2.711': attribute type 12 has an invalid length. [ 108.440483][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.455874][ T8588] loop2: detected capacity change from 0 to 7 [ 108.459749][ T8588] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.462339][ T8588] loop2: partition table partially beyond EOD, truncated [ 108.465216][ T8588] loop2: p1 size 872559382 extends beyond EOD, truncated [ 108.523475][ T5360] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.525240][ T5360] loop2: partition table partially beyond EOD, truncated [ 108.527471][ T5360] loop2: p1 size 872559382 extends beyond EOD, truncated [ 108.603409][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.606642][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.609507][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.614500][ T8579] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.619349][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.663631][ T40] audit: type=1400 audit(1753651453.831:639): avc: denied { accept } for pid=8596 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.796972][ T8609] netlink: 'syz.0.720': attribute type 7 has an invalid length. [ 108.806623][ T40] audit: type=1400 audit(1753651453.971:640): avc: denied { lock } for pid=8608 comm="syz.0.720" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=21340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.983837][ T24] usb 6-1: USB disconnect, device number 14 [ 109.260373][ T53] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.414587][ T53] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.417584][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.419966][ T53] usb 5-1: Product: syz [ 109.421547][ T53] usb 5-1: Manufacturer: syz [ 109.423416][ T53] usb 5-1: SerialNumber: syz [ 109.428499][ T53] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.443204][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.489861][ T8628] __nla_validate_parse: 8 callbacks suppressed [ 109.489872][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 109.520379][ T5949] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 109.535115][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.730'. [ 109.654411][ T54] usb 5-1: USB disconnect, device number 15 [ 109.680408][ T5949] usb 7-1: Using ep0 maxpacket: 8 [ 109.686004][ T5949] usb 7-1: unable to get BOS descriptor or descriptor too short [ 109.692387][ T5949] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 109.694766][ T5949] usb 7-1: can't read configurations, error -71 [ 110.520610][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 110.522904][ T24] ath9k_htc: Failed to initialize the device [ 110.525255][ T54] usb 5-1: ath9k_htc: USB layer deinitialized [ 124.528749][ T8638] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.734'. [ 124.540949][ T40] audit: type=1400 audit(1753651469.711:641): avc: denied { remount } for pid=8636 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 124.552510][ T8642] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 124.567655][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 124.576026][ T40] audit: type=1400 audit(1753651469.741:642): avc: denied { ioctl } for pid=8648 comm="syz.3.735" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 124.717474][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 124.729313][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 124.788028][ T8664] syzkaller0: entered promiscuous mode [ 124.789663][ T8664] syzkaller0: entered allmulticast mode [ 124.840946][ T8683] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 124.914803][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 124.919371][ C2] vcan0: j1939_xtp_rx_dat: no tx connection found [ 124.922164][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 124.926799][ T8688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=8688 comm=syz.1.740 [ 124.971893][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 125.131628][ T40] audit: type=1400 audit(1753651470.301:643): avc: denied { getopt } for pid=8704 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.158538][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 125.164589][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 125.170473][ T8709] netlink: 'syz.3.748': attribute type 30 has an invalid length. [ 125.172875][ T8709] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 125.175475][ T8709] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 125.341936][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 125.371541][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 125.374240][ T8727] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 125.439093][ T8736] ipvlan2: entered promiscuous mode [ 125.441493][ T8736] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 125.444278][ T8736] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.691600][ T8755] openvswitch: netlink: Key 6 has unexpected len 5 expected 2 [ 125.770989][ T1119] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 125.774062][ T1119] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 125.776779][ T1119] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 125.779327][ T1119] sr 2:0:0:0: [sr0] tag#6 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 125.782075][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 125.785204][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 126.039910][ T8801] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 126.042972][ T40] audit: type=1400 audit(1753651471.201:644): avc: denied { mounton } for pid=8800 comm="syz.2.777" path="/209/bus" dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 126.070029][ T8789] overlayfs: failed to resolve 'verity=require': -2 [ 126.103413][ T40] audit: type=1400 audit(1753651471.271:645): avc: denied { write } for pid=8803 comm="syz.3.778" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.385119][ T8822] tmpfs: Invalid uid '0x00000000ffffffff' [ 126.386970][ T40] audit: type=1400 audit(1753651471.551:646): avc: denied { create } for pid=8821 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.404047][ T40] audit: type=1400 audit(1753651471.551:647): avc: denied { getopt } for pid=8821 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.477361][ T40] audit: type=1400 audit(1753651471.641:648): avc: denied { listen } for pid=8828 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.595007][ T8836] netlink: 'syz.1.788': attribute type 13 has an invalid length. [ 126.637258][ T40] audit: type=1400 audit(1753651471.801:649): avc: denied { write } for pid=8838 comm="syz.3.789" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 126.668314][ T40] audit: type=1400 audit(1753651471.831:650): avc: denied { connect } for pid=8840 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.891464][ T8870] wg2: entered promiscuous mode [ 126.893068][ T8870] wg2: entered allmulticast mode [ 126.982514][ T8878] overlayfs: failed to resolve './file1': -2 [ 127.105784][ T8887] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.208174][ T8900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.257898][ T8900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.394805][ T8914] nfs: Unknown parameter 'noac/ndctl0' [ 127.396769][ T8914] nfs: Unknown parameter 'noac/ndctl0' [ 127.416384][ T8917] raw_sendmsg: syz.1.813 forgot to set AF_INET. Fix it! [ 127.573553][ T8920] binder: 8918:8920 ioctl c018620c 2000000000c0 returned -22 [ 127.895582][ T8947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 127.897189][ T8949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.897700][ T8947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.903842][ T8947] vhci_hcd vhci_hcd.0: Device attached [ 127.907386][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.912276][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.916425][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.920245][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.923444][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.927731][ T8947] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(22) [ 127.930209][ T8947] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.933275][ T8947] vhci_hcd vhci_hcd.0: Device attached [ 127.936242][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.939701][ T8947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.945367][ T8952] vhci_hcd: connection closed [ 127.945461][ T61] vhci_hcd: stop threads [ 127.945735][ T8954] vhci_hcd: connection closed [ 127.947049][ T61] vhci_hcd: release socket [ 127.951491][ T61] vhci_hcd: disconnect device [ 127.953284][ T61] vhci_hcd: stop threads [ 127.955144][ T61] vhci_hcd: release socket [ 127.962602][ T61] vhci_hcd: disconnect device [ 128.033236][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 128.110312][ T8966] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.112670][ T8966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.157220][ T8968] netlink: set zone limit has 4 unknown bytes [ 128.181276][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 128.185481][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.189467][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.193476][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.197594][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.200723][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.204456][ T10] usb 6-1: config 0 descriptor?? [ 128.220387][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 128.282715][ T8973] 9pnet_fd: p9_fd_create_unix (8973): problem connecting socket: qY3aK: -91 [ 128.371640][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.375236][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.378431][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.381967][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.386387][ T8962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 128.391838][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.521820][ T8980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8980 comm=syz.2.831 [ 128.596214][ T9] usb 8-1: USB disconnect, device number 19 [ 128.617205][ T10] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 128.619658][ T10] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 