last executing test programs: 2.42096177s ago: executing program 0 (id=170): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.351134341s ago: executing program 0 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 2.174213257s ago: executing program 0 (id=176): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)) 2.120685525s ago: executing program 0 (id=177): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x2000fb) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x15) 1.959209712s ago: executing program 0 (id=182): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x40d, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20042844}, 0x800) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000840) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c000000120a09000000090000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r12, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) 1.863309862s ago: executing program 0 (id=183): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95a", 0x4}], 0x1}}], 0x1, 0x24088000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "a6f890ea"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 1.375501193s ago: executing program 1 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000103, 0x7fffffff}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.247070243s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.045151328s ago: executing program 1 (id=194): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 474.681042ms ago: executing program 2 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20050000) 474.432709ms ago: executing program 3 (id=200): r0 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 375.267792ms ago: executing program 3 (id=201): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 313.882143ms ago: executing program 3 (id=202): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) rt_sigqueueinfo(0x0, 0x5, &(0x7f0000000180)={0xf, 0x2, 0x5}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)) writev(r1, &(0x7f0000001fc0)=[{&(0x7f0000000040)="744e0e8f6fcfce7174f4c8c0d7dcb590d6ed3dad22", 0x15}, {&(0x7f0000000d40)="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", 0xf75}, {0x0}, {&(0x7f0000001f00)}], 0x4) 313.586141ms ago: executing program 2 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 313.327417ms ago: executing program 3 (id=204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0xfffd, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32, 0xfffffffd}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 255.945566ms ago: executing program 3 (id=205): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86", 0xdf}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67", 0x81}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 216.440724ms ago: executing program 2 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 180.945782ms ago: executing program 2 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 83.035834ms ago: executing program 2 (id=208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, r3, 0x0, 0x0, 0x0, 0x1, "d9298561bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdbf3bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 77.803442ms ago: executing program 1 (id=209): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) listen(r0, 0xfffffc01) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.816507ms ago: executing program 1 (id=210): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000812}, 0x4000010) recvmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/202, 0xca}, 0x9}], 0x1, 0x22, 0x0) 4.480093ms ago: executing program 2 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}}) 3.48462ms ago: executing program 1 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(r0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8050) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) 0s ago: executing program 3 (id=213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r4, 0x40d, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20042844}, 0x800) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000840) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c000000120a09000000090000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000914"], 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) kernel console output (not intermixed with test programs): [ 43.802534][ T42] audit: type=1400 audit(1785538123.765:122): avc: denied { rlimitinh } for pid=5659 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:52319' (ED25519) to the list of known hosts. [ 48.750950][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 48.750969][ T42] audit: type=1400 audit(1785538128.735:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.764586][ T42] audit: type=1400 audit(1785538128.755:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.766526][ T5713] cgroup: Unknown subsys name 'net' [ 48.776792][ T42] audit: type=1400 audit(1785538128.765:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.927974][ T5713] cgroup: Unknown subsys name 'cpuset' [ 48.936777][ T5713] cgroup: Unknown subsys name 'rlimit' [ 49.143824][ T42] audit: type=1400 audit(1785538129.135:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.153447][ T42] audit: type=1400 audit(1785538129.135:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.161757][ T42] audit: type=1400 audit(1785538129.135:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.170804][ T42] audit: type=1400 audit(1785538129.135:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.181195][ T42] audit: type=1400 audit(1785538129.145:148): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.192260][ T42] audit: type=1400 audit(1785538129.145:149): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.207041][ T42] audit: type=1400 audit(1785538129.165:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.231758][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.964068][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.099295][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.099312][ T42] audit: type=1400 audit(1785538134.085:158): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.252619][ T42] audit: type=1400 audit(1785538134.235:159): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.263284][ T42] audit: type=1400 audit(1785538134.245:160): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.273024][ T42] audit: type=1400 audit(1785538134.245:161): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.283454][ T42] audit: type=1400 audit(1785538134.245:162): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[6754]" dev="sockfs" ino=6754 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.299156][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.301356][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.304072][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.305905][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.309434][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.310923][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.318664][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.319350][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.322172][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.322214][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.324082][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.324374][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.325955][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.326115][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.327487][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.331802][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.334076][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.337341][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.340594][ T42] audit: type=1400 audit(1785538134.325:163): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.341649][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.348295][ T42] audit: type=1400 audit(1785538134.335:164): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.350684][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.352040][ T42] audit: type=1400 audit(1785538134.335:165): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.384669][ T42] audit: type=1400 audit(1785538134.335:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.400114][ T42] audit: type=1400 audit(1785538134.365:167): avc: denied { sys_module } for pid=5735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.995156][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.999078][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.001863][ T5731] bridge_slave_0: entered allmulticast mode [ 55.006068][ T5731] bridge_slave_0: entered promiscuous mode [ 55.012365][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.015266][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.018248][ T5731] bridge_slave_1: entered allmulticast mode [ 55.021922][ T5731] bridge_slave_1: entered promiscuous mode [ 55.077307][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.102309][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.169563][ T5731] team0: Port device team_slave_0 added [ 55.194406][ T5731] team0: Port device team_slave_1 added [ 55.242697][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.245301][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.247626][ T5740] bridge_slave_0: entered allmulticast mode [ 55.250311][ T5740] bridge_slave_0: entered promiscuous mode [ 55.264431][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.266672][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.274618][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.279830][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.282084][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.290204][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.308394][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.310710][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.313361][ T5740] bridge_slave_1: entered allmulticast mode [ 55.316251][ T5740] bridge_slave_1: entered promiscuous mode [ 55.341378][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.344642][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.347614][ T5735] bridge_slave_0: entered allmulticast mode [ 55.351403][ T5735] bridge_slave_0: entered promiscuous mode [ 55.356842][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.359557][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.362190][ T5735] bridge_slave_1: entered allmulticast mode [ 55.365524][ T5735] bridge_slave_1: entered promiscuous mode [ 55.381685][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.384909][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.387863][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.390955][ T5744] bridge_slave_0: entered allmulticast mode [ 55.394978][ T5744] bridge_slave_0: entered promiscuous mode [ 55.400645][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.403833][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.406901][ T5744] bridge_slave_1: entered allmulticast mode [ 55.410635][ T5744] bridge_slave_1: entered promiscuous mode [ 55.428900][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.500712][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.505863][ T5740] team0: Port device team_slave_0 added [ 55.514263][ T5731] hsr_slave_0: entered promiscuous mode [ 55.517739][ T5731] hsr_slave_1: entered promiscuous mode [ 55.523427][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.529205][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.534785][ T5740] team0: Port device team_slave_1 added [ 55.549987][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.595762][ T5744] team0: Port device team_slave_0 added [ 55.610384][ T5744] team0: Port device team_slave_1 added [ 55.635459][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.638160][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.648445][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.655372][ T5735] team0: Port device team_slave_0 added [ 55.685790][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.688497][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.697347][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.703564][ T5735] team0: Port device team_slave_1 added [ 55.706520][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.709485][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.720212][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.732182][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.735022][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.745547][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.809705][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.812061][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.820146][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.824530][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.826309][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.832606][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.870817][ T5740] hsr_slave_0: entered promiscuous mode [ 55.873221][ T5740] hsr_slave_1: entered promiscuous mode [ 55.875408][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 55.877300][ T5740] Cannot create hsr debugfs directory [ 55.902806][ T5744] hsr_slave_0: entered promiscuous mode [ 55.905009][ T5744] hsr_slave_1: entered promiscuous mode [ 55.907015][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 55.908764][ T5744] Cannot create hsr debugfs directory [ 55.961551][ T5735] hsr_slave_0: entered promiscuous mode [ 55.964067][ T5735] hsr_slave_1: entered promiscuous mode [ 55.967541][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 55.969459][ T5735] Cannot create hsr debugfs directory [ 56.201842][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.207992][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.213797][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.218693][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.228717][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.234162][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.237391][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.241359][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.290564][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.297023][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.301010][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.307925][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.314786][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.319972][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.322785][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.327990][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.373365][ T5734] Bluetooth: hci2: command tx timeout [ 56.373576][ T5739] Bluetooth: hci0: command tx timeout [ 56.373673][ T5092] Bluetooth: hci1: command tx timeout [ 56.373838][ T5092] Bluetooth: hci3: command tx timeout [ 