last executing test programs: 20.24449305s ago: executing program 1 (id=264): prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2404c884) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={0x0, 0xfffffff2, 0x70ac, 0x7, 0x1, [0x0, 0x0, 0x0], [0x4, 0x100, 0xff, 0x1], [0xd25, 0x1, 0x368, 0x7], [0xffffffffffff5000, 0x3ff, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000540)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040840) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000040)={0xfffffffffffffff6, 0xffffffffffdfffff, 0x4, 0x0, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0xfd, 0x49, 0x9, 0x9, 0xd}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) 19.181376902s ago: executing program 1 (id=271): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000440)={&(0x7f00000000c0)='\x00', 0x1}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_connect$midi(0x3, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="1201710200000008"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 17.998973268s ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000840)={0x0, &(0x7f0000000300)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x6, 0x3, 0x6, 0x3}}, @out_dx={0x6a, 0x28, {0x960a, 0x2, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x100}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18}, @nested_load_code={0x12e, 0x8d, {0x0, "66baa000b083eec4a11959b80500000065420f01cf0f01d9f30fc737c74424000c010000c7442402ef8c5b50ff1c2448b8bd9d0000000000000f23c80f21f8350400f0000f23f8c42215b6a908000000c744240058000000c74424020d000000c7442406000000000f011424660f38820df7600000"}}, @cpuid={0x64, 0x18, {0x1, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x81a9}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x1ff9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x130, {0x2, 0xffffffffffffffff, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440e, 0x9, 0x7, 0x401}}, @wr_crn={0x67, 0x20, {0x0, 0x7f}}, @cpuid={0x64, 0x18, {0x451e}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x5}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @rdmsr={0x66, 0x18, {0xa73}}, @uexit={0x0, 0x18, 0xc54}, @wrmsr={0x65, 0x20, {0x40000099, 0x7fffffff}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x4406, 0x3, 0x4f, 0x4011}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xa14f}}, @rdmsr={0x66, 0x18, {0x98a}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x14, 0x5, 0x8, 0x2}}, @rdmsr={0x66, 0x18, {0x37b}}, @rdmsr={0x66, 0x18, {0x403}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x70, 0x4, 0x5, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0xa0, 0x2}}, @rdmsr={0x66, 0x18, {0x886}}], 0x515}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000880)=@svm={0x104, 0x1, 0x1080, {0xc000}, {"6f03cadf3605e2629eaadfdd24ab3cea44cdaae60637970ea30d4df6a54366852060e41ed1485b75991e7062236e998e0e4cdc40ce09295843416e49cc2b53bb186f48b316a4c47fac9787efcbe00d5b1dddd0332d9fc80d2e530ba9ff7888f2f505f1b3567714f7e29dccf2c9ee562522b5a86a1c06d79762bb9d1f5e8fa7c2fbe5a291c8de53b9074c5a0f7fe9e56a0006cf68dab9568b04d5b34446066ff9f596072743f99893a94dd6069efde083aecbd0fba8594aeabf30439c8ffe17a76d474d778f88950bb142564721d12b18838c2a1249842030f7e874361ad823da71469cc378f6c7b671609012415f2fb7a7dbcc3c158276e27aaf8b030b7bf5d2ba09d87f0bb0cfb669e65182fa092aa6d3f3e023b93f001da1b3c9d9f23946d0087219a18861234613b01a2dea1f296393f0fc842a5da7f643b704f3c09e3c20bae0079e90381ee2369de3b0abbdc1e53c8722c7a1267f9de6dc727a84a22b92f23b7842f6e5cf02535024fda1c7e814c0ab7d4950b52395927751fb2f0a7f1babd8a49dc6444aa47baf0ccec6e333657c20fe7e08740776b58c2a020c804049b9a2a10d3dfe6a6f258a450c7ccf7a3208c91b9c9622631ec7de6c485501ece5d9677c85404c905e8177ed61db5dab81ea2d91685daf0014a3eb01c8f35e7cd92365ddcb19074656ae997f620544b77ed541a26d1e4e3d88c887a1bb1b31e49690ab6f5b1aa9f7db44e28a5a059058f56beb68ed091ab7de8b3ff00bb0014974b63f69646714e7192888578904cf3ca24d13f734480d67805135af2a74aa4e059d4dcc33e80b8345abee34bf1af1f2a768f7e2b33b64359329a78d734cb6dc31e9076758cc84881e47c6ba9625c08c6f5f9c227e798ef3720fa146c940084c0874a4ca4e91ab2bbdb402da756ac9988e68881973a6ef9d8ee5e9f9d9fa1a9f4cd5c4d31422ccf3b30e3c7bf5e21adc5d278ad5cfad060c98c23134448505c16f37f97d7114aa1946bc93d13537ac270e9a82d1998b17e3f31a1e974cf1831fa7678dbe5a46b1680861fefb80b2d9c97ddff2cdb78570934a2b61ddc569753dac15dd69e566b6e1e7d69e8e3fb9fbb5926261a618b56594b60b887e19591c37c53db963f8769f266920e28712dcdc1acc01e152b3e88745df019cbf716127aaade8ead7702b10c4d8e0e148f18aa461f6e1698ae2b65fedfdf536f1403a0fc4acb14077ee630b1b9f797a2a877c775db024ca2a2098cda129d210a0adcf6c9195e1793eabdf9dd406222acf31e86a6be0f97128f4ac38a26e74b9f69a13a7e9536e6f27aaabc5d2d32cc99aa497bcffdcd3f78c753aa269da9080b7ff970eacce999fccccb47c0960e9e72fd50b6d19811bb543cd273740abbe0d8f003fb6c7d3e73f1f97ddd6bc5fa226ed5d3024e89bc7660bc6ce4d271e948b000801f223831f81000bb5efdfb8d5716e5a94e3a7467530790008cad5a8c542e7e341a5e18ef9dfe6e76445c3152ef8ea5a76049e21f3cf21c1a876b3ca5522aa7b7058b53d32deac6bbb2edef37980ffc4b619a67fef8b57f5be69988d5f829d63226e3bf2a250c5a58bad3a32df7f91f7d093053098192d81091be9a6df6a85da89c6eb14ef8e2e91347fe7cab22a99a47d0b0edfa8d9ae87b9471d253cd25543dc3770092ec6a411002f7e4d5da978108c064e524b5123630ee158fb7bba3ce65b74ede9e33a5059fac3c1b0a04a16ddc0247d0c6bbc1d455aa8ef19012fb170de58768e26e604d47853f4f5ae9883f9c9d845305b00b2c6877b65a2499c00e777cf70bd609b7b2e93c201365b0f80e322de504a0df450ae12c288a2e90ab5f35f5653df3ff3a28dab2111913c96771e8f68b47c11cb7971ff4839dd34c644dbdd96ab05aeb1296772117e15c850a35c543ad59530ff9532dc4e7909555646683af3c5bb5c5970beaca0506f2cedc2565fd7019d5349697a0a206445bb5e98ea13085943e9fb12a3202f850a88667c62b6a493edf541421718795ee866719bfbcc27b9f7ca804ad9977e1ffe0784c3dfe73d2e5172b8a85a70ed2d73834fe9b31f50b30092c240876f2a81d176a541b95eb82411b30d5ae8279ced94c140f8e54952b95f85a967fde22faf1143d0619ada4a386fff4edab00d1ac168aea43396a0b32bb4a082aa5e8b5a4f916be34097a377ab44b5ec11b6d0fc9c92b6130f18f1cfadeae9d9c0052b1b22718a18e0c16179d76f9483c0cac5ebcdcf9fcb97b7d5573b9bbb31635748bba7db04212374ffc631736cba77f8b59a2f12a0c859a54f77bdf516310b4b21bb074f7bc4b1da4ce13a3becd65a7889824816b113d103fb4166fb7d3930cec0cd35933ea5b90fefb1294c120abcbb1ad4fada2c33e1edbb6be2c5cca2adfe46f66dd7696636511473a7a98221760842300b7f80a4e8e64e2230d0a2375d3408ab200df21446ba4725804b1ac04449a258d0603cfc80cb8049cc14a0e29e8f680e66a0be5be575f157316239333021440054ebe498143dd14a536636a360dae08c671f1127b5bf9def057605c3e6b93fe356ca4ba8ca9b0b91618e7f05460c7992ad3dddccf0d03c6edb18a6071f1bae1a3423a13b89be19d707fd559857381db9e07c6822c561901a87979b6df7ebd2ad5ef07704099b447083920fe7e80bbbb7d08b2221ac7b83a0c1cbea67df1d0daa5ef05930b81130a0c1792e8f64059a9b1485ac2932616bafbd77c6f6ab2f17f9ab6959838096a59ab7d8fd3c722fcc99e9c22bd0903628900012c562d4894dbf00c32eafce7045da2e0402f3e023a8939f376d42fa48be4fc083190cb168546cf0db6b8bff59c2a0686a472c646479276359c7b85f366f1337c255e3f9b709c7f6cd115956b19caa4ffbe2830dc89f64fe5c6fa777fc7bff9cc51fdffed1c80dffeb6efbdad51050ef9839454a55e3c0b5cc708d62285430a3149cd9ee6da867266f7ed5b23922f6ce61c20e04024a5d2c77f403d563085247064c30496553df228e209bb96514bbce271a46cb8345213ec9d4b89bad13efb4397f209db9085849869f313a9d4a308aaba4aa6d0b38301ce80939f2198a080f55fcee5929f0686ab35043e107b8a74a78a82a4df3ebbed5af8b7cf7805dd70e2392753528c9fcab8a8b8475e0ade5861743d0aef645540f7b88e08a1a527f151bda5c6c6aa5f1a9514b3f45f689244b3ebd4ada72358aff2f81249aee0beced7a7503e77f397302908ca8a61aa251d8036402e13fad779f603348ab6b244353d11d598c50f8aae47f01588ec61eabd03ffc7c13067ce91af2ffb5b521fa919c0a597d8fedaeb421f2c9f058e272214443f73a69567b0f07e4ca634aa39153580794f33049029f48100f0840a7ae5bb87daaad0b29f1bafe34b5d65b56551a32d4eb00ff0b679bec89729f54a73e747e343fc52d174bb69526538f01770c264931b2c4c61b266d53bd2492f70cf1910665ee542776e3d0e4d3d615a57122403ee6e5a01520a049af4db395183cf0e1691d0a7b81f0df9a88ceac3700f8806fb1707e23edbba1a44568ac40f1babb13f944aa3f610605b976567a7da0b1a5469c11356879f16be0f459b201bb4088c2c5eab7e733b41822362e601ddeceaaa3649e65398c2effae3acd0f02b9f045534756c4fe7c35e398e252c1fca04c15df2fea4baee468736dc5867dfe0e78c262fbe337bee20815110ee8aa2827c8f5aae39926f0f1721d72dc193e2115e64de04f3b8aa2bccfae01fbb8b88704bba74a20d85da87ed437f1a56c3090ab6ca745b36c1a3655e3cb1c685d17d4c8a9d8e2891b0e2d32d57e722513fb06c9246dda870b40b7c6107852e548c0f9f6005e3898539537ba7a55065f056f8f7bb92cf068582cb1235a42df1384054f432b2ca51ae83ea834894829212700e6d44b290b1a561bec2f26ebbd8c4fa29e5a7bc3ca69f6330369526e706dc79a5b855959f0bf453b835c65b040907fd5aa82181796e65760ec10fdb0c4adc1b3d6fd8cb431baa86e1330d1820e29c3ae991d0b705b6e22b3306822268de92d9107f22971601eec3425201af2729c46ab18ed1a64afdd70e61f3d1b7b17a19b915142ca1acead489c08309feabcd21061e98c3a2aa1b26c9416f2b47a9380fd10464d236777891d5471affbbd51e3a521e5b2a5fd434f0ce9a9230397ed0f314e6fb63aca1c2580557783aee58657f07746a95a77c6e11cff7001c8afc163f55101a0a45b17b64300a061ac35533b15dbcae6d1d45fc554582cbc8af62e6985235af781a0abd959ae6bbf803fdd4f75b6025de171723dcd1ae10755943f7ab0e299ab4b0dc92f574a5a7a4c23524343dd3fcda79997d7a4e651a3fdaf608d4414eee672f980b4f1d2e2dcef97389259f9b3ce7efb65a139cc5ccfd175c777d5039f54d81f699f196115376ddb9de363aa31b998700e725355ae168cfbe6cb4e48675875dd299a94581ad3563eb24602b8701fed6d7e6c13822836304d258ae1121adad18d72f7776a104bd64c5ce541f9b19363039761d4cc39d9226883d761a4305e7508f82686cacbb13915a5d5b95a7538ace4aeb64c7147eaa020c19f95118c2df73bc6016cbebb40b0c9ab791b7c55bd47ef7cef13eb7f74989edbc06ba586368d1787cbdf8aae1088a75e8b8059eb03cf6429c6e786e1403ef265f14b7b7f26cbbbf87e7d84e0f17fa879873baad8990a83a61dc58f05d5d0538357b2d259f9f99802f0045509abe5dcc2e49393571a12181469f299076b2419b95f923fcefef88916bbbc25fb83bb8e021619745d1b17a38860d21dca67a6dd49657dbf2f8a12882f53aed6b113c7cc8b66a1f9ca806f0cc381fb816817831aeb74f9d8b5fcd31e2827db27b2fab83e76e8387b30264b2dfc94aba8d232726435897749ecda05c4218496faed54cc9505c98379914bc224e5690da508e72d51b641660a9d40527b92f75354a2e6d45df3d2017f9dc65798ed339683b170ba434aa88a62ca7924bf799a44849b7a32e98180e251582c34d06794b588aeb2a775b690d9f01026ceeb89aa1b5f0a8f26c44955689125da9d919d157ded86a9a1400b6ed83c4b7df5213ae91d66f0b10b248e98337db92acd595d5649301294a114464707ee8bd9babdf26d175d5987ab02692e16959daf6f6ac6e3d59d2c5117fb09b3f9b320a828e1d2e0ab2d97178bf9208c42bd8cd624aa60d439ff7aafc2275acf7b90df3d79f0c0b454dd5d58aebcad456daca733f839bf62f337f7837080b64cebd8cf0846b5cc15f6c0df400e10479934a902844b133775d94411794fb3605412ead10728ecbf7ac127795e25df97b8f9d62a8aaed1e8a6797b8ad234f9e7d5e51c5a6f54ca90649da6cf87bc17298ba23bf62e7dbb214d667e5ebde3b5c1e32513afcd342cf7ed5f8039e7c74d4a70ea4f29bd0b7da2d61b6349aab0e764df66f4be1c1564930ad3392e36734cba26eb2ef9926c72114dd59ddb8850e6e4f93eb9b4464155243ce1f7419a3cffa0c7a1f3f25a3de383d9f4f89e987910f3b5a995bb686b68e94368b68facf99183455dd14d2a2ccefe9870b003676a0e50d35f9bb6866e269a642a43ab5f8c850bee63d3aaf2558e5ab34e5b488271671c40853cab9fbd0ff47c88efbab2127297cfc149f3e7abcf159f32c128861d5875c5596333150d7a67e54b8b58d846db1a024ddc6a4113ec6dbafb293efd7911539090afd3fea9d6f9c3cd2b764311abe120501542a69c505e3b0d70d942ebf2a1a1d58e16fbf29e40b748"}}) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x83}]}) r5 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@wrmsr={0x65, 0x20, {0x40000020, 0x1}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.670043433s ago: executing program 2 (id=279): prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x2404c884) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={0x0, 0xfffffff2, 0x70ac, 0x7, 0x1, [0x0, 0x0, 0x0], [0x4, 0x100, 0xff, 0x1], [0xd25, 0x1, 0x368, 0x7], [0xffffffffffff5000, 0x3ff, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000540)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040840) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000040)={0xfffffffffffffff6, 0xffffffffffdfffff, 0x4, 0x0, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0xfd, 0x49, 0x9, 0x9, 0xd}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) 17.26939519s ago: executing program 1 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001800db8d000000507a00000002000000000000070018000006001500040000000c0400000000060007000000"], 0x30}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) (async, rerun: 32) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x6, 0x2, 0x1, 0x0, '+'}}, 0x2a) (rerun: 32) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4218002}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, 0x15, 0xa, 0xa89ef2c5874e7e67, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x3f, 0x8, "7540f35c974f9663075f254e8bb72a75f236447fdf78c239a85988a41dcfcb5bd10aefe7490ad9e15a6ec114d1115c4fc65d05a4a3a6e2e90c950b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x21, 0x8, "06927e7d6713ff715284b3270c9bc259b534410e2d1ed301be91b8d843"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJ_USERDATA={0x93, 0x8, "8e30effd0cf82767b669b61511d087bc068012d42163cbbd5871f34ceaa2a28c706d7cd5872c14b3aa61d92644d8b1e962a988c28e3cf68692a3f5d5d6a2d4e1e3f3e5a15399a731b0ec6f57533d4798e48a99b1e7d300c6e0f2f782a07967d4418da060d4f555fb4389ec73bd0e6bb24fac486fdb09213dcb4c510332b3146f92063b4f87c8270eaa33b375ca66f7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000040)) 17.268875577s ago: executing program 1 (id=281): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r0, 0x800a6f2f, &(0x7f0000000040)) pwrite64$ublk_bdev(r0, &(0x7f0000000080)="0e319c596ce628bc4a6935d9b56d5f80f990391092641ecf875d3b8a4b9db5c665cd66d904e8cf2ddfedc1318981cf94ed27a3f4fe51db8f646e4531227e822326567f85b24c92dfb362445abbd03ee900eb24d33cc606c9fd2ca151ee310a2edced1a15e9ac4f30a736e6420c2ed93a4dd65f92e2578dddc1f0fdf7a53abcce51d27c35642d1ed49f3df7e76bf2476fbb36780bb99e9a7b1109931ee98e2ebfe0e53baac9ae9e01149481b1d653c742ba1bca4a4ecfa8f664b8b42d6e5a6066d5ce7549b657e2ecb837474e565a0139c0a483c3e28e7d30bd8ef520d2357e7b15", 0xe1, 0x2) fchmod(r0, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x4, 0x8, 0x6, r0, 0x0, &(0x7f00000001c0)={0x9a0913, 0x307b, '\x00', @p_u8=&(0x7f0000000180)=0x2}}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000240)=0xffffffff) r1 = open(&(0x7f0000000280)='./file0\x00', 0x1c3000, 0x100) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000002c0)={0x400, {{0x2, 0x4e21, @empty}}}, 0x88) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x881) ioctl$SG_BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi2\x00', 0x260100, 0x0) ioctl$COMEDI_CANCEL(r3, 0x6407) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000400)) mount$nfs4(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x11200b, &(0x7f0000000500)={[{'/dev/sg#\x00'}, {'/selinux/avc/hash_stats\x00'}, {}, {'!'