128.623095][ T10] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 128.625534][ T10] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 128.627741][ T10] microsoft 0003:045E:07DA.0013: item fetching failed at offset 30/34 [ 128.631048][ T10] microsoft 0003:045E:07DA.0013: parse failed [ 128.633093][ T10] microsoft 0003:045E:07DA.0013: probe with driver microsoft failed with error -22 [ 128.819721][ T9] usb 6-1: USB disconnect, device number 15 [ 128.888269][ T8998] tmpfs: Bad value for 'mpol' [ 129.219563][ T9003] bond0: option mode: unable to set because the bond device has slaves [ 129.369737][ T9024] Cannot find del_set index 0 as target [ 129.407554][ T9026] input: syz1 as /devices/virtual/input/input66 [ 129.418331][ T9028] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 129.427042][ T9028] batadv_slave_1: entered promiscuous mode [ 129.429682][ T9019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.444338][ T9028] trusted_key: syz.3.847 sent an empty control message without MSG_MORE. [ 129.566960][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 129.566976][ T40] audit: type=1400 audit(1753651474.731:672): avc: denied { getopt } for pid=9038 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.598917][ T40] audit: type=1400 audit(1753651474.761:673): avc: denied { getopt } for pid=9035 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.722509][ T9058] __nla_validate_parse: 10 callbacks suppressed [ 129.722527][ T9058] netlink: 19 bytes leftover after parsing attributes in process `syz.1.855'. [ 129.730456][ T40] audit: type=1400 audit(1753651474.891:674): avc: denied { map } for pid=9059 comm="syz.3.856" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 129.736964][ T40] audit: type=1400 audit(1753651474.901:675): avc: denied { execute } for pid=9059 comm="syz.3.856" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 129.784477][ T9072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=9072 comm=syz.0.857 [ 129.788471][ T9067] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=9067 comm=syz.0.857 [ 129.790999][ T9068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=9068 comm=syz.0.857 [ 129.872076][ T9087] netlink: 6 bytes leftover after parsing attributes in process `syz.1.861'. [ 129.872165][ T9086] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 129.885534][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.891810][ T9086] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.920432][ T9092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.863'. [ 129.931998][ T9095] fuse: Bad value for 'rootmode' [ 129.951952][ T40] audit: type=1400 audit(1753651475.121:676): avc: denied { read } for pid=5345 comm="acpid" name="event6" dev="devtmpfs" ino=3510 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 129.967435][ T40] audit: type=1400 audit(1753651475.121:677): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3510 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 129.975265][ T40] audit: type=1400 audit(1753651475.121:678): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3510 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 129.986449][ T9099] xt_nat: multiple ranges no longer supported [ 130.007597][ T40] audit: type=1400 audit(1753651475.171:679): avc: denied { mounton } for pid=9103 comm="syz.0.867" path="/215/file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 130.016901][ T9050] delete_channel: no stack [ 130.054142][ T40] audit: type=1400 audit(1753651475.221:680): avc: denied { setopt } for pid=9105 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 130.109035][ T40] audit: type=1400 audit(1753651475.271:681): avc: denied { map } for pid=9112 comm="syz.3.871" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 130.267785][ T9139] misc userio: Invalid payload size [ 130.270962][ T9139] misc userio: Invalid payload size [ 130.357472][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 130.363951][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.886'. [ 130.526234][ T9161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.889'. [ 130.529156][ T9161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.889'. [ 130.534842][ T9161] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 130.544329][ T9161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.547183][ T9161] team0: Port device bond0 added [ 130.558669][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 130.673573][ T9161] team0 (unregistering): Port device bond0 removed [ 130.889935][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 130.945913][ T9180] 9pnet_virtio: no channels available for device syz [ 131.300002][ T9206] syz.2.900: attempt to access beyond end of device [ 131.300002][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.307365][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.309910][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.312914][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.343053][ T9206] syz.2.900: attempt to access beyond end of device [ 