last executing test programs: 4.624868553s ago: executing program 3 (id=729): bpf$BPF_BTF_LOAD(0x26, 0x0, 0xffffffffffffff7f) 4.514044763s ago: executing program 3 (id=730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0xeaff, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000102030405060708090a0b0c0d0e0f1000000000000010000000100000001000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a", 0xa2, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)='\x00\x00\x00', 0x3, 0x0, 0x0, 0x0) 3.658851764s ago: executing program 2 (id=737): chroot(&(0x7f00000002c0)='./my_debugfs/usb/devices\x00') r0 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r0, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x1, "c3925a235015121c042da29ae68ccabb8b9e74e399db02e35acc47b95750f3759a8bfc59859eac135c5ed95a457e2503ed6d02c741cd3bbcf9e1af16cf6cf9a4", {0x7af, 0xab40}}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xffa, 0x100, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000140)=0x253, 0x4) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x8a400, 0x0) r8 = openat(r7, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x478943, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) 3.576793209s ago: executing program 3 (id=738): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xd000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x1, 0x1000, 0x0, 0x0, 0x0, 0x80, 0x80, 0xfc, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x4, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0xe000, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)="7066eec1cb", 0x5) fstat(r0, &(0x7f0000001b00)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x1, r3, 0xb}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60680, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=r5, @ANYBLOB="0000000008001f00400000001400", @ANYRES64=r6], 0x38}}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$selinux_load(r1, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "d9b626c75408765369d1e21eb3049a583cdbbe5b3653235eeebee02af04e18f1d44b0db20895055af3d13fc1f31768090942dc7adc604c11a674128d5dcac82194ae1b6ecd2f0d30402da0d5e13cadf988d3c84ca1d4e946c2c091ab07b6fe6525202a9161803c257807b2860a784ce54f99dcfa9e048e0633e65c06792f7e2b1b89789b63ca008b61baf452410ff3f64c5cdc4b2a43be683edc94f466bfa51398f3edc7e66b8652710d7ab8aab753f7245191a0fa7b4a6208a6"}, 0xca) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) recvmsg$can_j1939(r7, &(0x7f0000001ac0)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/250, 0xfa}, {&(0x7f0000001840)=""/198, 0xc6}, {&(0x7f0000001940)=""/193, 0xc1}], 0x6}, 0x40010000) 2.818172485s ago: executing program 3 (id=741): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async, rerun: 64) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r4, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f00000000c0)}, 0x20) (async) openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2dd082, 0x0) 2.742651638s ago: executing program 1 (id=742): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000380)="6819", 0x2}, {0x0, 0x11}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="17349d03781faa032c8e742110fdadf10996fbc9115102495f1af15f54debe265b2c6a62d7a93a9bf3a4db35c49b936e8616cbede0c1d36bb58d731d08cc3b1fb1bbe71e8422148b8f12403b13f417966c2e6d23f0078467a8b4464377", 0x5d}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="7317", 0x2}], 0x1}}], 0x3, 0x2000c044) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') (async) r2 = accept(r1, 0x0, 0x0) recvfrom(r2, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000100000001000000010000000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/124, 0x7c, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000002200)="00000048fe534d424000010000000000010001000100000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000900000048000000", 0x4c, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) close(r2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) 2.467173252s ago: executing program 3 (id=744): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) prctl$PR_MCE_KILL(0x41, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2.154409404s ago: executing program 3 (id=746): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fsopen(&(0x7f0000000040)='nfs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x31) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.075497733s ago: executing program 2 (id=747): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000180001002dbd7000fbdbdf251d01000000003bad90732d8c59f70700"/44], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) (async) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xd4}], 0x40000000000031b, 0x40000043, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.884175624s ago: executing program 0 (id=748): r0 = socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20402, 0x0) r1 = fsopen(&(0x7f0000000300)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='sec\x00', &(0x7f0000000200)='krb5i\xfd', 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.794658313s ago: executing program 2 (id=749): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x500, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000001c0)=""/185) fcntl$lock(r0, 0x2, &(0x7f0000000000)={0x1, 0x3, 0x23cf, 0x1, r3}) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100050005002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x0, 0x2}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffff8) 1.727844571s ago: executing program 0 (id=750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x80, @mcast2, 0xd7}, @in6={0xa, 0x4e20, 0x3, @empty, 0x2}, @in6={0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, @in6={0xa, 0x4e22, 0x71, @empty, 0x1}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x85}, @in={0x2, 0x4e21, @empty}], 0xd4) sendmmsg$inet(r6, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) write(r4, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.727549521s ago: executing program 1 (id=751): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x2028000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace(0x10, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000830) 1.613408979s ago: executing program 2 (id=752): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x1, 0x12) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xffc3, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.613145538s ago: executing program 0 (id=753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc0, 0xc, 0xc, 0x4, [0x5, 0x9, 0x10, 0x6, 0x6, 0x8, 0x400, 0x2174]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x10010, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r3 = accept(r0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000102030405060708090a0b0c0d0e0f1000000000000010000000100000001000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a", 0xa2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002100)='\x00\x00\x00', 0x3, 0x0, 0x0, 0x0) 1.534615424s ago: executing program 2 (id=754): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) landlock_restrict_self(r0, 0xa) syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000004700)=[{&(0x7f0000000900)="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", 0x7bd}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a4602"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0x2c, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x0, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x20002, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x3, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x8000200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0x101, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl(r4, 0xc4c85513, &(0x7f0000000200)) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)={0x0}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000180)=r7) 1.436944815s ago: executing program 1 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='md0', 0x3) write(0xffffffffffffffff, &(0x7f00000001c0)='raid1', 0x5) r5 = openat(r4, 0x0, 0x1, 0x42) write(r5, &(0x7f0000000240)='2', 0x1) r6 = openat(r4, 0x0, 0xc1, 0x4) write(r6, &(0x7f00000002c0), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='0', 0x1) write(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='inactive', 0x8) 1.184943556s ago: executing program 1 (id=756): socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) write$tun(0xffffffffffffffff, 0x0, 0x340a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa1}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f1c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe15}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x774ca1c2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xa}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40001}, 0x3b1b82db906d237e) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x82, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x82, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r7 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) (async) close_range(r2, 0xffffffffffffffff, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@setneightbl={0x0, 0x43, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c}, [@NDTA_THRESH3={0x0, 0x4, 0x3ff}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x140000000000000}, @NDTA_THRESH3]}, 0x68}}, 0x8080) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@setneightbl={0x0, 0x43, 0x20, 0x70bd29, 0x25dfdbfc, {0x1c}, [@NDTA_THRESH3={0x0, 0x4, 0x3ff}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x140000000000000}, @NDTA_THRESH3]}, 0x68}}, 0x8080) sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000000)={0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000000c0)=[r0, r7, r3, r1, r0], 0x5) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000000040)={r11, 0x18}) (async) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000000040)={r11, 0x18}) 578.905726ms ago: executing program 0 (id=757): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @broadcast, r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040044) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRESDEC=r2], 0x5c}}, 0x0) 468.019479ms ago: executing program 0 (id=758): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./config\x00', 0xa440, 0xa0) mkdirat(r1, &(0x7f0000000000)='./config\x00', 0x17b) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000100)={0x15}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) 337.874962ms ago: executing program 0 (id=759): arch_prctl$ARCH_GET_CPUID(0x1011) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2f, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x100000006, 0xfe, 0x0, 0x5, 0x100, 0x40000000001, 0xffffffffffffffff, 0x9], 0x1, 0x360200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4000006f, 0x0, 0x6}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x2, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x9, 0x0, 0x6, 0xffffffff, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xa}, {0x4000000, 0x6}, {0x400000, 0xfffffffc}, {0x0, 0x5}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]}) r5 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r5, 0x0, 0x0) write$char_usb(r6, &(0x7f0000006800)="10", 0x20) close(r6) r7 = socket(0x1e, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}, @IFLA_VF_PORTS={0x4}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) connect$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0xe, 0x1}}, 0x25) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000180)=0x27, 0x4) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r9, 0xe) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 276.860108ms ago: executing program 1 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000040000000000000000001"], 0xfdef) 32.905555ms ago: executing program 1 (id=761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f00000012c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001540)="fb1c3eabebbe70a587f7874cf411874ea115032c494b81b935baf5efe4c63103d7a0dc1bb7b1254a385808ab0c6c766c12ec2065519af56cf08c710af6f5aa95cf7aa7aa6e695a240fc78422e5c5e21c6c9c986818c3e973999fb3e9d7682c836a0c5c2b86f16d78dbec4df706a63c6fd9d7e461ef037e3c11923ded", 0x7c}, {&(0x7f00000015c0)="f9600e8bc0ea262055e36b3c019731a937704a7f227a7d8f3ab2d24869f331e002a76405e46475f21a7a5cc8896a9518c9dea6faf0dfabdb4762a10e17b721aa668535ab73cf8b508e", 0x49}, {&(0x7f0000001640)="95bdd38df2ce8dace9cc4dfd3a8896cf6f4de8f686945df15e644bc8744ecbd371fca08bf6606445f862cdbb37671892ffa1e4b32599061757e7949892fc8a5c3ca94170c650fbb519ac4272e1391c748363b7298e90900cc71a03fdd8e18049209d52b52c8aec96bb8c", 0x6a}, {&(0x7f00000016c0)="3b102fdac4ad857945f4978783518217330b922da50179f3b6dd3197835d3bfe307caf606f054b0133c3e5eb1b1280eff218819912f6b665ecef211af3565a994478e156d966019461215813c7bb5a1b52baea0e494dc1a99ae8b0ae805f30b0432e937a405b9e73a459a04166f592e6942d9907dd388cd9d15ca377dceb929e0a744dd57308d6fb84e510ff2ed2a804868d4fd14e50504e062f24bb149a5d05d98b81fce26c1a523c7e61c8ff80eec21d97605780da377142f451d5e9b7c22c0d907bb27e", 0xc5}], 0x4, &(0x7f00000018c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x57}}, @ip_retopts={{0x70, 0x0, 0x7, {[@rr={0x7, 0xb, 0x14, [@private=0xa010102, @loopback]}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x0, [0xc00000, 0x8, 0xf]}, @timestamp_addr={0x44, 0x44, 0x4f, 0x1, 0x2, [{@remote, 0xffff}, {@private=0xa010101, 0xfffffffa}, {@multicast2}, {@multicast2, 0x4}, {@loopback, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x4}]}]}}}], 0xc0}}, {{&(0x7f0000001980)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001e40)=[{&(0x7f00000019c0)="7b44e6e85bd78a509727f32308e7452dbd9ab2a68c5b9713d02835a48cec2c8d1cd8ac304add7f198e3f921da73a7c1d447af261245f26c312cc8bcd", 0x3c}, {&(0x7f0000001a00)="416814ce6fc40f365fc8d43cde6a3b2d5b9c85e37c23ff0a323375ad36f308a5b81670847a9c8497afd6dedda32128e79b48c8180819090bfb30d35b563af16ae27ee6996f56d9157c53d9b4bc2829c07e8a24accdf627ddcb853f5a4408e12967266fa8e707497b80c3e3a8e66cae44bb7c44d8d12c7c0ebb5cc7627481d2c3785341e4990d40716e12e533700590cd74ccff48e43dfc06d1d7754fce2e6dde8b1639af3b79c0b5a0de7adcb0d6ab8dee1e925882fe91b5c44dfe6ecae62d6aec0e46faf809202cd58a9d82824d3e74f056cd8164", 0xd5}, {&(0x7f0000001b00)="0b3f59448b83606720642fdca7f761444fd6fc36c5203e6b374b6470424243fb20f4848c970144870860f43397cdc5a640c3d3a38793dec02758c3c4bc2dc8a923ca540db5d6ae02417ae41fe0afeb07be190d2e2866e1998705e1756996e8569fdadcf3177d5ab93df4a4d520464883458a73ecf1833ae9b860f2f68ef9732f088015ce6c86cc9cb7d2773be3bd255d7a973be9434c6e416d62b47571f2e016942256d5f60a5a71938e90c65a58d52acbe2a86f263962d6b75be566262c2c584cf3515efbc17ed0f0ecd60f84a6f701553903fb97e4", 0xd6}, {&(0x7f0000001c00)="470e1fdec3a329fe044d05351b2a263d66cd66c2c9fe9361d40795314412bf0236bfa38ce8170161c5cc0e990e666b0094e16a3d04256965c6e0efa98cd7e9c8fd43062580adad202012840cdf0686010ce85302c934e8f508301be9b39d027ffb28d998b007f23de9baa0e519171a3b6b3fab1f93b818414abe77159c1cdbc0db2d8aab3b47ffd8e64eb1ba14936fb660b111c0461601e5df6cfa9a51f977feb7e706fa7f6c0c9611154061c4587b51cc2e62bb9e2fd2f8ddbdf438a8b328383cb6f35ee3c75791ef4572dc4bf22758dde72e11f68a90ed72fff9f71ef2f5ba5ba698df6363d15a", 0xe8}, {&(0x7f0000001d00)="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", 0xfe}, {&(0x7f0000001e00)}], 0x6}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001ec0)="df28e7a95bce8b2f81e4015ba54794834d2f2f4a29c1f4159453c139cfd2507c612a0afe5ac37dd79572bb7b69b7cc61e8083dd24643b7a33ecb55f374334799f76868a39c98995cb679dabfe6f7aa4184dd25a67966a5f5fd92faccc70f0f616b9e3b603145d6ad93bdf453aa0e218b42230f3553d9a032de85deaa5b72fb27345026e0cc3e89a83f15d520c0d069820afaba3ea349e9064b538f8e9c52732aa81aacd089388a37d5d25fcd3983f6dd552fbba1b7e85a29f3d88081d7a36ed2be88ec373e27", 0xc6}, {&(0x7f0000001fc0)="99e158fe00cc8330dbb263978a0a9bb5eb5ac1ec12c0b07e489c889c5bc5000fe7c36cd0d0a808d1eb4ac36cc050d8826c2d9bdade4b1396dbfb3209d6c3ff6871c8d7e7d1642b464c347eba700eedf4da5f5328d4aa50217c022828e6b52dbd487cf97685c6af5f29829cee9f355a238799135951e6de5773982a44463daec230c00f4f1bcc27fd5b39c342da96447459be2e5ddb4c6741c686d1cb22742c1a7f8f56e15fb3150ef061c3f4c58dda27a2c5f8ab9a0348", 0xb7}, {&(0x7f0000002080)="fc17000d12163e6b812b9a118d650c0b170a03bb9fab47a0e865db29194f6481ce859c85fe30272ec78e79171b64b212edaa9fe7a74e40355fcfe60276c38c7e473cb4abb5e160", 0x47}, {&(0x7f0000002100)="3c0fc0663d80232bb521886cd523f21ef322ae3c0db8", 0x16}, {&(0x7f0000002140)="c6f8be43", 0x4}], 0x5, &(0x7f00000022c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xf7, [@dev={0xac, 0x14, 0x14, 0x3f}]}, @timestamp_addr={0x44, 0x44, 0x7c, 0x1, 0x0, [{@remote, 0xf626}, {@broadcast, 0x9}, {@private=0xa010102, 0x2}, {@private=0xa010100, 0x80}, {@multicast1, 0x45fa}, {@local, 0x6}, {@local, 0x8000000}, {@multicast2, 0xfffffffa}]}, @generic={0x83, 0x12, "d8d50df0bfdbec55430e1cb48ce48f7b"}, @noop, @ra={0x94, 0x4, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x7, [{@multicast2}, {@local, 0x3}, {@loopback, 0x8}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1}}}], 0x160}}, {{&(0x7f0000002440)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000002480)="542d9805e7abc09e7c08e40452231505f354e61dcb5256e2bcbf111705db878080af3779f31bbf0d310ae8b560fd1209411d16ac", 0x34}, {&(0x7f00000024c0)="0adc468a6a906457c9d8766ea045b7ed19866706ea3cbd54a7737cbb8ef4aed897618404f83ebda062eed10a8bc3f5813c60fee70c399ee3fb3c7f449bbd51b9085fe5b9854aedd676f94a0dc94964c93ec48d37813ee2aef821b231294b578bb1992ce04bc141c638bd80000548e28dd01193f9e5096f6419404eec28de642d30eb0522ced1b177f691a054a05b1029384bace2a58fcc3ec733efad8874316f4df4007945171e83342685dcaeddc3ba9ea80569a265ad13567a4614a0713ffaed43d27d3a6496afb5ffcf7b3a06", 0xce}, {&(0x7f00000025c0)="19eb8fbbd306e008f2c662524978579924be8be6e8ca4471329c237c0c88828e6ebd7fb943d2cb0fc3090f9adf5bf674cc109026a753bff307d6a17095e856fd89e241393452c20595aaffbdfed04b47ce6b27d48fb8d2bae18943b5fa444099bb42451440a9447e3f91faf2edbfb85639", 0x71}, {&(0x7f0000002640)="f90202bfa7c3afaaaa5b783323c14019ee1f9c3dfc22f02380aac02b8e535d06efcc9c0acf35d24ec8f624855ad0b6efad41a3afb8b07d63f0400a3019a6cd7b69d61850208b9136e75bef23874c7701150900aed57eac18a61c0b7223c1946e4cb385296c6bde30980f9f09101f9a1aab6bc64f1b048d30f1260698e12c7ba032e648250e28e95a31e377f759a15ec4537315553afbf7fe5ab83524234f847ee7034752608b536d2c2a79e2a6eb659570b79e1b2f7a9f5ef81057393c9d4a66c012ea49f42a31", 0xc7}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003740)="dd71ef1adb20c85cee46cfd70d7819d051605ee3bbc76d0edab64590", 0x1c}, {&(0x7f0000003780)="061a643644cc6ef9b7d9434743c0671c91b6c37c70df155ce378f937cf1f132fb82f6afe77ce3fe380f4f84798f33abfa2c624bfa0d2f9f898b1dfd31471223f674d8828cbdbbe8402f28a16ce180b4cab3869ee9814e6e385afd3b32f750bf4b3cc2c450b52c0b2f94342beb53093bbe3243caf6d9c8241c16e476895e21e518cfed76a09e4462c6275a4a801d9d77e7f1999643a9f9a9c435b149f38f9aed790376cb2ff4919afbbed9709ac", 