}, {}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x1, 0x8701, 0x0, 0xf23c, {{0x19, 0x4, 0x0, 0x2d, 0x64, 0x66, 0x0, 0x3, 0x29, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x23, 0x2b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @multicast2]}, @end, @end, @end, @rr={0x7, 0x7, 0x3c, [@multicast1]}, @lsrr={0x83, 0x23, 0x98, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @remote, @loopback, @remote]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4a8, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x424, 0x8, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x250, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e6ff636fcc08b445238a5f118ab96e8968555ecb8d09ed260131e963714442b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "35a6249fe1fa2d12a6a52c8cde96780fa46bebd920b583e854471ab203a93557"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9b400c8b17ff8d617f466c1637ee013b9fbe6f5b6cc681a97d6f0a03f2e9f54c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0xd5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x9, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @mcast2, 0x1ff}}]}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r7 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0xfe8, 0x400) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) connect$inet6(r1, &(0x7f0000000f00)={0xa, 0x4e22, 0x9, @private2, 0xdf}, 0x1c) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000001040)={0x9, 0x2, &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0], &(0x7f0000000fc0), &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r7) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000011c0)={&(0x7f0000001080), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x74, r8, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001200)={0xffffffffffffffff}, 0x621297fbe1042170, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000001280)={0x7, 0x8, 0xfa00, {r9, 0x5}}, 0x10) setxattr$trusted_overlay_upper(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), &(0x7f0000001340)={0x0, 0xfb, 0xce, 0x1, 0x3, "09fb54a19a1cf4b987f2e4c91847d6ac", "33387d0f3f83cdd09534e39c626580ccda17a2019ef6be220ce88338f897c9b5eff901f2f4ece5550446bc96a792cb38eb43356acc7edcf3925f5723a77114dd60811877a88ff1e80da2be232eb4459e9d471de27fc65b03ff126e1b2ec87932dc9ef83af9ef56812c08f18a633c806c5d684d86d35f6d087664cc54892d8dc1e2854c9d9fb582cc3aab4fb18cc7c0f86885ff08dfa45b34373b4e2300a7d1e3bed9cd7004c9888bb1902a140670e44789463bfe704a629141"}, 0xce, 0x3) 17.209139485s ago: executing program 1 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='deny', 0x4) setuid(0xee01) r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF F', 0x1c) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0x10001, 0x10000}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x380, 0x8000000000000001) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) close_range(r2, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 17.047640359s ago: executing program 1 (id=284): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x9, 0x2000077d, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x714) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="07000000e3468d143264b9da218b1991cbd52a4bb709c0b821acf57c6c39394e942e274173befe80be33c0a75205b576c1a8ad9012b83e10945340767b417eafaee2a6696e4519ce39cefe4015952812e47acca022ae765a1b00c5070edd77293d7e44e81931fd3aabef5f7c479e1ca297f9ea88094d427455488e84d1577c02ec19fb64242029eee7a0aed8a16436ef56011f52cbd8c7f450af3c091e7000da7f7149e76f6436e4558e51200d3cd03f82915be4c8778f5498", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 1.212526885s ago: executing program 32 (id=284): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x9, 0x2000077d, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e38841818850e90f144671f7730a998f58136ef67d1eb18d0f2e46f71c2a9d34f0122295185bdeb2f4172dac7534801ad577c77e962fa2b195e7541772d563df75f2c4667bc4dfa8cbbfc0283e3a299232ba8945f2da080b64e26c44292f097ce185571cd8ed031b26bfef46134a66bd71967bc90cdbe3ff65c589604727d952a46a2f32bc393ef72713c84f6d6b200b8050232009c7066c8c7523d28e451dc6e243955474f885dee66ad9639e90034751cf3d225646d2ed7e16e74887eb8dada57640e6d5b58e5419fb11cf63d1caf311ad24114aac0c0a4095d8e10c0ff9039f099d201b7f3a5ec74d9b220f2b9ba9d67456dd053d872c6f5dd1340fb56fbacefd34a4bc7ca6a12957ebf648e79878e908800c3b33eb271c6fe6008b83e70ef156910059ad58e7e47db24f824c23feeb8da94ebc56c938d3e80dc9bf95aba44093529390ad31e44dcea486b90b7ffc4d6cda130584c3c4340754423dcb4a075db5ee177be9bf6e6a6eecd3c23592d2e48901b8b5cdad3fa3140bf819e8c28bb4293c18452be2766d1960438e21275dd840a4314a9251e67b3d799f567b6114a67955fe10c82e36e775a039fa826b3b849f30ca34b9ffdf5fdaf19862d9c5962e07992711dec34d61b48104cc27c1eb9eddffeeffe82567e23905bab084071304e1373ef53bd3ca53a44eaf699890757453a2882eaecc59e7610e66db46b93c8d1376b7dd424a08344f9443a92029a566496ecedbf9ace7ffb2ff6503daabac197bc4158159062703818af07db6dbfd773342ff68a0ca5504607ea545e33ff46454392c07f878cecbc4f03c611af8e76b5706a5bbbcf7db03eaebf41fe5b562848eed6264ef94d80aa6fec84dd75aa31accac6b352d77cf9db16609fd606982e4061e1a14947fa257d1c1812c990297027ba7d247e8dc775dc231d318f1019c4f9da720f52a3b1da63b66b8da7f0e93cf2fbe48d818d3921854bac96903ff4cc1dcbc09b737d4259e4e2104e3c996362ca9d0a503f4de2912eb14c92ca57a6655ce0fbc283de04d7aaa887226d090886427024006fca8603f7777ddf5875e72b809a81781b48cb2c4c1c5adf7de8e0a0cca35cdfdb030c91f1b981b2e36cdcf1ba6304483694ec6e310816237cdcebd593e8c0ec18d6446bddb62970077b97a0715545e7ea2fe91a29f828dd1e18c1668bb313f6a8e25e72c9df900f1d0d4c6e4a0fbc222615d2033eee134dcb85d9e6b059b28964f17b048f1a78a4c34e54cf9accd06198e145c4c4f01e856215e55108e55db71ddcc538a649a8016d73d422a550f377f79cc2a460249eade98ed4e082ab1ada4b9ee7024fb7da38424866c49bd463a3198873e0105277cfffcd6e3d6c29472d66577773aaa473beda5544b5f69c215d1e56a4c42732fa3ea530252a7f9005a4f7a235b8bf44adeee87e53701b926130934338fd5e0b0715f60c2e311e9d3dcd08093ec8db55a2886bc75bd11a5f247abc1fd927da1206442ef216cac1b952f2ca9d131", 0x714) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="07000000e3468d143264b9da218b1991cbd52a4bb709c0b821acf57c6c39394e942e274173befe80be33c0a75205b576c1a8ad9012b83e10945340767b417eafaee2a6696e4519ce39cefe4015952812e47acca022ae765a1b00c5070edd77293d7e44e81931fd3aabef5f7c479e1ca297f9ea88094d427455488e84d1577c02ec19fb64242029eee7a0aed8a16436ef56011f52cbd8c7f450af3c091e7000da7f7149e76f6436e4558e51200d3cd03f82915be4c8778f5498", @ANYRES32=0x0, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 1.18825342s ago: executing program 2 (id=286): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000002500)=0x20000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000000)=[@register_looper, @exit_looper, @acquire_done={0x40106309, 0x2}, @exit_looper, @increfs_done], 0xd7, 0x0, &(0x7f0000000280)="8fdaa827d908a293c038689d0b02ce322faf8c0f814cd008c81842d5fa3f0df761e03acc36be0e0aef7472c2adf79001c06383f48e517da32c97f241568f4c77e05b4352cd4215e20b0a2c36a3e9398283f4661bc389a08eaf371675bd4eaac6ca8457b6a94b3fad103a23d742624c59b827f06c5d17d7b1ffeed2dffdc34d7779008ad68ce2bdfe3c9cc735c25ad853a4cf6930621a95ff116db8ca6bb0a9ba7b292bd0037be462202339eaaebbb4486cca6fb25bae6bdf3aa171c0abe6ca4538c9aac43e6ef3ce8a0f1be2f87de44f6a14fa2cd2d48c"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0x25ae, 0x18, [0x3, 0x3, 0x10001, 0x83ab], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 498.78062ms ago: executing program 0 (id=294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010300000000000000002d00000000000000"], 0x1c}}, 0x0) 498.590539ms ago: executing program 0 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) (fail_nth: 9) 370.979972ms ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec/tomoyo/profile/file0\x00', &(0x7f0000000040)='coda\x00', 0xfbc96a3e245405dc, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a40)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x77, 0x6, 0xfa, 0x4, 0xaf3}}, 0x118) 280.201231ms ago: executing program 0 (id=297): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1, r3}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x2000001, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="1c0012800e00014069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 279.378547ms ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002580)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00030008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) 179.834444ms ago: executing program 2 (id=299): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 57.148544ms ago: executing program 2 (id=300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf250400000014000200ff010000000000d45054ee05595a070114000600776c616e30000000000000000000000014000300fc020000000000000000000000000001080004"], 0x58}, 0x1, 0x0, 0x0, 0x4040801}, 0x400c850) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002400000"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 993.794µs ago: executing program 0 (id=301): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) 0s ago: executing program 0 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) (fail_nth: 10) kernel console output (not intermixed with test programs): [ 37.831668][ T42] audit: type=1400 audit(1786479667.882:114): avc: denied { rlimitinh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.839954][ T42] audit: type=1400 audit(1786479667.882:115): avc: denied { siginh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.339095][ T42] audit: type=1400 audit(1786479668.412:116): avc: denied { write } for pid=5634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.408868][ T42] audit: type=1400 audit(1786479668.482:117): avc: denied { write } for pid=5637 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.191510][ T42] audit: type=1400 audit(1786479669.262:118): avc: denied { write } for pid=5640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.235313][ T42] audit: type=1400 audit(1786479669.302:119): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.310434][ T42] audit: type=1400 audit(1786479669.382:120): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:17139' (ED25519) to the list of known hosts. [ 41.742077][ T5656] cgroup: Unknown subsys name 'net' [ 41.890617][ T5656] cgroup: Unknown subsys name 'cpuset' [ 41.896274][ T5656] cgroup: Unknown subsys name 'rlimit' [ 42.130873][ T5712] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.875198][ T5656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.425407][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.425420][ T42] audit: type=1400 audit(1786479676.492:158): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.625894][ T42] audit: type=1400 audit(1786479676.692:159): avc: denied { create } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.634986][ T42] audit: type=1400 audit(1786479676.692:160): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.642611][ T42] audit: type=1400 audit(1786479676.692:161): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.649925][ T42] audit: type=1400 audit(1786479676.712:162): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[6792]" dev="sockfs" ino=6792 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.680372][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.682316][ T5737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.682401][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.683237][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.684363][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.684715][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.685144][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.685411][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.687604][ T5081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.689315][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.690560][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.690890][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.691519][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.692376][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.694038][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.696043][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.699573][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.705347][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.706787][ T42] audit: type=1400 audit(1786479676.772:163): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.706817][ T42] audit: type=1400 audit(1786479676.772:164): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.718617][ T5726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.720412][ T42] audit: type=1400 audit(1786479676.782:165): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.723304][ T5726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.728871][ T42] audit: type=1400 audit(1786479676.782:166): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.753983][ T42] audit: type=1400 audit(1786479676.802:167): avc: denied { sys_module } for pid=5722 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.285813][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.288673][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.290981][ T5722] bridge_slave_0: entered allmulticast mode [ 47.293720][ T5722] bridge_slave_0: entered promiscuous mode [ 47.298270][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.300802][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.303711][ T5722] bridge_slave_1: entered allmulticast mode [ 47.307474][ T5722] bridge_slave_1: entered promiscuous mode [ 47.382824][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.385054][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.387295][ T5723] bridge_slave_0: entered allmulticast mode [ 47.390065][ T5723] bridge_slave_0: entered promiscuous mode [ 47.394168][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.397056][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.400026][ T5723] bridge_slave_1: entered allmulticast mode [ 47.403682][ T5723] bridge_slave_1: entered promiscuous mode [ 47.409844][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.455865][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.469859][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.472942][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.476058][ T5734] bridge_slave_0: entered allmulticast mode [ 47.480339][ T5734] bridge_slave_0: entered promiscuous mode [ 47.485738][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.488806][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.491936][ T5734] bridge_slave_1: entered allmulticast mode [ 47.495877][ T5734] bridge_slave_1: entered promiscuous mode [ 47.545334][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.567811][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.572764][ T5722] team0: Port device team_slave_0 added [ 47.581713][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.599028][ T5722] team0: Port device team_slave_1 added [ 47.614368][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.624693][ T5723] team0: Port device team_slave_0 added [ 47.648439][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.650861][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.653239][ T5724] bridge_slave_0: entered allmulticast mode [ 47.655821][ T5724] bridge_slave_0: entered promiscuous mode [ 47.660202][ T5723] team0: Port device team_slave_1 added [ 47.669583][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.672073][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.680204][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.685877][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.688260][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.696181][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.702358][ T5734] team0: Port device team_slave_0 added [ 47.704570][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707851][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.710625][ T5724] bridge_slave_1: entered allmulticast mode [ 47.713955][ T5724] bridge_slave_1: entered promiscuous mode [ 47.726340][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.730000][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.738197][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.750084][ T5734] team0: Port device team_slave_1 added [ 47.768479][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.770870][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.779028][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.812223][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.817006][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.826327][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.829238][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.839211][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.845378][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.848287][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.858298][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.872859][ T5722] hsr_slave_0: entered promiscuous mode [ 47.875756][ T5722] hsr_slave_1: entered promiscuous mode [ 47.913020][ T5724] team0: Port device team_slave_0 added [ 47.916388][ T5724] team0: Port device team_slave_1 added [ 47.921505][ T5723] hsr_slave_0: entered promiscuous mode [ 47.923876][ T5723] hsr_slave_1: entered promiscuous mode [ 47.926002][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 47.927925][ T5723] Cannot create hsr debugfs directory [ 47.949201][ T5734] hsr_slave_0: entered promiscuous mode [ 47.951461][ T5734] hsr_slave_1: entered promiscuous mode [ 47.953602][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 47.955305][ T5734] Cannot create hsr debugfs directory [ 47.978941][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.981119][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.989378][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.994516][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.996795][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.004494][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.157485][ T5724] hsr_slave_0: entered promiscuous mode [ 48.160757][ T5724] hsr_slave_1: entered promiscuous mode [ 48.163577][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 48.165660][ T5724] Cannot create hsr debugfs directory [ 48.377614][ T5722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.383935][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.387190][ T5722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.391736][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.394305][ T5722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.399335][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.402169][ T5722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.406763][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.446734][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.451930][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.458332][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.463023][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.465677][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.470220][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.475746][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.480457][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.537784][ T5723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.542692][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.545574][ T5723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.550388][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.554778][ T5723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.560062][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.563376][ T5723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.568113][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.642993][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.649536][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.653357][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.659770][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.664850][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.672702][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.682979][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.687719][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.719623][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.724365][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.758452][ T5735] Bluetooth: hci3: command tx timeout [ 48.758711][ T5737] Bluetooth: hci0: command tx timeout [ 48.760256][ T5081] Bluetooth: hci2: command tx timeout [ 48.762956][ T5726] Bluetooth: hci1: command tx timeout [ 48.785506][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.791122][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.803317][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.805739][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.815829][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.818137][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.821933][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.824159][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.834419][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.841838][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.844035][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.870370][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.888168][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.890758][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.906373][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.908996][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.924395][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.964334][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.979470][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.981706][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.002110][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.004317][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.222464][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.247643][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.255601][ T5722] veth0_vlan: entered promiscuous mode [ 49.269948][ T5722] veth1_vlan: entered promiscuous mode [ 49.290725][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.317565][ T5734] veth0_vlan: entered promiscuous mode [ 49.320724][ T5722] veth0_macvtap: entered promiscuous mode [ 49.331969][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.336399][ T5722] veth1_macvtap: entered promiscuous mode [ 49.346157][ T5734] veth1_vlan: entered promiscuous mode [ 49.382771][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.401085][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.404240][ T5723] veth0_vlan: entered promiscuous mode [ 49.417466][ T5734] veth0_macvtap: entered promiscuous mode [ 49.431626][ T5723] veth1_vlan: entered promiscuous mode [ 49.439867][ T5724] veth0_vlan: entered promiscuous mode [ 49.447819][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.451322][ T5734] veth1_macvtap: entered promiscuous mode [ 49.470835][ T5724] veth1_vlan: entered promiscuous mode [ 49.502939][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.515916][ T5723] veth0_macvtap: entered promiscuous mode [ 49.522549][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.536326][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.539119][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.541748][ T5723] veth1_macvtap: entered promiscuous mode [ 49.578078][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.581316][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.584788][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.587672][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.596027][ T5724] veth0_macvtap: entered promiscuous mode [ 49.604763][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.616176][ T5724] veth1_macvtap: entered promiscuous mode [ 49.645830][ T5722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.662530][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.665810][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.671930][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.680472][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.722096][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.724927][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.791826][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.795494][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.874703][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.879024][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.891515][ T5882] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.926582][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.934406][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.963980][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.971714][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.974498][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.006774][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.009847][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.028191][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067399][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.071438][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087150][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.095257][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.107902][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.112009][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116123][ T5907] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.127731][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.130772][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.135880][ T5907] SELinux: security_context_str_to_sid (5ýĆÉ] ÖS9q#“ťë) failed with errno=-22 [ 50.140863][ T5907] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 50.156993][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159790][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.176799][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.180688][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235247][ T5917] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 50.245629][ T5917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.249060][ T5917] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 50.253091][ T5917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11'. [ 50.264543][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.271366][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.276110][ T5917] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 50.283120][ T5917] bond0 (unregistering): Released all slaves [ 50.366752][ T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 50.519716][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=5c.23 [ 50.524658][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.527723][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.534149][ T29] usb 7-1: New USB device strings: Mfr=67, Product=23, SerialNumber=177 [ 50.536908][ T29] usb 7-1: Product: syz [ 50.538187][ T29] usb 7-1: Manufacturer: syz [ 50.539699][ T29] usb 7-1: SerialNumber: syz [ 50.751013][ T29] usb 7-1: usb_control_msg returned -32 [ 50.752887][ T29] usbtmc 7-1:16.0: can't read capabilities [ 50.837199][ T5726] Bluetooth: hci1: command tx timeout [ 50.837427][ T5737] Bluetooth: hci0: command tx timeout [ 50.837459][ T5735] Bluetooth: hci3: command tx timeout [ 50.847062][ T5737] Bluetooth: hci2: command tx timeout [ 51.249422][ T5933] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13'. [ 51.322016][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 51.325116][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 51.328771][ T5943] netlink: 'syz.0.15': attribute type 11 has an invalid length. [ 51.332260][ T5943] netlink: 'syz.0.15': attribute type 7 has an invalid length. [ 51.342958][ T5943] Zero length message leads to an empty skb [ 51.379273][ T5953] program syz.0.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.453651][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 51.453670][ T42] audit: type=1400 audit(1786479681.522:239): avc: denied { create } for pid=5956 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.467252][ T42] audit: type=1400 audit(1786479681.522:240): avc: denied { getopt } for pid=5956 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.475250][ T42] audit: type=1400 audit(1786479681.522:241): avc: denied { ioctl } for pid=5956 comm="syz.0.19" path="socket:[9931]" dev="sockfs" ino=9931 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.493406][ T42] audit: type=1400 audit(1786479681.522:242): avc: denied { ioctl } for pid=5956 comm="syz.0.19" path="socket:[9933]" dev="sockfs" ino=9933 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.503636][ T42] audit: type=1400 audit(1786479681.522:243): avc: denied { accept } for pid=5956 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.511653][ T42] audit: type=1400 audit(1786479681.522:244): avc: denied { read } for pid=5956 comm="syz.0.19" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.521325][ T42] audit: type=1400 audit(1786479681.522:245): avc: denied { open } for pid=5956 comm="syz.0.19" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.531330][ T42] audit: type=1400 audit(1786479681.522:246): avc: denied { ioctl } for pid=5956 comm="syz.0.19" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.540010][ T42] audit: type=1400 audit(1786479681.522:247): avc: denied { read write } for pid=5956 comm="syz.0.19" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.547451][ T42] audit: type=1400 audit(1786479681.522:248): avc: denied { open } for pid=5956 comm="syz.0.19" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.916890][ T5737] Bluetooth: hci3: command tx timeout [ 52.926940][ T5737] Bluetooth: hci0: command tx timeout [ 52.927475][ T5726] Bluetooth: hci2: command tx timeout [ 52.927497][ T5735] Bluetooth: hci1: command tx timeout [ 53.067024][ T5823] usb 7-1: USB disconnect, device number 2 [ 53.100801][ T5967] xt_l2tp: missing protocol rule (udp|l2tpip) [ 53.104087][ T5969] netlink: 232 bytes leftover after parsing attributes in process `syz.2.23'. [ 53.153549][ T5974] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.25'. [ 53.158966][ T5974] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.25'. [ 53.189548][ T5976] XFS (nullb0): Invalid superblock magic number [ 53.230820][ T5988] FAULT_INJECTION: forcing a failure. [ 53.230820][ T5988] name failslab, interval 1, probability 0, space 0, times 1 [ 53.236230][ T5988] CPU: 2 UID: 0 PID: 5988 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 53.236254][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.236274][ T5988] Call Trace: [ 53.236288][ T5988] [ 53.236295][ T5988] dump_stack_lvl+0x100/0x190 [ 53.236325][ T5988] should_fail_ex.cold+0x5/0xa [ 53.236348][ T5988] should_failslab+0xc2/0x120 [ 53.236371][ T5988] __kmalloc_cache_noprof+0x91/0x6c0 [ 53.236389][ T5988] ? trace_parse_run_command+0x58/0x3b0 [ 53.236415][ T5988] trace_parse_run_command+0x58/0x3b0 [ 53.236434][ T5988] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 53.236460][ T5988] vfs_write+0x2aa/0x1050 [ 53.236477][ T5988] ? __pfx_probes_write+0x10/0x10 [ 53.236500][ T5988] ? __pfx_vfs_write+0x10/0x10 [ 53.236514][ T5988] ? __fget_files+0x215/0x3d0 [ 53.236537][ T5988] ? __fget_files+0x21f/0x3d0 [ 53.236561][ T5988] ksys_write+0x12a/0x250 [ 53.236576][ T5988] ? __pfx_ksys_write+0x10/0x10 [ 53.236598][ T5988] do_syscall_64+0x115/0x870 [ 53.236636][ T5988] ? clear_bhb_loop+0x70/0xc0 [ 53.236657][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.236674][ T5988] RIP: 0033:0x7fe111f9e0d9 [ 53.236688][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.236703][ T5988] RSP: 002b:00007fe112e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.236733][ T5988] RAX: ffffffffffffffda RBX: 00007fe112225fa0 RCX: 00007fe111f9e0d9 [ 53.236744][ T5988] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 53.236753][ T5988] RBP: 00007fe112e09090 R08: 0000000000000000 R09: 0000000000000000 [ 53.236762][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.236772][ T5988] R13: 00007fe112226038 R14: 00007fe112225fa0 R15: 00007ffca198d548 [ 53.236795][ T5988] [ 53.245984][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 53.479034][ T6003] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 53.557216][ T29] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.717709][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=5c.23 [ 53.721613][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.724927][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.732195][ T29] usb 5-1: New USB device strings: Mfr=67, Product=23, SerialNumber=177 [ 53.734995][ T29] usb 5-1: Product: syz [ 53.736419][ T29] usb 5-1: Manufacturer: syz [ 53.738085][ T29] usb 5-1: SerialNumber: syz [ 53.953455][ T29] usb 5-1: usb_control_msg returned -32 [ 53.955832][ T29] usbtmc 5-1:16.0: can't read capabilities [ 54.052718][ T6022] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 54.302596][ T6034] XFS (nullb0): Invalid superblock magic number [ 54.395724][ T6045] binder: 6044:6045 ioctl 4018620d 0 returned -22 [ 54.400526][ T6045] binder: 6044:6045 ioctl c0306201 2000000003c0 returned -14 [ 54.996886][ T5726] Bluetooth: hci0: command tx timeout [ 54.998027][ T5737] Bluetooth: hci1: command tx timeout [ 55.007089][ T5737] Bluetooth: hci3: command tx timeout [ 55.008258][ T5726] Bluetooth: hci2: command tx timeout [ 56.415543][ T6003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.446574][ T5831] usb 5-1: USB disconnect, device number 2 [ 56.495589][ T6056] overlayfs: workdir and upperdir must be separate subtrees [ 56.554724][ T6059] FAULT_INJECTION: forcing a failure. [ 56.554724][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 56.560475][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 56.560500][ T6059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.560511][ T6059] Call Trace: [ 56.560517][ T6059] [ 56.560524][ T6059] dump_stack_lvl+0x100/0x190 [ 56.560555][ T6059] should_fail_ex.cold+0x5/0xa [ 56.560578][ T6059] should_failslab+0xc2/0x120 [ 56.560603][ T6059] __kmalloc_noprof+0xfc/0x820 [ 56.560625][ T6059] ? argv_split+0x173/0x420 [ 56.560652][ T6059] argv_split+0x173/0x420 [ 56.560677][ T6059] dyn_event_release+0x8e/0x550 [ 56.560706][ T6059] ? find_held_lock+0x2b/0x80 [ 56.560721][ T6059] ? __might_fault+0xc5/0x140 [ 56.560738][ T6059] ? __pfx_dyn_event_release+0x10/0x10 [ 56.560772][ T6059] create_or_delete_trace_uprobe+0x8f/0xb0 [ 56.560795][ T6059] trace_parse_run_command+0x1ab/0x3b0 [ 56.560816][ T6059] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 56.560843][ T6059] vfs_write+0x2aa/0x1050 [ 56.560860][ T6059] ? __pfx_probes_write+0x10/0x10 [ 56.560883][ T6059] ? __pfx_vfs_write+0x10/0x10 [ 56.560898][ T6059] ? __fget_files+0x215/0x3d0 [ 56.560923][ T6059] ? __fget_files+0x21f/0x3d0 [ 56.560948][ T6059] ksys_write+0x12a/0x250 [ 56.560963][ T6059] ? __pfx_ksys_write+0x10/0x10 [ 56.560986][ T6059] do_syscall_64+0x115/0x870 [ 56.561008][ T6059] ? clear_bhb_loop+0x70/0xc0 [ 56.561029][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.561046][ T6059] RIP: 0033:0x7f01f239e0d9 [ 56.561061][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.561077][ T6059] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.561094][ T6059] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 56.561103][ T6059] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 56.561112][ T6059] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 56.561122][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.561132][ T6059] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 56.561155][ T6059] [ 56.564395][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 56.564411][ T42] audit: type=1400 audit(1786479686.632:320): avc: denied { append } for pid=6060 comm="syz.2.56" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.737721][ T848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.817955][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.821153][ T42] audit: type=1400 audit(1786479686.892:321): avc: denied { read } for pid=6062 comm="syz.0.57" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 56.830164][ T42] audit: type=1400 audit(1786479686.892:322): avc: denied { open } for pid=6062 comm="syz.0.57" path="/15/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 56.840650][ T6065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.844447][ T6065] block device autoloading is deprecated and will be removed. [ 56.849743][ T6064] md: md2 stopped. [ 56.850125][ T42] audit: type=1400 audit(1786479686.922:323): avc: denied { ioctl } for pid=6062 comm="syz.0.57" path="/15/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 56.854365][ T6064] Mass Storage Function, version: 2009/09/11 [ 56.861113][ T42] audit: type=1400 audit(1786479686.922:324): avc: denied { write } for pid=6062 comm="syz.0.57" name="usb_gadget" dev="configfs" ino=6392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.861155][ T42] audit: type=1400 audit(1786479686.922:325): avc: denied { write } for pid=6062 comm="syz.0.57" name="functions" dev="configfs" ino=13919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.881229][ T6064] LUN: removable file: (no medium) [ 56.886884][ T848] usb 6-1: Using ep0 maxpacket: 8 [ 56.889830][ T848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.893060][ T42] audit: type=1400 audit(1786479686.962:326): avc: denied { read } for pid=6062 comm="syz.0.57" name="file" dev="configfs" ino=14765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 56.895288][ T848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.903479][ T42] audit: type=1800 audit(1786479686.962:327): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.57" name="file" dev="configfs" ino=14765 res=0 errno=0 [ 56.906938][ T848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.920507][ T848] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 56.925563][ T848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 56.930638][ T848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 56.934972][ T848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.940820][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.013311][ T42] audit: type=1400 audit(1786479687.082:328): avc: denied { ioctl } for pid=6067 comm="syz.0.58" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.019179][ T50] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 57.028504][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.037220][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 57.041226][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 57.045208][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.054806][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.058977][ T50] usb 7-1: Product: syz [ 57.060754][ T50] usb 7-1: Manufacturer: syz [ 57.062767][ T50] usb 7-1: SerialNumber: syz [ 57.151431][ T848] usb 6-1: GET_CAPABILITIES returned 0 [ 57.153702][ T848] usbtmc 6-1:16.0: can't read capabilities [ 57.281551][ T50] usb 7-1: usb_control_msg returned -71 [ 57.283409][ T50] usbtmc 7-1:1.0: can't read capabilities [ 57.292909][ T50] usb 7-1: USB disconnect, device number 3 [ 57.326334][ T6076] ipt_REJECT: TCP_RESET invalid for non-tcp [ 57.350859][ T42] audit: type=1400 audit(1786479687.422:329): avc: denied { create } for pid=6051 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.360695][ T10] usb 6-1: USB disconnect, device number 2 [ 57.726810][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.866807][ T50] usb 7-1: device descriptor read/64, error -71 [ 57.903401][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 57.944452][ T6084] macvlan2: entered promiscuous mode [ 57.983126][ T6087] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.986419][ T6087] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 57.989977][ T6087] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.992487][ T6087] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 58.003437][ T6087] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 58.072273][ T6090] FAULT_INJECTION: forcing a failure. [ 58.072273][ T6090] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.080011][ T6090] CPU: 3 UID: 0 PID: 6090 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 58.080030][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.080037][ T6090] Call Trace: [ 58.080041][ T6090] [ 58.080045][ T6090] dump_stack_lvl+0x100/0x190 [ 58.080067][ T6090] should_fail_ex.cold+0x5/0xa [ 58.080082][ T6090] _copy_to_user+0x32/0xd0 [ 58.080099][ T6090] simple_read_from_buffer+0xcb/0x170 [ 58.080113][ T6090] proc_fail_nth_read+0x1af/0x230 [ 58.080133][ T6090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.080152][ T6090] ? rw_verify_area+0xce/0x6d0 [ 58.080168][ T6090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.080187][ T6090] vfs_read+0x1e4/0xb40 [ 58.080212][ T6090] ? __pfx_vfs_read+0x10/0x10 [ 58.080229][ T6090] ? __fget_files+0x215/0x3d0 [ 58.080244][ T6090] ? __fget_files+0x21f/0x3d0 [ 58.080259][ T6090] ksys_read+0x12a/0x250 [ 58.080269][ T6090] ? __pfx_ksys_read+0x10/0x10 [ 58.080283][ T6090] do_syscall_64+0x115/0x870 [ 58.080298][ T6090] ? clear_bhb_loop+0x70/0xc0 [ 58.080312][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.080323][ T6090] RIP: 0033:0x7f01f235e90e [ 58.080333][ T6090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.080343][ T6090] RSP: 002b:00007f01f321bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.080355][ T6090] RAX: ffffffffffffffda RBX: 00007f01f321c6c0 RCX: 00007f01f235e90e [ 58.080362][ T6090] RDX: 000000000000000f RSI: 00007f01f321c0a0 RDI: 0000000000000004 [ 58.080368][ T6090] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 58.080374][ T6090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.080380][ T6090] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 58.080394][ T6090] [ 58.117811][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.146719][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 58.189934][ T6092] XFS (nullb0): Invalid superblock magic number [ 58.275792][ T6103] FAULT_INJECTION: forcing a failure. [ 58.275792][ T6103] name failslab, interval 1, probability 0, space 0, times 0 [ 58.280508][ T6103] CPU: 3 UID: 0 PID: 6103 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 58.280525][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.280532][ T6103] Call Trace: [ 58.280536][ T6103] [ 58.280541][ T6103] dump_stack_lvl+0x100/0x190 [ 58.280562][ T6103] should_fail_ex.cold+0x5/0xa [ 58.280578][ T6103] should_failslab+0xc2/0x120 [ 58.280595][ T6103] kmem_cache_alloc_noprof+0x91/0x6a0 [ 58.280609][ T6103] ? __pfx_map_id_range_down+0x10/0x10 [ 58.280623][ T6103] ? security_inode_alloc+0x3b/0x2c0 [ 58.280641][ T6103] security_inode_alloc+0x3b/0x2c0 [ 58.280658][ T6103] inode_init_always_gfp+0xc77/0xfb0 [ 58.280673][ T6103] alloc_inode+0x8e/0x250 [ 58.280695][ T6103] new_inode+0x22/0x1c0 [ 58.280712][ T6103] debugfs_create_dir+0xc4/0x440 [ 58.280731][ T6103] xfs_fs_fill_super+0x37d/0x1f40 [ 58.280747][ T6103] ? setup_bdev_super+0x425/0x730 [ 58.280765][ T6103] get_tree_bdev_flags+0x38c/0x620 [ 58.280783][ T6103] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 58.280798][ T6103] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 58.280816][ T6103] ? cap_capable+0x107/0x430 [ 58.280831][ T6103] ? bpf_lsm_capable+0x9/0x10 [ 58.280843][ T6103] ? security_capable+0x80/0x260 [ 58.280858][ T6103] vfs_get_tree+0x92/0x320 [ 58.280875][ T6103] path_mount+0x7d0/0x23d0 [ 58.280893][ T6103] ? __pfx_path_mount+0x10/0x10 [ 58.280906][ T6103] ? lockdep_hardirqs_on+0x78/0x100 [ 58.280923][ T6103] ? putname+0xb1/0x110 [ 58.280935][ T6103] ? kmem_cache_free+0x127/0x6b0 [ 58.280950][ T6103] ? __x64_sys_mount+0x293/0x310 [ 58.280964][ T6103] __x64_sys_mount+0x293/0x310 [ 58.280980][ T6103] ? __pfx___x64_sys_mount+0x10/0x10 [ 58.280999][ T6103] do_syscall_64+0x115/0x870 [ 58.281013][ T6103] ? clear_bhb_loop+0x70/0xc0 [ 58.281027][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.281038][ T6103] RIP: 0033:0x7f01f239e0d9 [ 58.281048][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.281059][ T6103] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.281070][ T6103] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 58.281078][ T6103] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 58.281084][ T6103] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 58.281090][ T6103] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 58.281097][ T6103] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 58.281110][ T6103] [ 58.281131][ T6103] debugfs: out of free dentries, can not create directory 'nullb0' [ 58.298088][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=5c.23 [ 58.303666][ T6103] XFS (nullb0): Invalid superblock magic number [ 58.307354][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.307388][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.307839][ T50] usb 7-1: device descriptor read/64, error -71 [ 58.309332][ T10] usb 6-1: New USB device strings: Mfr=67, Product=23, SerialNumber=177 [ 58.366166][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 58.381574][ T10] usb 6-1: Product: syz [ 58.394122][ T10] usb 6-1: Manufacturer: syz [ 58.395569][ T10] usb 6-1: SerialNumber: syz [ 58.426951][ T50] usb usb7-port1: attempt power cycle [ 58.497486][ T6115] kvm: Disabled LAPIC found during irq injection [ 58.612319][ T10] usb 6-1: usb_control_msg returned -32 [ 58.614510][ T10] usbtmc 6-1:16.0: can't read capabilities [ 58.768268][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.787442][ T50] usb 7-1: device descriptor read/8, error -71 [ 59.047560][ T50] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 59.067330][ T50] usb 7-1: device descriptor read/8, error -71 [ 59.187738][ T50] usb usb7-port1: unable to enumerate USB device [ 59.372614][ T6119] binfmt_misc: register: failed to install interpreter file ./file1 [ 59.463272][ T6125] netlink: 348 bytes leftover after parsing attributes in process `syz.0.73'. [ 59.502416][ T6127] XFS (nullb0): Invalid superblock magic number [ 59.674716][ T6142] CIFS: VFS: bad security option: krb5iý [ 59.696204][ T6144] FAULT_INJECTION: forcing a failure. [ 59.696204][ T6144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.701159][ T6144] CPU: 3 UID: 0 PID: 6144 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(full) [ 59.701175][ T6144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.701182][ T6144] Call Trace: [ 59.701187][ T6144] [ 59.701191][ T6144] dump_stack_lvl+0x100/0x190 [ 59.701212][ T6144] should_fail_ex.cold+0x5/0xa [ 59.701226][ T6144] ? prepare_alloc_pages+0x16d/0x5f0 [ 59.701243][ T6144] should_fail_alloc_page+0xeb/0x140 [ 59.701260][ T6144] prepare_alloc_pages+0x1f0/0x5f0 [ 59.701279][ T6144] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 59.701297][ T6144] ? stack_trace_save+0x8e/0xc0 [ 59.701310][ T6144] ? __pfx_stack_trace_save+0x10/0x10 [ 59.701322][ T6144] ? stack_depot_save_flags+0x27/0x9d0 [ 59.701344][ T6144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 59.701358][ T6144] ? kasan_save_stack+0x3f/0x50 [ 59.701372][ T6144] ? kasan_save_stack+0x30/0x50 [ 59.701385][ T6144] ? kasan_save_track+0x14/0x30 [ 59.701408][ T6144] ? __kasan_slab_alloc+0x89/0x90 [ 59.701422][ T6144] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 59.701435][ T6144] ? security_inode_alloc+0x3b/0x2c0 [ 59.701451][ T6144] ? inode_init_always_gfp+0xc77/0xfb0 [ 59.701464][ T6144] ? alloc_inode+0x8e/0x250 [ 59.701479][ T6144] ? new_inode+0x22/0x1c0 [ 59.701493][ T6144] ? debugfs_create_dir+0xc4/0x440 [ 59.701510][ T6144] ? xfs_fs_fill_super+0x37d/0x1f40 [ 59.701525][ T6144] ? get_tree_bdev_flags+0x38c/0x620 [ 59.701543][ T6144] ? vfs_get_tree+0x92/0x320 [ 59.701558][ T6144] ? path_mount+0x7d0/0x23d0 [ 59.701572][ T6144] ? __x64_sys_mount+0x293/0x310 [ 59.701585][ T6144] ? look_up_lock_class+0x64/0x120 [ 59.701600][ T6144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.701617][ T6144] ? __lock_acquire+0x49f/0x1a40 [ 59.701631][ T6144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.701647][ T6144] ? policy_nodemask+0xed/0x4f0 [ 59.701664][ T6144] alloc_pages_mpol+0x1fb/0x540 [ 59.701680][ T6144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 59.701695][ T6144] ? do_raw_spin_lock+0x128/0x260 [ 59.701712][ T6144] ? find_held_lock+0x2b/0x80 [ 59.701722][ T6144] ? inode_doinit_with_dentry+0x70b/0x1320 [ 59.701742][ T6144] alloc_pages_noprof+0x1a/0x160 [ 59.701760][ T6144] get_free_pages_noprof+0x10/0xb0 [ 59.701774][ T6144] inode_doinit_with_dentry+0x788/0x1320 [ 59.701794][ T6144] ? inode_set_ctime_current+0x283/0x850 [ 59.701809][ T6144] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 59.701826][ T6144] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 59.701839][ T6144] ? new_inode+0x15a/0x1c0 [ 59.701857][ T6144] selinux_d_instantiate+0x26/0x40 [ 59.701874][ T6144] security_d_instantiate+0x14c/0x1b0 [ 59.701888][ T6144] d_make_persistent+0x64/0x180 [ 59.701905][ T6144] debugfs_create_dir+0x19b/0x440 [ 59.701923][ T6144] xfs_fs_fill_super+0x37d/0x1f40 [ 59.701938][ T6144] ? setup_bdev_super+0x425/0x730 [ 59.701956][ T6144] get_tree_bdev_flags+0x38c/0x620 [ 59.701973][ T6144] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 59.701988][ T6144] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 59.702006][ T6144] ? cap_capable+0x107/0x430 [ 59.702021][ T6144] ? bpf_lsm_capable+0x9/0x10 [ 59.702033][ T6144] ? security_capable+0x80/0x260 [ 59.702048][ T6144] vfs_get_tree+0x92/0x320 [ 59.702065][ T6144] path_mount+0x7d0/0x23d0 [ 59.702082][ T6144] ? __pfx_path_mount+0x10/0x10 [ 59.702096][ T6144] ? lockdep_hardirqs_on+0x78/0x100 [ 59.702111][ T6144] ? putname+0xb1/0x110 [ 59.702124][ T6144] ? kmem_cache_free+0x127/0x6b0 [ 59.702140][ T6144] ? __x64_sys_mount+0x293/0x310 [ 59.702154][ T6144] __x64_sys_mount+0x293/0x310 [ 59.702169][ T6144] ? __pfx___x64_sys_mount+0x10/0x10 [ 59.702188][ T6144] do_syscall_64+0x115/0x870 [ 59.702203][ T6144] ? clear_bhb_loop+0x70/0xc0 [ 59.702217][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.702228][ T6144] RIP: 0033:0x7f01f239e0d9 [ 59.702239][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.702249][ T6144] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.702261][ T6144] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 59.702268][ T6144] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 59.702274][ T6144] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 59.702280][ T6144] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 59.702286][ T6144] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 59.702300][ T6144] [ 59.859114][ T6144] XFS (nullb0): Invalid superblock magic number [ 59.954848][ T6151] binder: 6150:6151 ioctl c0306201 0 returned -14 [ 60.172451][ T6161] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 60.269576][ T6163] XFS (nullb0): Invalid superblock magic number [ 60.406106][ T6176] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 60.434551][ T6176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.84'. [ 60.484307][ T6184] FAULT_INJECTION: forcing a failure. [ 60.484307][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 60.490685][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.2.85 Not tainted syzkaller #0 PREEMPT(full) [ 60.490703][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.490710][ T6184] Call Trace: [ 60.490714][ T6184] [ 60.490719][ T6184] dump_stack_lvl+0x100/0x190 [ 60.490739][ T6184] should_fail_ex.cold+0x5/0xa [ 60.490755][ T6184] should_failslab+0xc2/0x120 [ 60.490772][ T6184] __kmalloc_noprof+0xfc/0x820 [ 60.490786][ T6184] ? __memcg_list_lru_alloc+0x418/0x680 [ 60.490805][ T6184] __memcg_list_lru_alloc+0x418/0x680 [ 60.490817][ T6184] ? xa_load+0x149/0x2c0 [ 60.490837][ T6184] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 60.490851][ T6184] ? rcu_read_unlock+0x17/0x60 [ 60.490871][ T6184] memcg_list_lru_alloc+0xd3/0x100 [ 60.490885][ T6184] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 60.490907][ T6184] ? kasan_save_track+0x14/0x30 [ 60.490923][ T6184] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 60.490937][ T6184] ? start_dirop+0x79/0xb0 [ 60.490948][ T6184] ? alloc_inode+0x68/0x250 [ 60.490965][ T6184] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 60.490982][ T6184] alloc_inode+0x68/0x250 [ 60.490998][ T6184] new_inode+0x22/0x1c0 [ 60.491015][ T6184] debugfs_create_dir+0xc4/0x440 [ 60.491033][ T6184] xfs_fs_fill_super+0x37d/0x1f40 [ 60.491061][ T6184] ? setup_bdev_super+0x425/0x730 [ 60.491079][ T6184] get_tree_bdev_flags+0x38c/0x620 [ 60.491096][ T6184] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 60.491111][ T6184] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 60.491129][ T6184] ? cap_capable+0x107/0x430 [ 60.491146][ T6184] ? bpf_lsm_capable+0x9/0x10 [ 60.491158][ T6184] ? security_capable+0x80/0x260 [ 60.491173][ T6184] vfs_get_tree+0x92/0x320 [ 60.491189][ T6184] path_mount+0x7d0/0x23d0 [ 60.491206][ T6184] ? __pfx_path_mount+0x10/0x10 [ 60.491220][ T6184] ? lockdep_hardirqs_on+0x78/0x100 [ 60.491236][ T6184] ? putname+0xb1/0x110 [ 60.491248][ T6184] ? kmem_cache_free+0x127/0x6b0 [ 60.491264][ T6184] ? __x64_sys_mount+0x293/0x310 [ 60.491278][ T6184] __x64_sys_mount+0x293/0x310 [ 60.491293][ T6184] ? __pfx___x64_sys_mount+0x10/0x10 [ 60.491312][ T6184] do_syscall_64+0x115/0x870 [ 60.491326][ T6184] ? clear_bhb_loop+0x70/0xc0 [ 60.491340][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.491352][ T6184] RIP: 0033:0x7fe111f9e0d9 [ 60.491362][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.491372][ T6184] RSP: 002b:00007fe112e09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.491385][ T6184] RAX: ffffffffffffffda RBX: 00007fe112225fa0 RCX: 00007fe111f9e0d9 [ 60.491391][ T6184] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 60.491398][ T6184] RBP: 00007fe112e09090 R08: 0000000000000000 R09: 0000000000000000 [ 60.491404][ T6184] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 60.491410][ T6184] R13: 00007fe112226038 R14: 00007fe112225fa0 R15: 00007ffca198d548 [ 60.491424][ T6184] [ 60.491438][ T6184] debugfs: out of free dentries, can not create directory 'nullb0' [ 60.611997][ T6184] XFS (nullb0): Invalid superblock magic number [ 60.704533][ T6195] veth0_to_bond: entered allmulticast mode [ 60.912097][ T6210] FAULT_INJECTION: forcing a failure. [ 60.912097][ T6210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.922804][ T50] usb 6-1: USB disconnect, device number 3 [ 60.927558][ T6210] CPU: 3 UID: 0 PID: 6210 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 60.927575][ T6210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.927582][ T6210] Call Trace: [ 60.927587][ T6210] [ 60.927592][ T6210] dump_stack_lvl+0x100/0x190 [ 60.927620][ T6210] should_fail_ex.cold+0x5/0xa [ 60.927639][ T6210] ? prepare_alloc_pages+0x16d/0x5f0 [ 60.927664][ T6210] should_fail_alloc_page+0xeb/0x140 [ 60.927693][ T6210] prepare_alloc_pages+0x1f0/0x5f0 [ 60.927712][ T6210] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 60.927730][ T6210] ? stack_trace_save+0x8e/0xc0 [ 60.927743][ T6210] ? __pfx_stack_trace_save+0x10/0x10 [ 60.927755][ T6210] ? stack_depot_save_flags+0x27/0x9d0 [ 60.927773][ T6210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 60.927787][ T6210] ? kasan_save_stack+0x3f/0x50 [ 60.927800][ T6210] ? kasan_save_stack+0x30/0x50 [ 60.927813][ T6210] ? kasan_save_track+0x14/0x30 [ 60.927827][ T6210] ? __kasan_slab_alloc+0x89/0x90 [ 60.927846][ T6210] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 60.927864][ T6210] ? security_inode_alloc+0x3b/0x2c0 [ 60.927886][ T6210] ? inode_init_always_gfp+0xc77/0xfb0 [ 60.927901][ T6210] ? alloc_inode+0x8e/0x250 [ 60.927916][ T6210] ? new_inode+0x22/0x1c0 [ 60.927931][ T6210] ? debugfs_create_dir+0xc4/0x440 [ 60.927949][ T6210] ? xfs_fs_fill_super+0x37d/0x1f40 [ 60.927969][ T6210] ? get_tree_bdev_flags+0x38c/0x620 [ 60.927993][ T6210] ? vfs_get_tree+0x92/0x320 [ 60.928013][ T6210] ? path_mount+0x7d0/0x23d0 [ 60.928029][ T6210] ? __x64_sys_mount+0x293/0x310 [ 60.928043][ T6210] ? look_up_lock_class+0x64/0x120 [ 60.928060][ T6210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.928086][ T6210] ? __lock_acquire+0x49f/0x1a40 [ 60.928106][ T6210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.928127][ T6210] ? policy_nodemask+0xed/0x4f0 [ 60.928168][ T6210] alloc_pages_mpol+0x1fb/0x540 [ 60.928192][ T6210] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 60.928212][ T6210] ? do_raw_spin_lock+0x128/0x260 [ 60.928230][ T6210] ? find_held_lock+0x2b/0x80 [ 60.928240][ T6210] ? inode_doinit_with_dentry+0x70b/0x1320 [ 60.928260][ T6210] alloc_pages_noprof+0x1a/0x160 [ 60.928278][ T6210] get_free_pages_noprof+0x10/0xb0 [ 60.928293][ T6210] inode_doinit_with_dentry+0x788/0x1320 [ 60.928312][ T6210] ? inode_set_ctime_current+0x283/0x850 [ 60.928326][ T6210] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 60.928344][ T6210] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 60.928358][ T6210] ? new_inode+0x15a/0x1c0 [ 60.928376][ T6210] selinux_d_instantiate+0x26/0x40 [ 60.928393][ T6210] security_d_instantiate+0x14c/0x1b0 [ 60.928406][ T6210] d_make_persistent+0x64/0x180 [ 60.928424][ T6210] debugfs_create_dir+0x19b/0x440 [ 60.928442][ T6210] xfs_fs_fill_super+0x37d/0x1f40 [ 60.928457][ T6210] ? setup_bdev_super+0x425/0x730 [ 60.928475][ T6210] get_tree_bdev_flags+0x38c/0x620 [ 60.928492][ T6210] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 60.928507][ T6210] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 60.928525][ T6210] ? cap_capable+0x107/0x430 [ 60.928540][ T6210] ? bpf_lsm_capable+0x9/0x10 [ 60.928552][ T6210] ? security_capable+0x80/0x260 [ 60.928567][ T6210] vfs_get_tree+0x92/0x320 [ 60.928586][ T6210] path_mount+0x7d0/0x23d0 [ 60.928616][ T6210] ? __pfx_path_mount+0x10/0x10 [ 60.928634][ T6210] ? lockdep_hardirqs_on+0x78/0x100 [ 60.928657][ T6210] ? putname+0xb1/0x110 [ 60.928671][ T6210] ? kmem_cache_free+0x127/0x6b0 [ 60.928690][ T6210] ? __x64_sys_mount+0x293/0x310 [ 60.928705][ T6210] __x64_sys_mount+0x293/0x310 [ 60.928720][ T6210] ? __pfx___x64_sys_mount+0x10/0x10 [ 60.928739][ T6210] do_syscall_64+0x115/0x870 [ 60.928753][ T6210] ? clear_bhb_loop+0x70/0xc0 [ 60.928767][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.928779][ T6210] RIP: 0033:0x7fe111f9e0d9 [ 60.928790][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.928800][ T6210] RSP: 002b:00007fe112e09028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.928811][ T6210] RAX: ffffffffffffffda RBX: 00007fe112225fa0 RCX: 00007fe111f9e0d9 [ 60.928818][ T6210] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 60.928824][ T6210] RBP: 00007fe112e09090 R08: 0000000000000000 R09: 0000000000000000 [ 60.928831][ T6210] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 60.928837][ T6210] R13: 00007fe112226038 R14: 00007fe112225fa0 R15: 00007ffca198d548 [ 60.928851][ T6210] [ 60.947447][ T6210] XFS (nullb0): Invalid superblock magic number [ 60.952899][ T6217] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 61.181272][ T6230] ======================================================= [ 61.181272][ T6230] WARNING: The mand mount option has been deprecated and [ 61.181272][ T6230] and is ignored by this kernel. Remove the mand [ 61.181272][ T6230] option from the mount to silence this warning. [ 61.181272][ T6230] ======================================================= [ 61.198308][ T6230] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.202515][ T6230] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.694809][ T6248] FAULT_INJECTION: forcing a failure. [ 61.694809][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 61.699921][ T6248] CPU: 2 UID: 0 PID: 6248 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(full) [ 61.699947][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.699956][ T6248] Call Trace: [ 61.699963][ T6248] [ 61.699970][ T6248] dump_stack_lvl+0x100/0x190 [ 61.700001][ T6248] should_fail_ex.cold+0x5/0xa [ 61.700025][ T6248] should_failslab+0xc2/0x120 [ 61.700050][ T6248] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 61.700074][ T6248] ? __alloc_workqueue+0xccb/0x1940 [ 61.700106][ T6248] __alloc_workqueue+0xccb/0x1940 [ 61.700140][ T6248] alloc_workqueue_noprof+0xc7/0x130 [ 61.700165][ T6248] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 61.700194][ T6248] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.700220][ T6248] ? _raw_spin_unlock+0x28/0x50 [ 61.700247][ T6248] xfs_init_mount_workqueues+0x63/0x4f0 [ 61.700280][ T6248] xfs_fs_fill_super+0x3d8/0x1f40 [ 61.700301][ T6248] ? setup_bdev_super+0x425/0x730 [ 61.700329][ T6248] get_tree_bdev_flags+0x38c/0x620 [ 61.700355][ T6248] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 61.700379][ T6248] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 61.700405][ T6248] ? cap_capable+0x107/0x430 [ 61.700431][ T6248] ? bpf_lsm_capable+0x9/0x10 [ 61.700449][ T6248] ? security_capable+0x80/0x260 [ 61.700475][ T6248] vfs_get_tree+0x92/0x320 [ 61.700499][ T6248] path_mount+0x7d0/0x23d0 [ 61.700526][ T6248] ? __pfx_path_mount+0x10/0x10 [ 61.700547][ T6248] ? lockdep_hardirqs_on+0x78/0x100 [ 61.700573][ T6248] ? putname+0xb1/0x110 [ 61.700592][ T6248] ? kmem_cache_free+0x127/0x6b0 [ 61.700618][ T6248] ? __x64_sys_mount+0x293/0x310 [ 61.700639][ T6248] __x64_sys_mount+0x293/0x310 [ 61.700662][ T6248] ? __pfx___x64_sys_mount+0x10/0x10 [ 61.700694][ T6248] do_syscall_64+0x115/0x870 [ 61.700715][ T6248] ? clear_bhb_loop+0x70/0xc0 [ 61.700737][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.700755][ T6248] RIP: 0033:0x7f01f239e0d9 [ 61.700771][ T6248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.700787][ T6248] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.700806][ T6248] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 61.700817][ T6248] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 61.700827][ T6248] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 61.700837][ T6248] R10: 0000000000200001 R11: 0000000000000246 R12: 0000000000000002 [ 61.700845][ T6248] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 61.700869][ T6248] [ 61.826562][ T6250] netlink: 'syz.0.104': attribute type 8 has an invalid length. [ 61.885199][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 61.885218][ T42] audit: type=1400 audit(1786479691.952:367): avc: denied { execute } for pid=6251 comm="syz.0.105" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.888184][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 61.896298][ T42] audit: type=1400 audit(1786479691.962:368): avc: denied { bind } for pid=6251 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.008739][ T6255] netlink: 88 bytes leftover after parsing attributes in process `syz.0.106'. [ 62.155385][ T42] audit: type=1400 audit(1786479692.222:369): avc: denied { write } for pid=6262 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.160423][ T6263] netlink: 924 bytes leftover after parsing attributes in process `syz.1.111'. [ 62.166133][ T6263] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 62.223503][ T42] audit: type=1400 audit(1786479692.292:370): avc: denied { create } for pid=6269 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.230648][ T42] audit: type=1400 audit(1786479692.292:371): avc: denied { bind } for pid=6269 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.237503][ T42] audit: type=1400 audit(1786479692.292:372): avc: denied { listen } for pid=6269 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.245367][ T42] audit: type=1400 audit(1786479692.292:373): avc: denied { accept } for pid=6269 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.284146][ T42] audit: type=1400 audit(1786479692.352:374): avc: denied { map } for pid=6269 comm="syz.2.112" path="socket:[16879]" dev="sockfs" ino=16879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.291544][ T42] audit: type=1400 audit(1786479692.352:375): avc: denied { read write } for pid=6269 comm="syz.2.112" path="socket:[16879]" dev="sockfs" ino=16879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.362969][ T42] audit: type=1400 audit(1786479692.432:376): avc: denied { sys_module } for pid=6277 comm="syz.1.115" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.389846][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'. [ 62.745030][ T6298] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.122'. [ 62.940287][ T6305] Line length is too long: Should be less than 4094 [ 63.065033][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.069099][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.390988][ T6324] warning: `syz.1.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.404765][ T5823] IPVS: starting estimator thread 0... [ 63.460304][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 63.460317][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 63.496869][ T6325] IPVS: using max 43 ests per chain, 103200 per kthread [ 63.509221][ T6328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6328 comm=syz.1.132 [ 63.629454][ T6328] veth3: entered allmulticast mode [ 63.694777][ T6328] bond0: (slave veth3): Enslaving as an active interface with an up link [ 63.701695][ T6340] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 63.709600][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.712990][ T6340] bond0: (slave team0): Enslaving as an active interface with an up link [ 63.742763][ T6336] bond0 (unregistering): (slave veth3): Releasing backup interface [ 63.747241][ T6336] bond0 (unregistering): Released all slaves [ 63.870182][ T6344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.136'. [ 63.976869][ T5727] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 64.126769][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 64.130385][ T5727] usb 7-1: unable to get BOS descriptor or descriptor too short [ 64.133690][ T5727] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 64.141401][ T5727] usb 7-1: string descriptor 0 read error: -22 [ 64.145704][ T5727] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 64.154521][ T5727] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 64.157826][ T5727] dw2102: su3000_power_ctrl: 1, initialized 0 [ 64.160799][ T5727] dvb-usb: bulk message failed: -22 (2/0) [ 64.172070][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.175727][ T5727] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 64.179219][ T5727] usb 7-1: media controller created [ 64.181470][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.183453][ T5727] dw2102: i2c transfer failed. [ 64.185254][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.187707][ T5727] dw2102: i2c transfer failed. [ 64.189244][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.191144][ T5727] dw2102: i2c transfer failed. [ 64.192692][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.194537][ T5727] dw2102: i2c transfer failed. [ 64.196522][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.201330][ T5727] dw2102: i2c transfer failed. [ 64.202901][ T5727] dvb-usb: bulk message failed: -22 (6/0) [ 64.205189][ T5727] dw2102: i2c transfer failed. [ 64.207212][ T5727] dvb-usb: MAC address: 02:02:02:02:02:02 [ 64.216093][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.241511][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 64.244072][ T5727] dw2102: command 0x0e transfer failed. [ 64.246466][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 64.250309][ T5727] dw2102: command 0x0e transfer failed. [ 64.291498][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 64.558361][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 64.561529][ T5727] dw2102: command 0x0e transfer failed. [ 64.563347][ T5727] dvb-usb: bulk message failed: -22 (3/0) [ 64.565156][ T5727] dw2102: command 0x0e transfer failed. [ 64.567152][ T5727] dvb-usb: bulk message failed: -22 (1/0) [ 64.569575][ T5727] dw2102: command 0x51 transfer failed. [ 64.572180][ T6335] dvb-usb: bulk message failed: -22 (4/0) [ 64.575909][ T6335] dw2102: i2c transfer failed. [ 64.588495][ T5727] DVB: Unable to find symbol ds3000_attach() [ 64.590465][ T5727] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 64.646683][ T5727] rc_core: IR keymap rc-su3000 not found [ 64.648563][ T5727] Registered IR keymap rc-empty [ 64.651759][ T5727] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 64.656001][ T5727] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input6 [ 64.666355][ T5727] dvb-usb: schedule remote query interval to 150 msecs. [ 64.669336][ T5727] dw2102: su3000_power_ctrl: 0, initialized 1 [ 64.671314][ T5727] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 64.675527][ T5727] usb 7-1: USB disconnect, device number 8 [ 64.718318][ T5727] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 65.027305][ T6365] netlink: 872 bytes leftover after parsing attributes in process `syz.1.140'. [ 65.033342][ T6365] netlink: 872 bytes leftover after parsing attributes in process `syz.1.140'. [ 65.223471][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 65.251245][ T6394] bridge_slave_1: left allmulticast mode [ 65.253539][ T6394] bridge_slave_1: left promiscuous mode [ 65.257402][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.262363][ T6394] bridge_slave_0: left allmulticast mode [ 65.264241][ T6394] bridge_slave_0: left promiscuous mode [ 65.266139][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.476909][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 65.487519][ T6404] team0: Device vlan2 is already an upper device of the team interface [ 65.540933][ T6409] jffs2: notice: (6409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 65.637219][ T34] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 65.641046][ T34] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 65.643687][ T34] usb 7-1: config 1 has no