131.343053][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.347051][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.348953][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.351053][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.361370][ T9206] syz.2.900: attempt to access beyond end of device [ 131.361370][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.366280][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.368220][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.370145][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.376235][ T9206] syz.2.900: attempt to access beyond end of device [ 131.376235][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.380174][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.382132][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.383988][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.390856][ T9206] syz.2.900: attempt to access beyond end of device [ 131.390856][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.394653][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.396641][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.398462][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.403683][ T9206] syz.2.900: attempt to access beyond end of device [ 131.403683][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.408235][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.410166][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.412450][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.416480][ T9206] syz.2.900: attempt to access beyond end of device [ 131.416480][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.420687][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.422722][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.424760][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.429286][ T9206] syz.2.900: attempt to access beyond end of device [ 131.429286][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.434527][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.437112][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.439611][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.451035][ T9206] syz.2.900: attempt to access beyond end of device [ 131.451035][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.455787][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.457644][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.459471][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.470926][ T9206] syz.2.900: attempt to access beyond end of device [ 131.470926][ T9206] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.475073][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.477028][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.478999][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.486731][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.489313][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.492051][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.499433][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.501567][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.504951][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.511319][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.513832][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.515926][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.518862][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.521301][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.523409][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.530068][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.532783][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.535332][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.539373][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.541890][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.543864][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.548690][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.551597][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.554082][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.557723][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.559885][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.563206][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.571179][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.573980][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.576549][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.584828][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.587496][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.590169][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.601442][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.604036][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.605805][ T9214] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 131.606586][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.614453][ T9214] hsr_slave_0: left promiscuous mode [ 131.617617][ T9214] hsr_slave_1: left promiscuous mode [ 