56.386273][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.390768][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.394990][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.399880][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.404474][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.410104][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.413975][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.419730][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.490166][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.494686][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.497928][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.505531][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.509522][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.514624][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.520976][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.526694][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.565472][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.599380][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.607426][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.628547][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.631233][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.643687][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.649493][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.651880][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.655787][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.658159][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.672310][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.674610][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.715137][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.725889][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.744669][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.758368][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.761203][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.765849][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.768162][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.779415][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.801907][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.804653][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.824086][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.826355][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.026329][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.074971][ T5731] veth0_vlan: entered promiscuous mode [ 57.080307][ T5731] veth1_vlan: entered promiscuous mode [ 57.094840][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.110442][ T5731] veth0_macvtap: entered promiscuous mode [ 57.120940][ T5731] veth1_macvtap: entered promiscuous mode [ 57.148164][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.156924][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.183407][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.197302][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.224546][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.227309][ T5740] veth0_vlan: entered promiscuous mode [ 57.234524][ T5740] veth1_vlan: entered promiscuous mode [ 57.243151][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.250704][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296765][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.299913][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.329286][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.333761][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.347774][ T5735] veth0_vlan: entered promiscuous mode [ 57.352205][ T5740] veth0_macvtap: entered promiscuous mode [ 57.362123][ T5740] veth1_macvtap: entered promiscuous mode [ 57.371621][ T5735] veth1_vlan: entered promiscuous mode [ 57.385676][ T5731] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.386715][ T5744] veth0_vlan: entered promiscuous mode [ 57.412398][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.417574][ T5744] veth1_vlan: entered promiscuous mode [ 57.430557][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.462539][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.473422][ T5735] veth0_macvtap: entered promiscuous mode [ 57.483369][ T5735] veth1_macvtap: entered promiscuous mode [ 57.500706][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.509354][ T5744] veth0_macvtap: entered promiscuous mode [ 57.514473][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.526058][ T5744] veth1_macvtap: entered promiscuous mode [ 57.543040][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.545650][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.569413][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.580562][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.602571][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.619560][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.626693][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.636065][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.639426][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.680803][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.684301][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.705880][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 57.709884][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.713762][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.717157][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.720320][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.756547][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.759608][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.774514][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.793238][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.825891][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.830353][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.873048][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.881583][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.893939][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.899808][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.908147][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 57.917142][ T5901] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 57.924593][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.964645][ T5905] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.001030][ T5907] usbip-vudc usbip-vudc.0: gadget not bound [ 58.062932][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.212738][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 58.219076][ T5839] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 58.224571][ T5839] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.229632][ T5839] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.234925][ T5839] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 58.240287][ T5839] usb 6-1: config 7 interface 0 has no altsetting 0 [ 58.243272][ T5839] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 58.247133][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.312635][ T5841] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.377172][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 58.380811][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 58.431016][ T5931] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 58.434032][ T5931] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 58.437648][ T5931] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 58.452899][ T5739] Bluetooth: hci3: command tx timeout [ 58.453196][ T5734] Bluetooth: hci0: command tx timeout [ 58.465629][ T5841] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 58.465671][ T5841] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.465686][ T5841] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 