0xad}, {&(0x7f0000003840)="d459cccf5f48a490b4658a965b51b6951cc6d451e44551cafdf559e72914175e0c4147bfb8cc7d702143b4b8016bee0bec100e63e4b90cc8e355d2daa1d41566f527881f694b3e44fbd0ae8564fbd3df5911c4aa2cfb7dbb6c1474c3c62950a7006c7892d99f2f260500a5447052d4486128e36d2b0ac4d93be90f999d822041cf0b8be9546dc62a9be42316c988e8b11a4d2140db9424fce6cf1387a691", 0x9e}, {&(0x7f0000003900)="0f5c40f1c27d9c1eaf402d789b68a5392a65ed9088b25870823f5dd9ab8af94f62e48d9738e8ea1e93dc6c127308b60a50d19ecc8e33334e1c63815498ca7c53957dda27ba2655d70c2a7cf33801b6560cf5a26d8c77f4db2f3913078e7c85dfe8c3e926c5b905ed4d671c710f7f94f4c987ebbf18d87c6f14a73112112243c17c52b5d44779074e86e5d18850c9c8de4b2c72f22a67fe4238f2c9db7d62fc61b10915629cb2234d7472", 0xaa}, {&(0x7f00000039c0)="dc46b966e0604cde75784b940a9ead75fbdad8f5dbccd8e37ca8f4df97392995cf2c775b3d5177c67054", 0x2a}], 0xa, &(0x7f0000003ac0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}], 0x4, 0x41) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000700)=0x286e, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000003d40)=ANY=[@ANYBLOB="8c008fcdb544bf730e17c0704be8a770221fac162556d7191cf38980a2db936bdfb93f0f34dbf7b68ace188239bb7801ef2eca03bd7a2771f558826dde3f8507", @ANYRES16=r7, @ANYBLOB="000229bd7000fddbdf25540000000a00060008021100000000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0xd0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d72bf29a7a2800018008000100000000001c00038008000200020000000600010000030000060003005d550000050002"], 0x64}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='nqn=test,tra', 0xc) nanosleep(0x0, 0x0) nanosleep(0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) pwritev2(r11, &(0x7f0000001080)=[{&(0x7f0000000000)="3f96", 0x2}], 0x1, 0x4, 0x2, 0x0) openat$cgroup_ro(r11, &(0x7f0000001040)='freezer.state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001400)=ANY=[@ANYBLOB="f406001b33bdb64c7634030ffa0a2ecf9791ed6a4feced761bc39ae783690c6a654fc115d1a880ab9dc6a4848a427bb77e5dc2dff61b8e7dde064efaff9de5d83a285604a9f94d40c37e9310125f798f1745bc00", @ANYRES16=r9, @ANYRES16=r10, @ANYRES32=r8, @ANYBLOB="d506338080000000ffffff1a976a880211000001ab2c0fb61ea6f470486a47202408ad6f0f8e530e3ff9b4dc17f1652a549b92889c260050e27ee60a3d1d683b92844fc4715044e1c5aa12fc7dcfe6e3a53b1ca91008ebe177f9ad11ba278927be86df32982fa84e1771614f5ce730533414f668faa1d26313b82f2001448e91d4065a45fd381aa7ed638b29c8a4220a579a669bba514b89c2c501d7d7afafc15f289ebf14b47fc92ae79df278297a979ad9e47e511ed7611d9369c4b6c34e34fb"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 2 (id=762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x2082}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x10a, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414bb08000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414bb08000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) pipe2(&(0x7f0000000440), 0x8c000) (async) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) (async) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000b00)=[{0x37, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0x4}, {0x33, '\x00', @buffer={"189bb929b5af897d6a3bee029128341252f3a11b7cad0a23222390f424ea31c4", 0x20}, 0x2}, {0xd, '\x00', @st={0x4, [{0x0, @uvalue=0x7}, {0x2, @uvalue=0x5}, {0x3, @uvalue=0x5}, {0x1, @uvalue=0x5}]}, 0xd02d}, {0x40, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x7}, {0x1a, '\x00', @st={0x4, [{0x3, @uvalue=0x6}, {0x3, @uvalue=0x95}, {0x3, @svalue=0x9}, {0x1, @uvalue=0x7fff}]}, 0x8}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.436'. [ 192.355196][ T7312] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 192.666461][ T7319] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.439'. [ 192.815054][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 193.037180][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.051576][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.061027][ T43] audit: type=1400 audit(1788465517.602:573): avc: denied { bind } for pid=7328 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.065497][ T43] audit: type=1400 audit(1788465517.642:574): avc: denied { name_bind } for pid=7328 comm="syz.0.442" src=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 193.065536][ T43] audit: type=1400 audit(1788465517.642:575): avc: denied { node_bind } for pid=7328 comm="syz.0.442" src=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 193.265912][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 193.982051][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.985631][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.305461][ T75] nvmet: connect request for invalid subsystem testnqn! [ 194.314350][ T7351] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 194.960477][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 194.962951][ T43] audit: type=1400 audit(1788465519.522:578): avc: denied { write } for pid=7356 comm="syz.3.451" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 194.963016][ T43] audit: type=1400 audit(1788465519.522:579): avc: denied { read append } for pid=7356 comm="syz.3.451" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.963060][ T43] audit: type=1400 audit(1788465519.522:580): avc: denied { open } for pid=7356 comm="syz.3.451" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.113988][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 195.118803][ T43] audit: type=1400 audit(1788465519.692:581): avc: denied { create } for pid=7358 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.203899][ T43] audit: type=1400 audit(1788465519.772:582): avc: denied { accept } for pid=7365 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 195.748243][ T7357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.748442][ T7357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.842556][ T7357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.914097][ T7357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.917845][ T7357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.005235][ T7357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.021790][ T7357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.021957][ T7357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.031148][ T7357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.062070][ T7357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.069444][ T7357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.081482][ T7357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.273807][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.275906][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.348053][ T5422] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.535281][ T5422] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 196.536740][ T5422] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7866, setting to 1024 [ 196.536867][ T5422] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 196.536937][ T5422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.547689][ T7371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.564450][ T5422] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 196.575031][ T5422] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 196.792267][ T5830] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 196.913600][ T5843] usb 6-1: USB disconnect, device number 9 [ 196.956331][ T5843] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 196.959009][ T5843] spcp8x5 6-1:1.0: device disconnected [ 197.008991][ T5830] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 197.010026][ T5830] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 197.010077][ T5830] usb 7-1: config 1 has no interface number 0 [ 197.016143][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.016166][ T5830] usb 7-1: Product: syz [ 197.016178][ T5830] usb 7-1: Manufacturer: syz [ 197.016190][ T5830] usb 7-1: SerialNumber: syz [ 197.032321][ T5830] usb 7-1: 3:0 : does not exist [ 197.032336][ T5830] usb 7-1: 3:0 : does not exist [ 197.157904][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.242140][ T5843] usb 7-1: USB disconnect, device number 9 [ 197.417144][ T7396] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 197.417215][ T7396] audit: out of memory in audit_log_start [ 197.417759][ T7396] 9p: Bad value for 'port' [ 197.419534][ T7398] CIFS: Attempting to mount //1#7.0.0.1/Ė7Ģ/Šä…Æ»—yshare [ 197.439054][ T7398] CIFS: VFS: Error connecting to socket. Aborting operation. [ 197.439100][ T7398] CIFS: VFS: cifs_mount failed w/return code = -101 [ 197.564875][ T7401] trusted_key: encrypted_key: insufficient parameters specified [ 197.668936][ T7407] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 197.728966][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 197.739707][ T7407] md: array md0 already has disks! [ 197.752689][ T7409] veth0: entered promiscuous mode [ 197.752854][ T7409] veth0: left allmulticast mode [ 197.835301][ T7414] netlink: 'syz.0.468': attribute type 11 has an invalid length. [ 197.866020][ T7407] md/raid10:md0: active with 1 out of 2 devices [ 197.867139][ T7407] md0: detected capacity change from 0 to 2048 [ 197.949928][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.025952][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.054555][ T6896] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 198.083894][ T7420] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 198.083951][ T7420] device-mapper: raid: Choosing default region size of 4MiB [ 198.085240][ T7420] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 198.085564][ T7420] device-mapper: ioctl: error adding target to table [ 198.138178][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.215290][ T6896] usb 8-1: Using ep0 maxpacket: 8 [ 198.237844][ T6896] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 198.239890][ T6896] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 198.239923][ T6896] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.239952][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.239983][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.240002][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.240019][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.240038][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.240057][ T6896] usb 8-1: config 168 interface 0 has no altsetting 0 [ 198.241174][ T6896] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 198.241202][ T6896] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.241231][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.241252][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.241270][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.241288][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.241335][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.241358][ T6896] usb 8-1: config 168 interface 0 has no altsetting 0 [ 198.242305][ T6896] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 198.242334][ T6896] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 198.242363][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.242383][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.242547][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.242569][ T6896] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.242591][ T6896] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 198.242614][ T6896] usb 8-1: config 168 interface 0 has no altsetting 0 [ 198.273575][ T6896] usb 8-1: string descriptor 0 read error: -22 [ 198.273764][ T6896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.317821][ T5851] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 198.399386][ T6896] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 198.500757][ T5851] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 198.507542][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.507570][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.507601][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.562890][ T5851] usb 7-1: config 0 descriptor?? [ 198.566026][ T7409] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 198.632383][ T5422] usb 8-1: USB disconnect, device number 11 [ 198.748143][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 198.760975][ T7428] ip6gretap1: entered promiscuous mode [ 198.761057][ T7428] ip6gretap1: entered allmulticast mode [ 198.770737][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.771176][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.777093][ T7428] openvswitch: netlink: IP tunnel dst address not specified [ 199.014942][ T5851] usbhid 7-1:0.0: can't add hid device: -71 [ 199.022750][ T5851] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.040809][ T5851] usb 7-1: USB disconnect, device number 10 [ 199.057856][ T5830] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 199.215190][ T5830] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 199.216231][ T5830] usb 6-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 199.216270][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 199.216293][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 172, changing to 4 [ 199.216314][ T5830] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 40581, setting to 1023 [ 199.216336][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.216391][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.233977][ T5830] pegasus 6-1:1.0: Missing or invalid endpoints [ 199.234611][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.439735][ T7430] FAULT_INJECTION: forcing a failure. [ 199.439735][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 199.445614][ T7430] CPU: 3 UID: 0 PID: 7430 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) [ 199.445641][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.445651][ T7430] Call Trace: [ 199.445660][ T7430] [ 199.445673][ T7430] dump_stack_lvl+0x100/0x190 [ 199.445724][ T7430] should_fail_ex.cold+0x5/0xa [ 199.445752][ T7430] should_failslab+0xc2/0x120 [ 199.445776][ T7430] __kmalloc_cache_noprof+0x91/0x6d0 [ 199.445803][ T7430] ? usb_device_dump+0xf5/0x2370 [ 199.445827][ T7430] usb_device_dump+0xf5/0x2370 [ 199.445844][ T7430] ? __mutex_lock+0x26c/0x1bd0 [ 199.445864][ T7430] ? usb_device_dump+0x17f3/0x2370 [ 199.445884][ T7430] ? lock_acquire+0x1d1/0x380 [ 199.445904][ T7430] ? __pfx___mutex_lock+0x10/0x10 [ 199.445924][ T7430] ? kasan_quarantine_put+0x1c5/0x240 [ 199.445952][ T7430] ? usb_device_dump+0x1715/0x2370 [ 199.445970][ T7430] ? kfree+0x22b/0x6d0 [ 199.445996][ T7430] usb_device_dump+0x1830/0x2370 [ 199.446040][ T7430] usb_device_read+0x227/0x320 [ 199.446062][ T7430] ? __pfx_usb_device_read+0x10/0x10 [ 199.446082][ T7430] ? __debugfs_file_get+0x1fc/0x860 [ 199.446102][ T7430] ? __pfx___debugfs_file_get+0x10/0x10 [ 199.446119][ T7430] ? avc_policy_seqno+0x9/0x20 [ 199.446148][ T7430] full_proxy_read+0x135/0x1a0 [ 199.446166][ T7430] ? __pfx_full_proxy_read+0x10/0x10 [ 199.446187][ T7430] vfs_read+0x1e4/0xb40 [ 199.446214][ T7430] ? lock_acquire+0x1d1/0x380 [ 199.446230][ T7430] ? __fget_files+0x34/0x3d0 [ 199.446252][ T7430] ? __pfx_vfs_read+0x10/0x10 [ 199.446276][ T7430] ? find_held_lock+0x2b/0x80 [ 199.446300][ T7430] ? __fget_files+0x215/0x3d0 [ 199.446325][ T7430] ? __fget_files+0x21f/0x3d0 [ 199.446351][ T7430] ksys_read+0x12a/0x250 [ 199.446368][ T7430] ? __pfx_ksys_read+0x10/0x10 [ 199.446391][ T7430] do_syscall_64+0x123/0x790 [ 199.446415][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.446434][ T7430] RIP: 0033:0x7f22b7d9e159 [ 199.446451][ T7430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.446466][ T7430] RSP: 002b:00007f22b8bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.446485][ T7430] RAX: ffffffffffffffda RBX: 00007f22b8025fa0 RCX: 00007f22b7d9e159 [ 199.446503][ T7430] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000004 [ 199.446513][ T7430] RBP: 00007f22b8bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.446524][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.446535][ T7430] R13: 00007f22b8026038 R14: 00007f22b8025fa0 R15: 00007ffd0d204658 [ 199.446560][ T7430] [ 199.448627][ T5830] usb 6-1: USB disconnect, device number 10 [ 199.714839][ T43] audit: type=1326 audit(1788465524.282:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.0.477" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa81d9e159 code=0x0 [ 199.963770][ T5830] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 200.047986][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.133790][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.180374][ T5830] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 200.187428][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.205589][ T5830] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 200.205651][ T5830] usb 7-1: config 1 has no interface number 0 [ 200.259081][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.259132][ T5830] usb 7-1: Product: syz [ 200.259168][ T5830] usb 7-1: Manufacturer: syz [ 200.259197][ T5830] usb 7-1: SerialNumber: syz [ 200.284785][ T5830] usb 7-1: 3:0 : does not exist [ 200.289544][ T5830] usb 7-1: 3:0 : does not exist [ 200.502539][ T5887] usb 7-1: USB disconnect, device number 11 [ 200.533739][ T7223] udevd[7223]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 200.682624][ T7446] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 200.706807][ T7446] bond1: entered promiscuous mode [ 200.710985][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.747689][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.751394][ T7446] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 200.764462][ T7446] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 200.784680][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.784729][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.803172][ T7449] x_tables: duplicate underflow at hook 2 [ 200.814612][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 200.864361][ T7446] bond1: (slave ip6gre1): making interface the new active one [ 200.869055][ T7446] ip6gre1: entered promiscuous mode [ 200.903515][ T7446] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 200.965704][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.975760][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.975825][ T42] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 201.068091][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.068153][ T42] usb 6-1: Product: syz [ 201.068214][ T42] usb 6-1: Manufacturer: syz [ 201.068246][ T42] usb 6-1: SerialNumber: syz [ 201.154507][ T42] cdc_mbim 6-1:1.0: skipping garbage [ 201.283594][ T7453] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 201.305784][ T5754] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.359843][ T7444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.504369][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 201.504474][ T7455] bridge_slave_1: left allmulticast mode [ 201.504533][ T7455] bridge_slave_1: left promiscuous mode [ 201.504753][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.583372][ T7455] bridge_slave_0: left allmulticast mode [ 201.583507][ T7455] bridge_slave_0: left promiscuous