131.619404][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.622352][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.624829][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.630999][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.633149][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.635222][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.639440][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.642535][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.644846][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.651073][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.653210][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.655236][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.661314][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.663339][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.665465][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.671198][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.673853][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.676496][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.690901][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.693179][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.695301][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.700529][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.702953][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.705135][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.710960][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.712898][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.714801][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.724271][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.726344][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.728693][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.733003][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.735590][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.738178][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.742307][ T9206] exFAT-fs (nbd2): unable to read boot sector [ 131.744837][ T9206] exFAT-fs (nbd2): failed to read boot sector [ 131.747335][ T9206] exFAT-fs (nbd2): failed to recognize exfat type [ 131.764357][ T9218] netlink: 'syz.1.906': attribute type 1 has an invalid length. [ 131.766966][ T9218] netlink: 144 bytes leftover after parsing attributes in process `syz.1.906'. [ 131.835188][ T9228] XFS (nbd2): no-recovery mounts must be read-only. [ 131.838892][ T9229] netlink: ct family unspecified [ 131.841211][ T9229] openvswitch: netlink: Actions may not be safe on all matching packets [ 131.874373][ T9232] [U] zͻi[27| [ 131.876945][ T9232] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 131.882132][ T9232] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 131.884474][ T9232] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 131.898436][ T9232] [U] 8)X)YvxRĻbmbN@ox;JD, [ 131.901734][ T9232] [U] *Cn3v7KEXgt_3 [ 131.904247][ T9232] [U] D/QazҬEHgE1$_ks=R@ [ 131.906734][ T9232] [U] ϼcEv @ [ 131.908284][ T9232] [U] a% [ 131.910933][ T9232] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 131.916905][ T9232] [U] f1p3 [ 131.917979][ T9232] [U] N0[L;a_l&kMC [ 131.919876][ T9232] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 131.925143][ T9231] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 132.746934][ T5958] dump_stack_lvl+0x16c/0x1f0 [ 132.746966][ T5958] sysfs_warn_dup+0x7f/0xa0 [ 132.747002][ T5958] sysfs_create_dir_ns+0x24b/0x2b0 [ 132.747031][ T5958] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 132.747054][ T5958] ? find_held_lock+0x2b/0x80 [ 132.747082][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 132.747101][ T5958] kobject_add_internal+0x2c4/0x9b0 [ 132.747128][ T5958] kobject_add+0x16e/0x240 [ 132.747148][ T5958] ? __pfx_kobject_add+0x10/0x10 [ 132.747170][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 132.747190][ T5958] ? kobject_put+0xab/0x5a0 [ 132.747216][ T5958] device_add+0x288/0x1a70 [ 132.747237][ T5958] ? __pfx_dev_set_name+0x10/0x10 [ 132.747257][ T5958] ? __pfx_device_add+0x10/0x10 [ 132.747274][ T5958] ? mgmt_send_event_skb+0x2fb/0x460 [ 132.747306][ T5958] hci_conn_add_sysfs+0x17e/0x230 [ 132.747326][ T5958] le_conn_complete_evt+0x1075/0x1d70 [ 132.747360][ T5958] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 132.747387][ T5958] ? hci_event_packet+0x459/0x11c0 [ 132.747423][ T5958] hci_le_conn_complete_evt+0x23c/0x370 [ 132.747456][ T5958] hci_le_meta_evt+0x357/0x5e0 [ 132.747474][ T5958] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 132.747505][ T5958] hci_event_packet+0x682/0x11c0 [ 132.747533][ T5958] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 132.747553][ T5958] ? __pfx_hci_event_packet+0x10/0x10 [ 132.747584][ T5958] ? kcov_remote_start+0x3c9/0x6d0 [ 132.747603][ T5958] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.747637][ T5958] hci_rx_work+0x2c5/0x16b0 [ 132.747656][ T5958] ? rcu_is_watching+0x12/0xc0 [ 132.747684][ T5958] process_one_work+0x9cc/0x1b70 [ 132.747737][ T5958] ? __pfx_process_one_work+0x10/0x10 [ 132.747770][ T5958] ? assign_work+0x1a0/0x250 [ 132.747793][ T5958] worker_thread+0x6c8/0xf10 [ 132.747823][ T5958] ? __kthread_parkme+0x19e/0x250 [ 132.747860][ T5958] ? __pfx_worker_thread+0x10/0x10 [ 132.747880][ T5958] kthread+0x3c2/0x780 [ 132.747899][ T5958] ? __pfx_kthread+0x10/0x10 [ 132.747920][ T5958] ? rcu_is_watching+0x12/0xc0 [ 132.747949][ T5958] ? __pfx_kthread+0x10/0x10 [ 132.747968][ T5958] ret_from_fork+0x5d4/0x6f0 [ 132.747993][ T5958] ? __pfx_kthread+0x10/0x10 [ 132.748009][ T5958] ret_from_fork_asm+0x1a/0x30 [ 132.748040][ T5958] [ 132.748063][ T5958] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 132.780485][ T10] syzkaller0: tun_net_xmit 76 [ 132.781962][ T5958] Bluetooth: hci1: failed to register connection device [ 132.783373][ T10] syzkaller0: tun_net_xmit 76 [ 132.914803][ T1021] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 132.915438][ T24] usb 5-1: USB disconnect, device number 16 [ 132.918530][ T1021] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.924601][ T1021] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.928494][ T24] ------------[ cut here ]------------ [ 132.929092][ T1021] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 132.930793][ T24] workqueue: work disable count underflowed [ 132.930867][ T24] WARNING: CPU: 2 PID: 24 at kernel/workqueue.c:4328 enable_work+0x2f8/0x340 [ 132.939672][ T24] Modules linked in: [ 132.941699][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 132.948444][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.952776][ T24] Workqueue: usb_hub_wq hub_event [ 132.954796][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 132.956946][ T24] Code: 89 ee e8 eb e5 37 00 45 84 ed 0f 85 29 fe ff ff e8 fd ea 37 00 c6 05 cf 92 0d 0f 01 90 48 c7 c7 c0 09 ac 8b e8 69 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 3f 9d 00 e9 aa fe ff ff [ 132.964803][ T24] RSP: 0018:ffffc9000062f3c8 EFLAGS: 00010086 [ 132.966807][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 132.969198][ T24] RDX: ffff88801e2ea440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 132.971684][ T24] RBP: ffff88803816a730 R08: 0000000000000001 R09: 0000000000000000 [ 132.974115][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c5e7a [ 132.976680][ T24] R13: 0000000000000000 R14: ffff88803816a728 R15: ffffffff8fe65240 [ 132.979259][ T24] FS: 0000000000000000(0000) GS:ffff8880d6920000(0000) knlGS:0000000000000000 [ 132.982184][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.984236][ T24] CR2: 000055b480b20878 CR3: 00000000640d1000 CR4: 0000000000352ef0 [ 132.986986][ T24] Call Trace: [ 132.988160][ T24] [ 132.989370][ T24] ? __pfx_enable_work+0x10/0x10 [ 132.991451][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 132.993658][ T24] __cancel_work_sync+0xe7/0x130 [ 132.995303][ T24] thermal_zone_device_unregister+0x239/0x450 [ 132.997347][ T24] ? __pfx_shield_remove+0x10/0x10 [ 132.999026][ T24] power_supply_unregister+0x10a/0x150 [ 133.000678][ T24] shield_remove+0x75/0x130 [ 133.002035][ T24] ? __pfx_shield_remove+0x10/0x10 [ 133.003807][ T24] hid_device_remove+0xd1/0x260 [ 133.005413][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 133.007281][ T24] device_remove+0xc8/0x170 [ 133.008779][ T24] device_release_driver_internal+0x44b/0x620 [ 133.010759][ T24] bus_remove_device+0x22f/0x420 [ 133.012404][ T24] device_del+0x396/0x9f0 [ 133.013852][ T24] ? __pfx_device_del+0x10/0x10 [ 133.015439][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.017154][ T24] hid_destroy_device+0x19c/0x240 [ 133.018768][ T24] usbhid_disconnect+0xa0/0xe0 [ 133.020371][ T24] usb_unbind_interface+0x1dd/0x9a0 [ 133.022112][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 133.023991][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 133.025956][ T24] device_remove+0x125/0x170 [ 133.027641][ T24] device_release_driver_internal+0x44b/0x620 [ 133.029754][ T24] bus_remove_device+0x22f/0x420 [ 133.031661][ T24] device_del+0x396/0x9f0 [ 133.033155][ T24] ? __pfx_device_del+0x10/0x10 [ 133.034743][ T24] ? kobject_put+0x210/0x5a0 [ 133.036315][ T24] usb_disable_device+0x355/0x7d0 [ 133.037964][ T24] usb_disconnect+0x2e1/0x9c0 [ 133.039472][ T24] hub_event+0x1c81/0x4fe0 [ 133.040908][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 133.042512][ T24] ? __pfx_hub_event+0x10/0x10 [ 133.044043][ T24] ? assoc_array_apply_edit+0x560/0x6c0 [ 133.046002][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 133.048491][ T24] ? rcu_is_watching+0x12/0xc0 [ 133.050034][ T24] process_one_work+0x9cc/0x1b70 [ 133.051517][ T24] ? __pfx_process_one_work+0x10/0x10 [ 133.053127][ T24] ? assign_work+0x1a0/0x250 [ 133.054548][ T24] worker_thread+0x6c8/0xf10 [ 133.056012][ T24] ? __pfx_worker_thread+0x10/0x10 [ 133.058080][ T24] kthread+0x3c2/0x780 [ 133.059842][ T24] ? __pfx_kthread+0x10/0x10 [ 133.061447][ T24] ? rcu_is_watching+0x12/0xc0 [ 133.062959][ T24] ? __pfx_kthread+0x10/0x10 [ 133.064503][ T24] ret_from_fork+0x5d4/0x6f0 [ 133.065977][ T24] ? __pfx_kthread+0x10/0x10 [ 133.067578][ T24] ret_from_fork_asm+0x1a/0x30 [ 133.069211][ T24] [ 133.070422][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.073017][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 133.076802][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.080809][ T24] Workqueue: usb_hub_wq hub_event [ 133.082519][ T24] Call Trace: [ 133.083584][ T24] [ 133.084571][ T24] dump_stack_lvl+0x3d/0x1f0 [ 133.086043][ T24] panic+0x71c/0x800 [ 133.087355][ T24] ? __pfx_panic+0x10/0x10 [ 133.089234][ T24] ? show_trace_log_lvl+0x29b/0x3e0 [ 133.091340][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 133.093119][ T24] ? enable_work+0x2f8/0x340 [ 133.094581][ T24] check_panic_on_warn+0xab/0xb0 [ 133.096165][ T24] __warn+0xf6/0x3c0 [ 133.097783][ T24] ? enable_work+0x2f8/0x340 [ 133.099623][ T24] report_bug+0x3c3/0x580 [ 133.101006][ T24] ? enable_work+0x2f8/0x340 [ 133.102430][ T24] handle_bug+0x184/0x210 [ 133.103920][ T24] exc_invalid_op+0x17/0x50 [ 133.105796][ T24] asm_exc_invalid_op+0x1a/0x20 [ 133.107819][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 133.109951][ T24] Code: 89 ee e8 eb e5 37 00 45 84 ed 0f 85 29 fe ff ff e8 fd ea 37 00 c6 05 cf 92 0d 0f 01 90 48 c7 c7 c0 09 ac 8b e8 69 f2 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 3f 9d 00 e9 aa fe ff ff [ 133.117631][ T24] RSP: 0018:ffffc9000062f3c8 EFLAGS: 00010086 [ 133.120041][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8 [ 133.122580][ T24] RDX: ffff88801e2ea440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 133.124982][ T24] RBP: ffff88803816a730 R08: 0000000000000001 R09: 0000000000000000 [ 133.127438][ T24] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c5e7a [ 133.129855][ T24] R13: 0000000000000000 R14: ffff88803816a728 R15: ffffffff8fe65240 [ 133.133025][ T24] ? __warn_printk+0x198/0x350 [ 133.134950][ T24] ? __warn_printk+0x1a5/0x350 [ 133.136972][ T24] ? enable_work+0x2f7/0x340 [ 133.138846][ T24] ? __pfx_enable_work+0x10/0x10 [ 133.140807][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6a0 [ 133.143133][ T24] __cancel_work_sync+0xe7/0x130 [ 133.145129][ T24] thermal_zone_device_unregister+0x239/0x450 [ 133.147618][ T24] ? __pfx_shield_remove+0x10/0x10 [ 133.149374][ T24] power_supply_unregister+0x10a/0x150 [ 133.151093][ T24] shield_remove+0x75/0x130 [ 133.152630][ T24] ? __pfx_shield_remove+0x10/0x10 [ 133.154594][ T24] hid_device_remove+0xd1/0x260 [ 133.156680][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 133.158957][ T24] device_remove+0xc8/0x170 [ 133.160857][ T24] device_release_driver_internal+0x44b/0x620 [ 133.163299][ T24] bus_remove_device+0x22f/0x420 [ 133.165114][ T24] device_del+0x396/0x9f0 [ 133.166533][ T24] ? __pfx_device_del+0x10/0x10 [ 133.168160][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.169787][ T24] hid_destroy_device+0x19c/0x240 [ 133.171448][ T24] usbhid_disconnect+0xa0/0xe0 [ 133.173057][ T24] usb_unbind_interface+0x1dd/0x9a0 [ 133.175217][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 133.177585][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 133.179864][ T24] device_remove+0x125/0x170 [ 133.181776][ T24] device_release_driver_internal+0x44b/0x620 [ 133.183898][ T24] bus_remove_device+0x22f/0x420 [ 133.185943][ T24] device_del+0x396/0x9f0 [ 133.187701][ T24] ? __pfx_device_del+0x10/0x10 [ 133.189732][ T24] ? kobject_put+0x210/0x5a0 [ 133.191672][ T24] usb_disable_device+0x355/0x7d0 [ 133.193818][ T24] usb_disconnect+0x2e1/0x9c0 [ 133.195847][ T24] hub_event+0x1c81/0x4fe0 [ 133.197710][ T24] ? __lock_acquire+0xb8a/0x1c90 [ 133.199432][ T24] ? __pfx_hub_event+0x10/0x10 [ 133.201428][ T24] ? assoc_array_apply_edit+0x560/0x6c0 [ 133.203679][ T24] ? finish_task_switch.isra.0+0x221/0xc10 [ 133.206139][ T24] ? rcu_is_watching+0x12/0xc0 [ 133.207800][ T24] process_one_work+0x9cc/0x1b70 [ 133.209370][ T24] ? __pfx_process_one_work+0x10/0x10 [ 133.211054][ T24] ? assign_work+0x1a0/0x250 [ 133.212538][ T24] worker_thread+0x6c8/0xf10 [ 133.213937][ T24] ? __pfx_worker_thread+0x10/0x10 [ 133.215515][ T24] kthread+0x3c2/0x780 [ 133.216911][ T24] ? __pfx_kthread+0x10/0x10 [ 133.218864][ T24] ? rcu_is_watching+0x12/0xc0 [ 133.220504][ T24] ? __pfx_kthread+0x10/0x10 [ 133.221972][ T24] ret_from_fork+0x5d4/0x6f0 [ 133.223427][ T24] ? __pfx_kthread+0x10/0x10 [ 133.224896][ T24] ret_from_fork_asm+0x1a/0x30 [ 133.226405][ T24] [ 133.228163][ T24] Kernel Offset: disabled [ 133.229978][ T24] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:24:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fe20 RCX=ffffffff81afd3ed RDX=ffff888024488000 RSI=ffffffff81afd3c9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000314f690 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c7fc5 R15=ffff88806a43b580 RIP=ffffffff81afd3cb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555589f5d500 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3aa4e56c0 CR3=0000000053485000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000001 Opmask01=0000000000000000 Opmask02=0000000000008000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe66064b 00007ffffe66064b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe660b50 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffe660b50 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20205b3e343c0056 45444f4e452d206f 7420657564207472 