58.465703][ T5841] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.466665][ T5841] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 58.466705][ T5841] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.466722][ T5841] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 58.466741][ T5841] usb 7-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.469159][ T5841] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 58.507521][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.510788][ T5841] usb 7-1: Product: syz [ 58.512619][ T5841] usb 7-1: Manufacturer: syz [ 58.514494][ T5841] usb 7-1: SerialNumber: syz [ 58.523581][ T5818] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.528927][ T5841] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 58.541183][ T5841] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 58.553291][ T5841] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 58.681996][ T5839] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:7.0/0003:0458:5010.0002/input/input5 [ 58.691579][ T5818] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 58.699322][ T5818] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 58.702869][ T5818] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 58.706381][ T5818] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.710453][ T5818] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.714204][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.729292][ T5911] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 58.739575][ T5840] usb 7-1: USB disconnect, device number 2 [ 58.751350][ T5840] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 58.768675][ T5840] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 58.782148][ T5840] ti_usb_3410_5052 7-1:2.0: device disconnected [ 58.786565][ T5839] kye 0003:0458:5010.0002: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 58.925848][ T5818] usb 5-1: GET_CAPABILITIES returned 0 [ 58.927628][ T5818] usbtmc 5-1:16.0: can't read capabilities [ 59.128199][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 59.128212][ T42] audit: type=1400 audit(1785538139.115:216): avc: denied { write } for pid=5924 comm="syz.0.20" name="hiddev0" dev="devtmpfs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.257820][ T42] audit: type=1400 audit(1785538139.245:217): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.285212][ T42] audit: type=1400 audit(1785538139.275:218): avc: denied { read } for pid=5959 comm="syz.2.35" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.337440][ T42] audit: type=1400 audit(1785538139.325:219): avc: denied { allowed } for pid=5959 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.346342][ T42] audit: type=1400 audit(1785538139.335:220): avc: denied { sqpoll } for pid=5959 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.805600][ C2] kye 0003:0458:5010.0002: usb_submit_urb(ctrl) failed: -1 [ 59.814146][ T5840] usb 5-1: USB disconnect, device number 2 [ 59.902664][ T5734] Bluetooth: hci2: command tx timeout [ 60.133085][ T5734] Bluetooth: hci1: command tx timeout [ 60.264513][ T42] audit: type=1400 audit(1785538140.255:221): avc: denied { execute } for pid=5965 comm="syz.2.37" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.264737][ T5966] process 'syz.2.37' launched './file0' with NULL argv: empty string added [ 60.275685][ T42] audit: type=1400 audit(1785538140.265:222): avc: denied { execute_no_trans } for pid=5965 comm="syz.2.37" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.337097][ T5968] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 60.359960][ T42] audit: type=1400 audit(1785538140.345:223): avc: denied { mount } for pid=5970 comm="syz.0.39" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 60.378960][ T42] audit: type=1400 audit(1785538140.345:224): avc: denied { search } for pid=5970 comm="syz.0.39" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.387289][ T5971] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 60.389539][ T42] audit: type=1400 audit(1785538140.345:225): avc: denied { read } for pid=5970 comm="syz.0.39" name="buffer_size_kb" dev="tracefs" ino=6151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 60.532606][ T5734] Bluetooth: hci3: command tx timeout [ 60.542586][ T5734] Bluetooth: hci0: command tx timeout [ 60.633165][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.785094][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.791263][ T1490] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 60.793840][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 60.802596][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 60.807884][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.813432][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.817274][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.824546][ T10] usb 7-1: config 0 descriptor?? [ 60.848938][ T5995] bridge0: port 3(syz_tun) entered blocking state [ 60.852951][ T5995] bridge0: port 3(syz_tun) entered disabled state [ 60.857390][ T5995] syz_tun: entered allmulticast mode [ 60.861769][ T5995] syz_tun: entered promiscuous mode [ 60.864377][ T61] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 60.868028][ T61] usb 6-1: device reset changed ep0 maxpacket size! [ 60.868591][ T5995] bridge0: port 3(syz_tun) entered blocking state [ 60.875670][ T5995] bridge0: port 3(syz_tun) entered forwarding state [ 60.877053][ T5841] usb 6-1: USB disconnect, device number 2 [ 60.886359][ T5995] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.958771][ T1490] usb 5-1: config 0 has no interfaces? [ 60.960681][ T1490] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 60.971342][ T1490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.977118][ T1490] usb 5-1: Device is not authorized for usage [ 61.052647][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.204220][ T5841] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.211038][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.214642][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.217728][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.222990][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 61.226097][ T5841] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 61.228775][ T5841] usb 6-1: Manufacturer: syz [ 61.237091][ T5841] usb 6-1: config 0 descriptor?? [ 61.242795][ T10] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 61.261260][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 61.331347][ T6025] erspan0: entered promiscuous mode [ 61.655557][ T5841] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 61.662418][ T5841] appleir 0003:05AC:8243.0004: hiddev1,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 61.974538][ T5734] Bluetooth: hci2: command tx timeout [ 62.214308][ T5734] Bluetooth: hci1: command tx timeout [ 62.479858][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 62.607958][ T6052] syzkaller1: entered promiscuous mode [ 62.610516][ T6052] syzkaller1: entered allmulticast mode [ 62.613293][ T5734] Bluetooth: hci3: command tx timeout [ 62.622952][ T5734] Bluetooth: hci0: command tx timeout [ 62.962550][ T1046] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.114247][ T1046] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.117922][ T1046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 63.121938][ T1046] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.126667][ T1046] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.130724][ T1046] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.134629][ T1046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.141257][ T1046] usb 