mode [ 201.583825][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.699800][ T43] audit: type=1400 audit(1788465526.272:584): avc: denied { setopt } for pid=7458 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.714022][ T43] audit: type=1400 audit(1788465526.282:585): avc: denied { bind } for pid=7458 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.796657][ T43] audit: type=1400 audit(1788465526.362:586): avc: denied { map } for pid=7458 comm="syz.3.486" path="socket:[14237]" dev="sockfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.796809][ T43] audit: type=1400 audit(1788465526.362:587): avc: denied { read write } for pid=7458 comm="syz.3.486" path="socket:[14237]" dev="sockfs" ino=14237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.979197][ T7468] CIFS: Attempting to mount //127.0.0.1/share [ 201.998641][ T7471] FAULT_INJECTION: forcing a failure. [ 201.998641][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 202.030063][ T7471] CPU: 3 UID: 0 PID: 7471 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.030132][ T7471] Tainted: [L]=SOFTLOCKUP [ 202.030140][ T7471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.030151][ T7471] Call Trace: [ 202.030160][ T7471] [ 202.030169][ T7471] dump_stack_lvl+0x100/0x190 [ 202.030201][ T7471] should_fail_ex.cold+0x5/0xa [ 202.030222][ T7471] ? __netlink_lookup+0x652/0x900 [ 202.030250][ T7471] should_failslab+0xc2/0x120 [ 202.030273][ T7471] kmem_cache_alloc_noprof+0x92/0x6a0 [ 202.030293][ T7471] ? skb_clone+0x190/0x400 [ 202.030313][ T7471] skb_clone+0x190/0x400 [ 202.030331][ T7471] netlink_deliver_tap+0xaed/0xcc0 [ 202.030361][ T7471] netlink_unicast+0x62b/0x850 [ 202.030391][ T7471] ? __pfx_netlink_unicast+0x10/0x10 [ 202.030422][ T7471] netlink_sendmsg+0x8b0/0xda0 [ 202.030452][ T7471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.030480][ T7471] ? selinux_socket_sendmsg+0x198/0x2f0 [ 202.030513][ T7471] ____sys_sendmsg+0xa4d/0xbe0 [ 202.030535][ T7471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.030574][ T7471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.030602][ T7471] ? lock_acquire+0x1d1/0x380 [ 202.030621][ T7471] ? get_pid_task+0x2a/0x250 [ 202.030646][ T7471] ___sys_sendmsg+0x190/0x1e0 [ 202.030673][ T7471] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.030696][ T7471] ? get_pid_task+0x106/0x250 [ 202.030728][ T7471] ? find_held_lock+0x2b/0x80 [ 202.030768][ T7471] __sys_sendmsg+0x160/0x210 [ 202.030788][ T7471] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.030820][ T7471] do_syscall_64+0x123/0x790 [ 202.030842][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.030862][ T7471] RIP: 0033:0x7fc3b2d9e159 [ 202.030879][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.030896][ T7471] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.030914][ T7471] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 202.030926][ T7471] RDX: 0000000000001000 RSI: 0000200000000200 RDI: 0000000000000003 [ 202.030938][ T7471] RBP: 00007fc3b3d21090 R08: 0000000000000000 R09: 0000000000000000 [ 202.030949][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.030960][ T7471] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 202.030985][ T7471] [ 202.049825][ T7444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.050512][ T42] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 202.067416][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 202.083006][ T7470] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 202.092508][ T7468] CIFS: VFS: cifs_mount failed w/return code = -5 [ 202.104877][ T42] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 202.127279][ T5754] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.204436][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.244019][ T42] wwan wwan0: port wwan0mbim0 attached [ 202.308428][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.422174][ T7444] tmpfs: Unknown parameter 'iŹ„ŻŻ°§?' [ 202.422407][ T42] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 6a:73:8c:b7:c4:dd [ 202.623695][ T5830] usb 6-1: USB disconnect, device number 11 [ 202.624942][ T5830] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 202.953456][ T5830] wwan wwan0: port wwan0mbim0 disconnected [ 203.254811][ T5851] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 203.313593][ T7491] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 203.313657][ T7491] device-mapper: raid: Choosing default region size of 4MiB [ 203.367045][ T7491] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 203.382839][ T7493] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.428298][ T43] audit: type=1400 audit(1788465527.952:588): avc: denied { create } for pid=7492 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 203.445982][ T7491] device-mapper: ioctl: error adding target to table [ 203.476433][ T5851] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 203.494759][ T5851] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 203.494785][ T5851] usb 8-1: config 1 has no interface number 0 [ 203.497589][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.497612][ T5851] usb 8-1: Product: syz [ 203.497626][ T5851] usb 8-1: Manufacturer: syz [ 203.497639][ T5851] usb 8-1: SerialNumber: syz [ 203.573835][ T43] audit: type=1400 audit(1788465528.112:589): avc: denied { sys_admin } for pid=7492 comm="syz.0.496" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 203.643895][ T5851] usb 8-1: 3:0 : does not exist [ 203.644067][ T5851] usb 8-1: 3:0 : does not exist [ 203.857778][ T5851] usb 8-1: USB disconnect, device number 12 [ 204.099657][ T43] audit: type=1800 audit(1788465528.662:590): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.500" name="ipv4_address" dev="configfs" ino=16089 res=0 errno=0 [ 204.107702][ T43] audit: type=1800 audit(1788465528.662:591): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.500" name="ipv4_port" dev="configfs" ino=16090 res=0 errno=0 [ 204.108722][ T43] audit: type=1800 audit(1788465528.662:592): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.500" name="num" dev="configfs" ino=16091 res=0 errno=0 [ 204.112306][ T43] audit: type=1800 audit(1788465528.692:593): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.500" name="local" dev="configfs" ino=16092 res=0 errno=0 [ 204.113359][ T7223] udevd[7223]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 204.261338][ T7509] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.417262][ T7514] CIFS: Attempting to mount //127.0.0.1/share [ 204.424076][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.501'. [ 204.431209][ T7514] CIFS: VFS: Error connecting to socket. Aborting operation. [ 204.431246][ T7514] CIFS: VFS: cifs_mount failed w/return code = -101 [ 204.716548][ T7522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.764297][ T5830] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 204.940928][ T5830] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.942888][ T5830] usb 7-1: config index 0 descriptor too short (expected 212, got 72) [ 204.949930][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.949952][ T5830] usb 7-1: Product: syz [ 204.949964][ T5830] usb 7-1: Manufacturer: syz [ 204.950224][ T5830] usb 7-1: SerialNumber: syz [ 205.199202][ T1333] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 205.305608][ T5912] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.401231][ T1333] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 205.403260][ T1333] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65280, setting to 1024 [ 205.403376][ T1333] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 205.426682][ T1333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.426714][ T1333] usb 8-1: Product: syz [ 205.426730][ T1333] usb 8-1: Manufacturer: syz [ 205.426747][ T1333] usb 8-1: SerialNumber: syz [ 205.431644][ T7530] md: couldn't update array info. -22 [ 205.456034][ T7525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.486728][ T7530] md: could not open device unknown-block(1,1). [ 205.486860][ T7530] md: md_import_device returned -16 [ 205.700672][ T7537] ./dev/sda1: Can't open blockdev [ 205.705500][ T7537] netlink: 92 bytes leftover after parsing attributes in process `syz.1.510'. [ 205.761871][ T7538] nvme_fabrics: nłīo„ųfåĢ]bĮĘED Ōō³E¹æŠČ=Ō˜¦¼ŲØ]OŠ™0!WSŗ×œæŽ·“Ä}Ķ’ƒ“FšŲĻö'5—mę[”Ž•wh}ö1ón@ä ®—7’éŗE aoVµMY•²mńØż0;Õyl:&1µØßąć†Č<ņ„ĄØ7ė¾-h:S©Xčœī»ˆŻl7Z·‹S`.š7–ĄP»h\–ņfPæÖõGū4«õÄ`5™¬į_*–Ńvįꐔ]¾Ż\Ļy™žu$Ēįź[&s’Ū_ßM ĢīĢü«ūŗī needs to be < 223 bytes [ 205.765484][ T5754] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 205.765716][ T5754] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 205.783675][ T1333] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 206.353104][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.353915][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.378470][ T5912] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 206.379026][ T5912] ath9k_htc: Failed to initialize the device [ 206.429077][ T42] usb 8-1: USB disconnect, device number 13 [ 206.502122][ T7547] nbd1: detected capacity change from 0 to 1 [ 206.516796][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517025][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517131][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517194][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517238][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517294][ T7153] ldm_validate_partition_table(): Disk read failed. [ 206.517336][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517382][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517426][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517469][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517501][ T7153] Dev nbd1: unable to read RDB block 0 [ 206.517542][ T7153] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.517600][ T7153] nbd1: unable to read partition table [ 206.517775][ T7153] nbd1: partition table beyond EOD, truncated [ 206.625559][ T7548] block nbd1: shutting down sockets [ 206.691116][ T5912] usb 7-1: ath9k_htc: USB layer deinitialized [ 206.762151][ T42] usblp0: removed [ 206.778163][ T7153] ldm_validate_partition_table(): Disk read failed. [ 206.778344][ T7153] Dev nbd1: unable to read RDB block 0 [ 206.778445][ T7153] nbd1: unable to read partition table [ 206.778665][ T7153] nbd1: partition table beyond EOD, truncated [ 206.911306][ T7550] lo speed is unknown, defaulting to 1000 [ 207.543203][ T1333] usb 7-1: USB disconnect, device number 12 [ 207.566168][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 207.579523][ T43] audit: type=1400 audit(1788465532.142:608): avc: denied { unmount } for pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 207.710904][ T7563] netlink: 'syz.2.518': attribute type 21 has an invalid length. [ 207.924022][ T7565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.036299][ T7567] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 208.298809][ T7571] FAULT_INJECTION: forcing a failure. [ 208.298809][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.305113][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.1.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.305160][ T7571] Tainted: [L]=SOFTLOCKUP [ 208.305169][ T7571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.305181][ T7571] Call Trace: [ 208.305189][ T7571] [ 208.305198][ T7571] dump_stack_lvl+0x100/0x190 [ 208.305233][ T7571] should_fail_ex.cold+0x5/0xa [ 208.314078][ T7571] _copy_to_user+0x32/0xd0 [ 208.314140][ T7571] simple_read_from_buffer+0xcb/0x170 [ 208.314407][ T7571] proc_fail_nth_read+0x1af/0x230 [ 208.314439][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.314471][ T7571] ? rw_verify_area+0xce/0x6d0 [ 208.314501][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.314526][ T7571] vfs_read+0x1e4/0xb40 [ 208.314557][ T7571] ? lock_acquire+0x1d1/0x380 [ 208.314580][ T7571] ? __fget_files+0x34/0x3d0 [ 208.314604][ T7571] ? __pfx_vfs_read+0x10/0x10 [ 208.314635][ T7571] ? find_held_lock+0x2b/0x80 [ 208.314663][ T7571] ? __fget_files+0x215/0x3d0 [ 208.314693][ T7571] ? __fget_files+0x21f/0x3d0 [ 208.314726][ T7571] ksys_read+0x12a/0x250 [ 208.314747][ T7571] ? __pfx_ksys_read+0x10/0x10 [ 208.314777][ T7571] do_syscall_64+0x123/0x790 [ 208.314806][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.314829][ T7571] RIP: 0033:0x7f22b7d5e98e [ 208.314849][ T7571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.314867][ T7571] RSP: 002b:00007f22b8bb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.314889][ T7571] RAX: ffffffffffffffda RBX: 00007f22b8bb66c0 RCX: 00007f22b7d5e98e [ 208.314904][ T7571] RDX: 000000000000000f RSI: 00007f22b8bb60a0 RDI: 0000000000000011 [ 208.314917][ T7571] RBP: 00007f22b8bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.314929][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.314941][ T7571] R13: 00007f22b8026038 R14: 00007f22b8025fa0 R15: 00007ffd0d204658 [ 208.314970][ T7571] [ 208.909953][ T43] audit: type=1326 audit(1788465533.482:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.916801][ T43] audit: type=1326 audit(1788465533.492:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.917110][ T43] audit: type=1326 audit(1788465533.492:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.924341][ T1333] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 208.933524][ T43] audit: type=1326 audit(1788465533.502:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.933579][ T43] audit: type=1326 audit(1788465533.502:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.933613][ T43] audit: type=1326 audit(1788465533.502:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.933647][ T43] audit: type=1326 audit(1788465533.502:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.933680][ T43] audit: type=1326 audit(1788465533.502:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.933712][ T43] audit: type=1326 audit(1788465533.502:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.2.525" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b2d9e159 code=0x7ff00000 [ 208.964923][ T7578] fuse: Unknown parameter '0xffffffffffffffff' [ 208.965753][ T7578] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 209.079579][ T1333] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 209.097013][ T1333] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 209.097039][ T1333] usb 6-1: config 1 has no interface number 0 [ 209.099908][ T1333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.099934][ T1333] usb 6-1: Product: syz [ 209.099948][ T1333] usb 6-1: Manufacturer: syz [ 209.099961][ T1333] usb 6-1: SerialNumber: syz [ 209.115171][ T1333] usb 6-1: 3:0 : does not exist [ 209.115193][ T1333] usb 6-1: 3:0 : does not exist [ 209.253901][ T7586] FAULT_INJECTION: forcing a failure. [ 209.253901][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 209.254007][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.3.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.254060][ T7586] Tainted: [L]=SOFTLOCKUP [ 209.254070][ T7586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.254083][ T7586] Call Trace: [ 209.254091][ T7586] [ 209.254100][ T7586] dump_stack_lvl+0x100/0x190 [ 209.254137][ T7586] should_fail_ex.cold+0x5/0xa [ 209.254166][ T7586] should_failslab+0xc2/0x120 [ 209.254214][ T7586] kmem_cache_alloc_noprof+0x92/0x6a0 [ 209.254238][ T7586] ? skb_clone+0x190/0x400 [ 209.254264][ T7586] skb_clone+0x190/0x400 [ 209.254286][ T7586] bpf_clone_redirect+0x166/0x500 [ 209.254320][ T7586] bpf_prog_885767c90d177146+0x62/0x6b [ 209.254339][ T7586] ? unwind_get_return_address+0x59/0xa0 [ 209.254372][ T7586] ? __lock_acquire+0x4c5/0x1ec0 [ 209.254397][ T7586] ? __lock_acquire+0x4c5/0x1ec0 [ 209.254426][ T7586] ? lock_acquire+0x1d1/0x380 [ 209.254444][ T7586] ? bpf_test_timer_enter+0xf7/0x2c0 [ 209.254472][ T7586] ? find_held_lock+0x2b/0x80 [ 209.254500][ T7586] ? bpf_test_timer_enter+0xf7/0x2c0 [ 209.254530][ T7586] ? ktime_get+0x22c/0x320 [ 209.254553][ T7586] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.254580][ T7586] ? __pfx___cant_migrate+0x10/0x10 [ 209.254610][ T7586] ? bpf_test_timer_continue+0x17b/0x5e0 [ 209.254637][ T7586] ? lockdep_hardirqs_on+0x7d/0x110 [ 209.254661][ T7586] bpf_test_run+0x39c/0xa40 [ 209.254688][ T7586] ? bpf_test_run+0x1c6/0xa40 [ 209.254721][ T7586] ? __pfx_bpf_test_run+0x10/0x10 [ 209.254772][ T7586] ? eth_type_trans+0x2e3/0x720 [ 209.254806][ T7586] bpf_prog_test_run_skb+0x15b3/0x3530 [ 209.254841][ T7586] ? lock_acquire+0x1d1/0x380 [ 209.254878][ T7586] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 209.254914][ T7586] ? fput+0x7c/0x100 [ 209.254943][ T7586] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 209.254982][ T7586] __sys_bpf+0x2265/0x4a30 [ 209.255011][ T7586] ? __pfx___sys_bpf+0x10/0x10 [ 209.255030][ T7586] ? find_held_lock+0x2b/0x80 [ 209.255059][ T7586] ? get_pid_task+0xfc/0x250 [ 209.255087][ T7586] ? get_pid_task+0xfc/0x250 [ 209.255126][ T7586] ? find_held_lock+0x2b/0x80 [ 209.255161][ T7586] ? rcu_read_lock_any_held+0x6a/0x90 [ 209.255193][ T7586] ? find_held_lock+0x2b/0x80 [ 209.255219][ T7586] ? ksys_write+0x190/0x250 [ 209.255238][ T7586] ? ksys_write+0x190/0x250 [ 209.255256][ T7586] ? lock_acquire+0x1d1/0x380 [ 209.255297][ T7586] ? fput+0x7c/0x100 [ 209.255322][ T7586] ? ksys_write+0x1ac/0x250 [ 209.255346][ T7586] ? __x64_sys_bpf+0xce/0x140 [ 209.255365][ T7586] __x64_sys_bpf+0xce/0x140 [ 209.255387][ T7586] ? do_syscall_64+0xae/0x790 [ 209.255414][ T7586] do_syscall_64+0x123/0x790 [ 209.255441][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.255461][ T7586] RIP: 0033:0x7fe81439e159 [ 209.255478][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.255496][ T7586] RSP: 002b:00007fe8152c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.255515][ T7586] RAX: ffffffffffffffda RBX: 00007fe814625fa0 RCX: 00007fe81439e159 [ 209.255528][ T7586] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 209.255540][ T7586] RBP: 00007fe8152c0090 R08: 0000000000000000 R09: 0000000000000000 [ 209.255551][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.255562][ T7586] R13: 00007fe814626038 R14: 00007fe814625fa0 R15: 00007ffd65aa1728 [ 209.255587][ T7586] [ 209.422331][ T1333] usb 6-1: USB disconnect, device number 12 [ 209.478665][ T7223] udevd[7223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 209.531351][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 210.015838][ T7601] tipc: Started in network mode [ 210.015990][ T7601] tipc: Node identity 2e6bf3c06214, cluster identity 4711 [ 210.016301][ T7601] tipc: Enabled bearer , priority 1 [ 210.073173][ T7600] tipc: Resetting bearer [ 210.176326][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.239919][ T7600] tipc: Disabling bearer [ 210.713422][ T7616] xt_cgroup: no path or classid specified [ 210.717069][ T7616] nvmet: Invalid value 'lo' for trtype [ 210.836888][ T7620] netlink: 72 bytes leftover after parsing attributes in process `syz.2.540'. [ 210.888041][ T75] IPVS: starting estimator thread 0... [ 210.931332][ T5754] Bluetooth: hci1: unexpected event 0x06 length: 12 > 3 [ 210.976958][ T7622] IPVS: using max 29 ests per chain, 69600 per kthread [ 210.987524][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.032486][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.168026][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 211.834707][ T7644] hsr_slave_0: left promiscuous mode [ 211.865265][ T7644] hsr_slave_1: left promiscuous mode [ 212.091194][ T7653] netlink: Unknown conntrack attr (0) [ 212.091265][ T7653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.159614][ T5754] Bluetooth: hci0: unexpected event for opcode 0x203d [ 212.466536][ T5851] logitech-hidpp-device 0005:046D:B012.0005: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 212.697882][ T7660] fido_id[7660]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.501177][ T7679] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.527132][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 213.527339][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 213.571281][ T6899] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 213.596359][ T7679] bond2 (unregistering): Released all slaves [ 213.739477][ T6899] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 213.779669][ T6899] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 213.781763][ T6899] usb 6-1: config 1 has no interface number 0 [ 213.819428][ T6899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.839289][ T6899] usb 6-1: Product: syz [ 213.841233][ T6899] usb 6-1: Manufacturer: syz [ 213.843575][ T6899] usb 6-1: SerialNumber: syz [ 213.919135][ T6899] usb 6-1: 3:0 : does not exist [ 213.919219][ T6899] usb 6-1: 3:0 : does not exist [ 213.947931][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.953393][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.139993][ T5851] usb 6-1: USB disconnect, device number 13 [ 214.195616][ T7223] udevd[7223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 214.315378][ T7692] jffs2: notice: (7692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 214.390197][ T43] kauditd_printk_skb: 655 callbacks suppressed [ 214.390300][ T43] audit: type=1400 audit(1788465538.952:1273): avc: denied { write } for pid=7691 comm="syz.3.562" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.433900][ T7696] syz.2.563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.651964][ T43] audit: type=1400 audit(1788465539.222:1274): avc: denied { create } for pid=7699 comm="syz.2.565" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.668504][ T7700] FAULT_INJECTION: forcing a failure. [ 214.668504][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 214.683848][ T7700] CPU: 2 UID: 0 PID: 7700 Comm: syz.2.