6f70657220444900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020513434360056 4544454445272065 7420657564207472 6570657220444300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756575716b726f77 2f6c656e72656b20 7461203432203a44 49502032203a5550 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79726f74636572 696420656d617320 656874206e692065 6d616e20656d6173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2065687420687469 772073676e696874 2072657473696765 72206f7420797274 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074276e6f64202c 5453495845452d20 6874697720313032 3a3169636820726f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 662064656c696166 206c616e7265746e 695f6464615f7463 656a626f6b203a74 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f9bc44bbc331c76 cc6522f64d411215 7ae683ce5998b4b2 aacd8f8ed79685a2 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006ba0000 RBX=ffff8881062c0000 RCX=ffffffff819ca8d7 RDX=1ffff11020c5825a RSI=ffffffff86a710af RDI=0000000000000016 RBP=0000000000000003 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a93f60 R13=dffffc0000000000 R14=ffff8881062c12d0 R15=0000000000000000 RIP=ffffffff86a710d7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fea2c7db300 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c363a12 CR3=000000002585f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=10485c675092a8c1 52db9b761d7e706d 10485c675092a8c1 52db9b761d7e706d 10485c675092a8c1 52db9b761d7e706d 10485c675092a8c1 52db9b761d7e706d ZMM18=d9a7ff4fc7045d63 2541fd876dcf9189 d9a7ff4fc7045d63 2541fd876dcf9189 d9a7ff4fc7045d63 2541fd876dcf9189 d9a7ff4fc7045d63 2541fd876dcf9189 ZMM19=8b07000000000000 0000000000000005 8b07000000000000 0000000000000004 8b07000000000000 0000000000000003 8b07000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002c00304801000 02b00300100002a0 0340100002900301 8c10000280030280 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0409900300100009 80030180040880c2 d4a2080001000000 0806060129a20180 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80100001ffffffff fffffffffe100000 04060075c8002330 302f2330302f6273 ZMM24=6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 6dcf91896dcf9189 ZMM25=2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 2541fd872541fd87 ZMM26=c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 c7045d63c7045d63 ZMM27=d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f d9a7ff4fd9a7ff4f ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8a0700008a070000 8a0700008a070000 8a0700008a070000 8a0700008a070000 8a0700008a070000 8a0700008a070000 8a0700008a070000 8a0700008a070000 info registers vcpu 2 CPU#2 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc9000062ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000054 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b480b20878 CR3=00000000640d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000c0c3600 Opmask01=0000000000000fff Opmask02=00000000793fefff Opmask03=0000000000080040 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b480ab6e00 000055b480ab6e00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b480aa6ea0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35603f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35603f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff00000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41031c1c73460773 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003038333d000065 00006364755f796d 6d75643d454d414e 5f4344555f425355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d050e00000058 00005e59485f4450 50485900454d414e 5f4344555f425355 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35603f1e40 00007f35603f1e40 0000000000000331 000055b400305f65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a5f39 3030322c39484349 2b3533515f435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70625f322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001214a1 RBX=0000000000000003 RCX=ffffffff8b869c99 RDX=0000000000000000 RSI=ffffffff8de3046a RDI=ffffffff8c1574e0 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90a94250 R15=0000000000000000 RIP=ffffffff8b8687ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000035c0 CR3=000000002a5fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555c84a2d600 0000555c84a2d600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd94831fe0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756575716b726f77 2f6c656e72656b20 7461203432203a44 49502032203a5550 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5645444f4e452d20 6f74206575642074 726f706572204449 4820747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220444d4354534f 4820656b69727473 7265646e75685420 74757074756f206f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 742064656c696146 203a343130302e34 3132373a35353930 3a3330303020646c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65696873205d3132 303154205b5d3239 303932392e323331 20205b203a6c656e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75545e44eda2aab5 5ebf826726f4fd67 4f5ef09809f7324a 444ca0f9555ecc93 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000