interface number 0 [ 65.645662][ T34] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 65.649672][ T34] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 98, changing to 10 [ 65.655013][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.657869][ T34] usb 7-1: Product: syz [ 65.659253][ T34] usb 7-1: Manufacturer: syz [ 65.660880][ T34] usb 7-1: SerialNumber: syz [ 65.665359][ T6390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.669352][ T34] usb 7-1: Error in usbnet_get_endpoints (-22) [ 65.764617][ T6416] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 65.795867][ T6418] Bluetooth: MGMT ver 1.23 [ 65.916102][ T6428] netlink: 'syz.1.160': attribute type 7 has an invalid length. [ 65.924977][ T6428] netlink: 'syz.1.160': attribute type 7 has an invalid length. [ 65.936770][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.940311][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.957532][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.960614][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.149105][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.245159][ T6440] FAULT_INJECTION: forcing a failure. [ 66.245159][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 66.250896][ T6440] CPU: 2 UID: 0 PID: 6440 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT(full) [ 66.250922][ T6440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.250932][ T6440] Call Trace: [ 66.250947][ T6440] [ 66.250954][ T6440] dump_stack_lvl+0x100/0x190 [ 66.251027][ T6440] should_fail_ex.cold+0x5/0xa [ 66.251056][ T6440] should_failslab+0xc2/0x120 [ 66.251088][ T6440] __kmalloc_noprof+0xfc/0x820 [ 66.251107][ T6440] ? rcu_is_watching+0x12/0xc0 [ 66.251140][ T6440] ? tomoyo_realpath_from_path+0xb6/0x690 [ 66.251171][ T6440] tomoyo_realpath_from_path+0xb6/0x690 [ 66.251193][ T6440] tomoyo_path_number_perm+0x23c/0x580 [ 66.251216][ T6440] ? tomoyo_path_number_perm+0x22e/0x580 [ 66.251242][ T6440] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.251289][ T6440] ? find_held_lock+0x2b/0x80 [ 66.251304][ T6440] ? __fget_files+0x215/0x3d0 [ 66.251321][ T6440] ? hook_file_ioctl_common+0x140/0x440 [ 66.251340][ T6440] ? __fget_files+0x215/0x3d0 [ 66.251361][ T6440] ? __fget_files+0x21f/0x3d0 [ 66.251382][ T6440] security_file_ioctl+0xd3/0x230 [ 66.251410][ T6440] __x64_sys_ioctl+0xb7/0x210 [ 66.251436][ T6440] do_syscall_64+0x115/0x870 [ 66.251510][ T6440] ? clear_bhb_loop+0x70/0xc0 [ 66.251531][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.251548][ T6440] RIP: 0033:0x7f5403d9e0d9 [ 66.251563][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.251579][ T6440] RSP: 002b:00007f5404bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.251605][ T6440] RAX: ffffffffffffffda RBX: 00007f5404025fa0 RCX: 00007f5403d9e0d9 [ 66.251616][ T6440] RDX: 0000200000000100 RSI: 00000000c0386105 RDI: 0000000000000003 [ 66.251625][ T6440] RBP: 00007f5404bed090 R08: 0000000000000000 R09: 0000000000000000 [ 66.251635][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.251644][ T6440] R13: 00007f5404026038 R14: 00007f5404025fa0 R15: 00007ffca6e8fd08 [ 66.251673][ T6440] [ 66.251680][ T6440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.408526][ T6444] bridge0: port 3(vxlan0) entered blocking state [ 66.411083][ T6444] bridge0: port 3(vxlan0) entered disabled state [ 66.413739][ T6444] vxlan0: entered allmulticast mode [ 66.417431][ T6444] vxlan0: entered promiscuous mode [ 66.467817][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 66.510286][ T6451] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 66.546565][ T6452] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 66.581987][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.587375][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.947721][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.952749][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.975982][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 66.976002][ T42] audit: type=1400 audit(1786479697.042:425): avc: denied { prog_run } for pid=6476 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.256782][ T5727] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 67.406768][ T5727] usb 5-1: Invalid ep0 maxpacket: 16 [ 67.451294][ T42] audit: type=1400 audit(1786479697.522:426): avc: denied { map_create } for pid=6483 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.460151][ T42] audit: type=1400 audit(1786479697.522:427): avc: denied { map_read map_write } for pid=6483 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.536805][ T5727] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 67.647117][ T42] audit: type=1400 audit(1786479697.722:428): avc: denied { create } for pid=6490 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 67.688293][ T5727] usb 5-1: Invalid ep0 maxpacket: 16 [ 67.690981][ T5727] usb usb5-port1: attempt power cycle [ 67.734964][ T42] audit: type=1400 audit(1786479697.802:429): avc: denied { mount } for pid=6495 comm="syz.1.181" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 67.966946][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.036855][ T5727] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 68.067363][ T5727] usb 5-1: Invalid ep0 maxpacket: 16 [ 68.127248][ T34] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 68.131983][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.135268][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 68.138485][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.144062][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 68.146753][ T34] usb 6-1: Product: syz [ 68.148174][ T34] usb 6-1: Manufacturer: syz [ 68.152384][ T6496] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 68.157938][ T34] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 68.165826][ T34] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 68.197998][ T5727] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 68.217659][ T5727] usb 5-1: Invalid ep0 maxpacket: 16 [ 68.219753][ T5727] usb usb5-port1: unable to enumerate USB device [ 68.364977][ T42] audit: type=1400 audit(1786479698.432:430): avc: denied { mounton } for pid=6495 comm="syz.1.181" path="/78/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 68.367886][ T6496] jffs2: notice: (6496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 68.378509][ T29] usb 7-1: USB disconnect, device number 9 [ 68.387008][ T42] audit: type=1400 audit(1786479698.462:431): avc: denied { write } for pid=6495 comm="syz.1.181" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.408802][ T50] usb 6-1: USB disconnect, device number 4 [ 68.433663][ T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 68.438708][ T50] garmin_gps 6-1:1.0: device disconnected [ 68.501789][ T42] audit: type=1400 audit(1786479698.572:432): avc: denied { connect } for pid=6502 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.507875][ T42] audit: type=1400 audit(1786479698.572:433): avc: denied { write } for pid=6502 comm="syz.2.184" path="socket:[22098]" dev="sockfs" ino=22098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.515232][ T42] audit: type=1400 audit(1786479698.582:434): avc: denied { read } for pid=6502 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.545308][ T6505] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 68.607043][ T6505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.610112][ T6505] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 68.627758][ T6505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.630311][ T6505] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 68.638843][ T6505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.641455][ T6505] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 68.650762][ T6505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.653522][ T6505] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 68.884000][ T6517] i2c i2c-1: dtv_property_process_set: SET cmd 0x30303030 undefined [ 68.959745][ T6521] netlink: 'syz.1.189': attribute type 39 has an invalid length. [ 69.377991][ T6532] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 69.381189][ T6532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.192'. [ 69.834081][ T6540] netlink: 144 bytes leftover after parsing attributes in process `syz.2.195'. [ 69.959536][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 70.024279][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 70.061052][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 70.128472][ T6568] netlink: 136 bytes leftover after parsing attributes in process `syz.2.203'. [ 70.161428][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 70.166728][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 70.171093][ T6568] netlink: 'syz.2.203': attribute type 12 has an invalid length. [ 70.174925][ T6568] netlink: 'syz.2.203': attribute type 15 has an invalid length. [ 70.319166][ T6574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.335264][ T6582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.499688][ T6574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.544219][ T6593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.211'. [ 70.613672][ T6595] netlink: 'syz.0.212': attribute type 39 has an invalid length. [ 70.641066][ T6574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.765320][ T6574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.887084][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.906853][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.917299][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.923687][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.071169][ T6612] netlink: 'syz.2.217': attribute type 8 has an invalid length. [ 71.242733][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.284936][ T6619] nvmet: adding nsid 1 to subsystem testnqn [ 72.067031][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 72.067061][ T42] audit: type=1400 audit(1786479702.142:457): avc: denied { create } for pid=6631 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.082218][ T42] audit: type=1400 audit(1786479702.152:458): avc: denied { write } for pid=6631 comm="syz.2.225" path="socket:[25174]" dev="sockfs" ino=25174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.149073][ T6635] fuse: Unknown parameter 'default_permis' [ 72.159586][ T6635] kAFS: unable to lookup cell '(,cľűL' [ 72.275650][ T42] audit: type=1400 audit(1786479702.342:459): avc: denied { write } for pid=6639 comm="syz.2.227" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.546711][ T6066] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 72.696543][ T42] audit: type=1400 audit(1786479702.762:460): avc: denied { mount } for pid=6644 comm="syz.1.229" name="/" dev="hugetlbfs" ino=25700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 72.707094][ T6066] usb 7-1: Using ep0 maxpacket: 16 [ 72.711262][ T6066] usb 7-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.40 [ 72.717156][ T6066] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.721950][ T6066] usb 7-1: config 1 interface 0 has no altsetting 0 [ 72.722157][ T42] audit: type=1400 audit(1786479702.792:461): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 72.725879][ T6066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.748454][ T6066] usb 7-1: Product: syz [ 72.751678][ T6066] usb 7-1: Manufacturer: syz [ 72.755021][ T6066] usb 7-1: SerialNumber: syz [ 72.780302][ T6651] FAULT_INJECTION: forcing a failure. [ 72.780302][ T6651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.794628][ T6651] CPU: 3 UID: 0 PID: 6651 Comm: syz.1.230 Not tainted syzkaller #0 PREEMPT(full) [ 72.794647][ T6651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.794661][ T6651] Call Trace: [ 72.794666][ T6651] [ 72.794670][ T6651] dump_stack_lvl+0x100/0x190 [ 72.794706][ T6651] should_fail_ex.cold+0x5/0xa [ 72.794730][ T6651] _copy_from_user+0x2e/0xd0 [ 72.794764][ T6651] dev_config+0x125/0x1610 [ 72.794790][ T6651] ? __pfx_dev_config+0x10/0x10 [ 72.794811][ T6651] vfs_write+0x2aa/0x1050 [ 72.794829][ T6651] ? __pfx_dev_config+0x10/0x10 [ 72.794846][ T6651] ? __pfx_vfs_write+0x10/0x10 [ 72.794856][ T6651] ? __fget_files+0x215/0x3d0 [ 72.794872][ T6651] ? __fget_files+0x21f/0x3d0 [ 72.794887][ T6651] ksys_write+0x12a/0x250 [ 72.794898][ T6651] ? __pfx_ksys_write+0x10/0x10 [ 72.794912][ T6651] do_syscall_64+0x115/0x870 [ 72.794927][ T6651] ? clear_bhb_loop+0x70/0xc0 [ 72.794941][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.794953][ T6651] RIP: 0033:0x7f5403d9e0d9 [ 72.794964][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.794975][ T6651] RSP: 002b:00007f5404bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.795005][ T6651] RAX: ffffffffffffffda RBX: 00007f5404025fa0 RCX: 00007f5403d9e0d9 [ 72.795014][ T6651] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 72.795020][ T6651] RBP: 00007f5404bed090 R08: 0000000000000000 R09: 0000000000000000 [ 72.795026][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.795032][ T6651] R13: 00007f5404026038 R14: 00007f5404025fa0 R15: 00007ffca6e8fd08 [ 72.795047][ T6651] [ 72.905474][ T42] audit: type=1400 audit(1786479702.972:462): avc: denied { connect } for pid=6657 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.917934][ T42] audit: type=1400 audit(1786479702.992:463): avc: denied { getopt } for pid=6657 comm="syz.0.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.940556][ T6658] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 72.954323][ T6658] gadgetfs: bound to dummy_udc driver [ 73.185873][ T42] audit: type=1400 audit(1786479703.252:464): avc: denied { create } for pid=6639 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 73.227655][ T6066] usbhid 7-1:1.0: can't add hid device: -71 [ 73.233519][ T6066] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 73.240625][ T6066] usb 7-1: USB disconnect, device number 10 [ 73.499952][ T42] audit: type=1400 audit(1786479703.572:465): avc: denied { create } for pid=6680 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.509689][ T42] audit: type=1400 audit(1786479703.572:466): avc: denied { ioctl } for pid=6680 comm="syz.1.242" path="socket:[25890]" dev="sockfs" ino=25890 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.574783][ T6684] ima: policy update completed [ 73.649711][ T6686] gadgetfs: bound to dummy_udc driver [ 73.652195][ T6688] nvme_fabrics: unknown parameter or missing value 'transp‹' in ctrl creation request [ 73.793327][ T6695] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 73.976554][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 74.037558][ T6698] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 74.346835][ T6066] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 74.496723][ T6066] usb 5-1: Using ep0 maxpacket: 8 [ 74.499755][ T6066] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.506108][ T6066] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 74.510603][ T6066] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.514488][ T6066] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.518532][ T6066] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.523788][ T6066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.750062][ T6706] gadgetfs: bound to dummy_udc driver [ 74.760536][ T6066] usb 5-1: usb_control_msg returned -71 [ 74.762455][ T6066] usbtmc 5-1:16.0: can't read capabilities [ 74.776438][ T6066] usb 5-1: USB disconnect, device number 7 [ 76.213352][ T6734] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.336419][ T6744] __nla_validate_parse: 1 callbacks suppressed [ 76.336439][ T6744] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.261'. [ 77.086925][ T6710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.101662][ T6744] netlink: 'syz.0.261': attribute type 2 has an invalid length. [ 77.106456][ T6744] netlink: 232 bytes leftover after parsing attributes in process `syz.0.261'. [ 77.114903][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 77.114915][ T42] audit: type=1400 audit(1786479707.182:530): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.144664][ T42] audit: type=1800 audit(1786479707.212:531): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 77.169456][ T42] audit: type=1800 audit(1786479707.232:532): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 77.179100][ T42] audit: type=1800 audit(1786479707.242:533): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16285 res=0 errno=0 [ 77.190057][ T42] audit: type=1400 audit(1786479707.262:534): avc: denied { setopt } for pid=6754 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.238865][ T6758] process 'syz.0.263' launched './file2' with NULL argv: empty string added [ 77.247594][ T42] audit: type=1400 audit(1786479707.322:535): avc: denied { execute_no_trans } for pid=6750 comm="syz.0.263" path="/92/file2" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.261161][ T42] audit: type=1400 audit(1786479707.322:536): avc: denied { create } for pid=6750 comm="syz.0.263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.270717][ T42] audit: type=1400 audit(1786479707.322:537): avc: denied { unlink } for pid=6750 comm="syz.0.263" name="file0" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 77.280692][ T42] audit: type=1800 audit(1786479707.332:538): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16414 res=0 errno=0 [ 77.290984][ T42] audit: type=1400 audit(1786479707.352:539): avc: denied { create } for pid=6750 comm="syz.0.263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.655008][ T6771] FAULT_INJECTION: forcing a failure. [ 77.655008][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 77.660134][ T6771] CPU: 3 UID: 0 PID: 6771 Comm: syz.0.268 Not tainted syzkaller #0 PREEMPT(full) [ 77.660150][ T6771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.660163][ T6771] Call Trace: [ 77.660182][ T6771] [ 77.660187][ T6771] dump_stack_lvl+0x100/0x190 [ 77.660259][ T6771] should_fail_ex.cold+0x5/0xa [ 77.660291][ T6771] should_failslab+0xc2/0x120 [ 77.660325][ T6771] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 77.660341][ T6771] ? __lock_acquire+0x49f/0x1a40 [ 77.660365][ T6771] ? kstrdup_const+0x63/0x80 [ 77.660386][ T6771] kstrdup+0x51/0xe0 [ 77.660400][ T6771] kstrdup_const+0x63/0x80 [ 77.660412][ T6771] __kernfs_new_node+0x9b/0xa10 [ 77.660442][ T6771] ? __pfx___kernfs_new_node+0x10/0x10 [ 77.660459][ T6771] ? find_held_lock+0x2b/0x80 [ 77.660470][ T6771] ? kernfs_root+0xee/0x2a0 [ 77.660481][ T6771] ? kernfs_root+0xee/0x2a0 [ 77.660496][ T6771] kernfs_new_node+0x117/0x150 [ 77.660513][ T6771] kernfs_create_link+0xcc/0x240 [ 77.660532][ T6771] sysfs_do_create_link_sd+0x90/0x140 [ 77.660546][ T6771] sysfs_create_link+0x61/0xc0 [ 77.660559][ T6771] driver_sysfs_add+0x91/0x2d0 [ 77.660597][ T6771] really_probe+0x146/0xa60 [ 77.660613][ T6771] __driver_probe_device+0x20e/0x450 [ 77.660626][ T6771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.660648][ T6771] driver_probe_device+0x4a/0x140 [ 77.660662][ T6771] __driver_attach+0x21f/0x5b0 [ 77.660677][ T6771] ? __pfx___driver_attach+0x10/0x10 [ 77.660691][ T6771] bus_for_each_dev+0x13e/0x1d0 [ 77.660702][ T6771] ? __pfx_bus_for_each_dev+0x10/0x10 [ 77.660713][ T6771] ? bus_add_driver+0x2b5/0x5b0 [ 77.660728][ T6771] bus_add_driver+0x305/0x5b0 [ 77.660742][ T6771] driver_register+0x1e2/0x360 [ 77.660759][ T6771] usb_gadget_register_driver_owner+0x132/0x210 [ 77.660789][ T6771] dev_config+0xdce/0x1610 [ 77.660807][ T6771] ? __pfx_dev_config+0x10/0x10 [ 77.660827][ T6771] vfs_write+0x2aa/0x1050 [ 77.660844][ T6771] ? __pfx_dev_config+0x10/0x10 [ 77.660861][ T6771] ? __pfx_vfs_write+0x10/0x10 [ 77.660871][ T6771] ? __fget_files+0x215/0x3d0 [ 77.660886][ T6771] ? __fget_files+0x21f/0x3d0 [ 77.660902][ T6771] ksys_write+0x12a/0x250 [ 77.660912][ T6771] ? __pfx_ksys_write+0x10/0x10 [ 77.660926][ T6771] do_syscall_64+0x115/0x870 [ 77.660957][ T6771] ? clear_bhb_loop+0x70/0xc0 [ 77.660971][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.660983][ T6771] RIP: 0033:0x7f01f239e0d9 [ 77.660993][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.661005][ T6771] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.661031][ T6771] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 77.661038][ T6771] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 77.661044][ T6771] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 77.661051][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.661057][ T6771] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 77.661074][ T6771] [ 77.661089][ T6771] gadgetfs gadget.0: really_probe: driver_sysfs_add failed [ 77.804820][ T6771] gadgetfs: bound to dummy_udc driver [ 78.128320][ T6066] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.306689][ T6066] usb 5-1: Using ep0 maxpacket: 8 [ 78.308925][ T6066] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 78.312740][ T6066] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.315435][ T6066] usb 5-1: config 179 has no interface number 0 [ 78.317937][ T6066] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 78.321451][ T6066] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 78.324982][ T6066] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.328706][ T6066] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.331899][ T6066] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.336021][ T6066] usb 5-1: config 179 interface 65 has no altsetting 0 [ 78.338280][ T6066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.372460][ T6066] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input8 [ 78.517962][ T5727] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.562121][ T6775] gadgetfs: bound to dummy_udc driver [ 78.601810][ T848] usb 5-1: USB disconnect, device number 8 [ 78.603841][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.668239][ T5727] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.673237][ T5727] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.677802][ T5727] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.681203][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.689361][ T6778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.702070][ T5727] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.881355][ T6783] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 78.898100][ T5727] usb 6-1: USB disconnect, device number 5 [ 79.143251][ T6791] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 79.201719][ T6795] FAULT_INJECTION: forcing a failure. [ 79.201719][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 79.207364][ T6795] CPU: 3 UID: 0 PID: 6795 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 79.207388][ T6795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.207424][ T6795] Call Trace: [ 79.207431][ T6795] [ 79.207438][ T6795] dump_stack_lvl+0x100/0x190 [ 79.207468][ T6795] should_fail_ex.cold+0x5/0xa [ 79.207492][ T6795] should_failslab+0xc2/0x120 [ 79.207516][ T6795] kmem_cache_alloc_noprof+0x91/0x6a0 [ 79.207536][ T6795] ? __asan_memcpy+0x3c/0x60 [ 79.207553][ T6795] ? __kernfs_new_node+0xd2/0xa10 [ 79.207585][ T6795] __kernfs_new_node+0xd2/0xa10 [ 79.207610][ T6795] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.207637][ T6795] ? find_held_lock+0x2b/0x80 [ 79.207652][ T6795] ? kernfs_root+0xee/0x2a0 [ 79.207669][ T6795] ? kernfs_root+0xee/0x2a0 [ 79.207694][ T6795] kernfs_new_node+0x117/0x150 [ 79.207719][ T6795] kernfs_create_link+0xcc/0x240 [ 79.207748][ T6795] sysfs_do_create_link_sd+0x90/0x140 [ 79.207768][ T6795] sysfs_create_link+0x61/0xc0 [ 79.207787][ T6795] driver_sysfs_add+0x91/0x2d0 [ 79.207810][ T6795] really_probe+0x146/0xa60 [ 79.207835][ T6795] __driver_probe_device+0x20e/0x450 [ 79.207855][ T6795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.207877][ T6795] driver_probe_device+0x4a/0x140 [ 79.207898][ T6795] __driver_attach+0x21f/0x5b0 [ 79.207919][ T6795] ? __pfx___driver_attach+0x10/0x10 [ 79.207939][ T6795] bus_for_each_dev+0x13e/0x1d0 [ 79.207956][ T6795] ? __pfx_bus_for_each_dev+0x10/0x10 [ 79.207971][ T6795] ? bus_add_driver+0x2b5/0x5b0 [ 79.207997][ T6795] bus_add_driver+0x305/0x5b0 [ 79.208017][ T6795] driver_register+0x1e2/0x360 [ 79.208043][ T6795] usb_gadget_register_driver_owner+0x132/0x210 [ 79.208072][ T6795] dev_config+0xdce/0x1610 [ 79.208100][ T6795] ? __pfx_dev_config+0x10/0x10 [ 79.208129][ T6795] vfs_write+0x2aa/0x1050 [ 79.208146][ T6795] ? __pfx_dev_config+0x10/0x10 [ 79.208171][ T6795] ? __pfx_vfs_write+0x10/0x10 [ 79.208186][ T6795] ? __fget_files+0x215/0x3d0 [ 79.208209][ T6795] ? __fget_files+0x21f/0x3d0 [ 79.208235][ T6795] ksys_write+0x12a/0x250 [ 79.208250][ T6795] ? __pfx_ksys_write+0x10/0x10 [ 79.208275][ T6795] do_syscall_64+0x115/0x870 [ 79.208297][ T6795] ? clear_bhb_loop+0x70/0xc0 [ 79.208318][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.208336][ T6795] RIP: 0033:0x7fe111f9e0d9 [ 79.208350][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.208367][ T6795] RSP: 002b:00007fe112e09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.208385][ T6795] RAX: ffffffffffffffda RBX: 00007fe112225fa0 RCX: 00007fe111f9e0d9 [ 79.208396][ T6795] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 79.208405][ T6795] RBP: 00007fe112e09090 R08: 0000000000000000 R09: 0000000000000000 [ 79.208415][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.208426][ T6795] R13: 00007fe112226038 R14: 00007fe112225fa0 R15: 00007ffca198d548 [ 79.208450][ T6795] [ 79.208487][ T6795] gadgetfs gadget.0: really_probe: driver_sysfs_add failed [ 79.336251][ T5727] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.339612][ T6795] gadgetfs: bound to dummy_udc driver [ 79.377776][ T6797] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 79.447204][ T6800] dlm: no locking on control device [ 79.499368][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 79.560678][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 79.563650][ T5727] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 79.567995][ T5727] usb 6-1: no configurations [ 79.569885][ T5727] usb 6-1: can't read configurations, error -22 [ 80.109451][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 81.562176][ T1348] cfg80211: failed to load regulatory.db [ 96.207369][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 96.207402][ T42] audit: type=1400 audit(1786479726.282:626): avc: denied { execute } for pid=6829 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.219254][ T42] audit: type=1400 audit(1786479726.292:627): avc: denied { execute_no_trans } for pid=6829 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.246084][ T42] audit: type=1400 audit(1786479726.312:628): avc: denied { setattr } for pid=6830 comm="syz.2.286" path="socket:[42271]" dev="sockfs" ino=42271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.308392][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.312417][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.312924][ T6836] binder: 6830:6836 ioctl c0389423 200000000140 returned -22 [ 96.317175][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.319999][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.323046][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.325430][ T6838] FAULT_INJECTION: forcing a failure. [ 96.325430][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 96.331666][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(full) [ 96.331684][ T6838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.331691][ T6838] Call Trace: [ 96.331706][ T6838] [ 96.331710][ T6838] dump_stack_lvl+0x100/0x190 [ 96.331763][ T6838] should_fail_ex.cold+0x5/0xa [ 96.331784][ T6838] should_failslab+0xc2/0x120 [ 96.331808][ T6838] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.331824][ T6838] ? __kernfs_new_node+0xd2/0xa10 [ 96.331847][ T6838] __kernfs_new_node+0xd2/0xa10 [ 96.331863][ T6838] ? __pfx___kernfs_new_node+0x10/0x10 [ 96.331881][ T6838] ? find_held_lock+0x2b/0x80 [ 96.331896][ T6838] ? kernfs_root+0xee/0x2a0 [ 96.331909][ T6838] ? kernfs_root+0xee/0x2a0 [ 96.331924][ T6838] kernfs_new_node+0x117/0x150 [ 96.331941][ T6838] kernfs_create_link+0xcc/0x240 [ 96.331961][ T6838] sysfs_do_create_link_sd+0x90/0x140 [ 96.331974][ T6838] sysfs_create_link+0x61/0xc0 [ 96.331987][ T6838] driver_sysfs_add+0x112/0x2d0 [ 96.332015][ T6838] really_probe+0x146/0xa60 [ 96.332031][ T6838] __driver_probe_device+0x20e/0x450 [ 96.332073][ T6838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.332091][ T6838] driver_probe_device+0x4a/0x140 [ 96.332106][ T6838] __driver_attach+0x21f/0x5b0 [ 96.332126][ T6838] ? __pfx___driver_attach+0x10/0x10 [ 96.332140][ T6838] bus_for_each_dev+0x13e/0x1d0 [ 96.332151][ T6838] ? __pfx_bus_for_each_dev+0x10/0x10 [ 96.332162][ T6838] ? bus_add_driver+0x2b5/0x5b0 [ 96.332178][ T6838] bus_add_driver+0x305/0x5b0 [ 96.332192][ T6838] driver_register+0x1e2/0x360 [ 96.332210][ T6838] usb_gadget_register_driver_owner+0x132/0x210 [ 96.332239][ T6838] dev_config+0xdce/0x1610 [ 96.332258][ T6838] ? __pfx_dev_config+0x10/0x10 [ 96.332278][ T6838] vfs_write+0x2aa/0x1050 [ 96.332290][ T42] audit: type=1800 audit(1786479726.392:629): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 96.332290][ T6838] ? __pfx_dev_config+0x10/0x10 [ 96.332308][ T6838] ? __pfx_vfs_write+0x10/0x10 [ 96.332317][ T6838] ? __fget_files+0x215/0x3d0 [ 96.332333][ T6838] ? __fget_files+0x21f/0x3d0 [ 96.332348][ T6838] ksys_write+0x12a/0x250 [ 96.332358][ T6838] ? __pfx_ksys_write+0x10/0x10 [ 96.332372][ T6838] do_syscall_64+0x115/0x870 [ 96.332411][ T6838] ? clear_bhb_loop+0x70/0xc0 [ 96.332425][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.332437][ T6838] RIP: 0033:0x7f01f239e0d9 [ 96.332448][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.332459][ T6838] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.332476][ T6838] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 96.332483][ T6838] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 96.332490][ T6838] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.332496][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.332503][ T6838] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 96.332518][ T6838] [ 96.339567][ T6838] gadgetfs gadget.0: really_probe: driver_sysfs_add failed [ 96.344474][ T5726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.344647][ T5726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.354148][ T42] audit: type=1800 audit(1786479726.402:630): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=121119 res=0 errno=0 [ 96.355962][ T5726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.356853][ T42] audit: type=1800 audit(1786479726.402:631): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=121130 res=0 errno=0 [ 96.370201][ T42] audit: type=1800 audit(1786479726.442:632): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26635 res=0 errno=0 [ 96.372687][ T5726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.385607][ T42] audit: type=1800 audit(1786479726.452:633): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26761 res=0 errno=0 [ 96.389474][ T5726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.390248][ T42] audit: type=1800 audit(1786479726.462:634): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26948 res=0 errno=0 [ 96.452916][ T6838] gadgetfs: bound to dummy_udc driver [ 96.480599][ T42] audit: type=1800 audit(1786479726.472:635): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=87095 res=0 errno=0 [ 96.565242][ T6852] netlink: 'syz.0.289': attribute type 11 has an invalid length. [ 96.577660][ T6852] netlink: zone id is out of range [ 96.578245][ T6852] netlink: get zone limit has 4 unknown bytes [ 96.783264][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.786806][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.869939][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.873126][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.934642][ T6880] FAULT_INJECTION: forcing a failure. [ 96.934642][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 96.939026][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 96.939042][ T6880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.939049][ T6880] Call Trace: [ 96.939053][ T6880] [ 96.939058][ T6880] dump_stack_lvl+0x100/0x190 [ 96.939078][ T6880] should_fail_ex.cold+0x5/0xa [ 96.939094][ T6880] should_failslab+0xc2/0x120 [ 96.939111][ T6880] __kmalloc_cache_noprof+0x91/0x6c0 [ 96.939122][ T6880] ? find_held_lock+0x2b/0x80 [ 96.939133][ T6880] ? gadget_bind_driver+0x100/0xbf0 [ 96.939145][ T6880] ? dummy_alloc_request+0xa9/0x1b0 [ 96.939164][ T6880] dummy_alloc_request+0xa9/0x1b0 [ 96.939181][ T6880] usb_ep_alloc_request+0x6e/0x2e0 [ 96.939198][ T6880] gadgetfs_bind+0x154/0x890 [ 96.939217][ T6880] ? kernfs_create_link+0x1bd/0x240 [ 96.939237][ T6880] gadget_bind_driver+0x28c/0xbf0 [ 96.939248][ T6880] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 96.939274][ T6880] ? __pfx_gadget_bind_driver+0x10/0x10 [ 96.939286][ T6880] really_probe+0x241/0xa60 [ 96.939303][ T6880] __driver_probe_device+0x20e/0x450 [ 96.939338][ T6880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.939353][ T6880] driver_probe_device+0x4a/0x140 [ 96.939368][ T6880] __driver_attach+0x21f/0x5b0 [ 96.939383][ T6880] ? __pfx___driver_attach+0x10/0x10 [ 96.939397][ T6880] bus_for_each_dev+0x13e/0x1d0 [ 96.939408][ T6880] ? __pfx_bus_for_each_dev+0x10/0x10 [ 96.939418][ T6880] ? bus_add_driver+0x2b5/0x5b0 [ 96.939434][ T6880] bus_add_driver+0x305/0x5b0 [ 96.939448][ T6880] driver_register+0x1e2/0x360 [ 96.939465][ T6880] usb_gadget_register_driver_owner+0x132/0x210 [ 96.939485][ T6880] dev_config+0xdce/0x1610 [ 96.939503][ T6880] ? __pfx_dev_config+0x10/0x10 [ 96.939523][ T6880] vfs_write+0x2aa/0x1050 [ 96.939534][ T6880] ? __pfx_dev_config+0x10/0x10 [ 96.939551][ T6880] ? __pfx_vfs_write+0x10/0x10 [ 96.939561][ T6880] ? __fget_files+0x215/0x3d0 [ 96.939580][ T6880] ? __fget_files+0x21f/0x3d0 [ 96.939601][ T6880] ksys_write+0x12a/0x250 [ 96.939615][ T6880] ? __pfx_ksys_write+0x10/0x10 [ 96.939635][ T6880] do_syscall_64+0x115/0x870 [ 96.939665][ T6880] ? clear_bhb_loop+0x70/0xc0 [ 96.939687][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.939705][ T6880] RIP: 0033:0x7f01f239e0d9 [ 96.939719][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.939732][ T6880] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.939744][ T6880] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 96.939751][ T6880] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 96.939758][ T6880] RBP: 00007f01f321c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.939764][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.939770][ T6880] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 96.939785][ T6880] [ 96.939832][ T6880] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 96.981888][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.985281][ T6880] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 96.986573][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.989273][ T6880] gadgetfs: bound to dummy_udc driver [ 96.990022][ T6834] bridge_slave_0: entered allmulticast mode [ 97.053592][ T6834] bridge_slave_0: entered promiscuous mode [ 97.065064][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.068549][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.075667][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.078211][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.080681][ T6834] bridge_slave_1: entered allmulticast mode [ 97.083418][ T6834] bridge_slave_1: entered promiscuous mode [ 97.116536][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.122578][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.129770][ T6890] netlink: 'syz.2.298': attribute type 3 has an invalid length. [ 97.132269][ T6890] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 97.136059][ T6890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.298'. [ 97.143372][ T6890] NCSI netlink: No device for ifindex 0 [ 97.153720][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.157151][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.164677][ T6834] team0: Port device team_slave_0 added [ 97.168209][ T6834] team0: Port device team_slave_1 added [ 97.186434][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 97.188117][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.191714][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.199756][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.212476][ T6889] ip6erspan0: entered promiscuous mode [ 97.234552][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.238437][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.249914][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.311555][ T6834] hsr_slave_0: entered promiscuous mode [ 97.313969][ T6834] hsr_slave_1: entered promiscuous mode [ 97.317430][ T6834] debugfs: 'hsr0' already exists in 'hsr' [ 97.319789][ T6834] Cannot create hsr debugfs directory [ 97.389428][ T6899] gfs2: not a GFS2 filesystem [ 97.428491][ T6902] ================================================================== [ 97.430959][ T6902] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 97.433260][ T6902] Read of size 1 at addr ffff888058f98018 by task syz.0.302/6902 [ 97.436694][ T6902] [ 97.438339][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 97.438361][ T6902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.438373][ T6902] Call Trace: [ 97.438381][ T6902] [ 97.438387][ T6902] dump_stack_lvl+0x100/0x190 [ 97.438411][ T6902] print_report+0x13d/0x4b0 [ 97.438451][ T6902] ? __virt_addr_valid+0x239/0x430 [ 97.438482][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.438500][ T6902] kasan_report+0xdf/0x1c0 [ 97.438526][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.438547][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.438565][ T6902] __kasan_check_byte+0x36/0x50 [ 97.438588][ T6902] lock_acquire+0x132/0x370 [ 97.438612][ T6902] ? _raw_spin_lock_irq+0x45/0x50 [ 97.438632][ T6902] _raw_spin_lock_irq+0x36/0x50 [ 97.438651][ T6902] ? gadget_dev_open+0x44/0x1b0 [ 97.438675][ T6902] gadget_dev_open+0x44/0x1b0 [ 97.438700][ T6902] do_dentry_open+0x6ab/0x14d0 [ 97.438718][ T6902] ? __pfx_gadget_dev_open+0x10/0x10 [ 97.438746][ T6902] vfs_open+0x82/0x3f0 [ 97.438768][ T6902] path_openat+0x2873/0x4280 [ 97.438794][ T6902] ? __pfx_path_openat+0x10/0x10 [ 97.438815][ T6902] do_file_open+0x20e/0x430 [ 97.438835][ T6902] ? __pfx_do_file_open+0x10/0x10 [ 97.438860][ T6902] ? alloc_fd+0x471/0x7a0 [ 97.438881][ T6902] ? do_getname+0x191/0x390 [ 97.438903][ T6902] do_sys_openat2+0x10f/0x1e0 [ 97.438925][ T6902] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.438951][ T6902] __x64_sys_openat+0x12d/0x210 [ 97.438973][ T6902] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.439006][ T6902] do_syscall_64+0x115/0x870 [ 97.439028][ T6902] ? clear_bhb_loop+0x70/0xc0 [ 97.439049][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.439067][ T6902] RIP: 0033:0x7f01f239e0d9 [ 97.439083][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.439101][ T6902] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.439120][ T6902] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 97.439133][ T6902] RDX: 0000000000000802 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 97.439145][ T6902] RBP: 00007f01f2435024 R08: 0000000000000000 R09: 0000000000000000 [ 97.439156][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.439166][ T6902] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 97.439184][ T6902] [ 97.439190][ T6902] [ 97.528300][ T6902] Allocated by task 5722: [ 97.529938][ T6902] kasan_save_stack+0x30/0x50 [ 97.531833][ T6902] kasan_save_track+0x14/0x30 [ 97.533728][ T6902] __kasan_kmalloc+0xaa/0xb0 [ 97.535584][ T6902] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 97.537674][ T6902] gadgetfs_fill_super+0x1e2/0x440 [ 97.539736][ T6902] get_tree_single+0xe2/0x190 [ 97.541586][ T6902] vfs_get_tree+0x92/0x320 [ 97.543396][ T6902] path_mount+0x7d0/0x23d0 [ 97.545157][ T6902] __x64_sys_mount+0x293/0x310 [ 97.546978][ T6902] do_syscall_64+0x115/0x870 [ 97.548263][ T6834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.548633][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.553068][ T6902] [ 97.554028][ T6902] Freed by task 6879: [ 97.555722][ T6902] kasan_save_stack+0x30/0x50 [ 97.557603][ T6902] kasan_save_track+0x14/0x30 [ 97.559637][ T6902] kasan_save_free_info+0x3b/0x70 [ 97.561758][ T6902] __kasan_slab_free+0x5f/0x80 [ 97.563808][ T6902] kfree+0x22b/0x6c0 [ 97.565415][ T6902] put_dev+0xb4/0xd0 [ 97.567044][ T6902] dev_release+0x116/0x1b0 [ 97.568821][ T6902] __fput+0x3ff/0xb50 [ 97.570491][ T6902] task_work_run+0x150/0x240 [ 97.572172][ T6902] exit_to_user_mode_loop+0x1d8/0x6f0 [ 97.574278][ T6902] do_syscall_64+0x666/0x870 [ 97.576161][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.578599][ T6902] [ 97.579417][ T6902] The buggy address belongs to the object at ffff888058f98000 [ 97.579417][ T6902] which belongs to the cache kmalloc-1k of size 1024 [ 97.584774][ T6902] The buggy address is located 24 bytes inside of [ 97.584774][ T6902] freed 1024-byte region [ffff888058f98000, ffff888058f98400) [ 97.590105][ T6902] [ 97.591116][ T6902] The buggy address belongs to the physical page: [ 97.593686][ T6902] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058f9a800 pfn:0x58f98 [ 97.597686][ T6902] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.601032][ T6902] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 97.604175][ T6902] page_type: f5(slab) [ 97.605832][ T6902] raw: 00fff00000000240 ffff88801bc42dc0 ffffea0000ee0610 ffffea0000bc5a10 [ 97.609303][ T6902] raw: ffff888058f9a800 000000080010000e 00000000f5000000 0000000000000000 [ 97.612732][ T6902] head: 00fff00000000240 ffff88801bc42dc0 ffffea0000ee0610 ffffea0000bc5a10 [ 97.616172][ T6902] head: ffff888058f9a800 000000080010000e 00000000f5000000 0000000000000000 [ 97.619647][ T6902] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 97.623187][ T6902] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 97.626779][ T6902] page dumped because: kasan: bad access detected [ 97.629389][ T6902] page_owner tracks the page as allocated [ 97.631451][ T6902] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5722, tgid 5722 (syz-executor), ts 49616126559, free_ts 0 [ 97.639220][ T6902] post_alloc_hook+0xfd/0x120 [ 97.640981][ T6902] get_page_from_freelist+0xf48/0x3530 [ 97.642698][ T6902] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 97.644690][ T6902] new_slab+0xa2/0x640 [ 97.646020][ T6902] refill_objects+0xe3/0x410 [ 97.647518][ T6902] __pcs_replace_empty_main+0x376/0x680 [ 97.649247][ T6902] __kmalloc_noprof+0x66d/0x820 [ 97.650807][ T6902] tomoyo_init_log+0x1224/0x20c0 [ 97.652580][ T6902] tomoyo_supervisor+0x506/0x1340 [ 97.654696][ T6902] tomoyo_mount_acl+0x580/0x8b0 [ 97.656785][ T6902] tomoyo_mount_permission+0x214/0x460 [ 97.658809][ T6902] security_sb_mount+0xdd/0x270 [ 97.660691][ T6902] path_mount+0x158/0x23d0 [ 97.662567][ T6902] __x64_sys_mount+0x293/0x310 [ 97.664560][ T6902] do_syscall_64+0x115/0x870 [ 97.666350][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.668883][ T6902] page_owner free stack trace missing [ 97.671066][ T6902] [ 97.672001][ T6902] Memory state around the buggy address: [ 97.673751][ T6902] ffff888058f97f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.676360][ T6902] ffff888058f97f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.678773][ T6902] >ffff888058f98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.681093][ T6902] ^ [ 97.682566][ T6902] ffff888058f98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.684959][ T6902] ffff888058f98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 97.687374][ T6902] ================================================================== [ 97.689756][ T6902] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.691899][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 97.694607][ T6902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.697611][ T6902] Call Trace: [ 97.698631][ T6902] [ 97.699546][ T6902] dump_stack_lvl+0x100/0x190 [ 97.700999][ T6902] vpanic+0x552/0x970 [ 97.702196][ T6902] ? __pfx_vpanic+0x10/0x10 [ 97.703561][ T6902] ? __pfx_vprintk_emit+0x10/0x10 [ 97.705125][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.706670][ T6902] panic+0xd1/0xe0 [ 97.707812][ T6902] ? __pfx_panic+0x10/0x10 [ 97.709182][ T6902] ? end_report.part.0+0x23/0x90 [ 97.710736][ T6902] ? rcu_is_watching+0x12/0xc0 [ 97.712227][ T6902] ? end_report.part.0+0x23/0x90 [ 97.713592][ T6902] ? check_panic_on_warn+0x1f/0x90 [ 97.715117][ T6902] check_panic_on_warn.cold+0x19/0x34 [ 97.716706][ T6902] end_report.part.0+0x3a/0x90 [ 97.718143][ T6902] kasan_report.cold+0xe/0x18 [ 97.719755][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.721333][ T6902] ? _raw_spin_lock_irq+0x36/0x50 [ 97.722819][ T6902] __kasan_check_byte+0x36/0x50 [ 97.724498][ T6902] lock_acquire+0x132/0x370 [ 97.725934][ T6902] ? _raw_spin_lock_irq+0x45/0x50 [ 97.727408][ T6902] _raw_spin_lock_irq+0x36/0x50 [ 97.728939][ T6902] ? gadget_dev_open+0x44/0x1b0 [ 97.730377][ T6902] gadget_dev_open+0x44/0x1b0 [ 97.731772][ T6902] do_dentry_open+0x6ab/0x14d0 [ 97.733302][ T6902] ? __pfx_gadget_dev_open+0x10/0x10 [ 97.734953][ T6902] vfs_open+0x82/0x3f0 [ 97.736193][ T6902] path_openat+0x2873/0x4280 [ 97.737558][ T6902] ? __pfx_path_openat+0x10/0x10 [ 97.739105][ T6902] do_file_open+0x20e/0x430 [ 97.740477][ T6902] ? __pfx_do_file_open+0x10/0x10 [ 97.741981][ T6902] ? alloc_fd+0x471/0x7a0 [ 97.743261][ T6902] ? do_getname+0x191/0x390 [ 97.744856][ T6902] do_sys_openat2+0x10f/0x1e0 [ 97.746346][ T6902] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.747934][ T6902] __x64_sys_openat+0x12d/0x210 [ 97.749440][ T6902] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.750983][ T6902] do_syscall_64+0x115/0x870 [ 97.752382][ T6902] ? clear_bhb_loop+0x70/0xc0 [ 97.753914][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.755739][ T6902] RIP: 0033:0x7f01f239e0d9 [ 97.757094][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.762964][ T6902] RSP: 002b:00007f01f321c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.765987][ T6902] RAX: ffffffffffffffda RBX: 00007f01f2625fa0 RCX: 00007f01f239e0d9 [ 97.768355][ T6902] RDX: 0000000000000802 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 97.770678][ T6902] RBP: 00007f01f2435024 R08: 0000000000000000 R09: 0000000000000000 [ 97.773063][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.775795][ T6902] R13: 00007f01f2626038 R14: 00007f01f2625fa0 R15: 00007ffdc12c2778 [ 97.778179][ T6902] [ 97.779765][ T6902] Kernel Offset: disabled [ 97.781071][ T6902] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:22:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e1835cb RDI=ffffffff8c400480 RBP=ffffffff8ebe8200 RSP=ffffc900058bf160 R8 =00000000e4f0795b R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bbadadc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb0dcc2d880 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f01f2270000 CR3=0000000034b65000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff5c532ec0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ff5c524fe0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f860e5f2376d645 7373268970d4685f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737272 7373737373737313 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78722f736575 6575712f35687465 2f74656e2f316d69 7376656474656e2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f30737562646e2f 30303a3231303049 5043412f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 352c342c332c322c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3332 322c3232322c3132 322c3032322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc9002387f310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6ea234 R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f01f321c6c0 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f01f321bff8 CR3=00000000222d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc12c2c66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc12c2c66 00007ffdc12c2c6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01f2435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01f2435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01f24357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01f2435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01f25f25f8 00007f01f25f25c8 00007f01f25f2600 00007f01f25f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff980224d8 RBX=00000000000001a9 RCX=000000000000020b RDX=ffffffff966a8630 RSI=000000000000020b RDI=ffffffff97eedd68 RBP=0000000000000030 RSP=ffffc90000106e98 R8 =ffffffff966a8660 R9 =0000000000000063 R10=ffffc90000107028 R11=0000000000000000 R12=ffffffff81e58f20 R13=ffffc90000106f40 R14=ffffffff81e59d30 R15=ffffffff97eedd68 RIP=ffffffff81e5a7f7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3efdb7 CR3=000000003dc91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca198da36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca198da36 00007ffca198da3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe112035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe112035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1120357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe112035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a85b1 RBX=ffff88801f292540 RCX=ffffffff8bbad335 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=ffffed1003e524a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbab8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f01f31556c8 CR3=000000003dd6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001020400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c00356cd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c0035601 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c00355f9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c0035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c0035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c00357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c0035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064656c69616600 6e616c7670690065 76656e6567006e61 6c765f3168746576 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00315f6576616c73 5f65676469726200 305f6576616c735f 6567646972620030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00145f4053444956 5f4042414c574700 155f40534449565f 4042414c57470015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91c01f25f8 00007f91c01f25c8 00007f91c01f2600 00007f91c01f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000