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.683908][ T7700] Tainted: [L]=SOFTLOCKUP [ 214.683917][ T7700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.683931][ T7700] Call Trace: [ 214.683939][ T7700] [ 214.683948][ T7700] dump_stack_lvl+0x100/0x190 [ 214.683986][ T7700] should_fail_ex.cold+0x5/0xa [ 214.684016][ T7700] should_failslab+0xc2/0x120 [ 214.684044][ T7700] __kmalloc_flags_noprof+0x122/0x8e0 [ 214.684076][ T7700] ? find_held_lock+0x2b/0x80 [ 214.684105][ T7700] ? __pcs_replace_empty_main+0x132/0x650 [ 214.684136][ T7700] ? __pcs_replace_empty_main+0x3fa/0x650 [ 214.684193][ T7700] __pcs_replace_empty_main+0x3fa/0x650 [ 214.684234][ T7700] kmem_cache_alloc_lru_noprof+0x4c0/0x6a0 [ 214.684257][ T7700] ? aio_alloc_inode+0x25/0x70 [ 214.684282][ T7700] ? __pfx_aio_alloc_inode+0x10/0x10 [ 214.684309][ T7700] aio_alloc_inode+0x25/0x70 [ 214.684333][ T7700] alloc_inode+0x68/0x250 [ 214.684366][ T7700] alloc_anon_inode+0x2a/0x3e0 [ 214.684394][ T7700] ioctx_alloc+0x4dc/0x21a0 [ 214.684431][ T7700] ? __might_fault+0xc5/0x140 [ 214.684461][ T7700] ? find_held_lock+0x2b/0x80 [ 214.684492][ T7700] ? __pfx_ioctx_alloc+0x10/0x10 [ 214.684530][ T7700] __x64_sys_io_setup+0xc9/0x220 [ 214.684562][ T7700] do_syscall_64+0x123/0x790 [ 214.684590][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.684613][ T7700] RIP: 0033:0x7fc3b2d9e159 [ 214.684633][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.684655][ T7700] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 214.684679][ T7700] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 214.684693][ T7700] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000006 [ 214.684706][ T7700] RBP: 00007fc3b2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 214.684719][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.684732][ T7700] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 214.684758][ T7700] [ 214.751621][ T7704] jffs2: notice: (7704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 214.783054][ T43] audit: type=1400 audit(1788465539.342:1275): avc: denied { write } for pid=7703 comm="syz.3.567" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.783108][ T43] audit: type=1400 audit(1788465539.352:1276): avc: denied { bind } for pid=7701 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.783146][ T43] audit: type=1400 audit(1788465539.352:1277): avc: denied { listen } for pid=7701 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.783182][ T43] audit: type=1400 audit(1788465539.352:1278): avc: denied { connect } for pid=7701 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.919530][ T43] audit: type=1400 audit(1788465539.492:1279): avc: denied { unlink } for pid=5749 comm="syz-executor" name="file0" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.988056][ T6898] usb 5-1: USB disconnect, device number 3 [ 214.998384][ T7708] kvm: apic: phys broadcast and lowest prio [ 214.999574][ T7716] jffs2: notice: (7716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 215.016895][ T43] audit: type=1400 audit(1788465539.592:1280): avc: denied { write } for pid=7715 comm="syz.2.570" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.018700][ T7716] FAULT_INJECTION: forcing a failure. [ 215.018700][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 215.018721][ T7716] CPU: 2 UID: 0 PID: 7716 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.018741][ T7716] Tainted: [L]=SOFTLOCKUP [ 215.018747][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.018757][ T7716] Call Trace: [ 215.018763][ T7716] [ 215.018769][ T7716] dump_stack_lvl+0x100/0x190 [ 215.018798][ T7716] should_fail_ex.cold+0x5/0xa [ 215.018829][ T7716] should_failslab+0xc2/0x120 [ 215.018851][ T7716] __kmalloc_noprof+0xfc/0x840 [ 215.018869][ T7716] ? jffs2_selected_compress+0x5d/0x5a0 [ 215.018890][ T7716] jffs2_selected_compress+0x5d/0x5a0 [ 215.018910][ T7716] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 215.018934][ T7716] jffs2_compress+0x7f/0xa20 [ 215.018959][ T7716] jffs2_write_inode_range+0x2fb/0xb80 [ 215.018988][ T7716] ? __pfx_jffs2_write_inode_range+0x10/0x10 [ 215.019011][ T7716] ? rcu_is_watching+0x13/0xc0 [ 215.019033][ T7716] ? from_kgid+0x8f/0xd0 [ 215.019046][ T7716] ? __pfx_from_kgid+0x10/0x10 [ 215.019060][ T7716] jffs2_write_end+0x72c/0xea0 [ 215.019076][ T7716] ? __pfx_jffs2_write_end+0x10/0x10 [ 215.019088][ T7716] ? inode_to_bdi+0x9e/0x160 [ 215.019105][ T7716] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 215.019124][ T7716] generic_perform_write+0x513/0xa40 [ 215.019141][ T7716] ? __pfx_generic_perform_write+0x10/0x10 [ 215.019154][ T7716] ? mnt_put_write_access_file+0x4e/0x100 [ 215.019168][ T7716] ? file_update_time_flags+0x38c/0x520 [ 215.019186][ T7716] __generic_file_write_iter+0x1f7/0x240 [ 215.019203][ T7716] generic_file_write_iter+0xe1/0x390 [ 215.019219][ T7716] vfs_write+0x6af/0x1050 [ 215.019236][ T7716] ? __pfx_generic_file_write_iter+0x10/0x10 [ 215.019253][ T7716] ? __pfx_vfs_write+0x10/0x10 [ 215.019269][ T7716] ? find_held_lock+0x2b/0x80 [ 215.019293][ T7716] __x64_sys_pwrite64+0x1eb/0x250 [ 215.019304][ T7716] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 215.019322][ T7716] do_syscall_64+0x123/0x790 [ 215.019336][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.019348][ T7716] RIP: 0033:0x7fc3b2d9e159 [ 215.019357][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.019368][ T7716] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 215.019379][ T7716] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 215.019386][ T7716] RDX: 0000000000000058 RSI: 0000200000001000 RDI: 0000000000000003 [ 215.019393][ T7716] RBP: 00007fc3b3d21090 R08: 0000000000000000 R09: 0000000000000000 [ 215.019399][ T7716] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 215.019407][ T7716] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 215.019428][ T7716] [ 215.019434][ T7716] jffs2: No memory for compressor allocation. Compression failed. [ 215.076733][ T6899] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 215.078013][ T7708] loop6: detected capacity change from 0 to 131622 [ 215.079658][ T7708] buffer_io_error: 30 callbacks suppressed [ 215.079678][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079717][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079751][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079782][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079807][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079845][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079881][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079905][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079918][ T7708] ldm_validate_partition_table(): Disk read failed. [ 215.079939][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.079965][ T7708] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.080003][ T7708] Dev loop6: unable to read RDB block 0 [ 215.080136][ T7708] loop6: unable to read partition table [ 215.080295][ T7708] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 215.131675][ T43] audit: type=1400 audit(1788465539.702:1281): avc: denied { read write } for pid=7701 comm="syz.0.566" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 215.132188][ T43] audit: type=1400 audit(1788465539.702:1282): avc: denied { open } for pid=7701 comm="syz.0.566" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 215.257684][ T6899] usb 6-1: Using ep0 maxpacket: 8 [ 215.264029][ T6899] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.269882][ T6899] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 215.269925][ T6899] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.269944][ T6899] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.269962][ T6899] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.269987][ T6899] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.270019][ T6899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.651291][ T6899] usb 6-1: usb_control_msg returned -32 [ 215.656697][ T6899] usbtmc 6-1:16.0: can't read capabilities [ 216.225553][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 216.240775][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 216.444361][ T1333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.447989][ T7744] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 216.532028][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.532465][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.635051][ T1333] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 216.640862][ T1333] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 216.644952][ T1333] usb 5-1: config 1 has no interface number 0 [ 216.661565][ T1333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.677349][ T1333] usb 5-1: Product: syz [ 216.677433][ T1333] usb 5-1: Manufacturer: syz [ 216.677479][ T1333] usb 5-1: SerialNumber: syz [ 216.688060][ T42] usb 6-1: USB disconnect, device number 14 [ 216.717533][ T1333] usb 5-1: 3:0 : does not exist [ 216.719429][ T1333] usb 5-1: 3:0 : does not exist [ 216.965573][ T5851] usb 5-1: USB disconnect, device number 4 [ 216.979165][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 217.164136][ T7762] xt_hl: Unknown TTL match mode: 255 [ 217.750132][ T7780] jffs2: notice: (7780) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 217.773132][ T7780] comedi comedi1: Minor 166 is invalid! [ 218.005844][ T5823] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.023111][ T7786] kernel read not supported for file /!selinu’ (pid: 7786 comm: syz.0.589) [ 218.204686][ T7806] FAULT_INJECTION: forcing a failure. [ 218.204686][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 218.211208][ T7806] CPU: 2 UID: 0 PID: 7806 Comm: syz.2.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.211245][ T7806] Tainted: [L]=SOFTLOCKUP [ 218.211253][ T7806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.211266][ T7806] Call Trace: [ 218.211281][ T7806] [ 218.211290][ T7806] dump_stack_lvl+0x100/0x190 [ 218.211341][ T7806] should_fail_ex.cold+0x5/0xa [ 218.211372][ T7806] should_failslab+0xc2/0x120 [ 218.211403][ T7806] kmem_cache_alloc_noprof+0x92/0x6a0 [ 218.211423][ T7806] ? can_rx_register+0x1ef/0x700 [ 218.211466][ T7806] can_rx_register+0x1ef/0x700 [ 218.211494][ T7806] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 218.211523][ T7806] ? __pfx_can_rx_register+0x10/0x10 [ 218.211550][ T7806] ? trace_kmem_cache_alloc+0xdd/0x100 [ 218.211575][ T7806] ? __kasan_slab_alloc+0x89/0x90 [ 218.211599][ T7806] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 218.211619][ T7806] ? cgw_create_job+0x4b1/0xe80 [ 218.211653][ T7806] cgw_create_job+0xa52/0xe80 [ 218.211689][ T7806] ? __pfx_cgw_create_job+0x10/0x10 [ 218.211732][ T7806] ? __pfx_cgw_create_job+0x10/0x10 [ 218.211762][ T7806] rtnetlink_rcv_msg+0x3c9/0xe90 [ 218.211789][ T7806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.211819][ T7806] ? ref_tracker_free+0x37e/0x6c0 [ 218.211849][ T7806] netlink_rcv_skb+0x159/0x420 [ 218.211883][ T7806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 218.211907][ T7806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.211948][ T7806] ? netlink_deliver_tap+0x1ae/0xcc0 [ 218.211983][ T7806] netlink_unicast+0x585/0x850 [ 218.212017][ T7806] ? __pfx_netlink_unicast+0x10/0x10 [ 218.212056][ T7806] netlink_sendmsg+0x8b0/0xda0 [ 218.212091][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.212125][ T7806] ? selinux_socket_sendmsg+0x198/0x2f0 [ 218.212162][ T7806] ____sys_sendmsg+0xa4d/0xbe0 [ 218.212187][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.212218][ T7806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.212251][ T7806] ? lock_acquire+0x1d1/0x380 [ 218.212272][ T7806] ? get_pid_task+0x2a/0x250 [ 218.212312][ T7806] ___sys_sendmsg+0x190/0x1e0 [ 218.212342][ T7806] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.212368][ T7806] ? get_pid_task+0x106/0x250 [ 218.212407][ T7806] ? find_held_lock+0x2b/0x80 [ 218.212456][ T7806] __sys_sendmsg+0x160/0x210 [ 218.212479][ T7806] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.212518][ T7806] do_syscall_64+0x123/0x790 [ 218.212559][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.212583][ T7806] RIP: 0033:0x7fc3b2d9e159 [ 218.212603][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.212624][ T7806] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.212647][ T7806] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 218.212661][ T7806] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 218.212674][ T7806] RBP: 00007fc3b3d21090 R08: 0000000000000000 R09: 0000000000000000 [ 218.212687][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.212700][ T7806] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 218.212730][ T7806] [ 218.466307][ T7812] CIFS mount error: No usable UNC path provided in device string! [ 218.466307][ T7812] [ 218.466339][ T7812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.590072][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 219.590147][ T43] audit: type=1400 audit(1788465544.162:1301): avc: denied { write } for pid=7844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.752302][ T43] audit: type=1400 audit(1788465544.322:1302): avc: denied { write } for pid=7849 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.787097][ T7853] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 219.904075][ T7855] netlink: 548 bytes leftover after parsing attributes in process `syz.1.607'. [ 220.146230][ T38] Bluetooth: (null): Invalid header checksum [ 220.154028][ T38] Bluetooth: (null): Invalid header checksum [ 220.169390][ T7860] netlink: 68 bytes leftover after parsing attributes in process `syz.1.607'. [ 220.623192][ T7868] FAULT_INJECTION: forcing a failure. [ 220.623192][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.623395][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.0.