8-1: config 0 descriptor?? [ 63.144405][ T6055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.358885][ T40] usb 7-1: USB disconnect, device number 3 [ 63.487777][ T5811] usb 5-1: USB disconnect, device number 3 [ 63.572631][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.579893][ T6071] xt_hashlimit: size too large, truncated to 1048576 [ 63.580127][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.586299][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.589756][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.595129][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.598290][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.601553][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.605198][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.608526][ T1046] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 63.636953][ T1490] usb 6-1: USB disconnect, device number 3 [ 63.642218][ T1046] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 63.834580][ T847] usb 8-1: USB disconnect, device number 2 [ 64.062508][ T1490] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.212903][ T1490] usb 6-1: Using ep0 maxpacket: 8 [ 64.216016][ T1490] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.219688][ T1490] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.223001][ T1490] usb 6-1: config 0 interface 0 has no altsetting 0 [ 64.225210][ T1490] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 64.228154][ T1490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.235500][ T1490] usb 6-1: config 0 descriptor?? [ 64.573229][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 64.573245][ T42] audit: type=1400 audit(1785538144.565:260): avc: denied { bind } for pid=6101 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.651148][ T1490] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 64.850865][ T5811] usb 6-1: USB disconnect, device number 4 [ 64.862940][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.902563][ T847] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 65.022635][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 65.026775][ T5852] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.031331][ T5852] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.035794][ T5852] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.038492][ T5852] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 65.042212][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.047327][ T5852] usb 5-1: Device is not authorized for usage [ 65.064395][ T847] usb 7-1: not running at top speed; connect to a high speed hub [ 65.068862][ T847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.073212][ T847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.077175][ T847] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 65.082677][ T847] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 65.086448][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.098942][ T847] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 65.104811][ T847] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 65.108122][ T847] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 65.113535][ T847] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 65.121040][ T847] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 65.124505][ T847] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 65.129600][ T847] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 65.423488][ T5811] usb 7-1: USB disconnect, device number 4 [ 65.436261][ T5811] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 65.442758][ T5811] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 65.450760][ T5811] keyspan 7-1:1.0: device disconnected [ 65.892563][ T5811] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.037356][ T42] audit: type=1400 audit(1785538146.025:261): avc: denied { write } for pid=6122 comm="syz.2.91" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.053146][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 66.056149][ T5811] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 66.059001][ T5811] usb 6-1: config 0 has no interface number 0 [ 66.060932][ T5811] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.065285][ T5811] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.068648][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.075810][ T5811] usb 6-1: config 0 descriptor?? [ 66.082277][ T5811] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 66.287983][ T5811] usb 6-1: USB disconnect, device number 5 [ 66.614327][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.616378][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 66.889897][ T6136] xt_ipcomp: unknown flags 1D [ 67.079882][ T6142] kvm: kvm [6141]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 67.084740][ T6142] kvm: kvm [6141]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 67.108474][ T6142] kvm: kvm [6141]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 67.112551][ T5841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.145446][ T6142] kvm: kvm [6141]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 67.149589][ T6142] kvm: kvm [6141]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 67.264303][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.267844][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.270883][ T5841] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.275435][ T5841] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.278401][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.284062][ T5841] usb 8-1: config 0 descriptor?? [ 67.321463][ T42] audit: type=1400 audit(1785538147.305:262): avc: denied { append } for pid=6144 comm="syz.2.99" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.520171][ T6148] kvm: user requested TSC rate below hardware speed [ 67.635883][ T42] audit: type=1400 audit(1785538147.625:263): avc: denied { create } for pid=6149 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.643496][ T847] usb 5-1: USB disconnect, device number 4 [ 67.643832][ T42] audit: type=1400 audit(1785538147.625:264): avc: denied { bind } for pid=6149 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.689895][ T42] audit: type=1400 audit(1785538147.675:265): avc: denied { setopt } for pid=6149 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.697254][ T42] audit: type=1400 audit(1785538147.675:266): avc: denied { accept } for pid=6149 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.704435][ T42] audit: type=1400 audit(1785538147.675:267): avc: denied { ioctl } for pid=6149 comm="syz.2.101" path="socket:[12318]" dev="sockfs" ino=12318 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.705388][ T5841] hid_parser_main: 11 callbacks suppressed [ 67.705400][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.717336][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.717349][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'. [ 67.719716][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.719731][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.722507][ T42] audit: type=1400 audit(1785538147.675:268): avc: denied { write } for pid=6149 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.723606][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 67.743388][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.746901][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.750131][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.753354][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.756355][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.759398][ T5841] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 