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.623426][ T7868] Tainted: [L]=SOFTLOCKUP [ 220.623434][ T7868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.623446][ T7868] Call Trace: [ 220.623453][ T7868] [ 220.623463][ T7868] dump_stack_lvl+0x100/0x190 [ 220.623497][ T7868] should_fail_ex.cold+0x5/0xa [ 220.623527][ T7868] _copy_to_user+0x32/0xd0 [ 220.623562][ T7868] simple_read_from_buffer+0xcb/0x170 [ 220.623589][ T7868] proc_fail_nth_read+0x1af/0x230 [ 220.623616][ T7868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.623692][ T7868] ? rw_verify_area+0xce/0x6d0 [ 220.623719][ T7868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.623744][ T7868] vfs_read+0x1e4/0xb40 [ 220.623776][ T7868] ? lock_acquire+0x1d1/0x380 [ 220.623796][ T7868] ? __fget_files+0x34/0x3d0 [ 220.623820][ T7868] ? __pfx_vfs_read+0x10/0x10 [ 220.623846][ T7868] ? find_held_lock+0x2b/0x80 [ 220.623876][ T7868] ? __fget_files+0x215/0x3d0 [ 220.623901][ T7868] ? __fget_files+0x21f/0x3d0 [ 220.623932][ T7868] ksys_read+0x12a/0x250 [ 220.623951][ T7868] ? __pfx_ksys_read+0x10/0x10 [ 220.623974][ T7868] do_syscall_64+0x123/0x790 [ 220.624003][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.624025][ T7868] RIP: 0033:0x7faa81d5e98e [ 220.624043][ T7868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.624063][ T7868] RSP: 002b:00007faa82ca7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.624084][ T7868] RAX: ffffffffffffffda RBX: 00007faa82ca86c0 RCX: 00007faa81d5e98e [ 220.624098][ T7868] RDX: 000000000000000f RSI: 00007faa82ca80a0 RDI: 0000000000000006 [ 220.624109][ T7868] RBP: 00007faa82ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 220.624120][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.624135][ T7868] R13: 00007faa82026038 R14: 00007faa82025fa0 R15: 00007ffc120e4438 [ 220.624162][ T7868] [ 220.738590][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 220.738627][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.613'. [ 220.793838][ T43] audit: type=1400 audit(1788465545.372:1303): avc: denied { read } for pid=7869 comm="syz.3.613" lport=55096 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 220.801982][ T5754] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 220.844890][ T43] audit: type=1400 audit(1788465545.422:1304): avc: denied { setopt } for pid=7869 comm="syz.3.613" lport=55096 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.140219][ T7887] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(15728644.0.0), cmd(3) [ 221.385981][ T7898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.462755][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 221.661934][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 222.069338][ T7916] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.628'. [ 222.094776][ T6898] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 222.312824][ T6898] usb 6-1: Using ep0 maxpacket: 8 [ 222.320862][ T6898] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.322069][ T6898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.322106][ T6898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.324718][ T6898] usb 6-1: config 0 descriptor?? [ 222.504416][ T7922] lo: entered promiscuous mode [ 222.552163][ T7922] tunl0: entered promiscuous mode [ 222.552476][ T7922] gre0: entered promiscuous mode [ 222.552691][ T7922] gretap0: entered promiscuous mode [ 222.552951][ T7922] erspan0: entered promiscuous mode [ 222.558433][ T7922] ip_vti0: entered promiscuous mode [ 222.558720][ T7922] ip6_vti0: entered promiscuous mode [ 222.558937][ T7922] sit0: entered promiscuous mode [ 222.559387][ T7922] ip6tnl0: entered promiscuous mode [ 222.559777][ T7922] ip6gre0: entered promiscuous mode [ 222.560210][ T7922] syz_tun: entered promiscuous mode [ 222.563442][ T7922] ip6gretap0: entered promiscuous mode [ 222.563944][ T7922] vcan0: entered promiscuous mode [ 222.567506][ T7922] bond0: entered promiscuous mode [ 222.567528][ T7922] bond_slave_0: entered promiscuous mode [ 222.590233][ T7922] bond_slave_1: entered promiscuous mode [ 222.593658][ T7922] team0: entered promiscuous mode [ 222.593687][ T7922] team_slave_0: entered promiscuous mode [ 222.593959][ T7922] team_slave_1: entered promiscuous mode [ 222.594120][ T7922] team0: left allmulticast mode [ 222.594135][ T7922] team_slave_0: left allmulticast mode [ 222.594149][ T7922] team_slave_1: left allmulticast mode [ 222.596161][ T7922] dummy0: entered promiscuous mode [ 222.596672][ T7922] nlmon0: entered promiscuous mode [ 222.601447][ T7922] batadv0: entered promiscuous mode [ 222.602372][ T7922] vxcan0: entered promiscuous mode [ 222.602863][ T7922] vxcan1: entered promiscuous mode [ 222.603323][ T7922] veth0: entered promiscuous mode [ 222.604009][ T7922] veth1: entered promiscuous mode [ 222.606165][ T7922] wg0: entered promiscuous mode [ 222.606651][ T7922] wg1: entered promiscuous mode [ 222.607072][ T7922] wg2: entered promiscuous mode [ 222.607787][ T7922] veth0_to_bridge: entered promiscuous mode [ 222.608240][ T7922] bridge_slave_0: entered promiscuous mode [ 222.608673][ T7922] veth1_to_bridge: entered promiscuous mode [ 222.609076][ T7922] bridge_slave_1: entered promiscuous mode [ 222.636530][ T7922] veth0_to_bond: entered promiscuous mode [ 222.637646][ T7922] veth1_to_bond: entered promiscuous mode [ 222.638965][ T7922] veth0_to_team: entered promiscuous mode [ 222.640196][ T7922] veth1_to_team: entered promiscuous mode [ 222.641708][ T7922] veth0_to_batadv: entered promiscuous mode [ 222.642286][ T7922] batadv_slave_0: entered promiscuous mode [ 222.642747][ T7922] veth1_to_batadv: entered promiscuous mode [ 222.643193][ T7922] batadv_slave_1: entered promiscuous mode [ 222.643629][ T7922] xfrm0: entered promiscuous mode [ 222.643986][ T6898] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 222.678017][ T7922] veth0_to_hsr: entered promiscuous mode [ 222.679312][ T7922] veth1_to_hsr: entered promiscuous mode [ 222.680391][ T7922] hsr0: entered promiscuous mode [ 222.681000][ T7922] veth1_virt_wifi: entered promiscuous mode [ 222.681541][ T7922] veth0_virt_wifi: entered promiscuous mode [ 222.682348][ T7922] virt_wifi0: entered promiscuous mode [ 222.687131][ T7922] vlan0: entered promiscuous mode [ 222.688516][ T7922] vlan1: entered promiscuous mode [ 222.689412][ T7922] macvlan0: entered promiscuous mode [ 222.690207][ T7922] macvlan1: entered promiscuous mode [ 222.691312][ T7922] ipvlan0: entered promiscuous mode [ 222.693714][ T7922] ipvlan1: entered promiscuous mode [ 222.711576][ T7922] macvtap0: entered promiscuous mode [ 222.712256][ T7922] macsec0: entered promiscuous mode [ 222.712787][ T7922] geneve0: entered promiscuous mode [ 222.713372][ T7922] geneve1: entered promiscuous mode [ 222.713848][ T7922] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 222.730589][ T7922] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 222.731414][ T7922] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 222.732189][ T7922] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 222.733041][ T7922] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 222.778899][ T7922] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 222.780719][ T7922] bridge1: entered promiscuous mode [ 222.782577][ T7922] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 222.782599][ T7922] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 223.166837][ T43] audit: type=1400 audit(1788465547.682:1305): avc: denied { listen } for pid=7910 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 223.341101][ T391] nvmet: connect request for invalid subsystem testnqn! [ 223.341281][ T7937] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 223.466214][ T6898] usb 6-1: USB disconnect, device number 15 [ 223.565934][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 223.764075][ T7958] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 223.853976][ T7961] jffs2: notice: (7961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 224.176567][ T43] audit: type=1400 audit(1788465548.752:1306): avc: denied { create_files_as } for pid=7967 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 224.194161][ T7970] CacheFiles: mkdir cache failed with error -122 [ 224.203465][ T7970] CacheFiles: Failed to register: -122 [ 224.306736][ T43] audit: type=1400 audit(1788465548.872:1307): avc: granted { setsecparam } for pid=7971 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 224.431317][ T7977] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 224.572187][ T7978] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 225.106154][ T7988] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 225.106208][ T7988] device-mapper: raid: Choosing default region size of 4MiB [ 225.106986][ T7988] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 225.107031][ T7988] device-mapper: ioctl: error adding target to table [ 225.399650][ T43] audit: type=1400 audit(1788465549.952:1308): avc: denied { set_context_mgr } for pid=7995 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 225.426204][ T43] audit: type=1400 audit(1788465550.002:1309): avc: denied { read } for pid=7993 comm="syz.0.656" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.429380][ T43] audit: type=1400 audit(1788465550.002:1310): avc: denied { open } for pid=7993 comm="syz.0.656" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.430552][ T43] audit: type=1400 audit(1788465550.002:1311): avc: denied { ioctl } for pid=7993 comm="syz.0.656" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.544443][ T7998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.594073][ T7999] openvswitch: netlink: Missing key (keys=40, expected=100) [ 225.656060][ T7998] md: couldn't update array info. -22 [ 225.690756][ T7998] xt_policy: neither incoming nor outgoing policy selected [ 225.758842][ T6898] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 225.775025][ T8001] FAULT_INJECTION: forcing a failure. [ 225.775025][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.775103][ T8001] CPU: 2 UID: 0 PID: 8001 Comm: syz.3.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.775155][ T8001] Tainted: [L]=SOFTLOCKUP [ 225.775165][ T8001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.775178][ T8001] Call Trace: [ 225.775187][ T8001] [ 225.775197][ T8001] dump_stack_lvl+0x100/0x190 [ 225.775235][ T8001] should_fail_ex.cold+0x5/0xa [ 225.775268][ T8001] _copy_to_user+0x32/0xd0 [ 225.775304][ T8001] simple_read_from_buffer+0xcb/0x170 [ 225.775334][ T8001] proc_fail_nth_read+0x1af/0x230 [ 225.775360][ T8001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.775387][ T8001] ? rw_verify_area+0xce/0x6d0 [ 225.775426][ T8001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.775452][ T8001] vfs_read+0x1e4/0xb40 [ 225.775485][ T8001] ? lock_acquire+0x1d1/0x380 [ 225.775505][ T8001] ? __fget_files+0x34/0x3d0 [ 225.775529][ T8001] ? __pfx_vfs_read+0x10/0x10 [ 225.775559][ T8001] ? find_held_lock+0x2b/0x80 [ 225.775589][ T8001] ? __fget_files+0x215/0x3d0 [ 225.775620][ T8001] ? __fget_files+0x21f/0x3d0 [ 225.775653][ T8001] ksys_read+0x12a/0x250 [ 225.775671][ T8001] ? __pfx_ksys_read+0x10/0x10 [ 225.775700][ T8001] do_syscall_64+0x123/0x790 [ 225.775730][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.775753][ T8001] RIP: 0033:0x7fe81435e98e [ 225.775774][ T8001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.775794][ T8001] RSP: 002b:00007fe8152bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.775815][ T8001] RAX: ffffffffffffffda RBX: 00007fe8152c06c0 RCX: 00007fe81435e98e [ 225.775828][ T8001] RDX: 000000000000000f RSI: 00007fe8152c00a0 RDI: 0000000000000004 [ 225.775839][ T8001] RBP: 00007fe8152c0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.775853][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.775866][ T8001] R13: 00007fe814626038 R14: 00007fe814625fa0 R15: 00007ffd65aa1728 [ 225.775898][ T8001] [ 225.963654][ T8003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.659'. [ 225.970449][ T43] audit: type=1400 audit(1788465550.532:1312): avc: denied { read } for pid=8004 comm="syz.1.658" dev="nsfs" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.971040][ T43] audit: type=1400 audit(1788465550.532:1313): avc: denied { open } for pid=8004 comm="syz.1.658" path="net:[4026533288]" dev="nsfs" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 225.971931][ T43] audit: type=1400 audit(1788465550.532:1314): avc: denied { create } for pid=8004 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.976482][ T6898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.989418][ T43] audit: type=1400 audit(1788465550.532:1315): avc: denied { read } for pid=8004 comm="syz.1.658" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 225.989483][ T43] audit: type=1400 audit(1788465550.532:1316): avc: denied { open } for pid=8004 comm="syz.1.658" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 225.989519][ T43] audit: type=1400 audit(1788465550.532:1317): avc: denied { ioctl } for pid=8004 comm="syz.1.658" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.022034][ T6898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 226.022073][ T6898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.022089][ T6898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.022117][ T6898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.294098][ T6898] usb 5-1: usb_control_msg returned -32 [ 226.294138][ T6898] usbtmc 5-1:16.0: can't read capabilities [ 226.444834][ T5851] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 226.474053][ T8010] kvm: pic: level sensitive irq not supported [ 226.474931][ T8010] kvm: pic: non byte read [ 226.605243][ T5851] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 226.608704][ T5851] usb 7-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 226.608752][ T5851] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 226.608777][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 172, changing to 4 [ 226.608802][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 40581, setting to 1023 [ 226.608825][ T5851] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.608862][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.659814][ T5851] pegasus 7-1:1.0: Missing or invalid endpoints [ 226.860167][ T8008] FAULT_INJECTION: forcing a failure. [ 226.860167][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 226.860290][ T8008] CPU: 1 UID: 0 PID: 8008 Comm: syz.2.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.860337][ T8008] Tainted: [L]=SOFTLOCKUP [ 226.860347][ T8008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.860359][ T8008] Call Trace: [ 226.860368][ T8008] [ 226.860378][ T8008] dump_stack_lvl+0x100/0x190 [ 226.860432][ T8008] should_fail_ex.cold+0x5/0xa [ 226.860464][ T8008] should_failslab+0xc2/0x120 [ 226.860498][ T8008] __kmalloc_cache_noprof+0x91/0x6d0 [ 226.860531][ T8008] ? usb_device_dump+0xf5/0x2370 [ 226.860695][ T8008] usb_device_dump+0xf5/0x2370 [ 226.860719][ T8008] ? __mutex_lock+0x26c/0x1bd0 [ 226.860754][ T8008] ? usb_device_dump+0x17f3/0x2370 [ 226.860783][ T8008] ? __pfx___mutex_lock+0x10/0x10 [ 226.860823][ T8008] ? usb_device_dump+0x1715/0x2370 [ 226.860844][ T8008] ? kfree+0x22b/0x6d0 [ 226.860886][ T8008] usb_device_dump+0x1830/0x2370 [ 226.860931][ T8008] usb_device_read+0x227/0x320 [ 226.860953][ T8008] ? __pfx_usb_device_read+0x10/0x10 [ 226.860974][ T8008] ? __debugfs_file_get+0x1fc/0x860 [ 226.860992][ T8008] ? __pfx___debugfs_file_get+0x10/0x10 [ 226.861009][ T8008] ? avc_policy_seqno+0x9/0x20 [ 226.861039][ T8008] full_proxy_read+0x135/0x1a0 [ 226.861055][ T8008] ? __pfx_full_proxy_read+0x10/0x10 [ 226.861072][ T8008] vfs_read+0x1e4/0xb40 [ 226.861099][ T8008] ? lock_acquire+0x1d1/0x380 [ 226.861117][ T8008] ? __fget_files+0x34/0x3d0 [ 226.861136][ T8008] ? __pfx_vfs_read+0x10/0x10 [ 226.861160][ T8008] ? find_held_lock+0x2b/0x80 [ 226.861212][ T8008] ? __fget_files+0x215/0x3d0 [ 226.861237][ T8008] ? __fget_files+0x21f/0x3d0 [ 226.861264][ T8008] ksys_read+0x12a/0x250 [ 226.861279][ T8008] ? __pfx_ksys_read+0x10/0x10 [ 226.861302][ T8008] do_syscall_64+0x123/0x790 [ 226.861325][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.861346][ T8008] RIP: 0033:0x7fc3b2d9e159 [ 226.861361][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.861377][ T8008] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.861396][ T8008] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 226.861408][ T8008] RDX: 0000000000002020 RSI: 00002000000021c0 RDI: 0000000000000004 [ 226.861422][ T8008] RBP: 00007fc3b3d21090 R08: 0000000000000000 R09: 0000000000000000 [ 226.861432][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.861443][ T8008] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 226.861468][ T8008] [ 226.867574][ T5851] usb 7-1: USB disconnect, device number 13 [ 227.070602][ T8025] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 227.158676][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 227.158782][ T8028] bridge_slave_1: left promiscuous mode [ 227.158978][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.243615][ T8028] bridge_slave_0: left promiscuous mode [ 227.243888][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.330140][ T1233] usb 5-1: USB disconnect, device number 5 [ 227.496380][ T8032] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 227.538517][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 227.538577][ T8036] FAULT_INJECTION: forcing a failure. [ 227.538577][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 227.538625][ T8036] CPU: 3 UID: 0 PID: 8036 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.538663][ T8036] Tainted: [L]=SOFTLOCKUP [ 227.538671][ T8036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.538683][ T8036] Call Trace: [ 227.538689][ T8036] [ 227.538697][ T8036] dump_stack_lvl+0x100/0x190 [ 227.538727][ T8036] should_fail_ex.cold+0x5/0xa [ 227.538752][ T8036] should_failslab+0xc2/0x120 [ 227.538773][ T8036] __kmalloc_noprof+0xfc/0x840 [ 227.538794][ T8036] ? fib6_info_alloc+0x40/0x160 [ 227.538825][ T8036] fib6_info_alloc+0x40/0x160 [ 227.538849][ T8036] ip6_route_info_create+0x14c/0xad0 [ 227.538879][ T8036] ip6_route_add+0x4b/0x1d0 [ 227.538900][ T8036] inet6_rtm_newroute+0x157/0x160 [ 227.538921][ T8036] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 227.538945][ T8036] ? __lock_acquire+0x4c5/0x1ec0 [ 227.538976][ T8036] ? find_held_lock+0x2b/0x80 [ 227.539000][ T8036] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 227.539020][ T8036] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 227.539042][ T8036] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 227.539064][ T8036] rtnetlink_rcv_msg+0x95e/0xe90 [ 227.539087][ T8036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.539111][ T8036] ? ref_tracker_free+0x37e/0x6c0 [ 227.539136][ T8036] netlink_rcv_skb+0x159/0x420 [ 227.539164][ T8036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.539186][ T8036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.539219][ T8036] ? netlink_deliver_tap+0x1ae/0xcc0 [ 227.539247][ T8036] netlink_unicast+0x585/0x850 [ 227.539283][ T8036] ? __pfx_netlink_unicast+0x10/0x10 [ 227.539317][ T8036] netlink_sendmsg+0x8b0/0xda0 [ 227.539349][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.539375][ T8036] ? selinux_socket_sendmsg+0x198/0x2f0 [ 227.539408][ T8036] ____sys_sendmsg+0xa4d/0xbe0 [ 227.539429][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.539458][ T8036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.539485][ T8036] ? lock_acquire+0x1d1/0x380 [ 227.539503][ T8036] ? get_pid_task+0x2a/0x250 [ 227.539530][ T8036] ___sys_sendmsg+0x190/0x1e0 [ 227.539552][ T8036] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.539576][ T8036] ? get_pid_task+0x106/0x250 [ 227.539611][ T8036] ? find_held_lock+0x2b/0x80 [ 227.539647][ T8036] __sys_sendmsg+0x160/0x210 [ 227.539664][ T8036] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.539693][ T8036] do_syscall_64+0x123/0x790 [ 227.539715][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.539735][ T8036] RIP: 0033:0x7fc3b2d9e159 [ 227.539751][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.539768][ T8036] RSP: 002b:00007fc3b3d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.539785][ T8036] RAX: ffffffffffffffda RBX: 00007fc3b3025fa0 RCX: 00007fc3b2d9e159 [ 227.539797][ T8036] RDX: 0000000000001000 RSI: 0000200000000200 RDI: 0000000000000003 [ 227.539809][ T8036] RBP: 00007fc3b3d21090 R08: 0000000000000000 R09: 0000000000000000 [ 227.539818][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.539829][ T8036] R13: 00007fc3b3026038 R14: 00007fc3b3025fa0 R15: 00007ffef9049588 [ 227.539852][ T8036] [ 227.865214][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 227.904656][ T8047] CIFS: Attempting to mount //127.0.0.1/share [ 227.918832][ T8047] CIFS: VFS: Error connecting to socket. Aborting operation. [ 227.926914][ T8047] CIFS: VFS: cifs_mount failed w/return code = -101 [ 228.193721][ T5912] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 228.365008][ T5912] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 228.366080][ T5912] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 