67.770440][ T5841] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.793985][ T42] audit: type=1400 audit(1785538147.785:269): avc: denied { map } for pid=6162 comm="syz.2.106" path="socket:[12331]" dev="sockfs" ino=12331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 67.967594][ T1490] usb 8-1: USB disconnect, device number 3 [ 68.046390][ T6173] syzkaller1: entered promiscuous mode [ 68.048680][ T6173] syzkaller1: entered allmulticast mode [ 68.742593][ T847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.832573][ T5841] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.893229][ T847] usb 8-1: Using ep0 maxpacket: 32 [ 68.897119][ T847] usb 8-1: config 0 has no interfaces? [ 68.899189][ T847] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 68.902265][ T847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.908805][ T847] usb 8-1: config 0 descriptor?? [ 68.932574][ T40] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.995818][ T5841] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.000543][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.005421][ T5841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.009602][ T5841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.014943][ T5841] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.018835][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.028464][ T5841] usb 7-1: config 0 descriptor?? [ 69.049979][ T6212] syzkaller1: entered promiscuous mode [ 69.052517][ T6212] syzkaller1: entered allmulticast mode [ 69.085210][ T40] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.088285][ T40] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.091426][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.094819][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 69.098737][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 69.104347][ T40] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.107106][ T40] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.109513][ T40] usb 5-1: Product: syz [ 69.110819][ T40] usb 5-1: Manufacturer: syz [ 69.114367][ T40] usb 5-1: Device is not authorized for usage [ 69.468433][ T5841] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 69.714674][ T40] usb 7-1: USB disconnect, device number 5 [ 70.345432][ T6231] syzkaller1: entered promiscuous mode [ 70.347307][ T6231] syzkaller1: entered allmulticast mode [ 70.351592][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 70.351607][ T42] audit: type=1400 audit(1785538150.335:298): avc: denied { setopt } for pid=6232 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.362899][ T42] audit: type=1400 audit(1785538150.345:299): avc: denied { shutdown } for pid=6232 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.371195][ T42] audit: type=1400 audit(1785538150.345:300): avc: denied { write } for pid=6232 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.561584][ T5819] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 70.641487][ T6237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.719788][ T42] audit: type=1400 audit(1785538150.705:301): avc: denied { getopt } for pid=6246 comm="syz.1.140" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.775119][ T42] audit: type=1400 audit(1785538150.765:302): avc: denied { shutdown } for pid=6252 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.777684][ T6251] gadgetfs: bound to dummy_udc driver [ 70.786099][ T42] audit: type=1400 audit(1785538150.775:303): avc: denied { setopt } for pid=6252 comm="syz.2.143" lport=59123 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.813165][ T42] audit: type=1400 audit(1785538150.805:304): avc: denied { mounton } for pid=6250 comm="syz.1.142" path="/34/gadget/ep1in-bulk" dev="gadgetfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=file permissive=1 [ 70.824608][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 70.828549][ T6255] netlink: 'syz.2.144': attribute type 11 has an invalid length. [ 70.844522][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 70.847917][ T6255] netlink: 'syz.2.144': attribute type 11 has an invalid length. [ 70.850916][ T6255] Zero length message leads to an empty skb [ 70.862851][ T5819] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.865924][ T5819] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.868879][ T5819] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.872566][ T5819] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.893720][ T42] audit: type=1400 audit(1785538150.885:305): avc: denied { mount } for pid=6257 comm="syz.2.145" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.896216][ T6258] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 70.900665][ T42] audit: type=1400 audit(1785538150.885:306): avc: denied { watch } for pid=6257 comm="syz.2.145" path="/46/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.931172][ T42] audit: type=1400 audit(1785538150.915:307): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 71.032851][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 71.035671][ C2] gadgetfs: connected [ 71.039867][ T24] gadgetfs: disconnected [ 71.168908][ T6265] usbip-vudc usbip-vudc.0: gadget not bound [ 71.173042][ T6184] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 71.181179][ T5841] usb 8-1: USB disconnect, device number 4 [ 71.182761][ C2] gadgetfs: connected [ 71.186345][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 71.189344][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 71.192336][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.201040][ C2] gadgetfs: configuration #1 [ 71.302327][ T6269] kvm: user requested TSC rate below hardware speed [ 71.597630][ T6251] gadgetfs: suspended from state 3 [ 71.600532][ T1490] usb 6-1: USB disconnect, device number 6 [ 71.602943][ T6251] gadgetfs: disconnected [ 71.656759][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.660829][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.680235][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 71.683039][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 71.690627][ T24] usb 5-1: USB disconnect, device number 5 [ 71.953572][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 71.962837][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 71.983495][ T40] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 72.084881][ T6312] macvtap1: entered promiscuous mode [ 72.212891][ T1046] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 72.268631][ T6320] Bluetooth: MGMT ver 1.23 [ 72.372639][ T1046] usb 6-1: Using ep0 maxpacket: 16 [ 72.376507][ T1046] usb 6-1: config 0 has no interfaces? [ 72.379344][ T1046] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.384864][ T1046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.392148][ T1046] usb 6-1: config 0 descriptor?? [ 72.474527][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 72.479210][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 72.480093][ T6283] ceph: No mds server is up or the cluster is laggy [ 72.513822][ T6333] fuse-io-uring is disabled [ 72.598778][ T1046] usb 6-1: USB disconnect, device number 7 [ 72.634750][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 72.647358][ T6341] team1: entered promiscuous mode [ 72.649158][ T6341] team1: entered allmulticast mode [ 72.654712][ T6341] 8021q: adding VLAN 0 to HW filter on device team1 [ 72.682560][ T5796] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 72.727222][ T6345] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 72.731219][ T6345] /dev/nullb0: Can't open blockdev [ 72.838706][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 72.854596][ T5796] usb 8-1: Using ep0 maxpacket: 8 [ 72.858015][ T5796] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 72.860739][ T5796] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 72.864995][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 72.868534][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.874552][ T5796] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.885626][ T5796] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.889245][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.890559][ T6351] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 72.936723][ T6351] bond1: (slave geneve2): making interface the new active one [ 72.941792][ T6351] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.982689][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.987199][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.992017][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.997433][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 73.002719][ T1490] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.104187][ T5796] usb 8-1: GET_CAPABILITIES returned 0 [ 73.106377][ T5796] usbtmc 8-1:16.0: can't read capabilities [ 73.177899][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.188242][ T1490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.192227][ T1490] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.197614][ T1490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.205326][ T1490] usb 5-1: Device is not authorized for usage [ 73.218554][ T6364] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 73.221372][ T6364] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 73.226721][ T6364] cramfs: wrong magic [ 73.311042][ T6331] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 73.315160][ T1490] usb 8-1: USB disconnect, device number 5 [ 73.475591][ T6371] kvm: emulating exchange as write [ 74.202830][ T6384] policy can only be matched on NF_INET_PRE_ROUTING [ 74.202843][ T6384] unable to load match [ 74.427431][ T6374] syz.1.194 (6374): drop_caches: 2 [ 74.458393][ T6398] Mass Storage Function, version: 2009/09/11 [ 74.461993][ T6398] LUN: removable file: (no medium) [ 74.468975][ T6398] UDC core: g1: couldn't find an available UDC or it's busy [ 74.671241][ T6413] ================================================================== [ 74.674670][ T6413] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 74.678149][ T6413] Read of size 160 at addr ffffffff9ba55400 by task syz.1.212/6413 [ 74.683362][ T6413] [ 74.684420][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.1.212 Not tainted syzkaller #0 PREEMPT(full) [ 74.684444][ T6413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.684456][ T6413] Call Trace: [ 74.684478][ T6413] [ 74.684485][ T6413] dump_stack_lvl+0x100/0x190 [ 74.684546][ T6413] print_report+0x13d/0x4b0 [ 74.684583][ T6413] ? __virt_addr_valid+0x239/0x430 [ 74.684627][ T6413] ? usb_copy_descriptors+0x18d/0x320 [ 74.684648][ T6413] kasan_report+0xdf/0x1c0 [ 74.684690][ T6413] ? usb_copy_descriptors+0x18d/0x320 [ 74.684719][ T6413] kasan_check_range+0x10f/0x1e0 [ 74.684747][ T6413] __asan_memcpy+0x23/0x60 [ 74.684766][ T6413] usb_copy_descriptors+0x18d/0x320 [ 74.684787][ T6413] usb_assign_descriptors+0xd2/0x470 [ 74.684811][ T6413] f_audio_bind+0x243a/0x3950 [ 74.684841][ T6413] ? __pfx_f_audio_bind+0x10/0x10 [ 74.684865][ T6413] usb_add_function+0x219/0x890 [ 74.684889][ T6413] ? composite_dev_prepare+0x1d1/0x420 [ 74.684917][ T6413] configfs_composite_bind+0xd83/0x1960 [ 74.684945][ T6413] ? kernfs_create_link+0x1bd/0x240 [ 74.684987][ T6413] gadget_bind_driver+0x28c/0xbf0 [ 74.685016][ T6413] ? __pfx_gadget_bind_driver+0x10/0x10 [ 74.685044][ T6413] really_probe+0x241/0xa60 [ 74.685079][ T6413] __driver_probe_device+0x20e/0x450 [ 74.685106][ T6413] driver_probe_device+0x4a/0x140 [ 74.685131][ T6413] __driver_attach+0x21f/0x5b0 [ 74.685157][ T6413] ? __pfx___driver_attach+0x10/0x10 [ 74.685181][ T6413] bus_for_each_dev+0x13e/0x1d0 [ 74.685198][ T6413] ? __pfx_bus_for_each_dev+0x10/0x10 [ 74.685217][ T6413] ? bus_add_driver+0x2b5/0x5b0 [ 74.685239][ T6413] bus_add_driver+0x305/0x5b0 [ 74.685259][ T6413] driver_register+0x1e2/0x360 [ 74.685283][ T6413] usb_gadget_register_driver_owner+0x132/0x210 [ 74.685314][ T6413] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 74.685347][ T6413] configfs_write_iter+0x302/0x4e0 [ 74.685375][ T6413] vfs_write+0x6ac/0x1050 [ 74.685417][ T6413] ? __pfx_configfs_write_iter+0x10/0x10 [ 74.685441][ T6413] ? __pfx_vfs_write+0x10/0x10 [ 74.685478][ T6413] ksys_write+0x12a/0x250 [ 74.685505][ T6413] ? __pfx_ksys_write+0x10/0x10 [ 74.685534][ T6413] do_syscall_64+0x115/0x870 [ 74.685583][ T6413] ? clear_bhb_loop+0x40/0x90 [ 74.685607][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.685625][ T6413] RIP: 0033:0x7fc4d8f9e019 [ 74.685642][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.685660][ T6413] RSP: 002b:00007fc4d9ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.685689][ T6413] RAX: ffffffffffffffda RBX: 00007fc4d9225fa0 RCX: 00007fc4d8f9e019 [ 74.685703][ T6413] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004 [ 74.685717][ T6413] RBP: 00007fc4d903500c R08: 0000000000000000 R09: 0000000000000000 [ 74.685728][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.685740][ T6413] R13: 00007fc4d9226038 R14: 00007fc4d9225fa0 R15: 00007fffce5a44f8 [ 74.685761][ T6413] [ 74.685768][ T6413] [ 74.810840][ T6413] The buggy address belongs to the variable: [ 74.813290][ T6413] ac_header_desc+0x0/0x40 [ 74.815196][ T6413] [ 74.816146][ T6413] The buggy address belongs to the physical page: [ 74.818847][ T6413] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba55 [ 74.822513][ T6413] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 74.825814][ T6413] raw: 00fff00000002000 ffffea00006e9548 ffffea00006e9548 0000000000000000 [ 74.829420][ T6413] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 74.833022][ T6413] page dumped because: kasan: bad access detected [ 74.835687][ T6413] page_owner info is not present (never set?) [ 74.838258][ T6413] [ 74.839302][ T6413] Memory state around the buggy address: [ 74.841685][ T6413] ffffffff9ba55300: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 74.845088][ T6413] ffffffff9ba55380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 74.848515][ T6413] >ffffffff9ba55400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 74.851875][ T6413] ^ [ 74.853727][ T6413] ffffffff9ba55480: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 74.857080][ T6413] ffffffff9ba55500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 74.860477][ T6413] ================================================================== [ 74.866099][ T6418] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 74.868479][ T6418] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 74.871403][ T6418] cramfs: wrong magic [ 74.873472][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 74.873584][ T6413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.873596][ T6413] CPU: 2 UID: 0 PID: 6413 Comm: syz.1.212 Not tainted syzkaller #0 PREEMPT(full) [ 74.873613][ T6413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.873633][ T6413] Call Trace: [ 74.873637][ T6413] [ 74.873643][ T6413] dump_stack_lvl+0x100/0x190 [ 74.873663][ T6413] vpanic+0x552/0x970 [ 74.873676][ T6413] ? __pfx_vpanic+0x10/0x10 [ 74.873688][ T6413] ? mark_held_locks+0x40/0x70 [ 74.873715][ T6413] ? usb_copy_descriptors+0x18d/0x320 [ 74.873731][ T6413] panic+0xd1/0xe0 [ 74.873742][ T6413] ? __pfx_panic+0x10/0x10 [ 74.873754][ T6413] ? usb_copy_descriptors+0x18d/0x320 [ 74.873770][ T6413] ? preempt_schedule_common+0x42/0xc0 [ 74.873784][ T6413] check_panic_on_warn.cold+0x19/0x34 [ 74.873796][ T6413] end_report.part.0+0x3a/0x90 [ 74.873815][ T6413] kasan_report.cold+0xe/0x18 [ 74.873832][ T6413] ? usb_copy_descriptors+0x18d/0x320 [ 74.873847][ T6413] kasan_check_range+0x10f/0x1e0 [ 74.873865][ T6413] __asan_memcpy+0x23/0x60 [ 74.873878][ T6413] usb_copy_descriptors+0x18d/0x320 [ 74.873894][ T6413] usb_assign_descriptors+0xd2/0x470 [ 74.873909][ T6413] f_audio_bind+0x243a/0x3950 [ 74.873927][ T6413] ? __pfx_f_audio_bind+0x10/0x10 [ 74.873942][ T6413] usb_add_function+0x219/0x890 [ 74.873956][ T6413] ? composite_dev_prepare+0x1d1/0x420 [ 74.873972][ T6413] configfs_composite_bind+0xd83/0x1960 [ 74.873988][ T6413] ? kernfs_create_link+0x1bd/0x240 [ 74.874004][ T6413] gadget_bind_driver+0x28c/0xbf0 [ 74.874022][ T6413] ? __pfx_gadget_bind_driver+0x10/0x10 [ 74.874038][ T6413] really_probe+0x241/0xa60 [ 74.874053][ T6413] __driver_probe_device+0x20e/0x450 [ 74.874067][ T6413] driver_probe_device+0x4a/0x140 [ 74.874080][ T6413] __driver_attach+0x21f/0x5b0 [ 74.874093][ T6413] ? __pfx___driver_attach+0x10/0x10 [ 74.874106][ T6413] bus_for_each_dev+0x13e/0x1d0 [ 74.874116][ T6413] ? __pfx_bus_for_each_dev+0x10/0x10 [ 74.874126][ T6413] ? bus_add_driver+0x2b5/0x5b0 [ 74.874138][ T6413] bus_add_driver+0x305/0x5b0 [ 74.874150][ T6413] driver_register+0x1e2/0x360 [ 74.874165][ T6413] usb_gadget_register_driver_owner+0x132/0x210 [ 74.874183][ T6413] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 74.874197][ T6413] configfs_write_iter+0x302/0x4e0 [ 74.874211][ T6413] vfs_write+0x6ac/0x1050 [ 74.874227][ T6413] ? __pfx_configfs_write_iter+0x10/0x10 [ 74.874240][ T6413] ? __pfx_vfs_write+0x10/0x10 [ 74.874260][ T6413] ksys_write+0x12a/0x250 [ 74.874275][ T6413] ? __pfx_ksys_write+0x10/0x10 [ 74.874293][ T6413] do_syscall_64+0x115/0x870 [ 74.874306][ T6413] ? clear_bhb_loop+0x40/0x90 [ 74.874318][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.874334][ T6413] RIP: 0033:0x7fc4d8f9e019 [ 74.874345][ T6413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.874357][ T6413] RSP: 002b:00007fc4d9ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.874370][ T6413] RAX: ffffffffffffffda RBX: 00007fc4d9225fa0 RCX: 00007fc4d8f9e019 [ 74.874378][ T6413] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000004 [ 74.874385][ T6413] RBP: 00007fc4d903500c R08: 0000000000000000 R09: 0000000000000000 [ 74.874393][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.874400][ T6413] R13: 00007fc4d9226038 R14: 00007fc4d9225fa0 R15: 00007fffce5a44f8 [ 74.874411][ T6413] [ 74.877311][ T6413] Kernel Offset: disabled VM DIAGNOSIS: 22:49:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a394b5 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc90007eb71b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6666666666666620 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6fc1fe R15=ffffffff85a39450 RIP=ffffffff85a394df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc4d9ea66c0 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33123ffc CR3=000000002986b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8a24eee6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8a24eee6 00007ffc8a24eeec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc20ba355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc20ba3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc20ba35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc20ba35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a63b508 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88806a63b50a RBP=dffffc0000000000 RSP=ffffc90005227678 R8 =0000000000000001 R9 =ffffed100d4c76a1 R10=ffff88806a63b50b R11=0000000000000000 R12=00000000000011e2 R13=ffffed100d4c76a1 R14=ffff88806a53c4c0 R15=0000000000000000 RIP=ffffffff8bbec014 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3767df CR3=000000002b384000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000dd 0000001800000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001790030fffffff ffffff0417800326 000018b600000012 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0d0030fffffffff ffff0401f0c00306 100001f0b0030010 001cd0031d80041c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0030010001cb003 0fffffffffffff04 1ca0030010001c90 030fffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 041c80031c800401 f0a00300080001f0 90030fffffffffff ff0401f080030010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0017800402100006 1000080141a21fff fffffe100017b003 0a100017a0030010 ZMM24=19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 19a5aef519a5aef5 ZMM25=c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b c4a81f2bc4a81f2b ZMM26=d5074484d5074484 d5074484d5074484 d5074484d5074484 d5074484d5074484 d5074484d5074484 d5074484d5074484 d5074484d5074484 d5074484d5074484 ZMM27=de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 de1b2338de1b2338 ZMM28=000000700000006f 0000006e0000006d 0000006c0000006b 0000006a00000069 0000006800000067 0000006600000065 0000006400000063 0000006200000061 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c0020000c0020000 c0020000c0020000 c0020000c0020000 c0020000c0020000 c0020000c0020000 c0020000c0020000 c0020000c0020000 c0020000c0020000 info registers vcpu 2 CPU#2 RAX=ffff88801cf475b0 RBX=0000000000000001 RCX=ffffffff81e644e8 RDX=1ffff110039e8eb6 RSI=0000000000000000 RDI=ffff88805a19c9f0 RBP=ffffc90003affdb0 RSP=ffffc90003affc80 R8 =0000000000000001 R9 =fffff5200075ff7e R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88803606b200 R14=ffff88801cf475b0 R15=ffff88803606b2c0 RIP=ffffffff85280f4d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7ddb433880 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001e00 CR3=0000000032452000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000290410 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8e4319d8 00007ffd8e4319d8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8e431bb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c105cb9900 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ddadf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7ddadf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326b276b9d483 737326b72ac40059 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78134a8e4c65a663 737373762f632fc6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 357570632f302f71 6d2f33706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003575 70632f302f716d2f 33706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c105cc0538 000055c105cc0538 0000000000000041 000055c100302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6175747269762f 000055c459da9312 0000000000000031 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000ffffffff RBX=ffff888025108000 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8ec4cc60 RBP=ffff888058275800 RSP=ffffc90007fafdd0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888025108000 R13=0000000000000000 R14=0000000000000040 R15=0000000000000000 RIP=ffffffff8bbbb110 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555776bb500 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fec52fc6a92 CR3=00000000583fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9431ff56 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9431ff56 00007ffc9431ff5c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fec530355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fec5303562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fec53035793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fec53035621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000