228.366160][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.366206][ T5912] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.366250][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.366296][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.367812][ T5912] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 228.367884][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.367928][ T5912] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.367973][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.368020][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.369318][ T5912] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 228.369377][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 228.369419][ T5912] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.369458][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.369499][ T5912] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 228.373675][ T5912] usb 8-1: string descriptor 0 read error: -22 [ 228.373822][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.383574][ T5912] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 228.456389][ T8066] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 228.456407][ T8066] device-mapper: raid: Choosing default region size of 4MiB [ 228.498008][ T8066] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 228.498034][ T8066] device-mapper: ioctl: error adding target to table [ 228.663606][ T8068] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.091624][ T8078] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 229.127361][ T8083] siw: device registration error -23 [ 229.265952][ T5754] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 229.266619][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 229.644928][ T8090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8090 comm=syz.0.687 [ 229.671601][ T8087] bonding: unable to delete non-existent b [ 229.974129][ T8092] md: couldn't update array info. -22 [ 230.070015][ T8095] md: could not open device unknown-block(1,1). [ 230.070133][ T8095] md: md_import_device returned -16 [ 230.394871][ T8101] md: couldn't update array info. -22 [ 230.465129][ T8103] md: could not open device unknown-block(1,1). [ 230.468667][ T8103] md: md_import_device returned -16 [ 230.531391][ T8105] /dev/sg0: Can't lookup blockdev [ 230.537504][ T5754] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 230.639050][ T8112] FAULT_INJECTION: forcing a failure. [ 230.639050][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 230.639167][ T8112] CPU: 3 UID: 0 PID: 8112 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.639211][ T8112] Tainted: [L]=SOFTLOCKUP [ 230.639219][ T8112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.639230][ T8112] Call Trace: [ 230.639239][ T8112] [ 230.639246][ T8112] dump_stack_lvl+0x100/0x190 [ 230.639277][ T8112] should_fail_ex.cold+0x5/0xa [ 230.639305][ T8112] should_failslab+0xc2/0x120 [ 230.639331][ T8112] __kmalloc_cache_noprof+0x91/0x6d0 [ 230.639358][ T8112] ? addr_event.isra.0+0x396/0x560 [ 230.639384][ T8112] ? sctp_inet6addr_event+0x47d/0x910 [ 230.639417][ T8112] sctp_inet6addr_event+0x47d/0x910 [ 230.639443][ T8112] ? lock_acquire+0x1d1/0x380 [ 230.639462][ T8112] ? ieee80211_ifa6_changed+0xe9/0x440 [ 230.639488][ T8112] notifier_call_chain+0x99/0x3f0 [ 230.639523][ T8112] atomic_notifier_call_chain+0x71/0x1c0 [ 230.639552][ T8112] ipv6_add_addr+0x13e9/0x1fb0 [ 230.639585][ T8112] ? __pfx_ipv6_add_addr+0x10/0x10 [ 230.639614][ T8112] ? ipv6_find_idev+0x174/0x1f0 [ 230.639649][ T8112] ? add_addr+0xde/0x340 [ 230.639673][ T8112] add_addr+0xde/0x340 [ 230.639700][ T8112] ? __pfx_add_addr+0x10/0x10 [ 230.639740][ T8112] addrconf_init_auto_addrs+0x430/0x780 [ 230.639771][ T8112] addrconf_notify+0xa10/0x1ba0 [ 230.639801][ T8112] ? __pfx_tls_dev_event+0x10/0x10 [ 230.639830][ T8112] ? __pfx_addrconf_notify+0x10/0x10 [ 230.639852][ T8112] ? ip6mr_device_event+0x1c4/0x230 [ 230.639878][ T8112] notifier_call_chain+0x99/0x3f0 [ 230.639913][ T8112] call_netdevice_notifiers_info+0xbe/0x110 [ 230.639939][ T8112] netif_state_change+0x165/0x380 [ 230.639960][ T8112] ? __pfx_netif_state_change+0x10/0x10 [ 230.639982][ T8112] ? kvfree_call_rcu+0x1c0/0x4f0 [ 230.640007][ T8112] ? __nla_parse+0x40/0x60 [ 230.640035][ T8112] do_setlink.isra.0+0x31ce/0x3e60 [ 230.640061][ T8112] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 230.640080][ T8112] ? __lock_acquire+0x4c5/0x1ec0 [ 230.640103][ T8112] ? do_raw_spin_lock+0x128/0x260 [ 230.640124][ T8112] ? find_held_lock+0x2b/0x80 [ 230.640146][ T8112] ? debug_mutex_remove_waiter+0xa0/0x320 [ 230.640169][ T8112] ? debug_mutex_remove_waiter+0xa0/0x320 [ 230.640195][ T8112] ? mark_held_locks+0x40/0x70 [ 230.640211][ T8112] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 230.640228][ T8112] ? __mutex_lock+0x829/0x1bd0 [ 230.640246][ T8112] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.640274][ T8112] ? __pfx___mutex_lock+0x10/0x10 [ 230.640292][ T8112] ? rcu_is_watching+0x13/0xc0 [ 230.640315][ T8112] ? cap_capable+0x107/0x430 [ 230.640353][ T8112] rtnl_newlink+0x13c1/0x2620 [ 230.640383][ T8112] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.640402][ T8112] ? avc_has_perm_noaudit+0x56/0x3b0 [ 230.640446][ T8112] ? find_held_lock+0x2b/0x80 [ 230.640467][ T8112] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 230.640485][ T8112] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 230.640515][ T8112] ? __lock_acquire+0x4c5/0x1ec0 [ 230.640540][ T8112] ? lock_acquire+0x1d1/0x380 [ 230.640556][ T8112] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 230.640573][ T8112] ? find_held_lock+0x2b/0x80 [ 230.640593][ T8112] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 230.640609][ T8112] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 230.640627][ T8112] ? __pfx_rtnl_newlink+0x10/0x10 [ 230.640644][ T8112] rtnetlink_rcv_msg+0x95e/0xe90 [ 230.640663][ T8112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.640686][ T8112] ? ref_tracker_free+0x37e/0x6c0 [ 230.640707][ T8112] netlink_rcv_skb+0x159/0x420 [ 230.640731][ T8112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.640749][ T8112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.640781][ T8112] ? netlink_deliver_tap+0x1ae/0xcc0 [ 230.640812][ T8112] netlink_unicast+0x585/0x850 [ 230.640838][ T8112] ? __pfx_netlink_unicast+0x10/0x10 [ 230.640867][ T8112] netlink_sendmsg+0x8b0/0xda0 [ 230.640894][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.640919][ T8112] ? selinux_socket_sendmsg+0x198/0x2f0 [ 230.640947][ T8112] ____sys_sendmsg+0xa4d/0xbe0 [ 230.640966][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.640991][ T8112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.641016][ T8112] ? lock_acquire+0x1d1/0x380 [ 230.641030][ T8112] ? get_pid_task+0x2a/0x250 [ 230.641053][ T8112] ___sys_sendmsg+0x190/0x1e0 [ 230.641076][ T8112] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.641096][ T8112] ? get_pid_task+0x106/0x250 [ 230.641125][ T8112] ? find_held_lock+0x2b/0x80 [ 230.641184][ T8112] __sys_sendmsg+0x160/0x210 [ 230.641203][ T8112] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.641230][ T8112] do_syscall_64+0x123/0x790 [ 230.641250][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.641268][ T8112] RIP: 0033:0x7f22b7d9e159 [ 230.641284][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.641301][ T8112] RSP: 002b:00007f22b8bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.641318][ T8112] RAX: ffffffffffffffda RBX: 00007f22b8025fa0 RCX: 00007f22b7d9e159 [ 230.641328][ T8112] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 230.641338][ T8112] RBP: 00007f22b8bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.641347][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.641357][ T8112] R13: 00007f22b8026038 R14: 00007f22b8025fa0 R15: 00007ffd0d204658 [ 230.641380][ T8112] [ 230.649541][ T8112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.689538][ T1233] usb 8-1: USB disconnect, device number 14 [ 230.696423][ T43] kauditd_printk_skb: 198 callbacks suppressed [ 230.696445][ T43] audit: type=1400 audit(1788465555.222:1516): avc: denied { map_create } for pid=8106 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.696490][ T43] audit: type=1400 audit(1788465555.222:1517): avc: denied { map_read map_write } for pid=8106 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.806452][ T43] audit: type=1400 audit(1788465555.382:1518): avc: denied { create } for pid=8106 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.823209][ T43] audit: type=1400 audit(1788465555.382:1519): avc: denied { ioctl } for pid=8106 comm="syz.0.693" path="/dev/v4l-subdev4" dev="devtmpfs" ino=966 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.838272][ T8114] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 230.893229][ T43] audit: type=1400 audit(1788465555.462:1520): avc: denied { read write } for pid=5748 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.893281][ T43] audit: type=1400 audit(1788465555.462:1521): avc: denied { open } for pid=5748 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.893315][ T43] audit: type=1400 audit(1788465555.462:1522): avc: denied { ioctl } for pid=5748 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.963705][ T43] audit: type=1400 audit(1788465555.532:1523): avc: denied { node_bind } for pid=8115 comm="syz.3.696" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 231.314987][ T43] audit: type=1400 audit(1788465555.862:1524): avc: denied { create } for pid=8122 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.315028][ T43] audit: type=1400 audit(1788465555.862:1525): avc: denied { setopt } for pid=8122 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.329657][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 231.599232][ T5823] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.599324][ T5823] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.599383][ T5823] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.599432][ T5823] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.173144][ T8135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1226918919 (78522810816 ns) > initial count (60690011328 ns). Using initial count to start timer. [ 232.354259][ T8135] kvm: pic: level sensitive irq not supported [ 232.509840][ T8143] FAULT_INJECTION: forcing a failure. [ 232.509840][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 232.509920][ T8143] CPU: 3 UID: 0 PID: 8143 Comm: syz.0.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.509961][ T8143] Tainted: [L]=SOFTLOCKUP [ 232.509968][ T8143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.509979][ T8143] Call Trace: [ 232.509986][ T8143] [ 232.509993][ T8143] dump_stack_lvl+0x100/0x190 [ 232.510035][ T8143] should_fail_ex.cold+0x5/0xa [ 232.510059][ T8143] should_failslab+0xc2/0x120 [ 232.510085][ T8143] kmem_cache_alloc_noprof+0x92/0x6a0 [ 232.510103][ T8143] ? skb_clone+0x190/0x400 [ 232.510129][ T8143] skb_clone+0x190/0x400 [ 232.510147][ T8143] bpf_clone_redirect+0x166/0x500 [ 232.510183][ T8143] bpf_prog_885767c90d177146+0x62/0x6b [ 232.510197][ T8143] ? unwind_get_return_address+0x59/0xa0 [ 232.510222][ T8143] ? __lock_acquire+0x4c5/0x1ec0 [ 232.510241][ T8143] ? __lock_acquire+0x4c5/0x1ec0 [ 232.510264][ T8143] ? lock_acquire+0x1d1/0x380 [ 232.510280][ T8143] ? bpf_test_timer_enter+0xf7/0x2c0 [ 232.510303][ T8143] ? find_held_lock+0x2b/0x80 [ 232.510323][ T8143] ? bpf_test_timer_enter+0xf7/0x2c0 [ 232.510343][ T8143] ? ktime_get+0x22c/0x320 [ 232.510359][ T8143] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.510384][ T8143] ? __pfx___cant_migrate+0x10/0x10 [ 232.510404][ T8143] ? bpf_test_timer_continue+0x17b/0x5e0 [ 232.510422][ T8143] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.510439][ T8143] bpf_test_run+0x39c/0xa40 [ 232.510459][ T8143] ? bpf_test_run+0x1c6/0xa40 [ 232.510482][ T8143] ? __pfx_bpf_test_run+0x10/0x10 [ 232.510520][ T8143] ? eth_type_trans+0x2e3/0x720 [ 232.510549][ T8143] bpf_prog_test_run_skb+0x15b3/0x3530 [ 232.510577][ T8143] ? lock_acquire+0x1d1/0x380 [ 232.510606][ T8143] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.510634][ T8143] ? fput+0x7c/0x100 [ 232.510656][ T8143] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.510680][ T8143] __sys_bpf+0x2265/0x4a30 [ 232.510702][ T8143] ? __pfx___sys_bpf+0x10/0x10 [ 232.510718][ T8143] ? find_held_lock+0x2b/0x80 [ 232.510739][ T8143] ? get_pid_task+0xfc/0x250 [ 232.510761][ T8143] ? get_pid_task+0xfc/0x250 [ 232.510791][ T8143] ? find_held_lock+0x2b/0x80 [ 232.510818][ T8143] ? rcu_read_lock_any_held+0x6a/0x90 [ 232.510865][ T8143] ? find_held_lock+0x2b/0x80 [ 232.510887][ T8143] ? ksys_write+0x190/0x250 [ 232.510902][ T8143] ? ksys_write+0x190/0x250 [ 232.510916][ T8143] ? lock_acquire+0x1d1/0x380 [ 232.510948][ T8143] ? fput+0x7c/0x100 [ 232.510967][ T8143] ? ksys_write+0x1ac/0x250 [ 232.510984][ T8143] ? __x64_sys_bpf+0xce/0x140 [ 232.511000][ T8143] __x64_sys_bpf+0xce/0x140 [ 232.511017][ T8143] ? do_syscall_64+0xae/0x790 [ 232.511037][ T8143] do_syscall_64+0x123/0x790 [ 232.511057][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.511074][ T8143] RIP: 0033:0x7faa81d9e159 [ 232.511089][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.511104][ T8143] RSP: 002b:00007faa82ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.511122][ T8143] RAX: ffffffffffffffda RBX: 00007faa82025fa0 RCX: 00007faa81d9e159 [ 232.511134][ T8143] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 232.511145][ T8143] RBP: 00007faa82ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.511156][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.511167][ T8143] R13: 00007faa82026038 R14: 00007faa82025fa0 R15: 00007ffc120e4438 [ 232.511198][ T8143] [ 232.684285][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 232.714435][ T5887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 232.911566][ T5887] usb 6-1: device descriptor read/64, error -71 [ 233.105385][ T8151] input: syz0 as /devices/virtual/input/input9 [ 233.160589][ T8153] netlink: 80 bytes leftover after parsing attributes in process `syz.0.707'. [ 233.169392][ T5887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 233.226213][ T8153] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 233.226365][ T8153] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 233.318706][ T5887] usb 6-1: device descriptor read/64, error -71 [ 233.425535][ T5887] usb usb6-port1: attempt power cycle [ 233.804853][ T5887] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 233.836046][ T5887] usb 6-1: device descriptor read/8, error -71 [ 234.113728][ T5887] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 234.168019][ T5887] usb 6-1: device descriptor read/8, error -71 [ 234.287295][ T5887] usb usb6-port1: unable to enumerate USB device [ 234.743275][ T8172] overlayfs: conflicting lowerdir path [ 234.830185][ T8177] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 235.165928][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.716'. [ 235.166988][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8183 comm=syz.3.716 [ 235.167069][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.716'. [ 235.168987][ T8183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.902851][ T43] kauditd_printk_skb: 94 callbacks suppressed [ 235.902919][ T43] audit: type=1400 audit(1788465560.472:1620): avc: denied { read } for pid=8192 comm="syz.1.719" name="nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.902977][ T43] audit: type=1400 audit(1788465560.472:1621): avc: denied { open } for pid=8192 comm="syz.1.719" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.913052][ T8198] binder: 8195:8198 ioctl c0306201 200000000440 returned -22 [ 235.916238][ T8196] binder: 8195:8196 unknown command 0 [ 235.916255][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916327][ T8196] binder: 8195:8196 unknown command 0 [ 235.916337][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916399][ T8196] binder: 8195:8196 unknown command 0 [ 235.916408][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916512][ T8196] binder: 8195:8196 unknown command 0 [ 235.916523][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916584][ T8196] binder: 8195:8196 unknown command 0 [ 235.916593][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916650][ T8196] binder: 8195:8196 unknown command 0 [ 235.916660][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916736][ T8196] binder: 8195:8196 unknown command 0 [ 235.916749][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916812][ T8196] binder: 8195:8196 unknown command 0 [ 235.916821][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916884][ T8196] binder: 8195:8196 unknown command 0 [ 235.916893][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.916950][ T8196] binder: 8195:8196 unknown command 0 [ 235.916960][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.917023][ T8196] binder: 8195:8196 unknown command 0 [ 235.917032][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.917091][ T8196] binder: 8195:8196 unknown command 0 [ 235.917100][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934328][ T43] audit: type=1400 audit(1788465560.482:1622): avc: denied { read } for pid=8195 comm="syz.0.720" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.934334][ T8196] binder: 8195:8196 unknown command 0 [ 235.934351][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934378][ T43] audit: type=1400 audit(1788465560.482:1623): avc: denied { open } for pid=8195 comm="syz.0.720" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.934414][ T43] audit: type=1400 audit(1788465560.482:1624): avc: denied { ioctl } for pid=8195 comm="syz.0.720" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.934425][ T8196] binder: 8195:8196 unknown command 0 [ 235.934442][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934453][ T43] audit: type=1400 audit(1788465560.482:1625): avc: denied { set_context_mgr } for pid=8195 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 235.934488][ T43] audit: type=1400 audit(1788465560.482:1626): avc: denied { write } for pid=8195 comm="syz.0.720" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.934511][ T8196] binder: 8195:8196 unknown command 0 [ 235.934523][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934525][ T43] audit: type=1400 audit(1788465560.482:1627): avc: denied { read write } for pid=8195 comm="syz.0.720" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.934561][ T43] audit: type=1400 audit(1788465560.482:1628): avc: denied { open } for pid=8195 comm="syz.0.720" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.934592][ T8196] binder: 8195:8196 unknown command 0 [ 235.934598][ T43] audit: type=1400 audit(1788465560.502:1629): avc: denied { ioctl } for pid=8195 comm="syz.0.720" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.934603][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934669][ T8196] binder: 8195:8196 unknown command 0 [ 235.934681][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934745][ T8196] binder: 8195:8196 unknown command 0 [ 235.934755][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.934814][ T8196] binder: 8195:8196 unknown command 0 [ 235.934826][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935183][ T8196] binder: 8195:8196 unknown command 0 [ 235.935194][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935265][ T8196] binder: 8195:8196 unknown command 0 [ 235.935277][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935343][ T8196] binder: 8195:8196 unknown command 0 [ 235.935354][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935445][ T8196] binder: 8195:8196 unknown command 0 [ 235.935456][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935524][ T8196] binder: 8195:8196 unknown command 0 [ 235.935535][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935606][ T8196] binder: 8195:8196 unknown command 0 [ 235.935617][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935674][ T8196] binder: 8195:8196 unknown command 0 [ 235.935682][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935735][ T8196] binder: 8195:8196 unknown command 0 [ 235.935744][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935797][ T8196] binder: 8195:8196 unknown command 0 [ 235.935805][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935859][ T8196] binder: 8195:8196 unknown command 0 [ 235.935867][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935918][ T8196] binder: 8195:8196 unknown command 0 [ 235.935926][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.935979][ T8196] binder: 8195:8196 unknown command 0 [ 235.935987][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936038][ T8196] binder: 8195:8196 unknown command 0 [ 235.936046][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936101][ T8196] binder: 8195:8196 unknown command 0 [ 235.936109][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936197][ T8196] binder: 8195:8196 unknown command 0 [ 235.936206][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936258][ T8196] binder: 8195:8196 unknown command 0 [ 235.936266][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936319][ T8196] binder: 8195:8196 unknown command 0 [ 235.936328][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936381][ T8196] binder: 8195:8196 unknown command 0 [ 235.936390][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936453][ T8196] binder: 8195:8196 unknown command 0 [ 235.936462][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936516][ T8196] binder: 8195:8196 unknown command 0 [ 235.936524][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936577][ T8196] binder: 8195:8196 unknown command 0 [ 235.936586][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.936640][ T8196] binder: 8195:8196 unknown command 0 [ 235.939887][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.939950][ T8196] binder: 8195:8196 unknown command 0 [ 235.939959][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940014][ T8196] binder: 8195:8196 unknown command 0 [ 235.940022][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940074][ T8196] binder: 8195:8196 unknown command 0 [ 235.940082][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940138][ T8196] binder: 8195:8196 unknown command 0 [ 235.940146][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940197][ T8196] binder: 8195:8196 unknown command 0 [ 235.940205][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940256][ T8196] binder: 8195:8196 unknown command 0 [ 235.940264][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940315][ T8196] binder: 8195:8196 unknown command 0 [ 235.940323][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940377][ T8196] binder: 8195:8196 unknown command 0 [ 235.940385][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940440][ T8196] binder: 8195:8196 unknown command 0 [ 235.940449][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940501][ T8196] binder: 8195:8196 unknown command 0 [ 235.940509][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.940562][ T8196] binder: 8195:8196 unknown command 0 [ 235.940570][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.941115][ T8196] binder: 8195:8196 unknown command 0 [ 235.941124][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.970937][ T8196] binder: 8195:8196 unknown command 0 [ 235.970957][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971043][ T8196] binder: 8195:8196 unknown command 0 [ 235.971056][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971138][ T8196] binder: 8195:8196 unknown command 0 [ 235.971152][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971232][ T8196] binder: 8195:8196 unknown command 0 [ 235.971245][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971319][ T8196] binder: 8195:8196 unknown command 0 [ 235.971341][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971421][ T8196] binder: 8195:8196 unknown command 0 [ 235.971433][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971517][ T8196] binder: 8195:8196 unknown command 0 [ 235.971530][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971606][ T8196] binder: 8195:8196 unknown command 0 [ 235.971619][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971695][ T8196] binder: 8195:8196 unknown command 0 [ 235.971709][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971789][ T8196] binder: 8195:8196 unknown command 0 [ 235.971802][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971882][ T8196] binder: 8195:8196 unknown command 0 [ 235.971895][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 235.971970][ T8196] binder: 8195:8196 unknown command 0 [ 235.971983][ T8196] binder: 8195:8196 ioctl c0306201 200000000080 returned -22 [ 236.005119][ T8198] netlink: 108 bytes leftover after parsing attributes in process `syz.0.720'. [ 237.510486][ T8232] CIFS: Attempting to mount //127.0.0.1/share [ 237.511151][ T8232] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.511272][ T8232] CIFS: VFS: cifs_mount failed w/return code = -101 [ 239.119175][ T8265] openvswitch: netlink: IP tunnel dst address not specified [ 239.265732][ T5422] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 239.436177][ T5422] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 239.441526][ T5422] usb 7-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 239.467678][ T5422] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 239.467707][ T5422] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 172, changing to 4 [ 239.467730][ T5422] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 40581, setting to 1023 [ 239.467751][ T5422] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.467784][ T5422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.569301][ T5422] pegasus 7-1:1.0: Missing or invalid endpoints [ 239.574798][ T8283] jffs2: notice: (8283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 239.612715][ T8283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.739'. [ 239.852874][ T5422] usb 7-1: USB disconnect, device number 14 [ 239.964589][ T8290] CIFS: Attempting to mount //127.0.0.1/share [ 239.965173][ T8290] CIFS: VFS: Error connecting to socket. Aborting operation. [ 239.965592][ T8290] CIFS: VFS: cifs_mount failed w/return code = -101 [ 240.048433][ T8295] jffs2: notice: (8295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 240.077761][ T8295] FAULT_INJECTION: forcing a failure. [ 240.077761][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 240.077846][ T8295] CPU: 1 UID: 0 PID: 8295 Comm: syz.0.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.077883][ T8295] Tainted: [L]=SOFTLOCKUP [ 240.077890][ T8295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.077901][ T8295] Call Trace: [ 240.077907][ T8295] [ 240.077913][ T8295] dump_stack_lvl+0x100/0x190 [ 240.077961][ T8295] should_fail_ex.cold+0x5/0xa [ 240.077986][ T8295] should_failslab+0xc2/0x120 [ 240.078012][ T8295] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.078030][ T8295] ? jffs2_write_dnode+0x14f/0x9e0 [ 240.078060][ T8295] jffs2_write_dnode+0x14f/0x9e0 [ 240.078083][ T8295] ? xfd_validate_state+0x129/0x190 [ 240.078100][ T8295] ? do_raw_spin_unlock+0x145/0x1e0 [ 240.078127][ T8295] ? __pfx_jffs2_write_dnode+0x10/0x10 [ 240.078156][ T8295] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.078180][ T8295] ? kernel_fpu_end+0x5f/0x80 [ 240.078199][ T8295] ? __local_bh_enable_ip+0xa5/0x120 [ 240.078217][ T8295] ? kernel_fpu_end+0x69/0x80 [ 240.078239][ T8295] jffs2_write_inode_range+0x85f/0xb80 [ 240.078274][ T8295] ? __pfx_jffs2_write_inode_range+0x10/0x10 [ 240.078297][ T8295] ? rcu_is_watching+0x13/0xc0 [ 240.078322][ T8295] ? from_kgid+0x8f/0xd0 [ 240.078340][ T8295] ? __pfx_from_kgid+0x10/0x10 [ 240.078362][ T8295] jffs2_write_end+0x72c/0xea0 [ 240.078386][ T8295] ? __pfx_jffs2_write_end+0x10/0x10 [ 240.078421][ T8295] ? inode_to_bdi+0x9e/0x160 [ 240.078448][ T8295] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 240.078478][ T8295] generic_perform_write+0x513/0xa40 [ 240.078506][ T8295] ? __pfx_generic_perform_write+0x10/0x10 [ 240.078527][ T8295] ? mnt_put_write_access_file+0x4e/0x100 [ 240.078548][ T8295] ? file_update_time_flags+0x38c/0x520 [ 240.078577][ T8295] __generic_file_write_iter+0x1f7/0x240 [ 240.078602][ T8295] generic_file_write_iter+0xe1/0x390 [ 240.078628][ T8295] vfs_write+0x6af/0x1050 [ 240.078654][ T8295] ? __pfx_generic_file_write_iter+0x10/0x10 [ 240.078680][ T8295] ? __pfx_vfs_write+0x10/0x10 [ 240.078702][ T8295] ? find_held_lock+0x2b/0x80 [ 240.078740][ T8295] __x64_sys_pwrite64+0x1eb/0x250 [ 240.078757][ T8295] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 240.078779][ T8295] do_syscall_64+0x123/0x790 [ 240.078801][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.078818][ T8295] RIP: 0033:0x7faa81d9e159 [ 240.078833][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.078849][ T8295] RSP: 002b:00007faa82ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 240.078866][ T8295] RAX: ffffffffffffffda RBX: 00007faa82025fa0 RCX: 00007faa81d9e159 [ 240.078876][ T8295] RDX: 0000000000000058 RSI: 0000200000001000 RDI: 0000000000000003 [ 240.078887][ T8295] RBP: 00007faa82ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 240.078897][ T8295] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 240.078906][ T8295] R13: 00007faa82026038 R14: 00007faa82025fa0 R15: 00007ffc120e4438 [ 240.078930][ T8295] [ 240.226449][ T8298] cgroup: subsys name conflicts with all [ 240.355261][ T8300] team0: Device vlan2 is already an upper device of the team interface [ 240.696630][ T112] Bluetooth: hci4: Frame reassembly failed (-84) [ 240.697264][ T8303] Bluetooth: hci4: Frame reassembly failed (-84) [ 240.716887][ T8314] CIFS: VFS: bad security option: krb5iż [ 240.728641][ T8314] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 240.844911][ T8316] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 240.935461][ T8323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.965387][ T43] kauditd_printk_skb: 174 callbacks suppressed [ 240.965506][ T43] audit: type=1400 audit(1788465565.522:1804): avc: denied { create } for pid=8318 comm="syz.1.751" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.965570][ T43] audit: type=1400 audit(1788465565.532:1805): avc: denied { recv } for pid=8318 comm="syz.1.751" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=51600 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.042205][ T8321] ptrace attach of "/syz-executor exec"[8324] was attempted by "/syz-executor exec"[8321] [ 241.052125][ T43] audit: type=1400 audit(1788465565.622:1806): avc: denied { node_bind } for pid=8325 comm="syz.0.753" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 241.073336][ T43] audit: type=1400 audit(1788465565.642:1807): avc: denied { prog_load } for pid=8327 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.074858][ T43] audit: type=1400 audit(1788465565.642:1808): avc: denied { mounton } for pid=8325 comm="syz.0.753" path="/218/cifs" dev="tmpfs" ino=1253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 241.075153][ T8326] CIFS: Attempting to mount //127.0.0.1/share [ 241.075587][ T8326] CIFS: VFS: Error connecting to socket. Aborting operation. [ 241.075616][ T8326] CIFS: VFS: cifs_mount failed w/return code = -101 [ 241.128030][ T43] audit: type=1400 audit(1788465565.682:1809): avc: denied { map_create } for pid=8327 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.128114][ T43] audit: type=1400 audit(1788465565.682:1810): avc: denied { map_read map_write } for pid=8327 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.162230][ T43] audit: type=1400 audit(1788465565.712:1811): avc: denied { prog_run } for pid=8327 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.162291][ T43] audit: type=1400 audit(1788465565.712:1812): avc: denied { mount } for pid=8331 comm="syz.1.755" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 241.178219][ T43] audit: type=1400 audit(1788465565.712:1813): avc: denied { allowed } for pid=8331 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 241.243574][ T8332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 241.286275][ T8332] md0: detected capacity change from 2048 to 0 [ 241.414424][ T6899] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 241.565135][ T6899] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 241.566452][ T6899] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 241.566477][ T6899] usb 7-1: config 1 has no interface number 0 [ 241.568863][ T6899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.568885][ T6899] usb 7-1: Product: syz [ 241.568897][ T6899] usb 7-1: Manufacturer: syz [ 241.568909][ T6899] usb 7-1: SerialNumber: syz [ 241.641289][ T6899] usb 7-1: 3:0 : does not exist [ 241.641438][ T6899] usb 7-1: 3:0 : does not exist [ 241.875493][ T6899] usb 7-1: USB disconnect, device number 15 [ 242.664545][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 242.745137][ T5758] Bluetooth: hci4: command 0x1003 tx timeout [ 242.748153][ T5754] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 242.844721][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 242.845615][ T5887] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 242.846709][ T5887] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 242.846747][ T5887] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 242.84676 ** replaying previous printk message ** [ 242.846768][ T5887] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.846790][ T5887] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 242.848705][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.848724][ T5887] usb 5-1: Product: syz [ 242.848736][ T5887] usb 5-1: Manufacturer: syz [ 242.848747][ T5887] usb 5-1: SerialNumber: syz [ 242.896600][ C2] ================================================================== [ 242.896618][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 242.896672][ C2] Read of size 1 at addr ffff88804a6ee0e8 by task kworker/2:5/5887 [ 242.896691][ C2] [ 242.896703][ C2] CPU: 2 UID: 0 PID: 5887 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.896733][ C2] Tainted: [L]=SOFTLOCKUP [ 242.896742][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.896756][ C2] Workqueue: usb_hub_wq hub_event [ 242.896782][ C2] Call Trace: [ 242.896790][ C2] [ 242.896800][ C2] dump_stack_lvl+0x100/0x190 [ 242.896829][ C2] print_report+0x13d/0x4b0 [ 242.896859][ C2] ? __virt_addr_valid+0x239/0x430 [ 242.896882][ C2] ? find_endpoint+0x2a3/0x2c0 [ 242.896905][ C2] kasan_report+0xdf/0x1c0 [ 242.896930][ C2] ? find_endpoint+0x2a3/0x2c0 [ 242.896956][ C2] find_endpoint+0x2a3/0x2c0 [ 242.896982][ C2] dummy_timer+0x500/0x3700 [ 242.897019][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.897039][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 242.897062][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 242.897089][ C2] ? mark_held_locks+0x40/0x70 [ 242.897141][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.897242][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 242.897276][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 242.897310][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 242.897338][ C2] handle_softirqs+0x1e6/0x9d0 [ 242.897360][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 242.897379][ C2] ? _raw_spin_unlock+0x28/0x50 [ 242.897408][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 242.897436][ C2] __irq_exit_rcu+0x194/0x210 [ 242.897466][ C2] irq_exit_rcu+0x9/0x30 [ 242.897484][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 242.897506][ C2] [ 242.897513][ C2] [ 242.897520][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.897542][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 242.897563][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 dd 14 f6 48 89 df e8 4e 33 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 3a 04 f6 65 48 83 3d e4 a4 b9 08 00 74 16 5b [ 242.897581][ C2] RSP: 0018:ffffc90004246db0 EFLAGS: 00000246 [ 242.897598][ C2] RAX: 0000000000000006 RBX: ffff88802b414000 RCX: 0000000000000040 [ 242.897611][ C2] RDX: 0000000000000001 RSI: ffffffff8e3eb021 RDI: ffffffff8c620e80 [ 242.897624][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 242.897635][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 242.897647][ C2] R13: ffff88802bd5f478 R14: 0000000000000000 R15: ffff88802bd5f400 [ 242.897667][ C2] dummy_urb_enqueue+0x56c/0x880 [ 242.897696][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 242.897725][ C2] ? rcu_is_watching+0x13/0xc0 [ 242.897749][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 242.897771][ C2] usb_submit_urb+0x827/0x19b0 [ 242.897804][ C2] imon_probe+0xfb7/0x30a0 [ 242.897833][ C2] usb_probe_interface+0x386/0x9b0 [ 242.897861][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 242.897885][ C2] ? kernfs_put+0x3f/0x60 [ 242.897910][ C2] ? sysfs_create_link+0x68/0xc0 [ 242.897934][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 242.897957][ C2] really_probe+0x241/0xa60 [ 242.897977][ C2] __driver_probe_device+0x210/0x460 [ 242.897994][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.898014][ C2] driver_probe_device+0x4a/0x140 [ 242.898031][ C2] __device_attach_driver+0x1df/0x320 [ 242.898049][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 242.898066][ C2] bus_for_each_drv+0x159/0x1e0 [ 242.898092][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 242.898116][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.898137][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.898157][ C2] __device_attach+0x1e4/0x4d0 [ 242.898176][ C2] ? __pfx___device_attach+0x10/0x10 [ 242.898194][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.898220][ C2] device_initial_probe+0xaf/0xd0 [ 242.898239][ C2] bus_probe_device+0x64/0x160 [ 242.898266][ C2] device_add+0x121d/0x1970 [ 242.898287][ C2] ? __pfx_device_add+0x10/0x10 [ 242.898307][ C2] ? mark_held_locks+0x40/0x70 [ 242.898325][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.898346][ C2] usb_set_configuration+0xd97/0x1c60 [ 242.898375][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 242.898404][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 242.898432][ C2] usb_probe_device+0xef/0x400 [ 242.898458][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 242.898481][ C2] really_probe+0x241/0xa60 [ 242.898498][ C2] __driver_probe_device+0x210/0x460 [ 242.898516][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 242.898535][ C2] driver_probe_device+0x4a/0x140 [ 242.898552][ C2] __device_attach_driver+0x1df/0x320 [ 242.898570][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 242.898589][ C2] bus_for_each_drv+0x159/0x1e0 [ 242.898613][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 242.898638][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 242.898658][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 242.898678][ C2] __device_attach+0x1e4/0x4d0 [ 242.898696][ C2] ? __pfx___device_attach+0x10/0x10 [ 242.898714][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 242.898738][ C2] device_initial_probe+0xaf/0xd0 [ 242.898757][ C2] bus_probe_device+0x64/0x160 [ 242.898782][ C2] device_add+0x121d/0x1970 [ 242.898803][ C2] ? __pfx_device_add+0x10/0x10 [ 242.898822][ C2] ? add_device_randomness+0xc9/0x110 [ 242.898850][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 242.898880][ C2] ? do_raw_spin_lock+0x128/0x260 [ 242.898902][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 242.898930][ C2] ? mark_held_locks+0x40/0x70 [ 242.898949][ C2] hub_event.cold+0x1e3/0xe90 [ 242.898983][ C2] ? __pfx_hub_event+0x10/0x10 [ 242.899003][ C2] ? mark_lock+0xea0/0x1020 [ 242.899022][ C2] ? lock_acquire+0x1d1/0x380 [ 242.899041][ C2] ? process_one_work+0xa2c/0x1b10 [ 242.899070][ C2] ? process_one_work+0x906/0x1b10 [ 242.899097][ C2] ? process_one_work+0x906/0x1b10 [ 242.899125][ C2] process_one_work+0xac7/0x1b10 [ 242.899157][ C2] ? __pfx_process_one_work+0x10/0x10 [ 242.899184][ C2] ? lock_acquire+0x1d1/0x380 [ 242.899205][ C2] ? __pfx_hub_event+0x10/0x10 [ 242.899227][ C2] worker_thread+0x5ef/0xe50 [ 242.899258][ C2] ? __pfx_worker_thread+0x10/0x10 [ 242.899285][ C2] ? kthread+0x13a/0x450 [ 242.899309][ C2] ? __pfx_worker_thread+0x10/0x10 [ 242.899334][ C2] kthread+0x373/0x450 [ 242.899357][ C2] ? __pfx_kthread+0x10/0x10 [ 242.899381][ C2] ret_from_fork+0x730/0xd60 [ 242.899402][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 242.899422][ C2] ? __switch_to+0x800/0x10f0 [ 242.899452][ C2] ? __pfx_kthread+0x10/0x10 [ 242.899479][ C2] ret_from_fork_asm+0x1a/0x30 [ 242.899505][ C2] [ 242.899512][ C2] [ 242.899517][ C2] Allocated by task 7968: [ 242.899527][ C2] kasan_save_stack+0x30/0x50 [ 242.899545][ C2] kasan_save_track+0x14/0x30 [ 242.899563][ C2] __kasan_kmalloc+0xaa/0xb0 [ 242.899579][ C2] __kmalloc_noprof+0x32f/0x840 [ 242.899595][ C2] hash_netportnet6_resize+0xacd/0x1e20 [ 242.899615][ C2] call_ad.isra.0+0x37f/0x950 [ 242.899634][ C2] ip_set_ad.isra.0+0x3f1/0x8b0 [ 242.899655][ C2] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 242.899674][ C2] netlink_rcv_skb+0x159/0x420 [ 242.899698][ C2] nfnetlink_rcv+0x1b3/0x440 [ 242.899715][ C2] netlink_unicast+0x585/0x850 [ 242.899739][ C2] netlink_sendmsg+0x8b0/0xda0 [ 242.899762][ C2] ____sys_sendmsg+0xa4d/0xbe0 [ 242.899782][ C2] ___sys_sendmsg+0x190/0x1e0 [ 242.899802][ C2] __sys_sendmsg+0x160/0x210 [ 242.899817][ C2] do_syscall_64+0x123/0x790 [ 242.899835][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.899852][ C2] [ 242.899856][ C2] Freed by task 34: [ 242.899864][ C2] kasan_save_stack+0x30/0x50 [ 242.899881][ C2] kasan_save_track+0x14/0x30 [ 242.899899][ C2] kasan_save_free_info+0x3b/0x70 [ 242.899923][ C2] __kasan_slab_free+0x5f/0x80 [ 242.899942][ C2] __rcu_free_sheaf_prepare+0x5d/0x300 [ 242.899965][ C2] rcu_free_sheaf+0x1a/0xe0 [ 242.899990][ C2] rcu_core+0x5f0/0x1260 [ 242.900010][ C2] handle_softirqs+0x1e6/0x9d0 [ 242.900026][ C2] run_ksoftirqd+0x38/0x60 [ 242.900041][ C2] smpboot_thread_fn+0x3d3/0xab0 [ 242.900058][ C2] kthread+0x373/0x450 [ 242.900079][ C2] ret_from_fork+0x730/0xd60 [ 242.900096][ C2] ret_from_fork_asm+0x1a/0x30 [ 242.900112][ C2] [ 242.900118][ C2] The buggy address belongs to the object at ffff88804a6ee000 [ 242.900118][ C2] which belongs to the cache kmalloc-512 of size 512 [ 242.900133][ C2] The buggy address is located 232 bytes inside of [ 242.900133][ C2] freed 512-byte region [ffff88804a6ee000, ffff88804a6ee200) [ 242.900153][ C2] [ 242.900157][ C2] The buggy address belongs to the physical page: [ 242.900166][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804a6eec00 pfn:0x4a6ec [ 242.900184][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 242.900200][ C2] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 242.900219][ C2] page_type: f5(slab) [ 242.900237][ C2] raw: 00fff00000000240 ffff88801c042c80 ffffea0000f5dd10 ffffea0000fd1310 [ 242.900254][ C2] raw: ffff88804a6eec00 0000000000100008 00000000f5000000 0000000000000000 [ 242.900271][ C2] head: 00fff00000000240 ffff88801c042c80 ffffea0000f5dd10 ffffea0000fd1310 [ 242.900288][ C2] head: ffff88804a6eec00 0000000000100008 00000000f5000000 0000000000000000 [ 242.900305][ C2] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 242.900322][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 242.900332][ C2] page dumped because: kasan: bad access detected [ 242.900342][ C2] page_owner tracks the page as allocated [ 242.900348][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6557, tgid 6556 (syz.3.210), ts 146120854278 [ 242.900379][ C2] post_alloc_hook+0xfd/0x120 [ 242.900403][ C2] get_page_from_freelist+0x110d/0x35d0 [ 242.900428][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 242.900458][ C2] new_slab+0xa9/0x6e0 [ 242.900481][ C2] refill_objects+0xe3/0x410 [ 242.900505][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 242.900528][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 242.900559][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 242.900576][ C2] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 242.900592][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 242.900609][ C2] snd_mixer_oss_notify_handler+0x48d/0x990 [ 242.900628][ C2] snd_card_register+0x2af/0x760 [ 242.900649][ C2] f_midi2_bind+0x1198/0x2770 [ 242.900666][ C2] usb_add_function+0x219/0x890 [ 242.900691][ C2] configfs_composite_bind+0xd83/0x1960 [ 242.900718][ C2] gadget_bind_driver+0x28c/0xbf0 [ 242.900743][ C2] page last free pid 5749 tgid 5749 ts 138587979233 stack trace: [ 242.900756][ C2] __free_frozen_pages+0x79f/0x10f0 [ 242.900778][ C2] qlist_free_all+0x47/0xf0 [ 242.900793][ C2] kasan_quarantine_reduce+0x1a0/0x1f0 [ 242.900811][ C2] __kasan_slab_alloc+0x69/0x90 [ 242.900829][ C2] kmem_cache_alloc_noprof+0x269/0x6a0 [ 242.900845][ C2] do_getname+0x35/0x390 [ 242.900869][ C2] __x64_sys_mkdirat+0x78/0xc0 [ 242.900889][ C2] do_syscall_64+0x123/0x790 [ 242.900906][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.900923][ C2] [ 242.900926][ C2] Memory state around the buggy address: [ 242.900935][ C2] ffff88804a6edf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.900999][ C2] ffff88804a6ee000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.901026][ C2] >ffff88804a6ee080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.901038][ C2] ^ [ 242.901052][ C2] ffff88804a6ee100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.901067][ C2] ffff88804a6ee180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 242.901079][ C2] ================================================================== [ 242.901091][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 242.906876][ C2] CPU: 2 UID: 0 PID: 5887 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.909327][ C2] Tainted: [L]=SOFTLOCKUP [ 243.849864][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.857373][ C2] Workqueue: usb_hub_wq hub_event [ 243.860840][ C2] Call Trace: [ 243.862733][ C2] [ 243.864223][ C2] dump_stack_lvl+0x100/0x190 [ 243.866832][ C2] vpanic+0x553/0x970 [ 243.868509][ C2] ? __pfx_vpanic+0x10/0x10 [ 243.870321][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 243.872649][ C2] ? find_endpoint+0x2a3/0x2c0 [ 243.886243][ C2] panic+0xd1/0xe0 [ 243.889901][ C2] ? __pfx_panic+0x10/0x10 [ 243.893079][ C2] ? end_report.part.0+0x23/0x90 [ 243.896389][ C2] ? rcu_is_watching+0x13/0xc0 [ 243.898992][ C2] ? end_report.part.0+0x23/0x90 [ 243.902244][ C2] check_panic_on_warn.cold+0x19/0x34 [ 243.905845][ C2] end_report.part.0+0x3a/0x90 [ 243.909368][ C2] kasan_report.cold+0xe/0x18 [ 243.916064][ C2] ? find_endpoint+0x2a3/0x2c0 [ 243.931833][ C2] find_endpoint+0x2a3/0x2c0 [ 243.935082][ C2] dummy_timer+0x500/0x3700 [ 243.937159][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.939773][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 243.942654][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 243.955691][ C2] ? mark_held_locks+0x40/0x70 [ 243.957835][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.960557][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 243.962979][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 243.965386][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 243.977726][ C2] handle_softirqs+0x1e6/0x9d0 [ 243.979765][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 243.982153][ C2] ? _raw_spin_unlock+0x28/0x50 [ 243.984179][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 243.986466][ C2] __irq_exit_rcu+0x194/0x210 [ 244.003384][ C2] irq_exit_rcu+0x9/0x30 [ 244.005385][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 244.007493][ C2] [ 244.008903][ C2] [ 244.010356][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.012761][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 244.020701][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 dd 14 f6 48 89 df e8 4e 33 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 3a 04 f6 65 48 83 3d e4 a4 b9 08 00 74 16 5b [ 244.049560][ C2] RSP: 0018:ffffc90004246db0 EFLAGS: 00000246 [ 244.052672][ C2] RAX: 0000000000000006 RBX: ffff88802b414000 RCX: 0000000000000040 [ 244.073737][ C2] RDX: 0000000000000001 RSI: ffffffff8e3eb021 RDI: ffffffff8c620e80 [ 244.077421][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 244.081506][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000040000000 [ 244.087946][ C2] R13: ffff88802bd5f478 R14: 0000000000000000 R15: ffff88802bd5f400 [ 244.091898][ C2] dummy_urb_enqueue+0x56c/0x880 [ 244.134727][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 244.147370][ C2] ? rcu_is_watching+0x13/0xc0 [ 244.160670][ C2] ? __kasan_kmalloc+0xaa/0xb0 [ 244.162989][ C2] usb_submit_urb+0x827/0x19b0 [ 244.165363][ C2] imon_probe+0xfb7/0x30a0 [ 244.178440][ C2] usb_probe_interface+0x386/0x9b0 [ 244.181507][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 244.184632][ C2] ? kernfs_put+0x3f/0x60 [ 244.187281][ C2] ? sysfs_create_link+0x68/0xc0 [ 244.205487][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 244.209781][ C2] really_probe+0x241/0xa60 [ 244.211989][ C2] __driver_probe_device+0x210/0x460 [ 244.214877][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.220584][ C2] driver_probe_device+0x4a/0x140 [ 244.229897][ C2] __device_attach_driver+0x1df/0x320 [ 244.235015][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 244.254681][ C2] bus_for_each_drv+0x159/0x1e0 [ 244.257753][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 244.261881][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.264984][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.268310][ C2] __device_attach+0x1e4/0x4d0 [ 244.271007][ C2] ? __pfx___device_attach+0x10/0x10 [ 244.273870][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.277125][ C2] device_initial_probe+0xaf/0xd0 [ 244.280557][ C2] bus_probe_device+0x64/0x160 [ 244.284127][ C2] device_add+0x121d/0x1970 [ 244.287238][ C2] ? __pfx_device_add+0x10/0x10 [ 244.290716][ C2] ? mark_held_locks+0x40/0x70 [ 244.293959][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.297753][ C2] usb_set_configuration+0xd97/0x1c60 [ 244.300463][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 244.304110][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 244.307684][ C2] usb_probe_device+0xef/0x400 [ 244.310176][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 244.313309][ C2] really_probe+0x241/0xa60 [ 244.316395][ C2] __driver_probe_device+0x210/0x460 [ 244.320000][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.323053][ C2] driver_probe_device+0x4a/0x140 [ 244.325999][ C2] __device_attach_driver+0x1df/0x320 [ 244.328866][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 244.333121][ C2] bus_for_each_drv+0x159/0x1e0 [ 244.335218][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 244.345480][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.354229][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.369676][ C2] __device_attach+0x1e4/0x4d0 [ 244.372302][ C2] ? __pfx___device_attach+0x10/0x10 [ 244.375115][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.378652][ C2] device_initial_probe+0xaf/0xd0 [ 244.382328][ C2] bus_probe_device+0x64/0x160 [ 244.384470][ C2] device_add+0x121d/0x1970 [ 244.387634][ C2] ? __pfx_device_add+0x10/0x10 [ 244.400836][ C2] ? add_device_randomness+0xc9/0x110 [ 244.404963][ C2] usb_new_device.part.0+0xcc2/0x1686 [ 244.409615][ C2] ? do_raw_spin_lock+0x128/0x260 [ 244.418571][ C2] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 244.422820][ C2] ? mark_held_locks+0x40/0x70 [ 244.425054][ C2] hub_event.cold+0x1e3/0xe90 [ 244.439309][ C2] ? __pfx_hub_event+0x10/0x10 [ 244.442215][ C2] ? mark_lock+0xea0/0x1020 [ 244.445318][ C2] ? lock_acquire+0x1d1/0x380 [ 244.448252][ C2] ? process_one_work+0xa2c/0x1b10 [ 244.474219][ C2] ? process_one_work+0x906/0x1b10 [ 244.476871][ C2] ? process_one_work+0x906/0x1b10 [ 244.479378][ C2] process_one_work+0xac7/0x1b10 [ 244.481792][ C2] ? __pfx_process_one_work+0x10/0x10 [ 244.484164][ C2] ? lock_acquire+0x1d1/0x380 [ 244.486196][ C2] ? __pfx_hub_event+0x10/0x10 [ 244.488543][ C2] worker_thread+0x5ef/0xe50 [ 244.502484][ C2] ? __pfx_worker_thread+0x10/0x10 [ 244.504675][ C2] ? kthread+0x13a/0x450 [ 244.517220][ C2] ? __pfx_worker_thread+0x10/0x10 [ 244.519962][ C2] kthread+0x373/0x450 [ 244.529463][ C2] ? __pfx_kthread+0x10/0x10 [ 244.532142][ C2] ret_from_fork+0x730/0xd60 [ 244.545809][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 244.548173][ C2] ? __switch_to+0x800/0x10f0 [ 244.550230][ C2] ? __pfx_kthread+0x10/0x10 [ 244.552470][ C2] ret_from_fork_asm+0x1a/0x30 [ 244.566144][ C2] [ 244.581950][ C2] Kernel Offset: disabled [ 244.584457][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:59:29 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8ec79584 RBX=0000000000000002 RCX=ffffffff81c83699 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff8ec79580 RBP=0000000000000000 RSP=ffffc90000137928 R8 =0000000000000000 R9 =00000000ffffffff R10=0000000000000002 R11=0000000020627375 R12=ffffffff8fbd4100 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff827efc8a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2c1246 CR3=000000002573a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7864696f6972702e 6f6972705f74656e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0d204b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0d204b46 00007ffd0d204b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801f28cb00 RSI=ffffffff81ff5aee RDI=ffff88801f28cb00 RBP=ffffc90000167cd8 RSP=ffffc90000167bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a733de0 R12=ffff88806a53d280 R13=ffffed100d4a7a51 R14=ffff88806a53d288 R15=0000000000000001 RIP=ffffffff81ff5af9 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033b0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f746961 775f6f692e716662 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef9049a76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef9049a76 00007ffef9049a7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3b2e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3b2e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3b2e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc3b2e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000032c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 000000000000032c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe815 RDI=ffffffff9bc63ca0 RBP=ffffffff9bc63c60 RSP=ffffc90000658348 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=000000000000006b R14=0000000000000005 R15=ffffc90000658660 RIP=ffffffff85afe83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faa81deb840 CR3=000000002d35f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000f802fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc120e4926 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc120e4926 00007ffc120e492c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa81e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa81e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa81e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa81e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faa81ff25f8 00007faa81ff25c8 00007faa81ff2600 00007faa81ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000000a0 RBX=00000000000000a1 RCX=0000000000000201 RDX=1ffff11009487bf1 RSI=ffffffff8534852e RDI=ffff88804a43df88 RBP=0000000000000142 RSP=ffffc900046f68e8 R8 =0000000000000001 R9 =000000000000034c R10=0000000000000000 R11=ffff88804a430042 R12=ffff88804a43dae8 R13=ffff88804a437c10 R14=dffffc0000000000 R15=ffff88804a430000 RIP=ffffffff85348590 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc3b3d006c0 ffffffff 00c00000 GS =0000 ffff8880d5e61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f22b7deb840 CR3=000000002d5c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0d204b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0d204b46 00007ffd0d204b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22b7e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b681d3d0ae67ee2 5000269c88929b54 2a65f117dcb4f93f 0e538e0f6fad0824 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 918e4401202fb813 63d2a1fa68f61434 5330e75c4f617117 4ea82f9832df86be ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb344ec3b6c46993 1d61d71e517ee4d9 9a977a2978f29de7 2ac97fb414bf9e28 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5fc1afafd7d701c5 c2894b51ba9b669a 570a22a4c8298b63 eda71a38fd455a06 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4918e4401202fb8 1363d2a1fa68f614 345330e75c4f6171 174ea82f9832df86 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be278927ba11adf9 77e1eb0810a91c3b a5e3e6cf7dfc12aa c5e1445071c44f84 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1414ac07000000 0101010a01000000 0100007f04000000 0001010aba7c2e55 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000