last executing test programs: 33.621563797s ago: executing program 0 (id=567): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x2, 0x500000}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) fcntl$addseals(r0, 0x409, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010141, 0x0, 0x6}]}) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = socket(0x1e, 0x802, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180), 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) sendto$unix(r7, &(0x7f00000003c0)="4b4c2a6604c4163fd785e5f4f1c1de35d5272f1ae22312f4a48306b9d091590d8afa27f71f847e80db83ab61c6fc77414bedfecfdf531651dcc760342741bf8f28c54bc24a54", 0x46, 0x4000001, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000e600c7d95aba2825821d1bd23fb5491c02c130288d78297f1c053ba3ae3c6b2a80c61e3fffd346795032f7c29ca8c1e9ee18069d2d0ac3828276", @ANYBLOB="100026bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsopen(&(0x7f0000000080)='incremental-fs\x00', 0x1) write(r7, &(0x7f0000000200)='retu 0x01', 0x9) 33.519214458s ago: executing program 0 (id=569): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000000)={0x9, 0x2, 0x6}) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x7) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000840)) read(r1, &(0x7f0000000040)=""/53, 0x35) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) 33.459664467s ago: executing program 0 (id=571): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x10, 0x0, &(0x7f0000000440)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='dummy_udc.0', 0xb) 33.458672773s ago: executing program 0 (id=574): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x20) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r4, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x7000000, 0x0, 0x44801}, 0x840) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x151) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r5) 33.346889411s ago: executing program 0 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='overlay\x00', 0x0, &(0x7f00000006c0)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 33.021362274s ago: executing program 0 (id=579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 32.944371971s ago: executing program 32 (id=579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 24.410875568s ago: executing program 3 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0x1234\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r6, &(0x7f0000000f00)='0\n', 0x2) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r7, &(0x7f0000001100)='0\n', 0x2) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 24.225982294s ago: executing program 3 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 24.136501974s ago: executing program 3 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x90}}, 0x4000) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f815dcdb6cf3c57b707d8"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a", 0x3c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be", 0xbe}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.911280672s ago: executing program 3 (id=673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 23.910784486s ago: executing program 3 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {r5, r6+60000000}}, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0xa41a2639b2df0acd) ioctl$SNDRV_PCM_IOCTL_DELAY(r10, 0x80084121, &(0x7f0000000140)) 23.554701769s ago: executing program 3 (id=684): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r4, @ANYBLOB="050088"], 0x4c}}, 0x0) 8.890710181s ago: executing program 2 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) (fail_nth: 2) 8.60085581s ago: executing program 2 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='0x1234\n', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='0\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 8.597948291s ago: executing program 2 (id=839): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(r2, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x8800, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) 8.582785527s ago: executing program 33 (id=684): r0 = socket$kcm(0x10, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r4, @ANYBLOB="050088"], 0x4c}}, 0x0) 8.524514142s ago: executing program 2 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='dummy_udc.0', 0xb) 8.524336144s ago: executing program 2 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r0, 0x0, 0x0) setgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x4, &(0x7f0000000180)=[r1, r1, r1, r1]) setregid(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='auxv\x00') r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) setns(0xc9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x91cb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = socket(0x8, 0x5, 0x5) getsockopt$inet_buf(r6, 0x0, 0x20, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000400)) 8.359174053s ago: executing program 2 (id=844): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000880), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, 0x0) 7.310823672s ago: executing program 4 (id=848): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)="0bcde56ca9a6", 0x6) 4.260154117s ago: executing program 4 (id=861): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e22, @remote}}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x400c044) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000000040)={&(0x7f0000000000)=[{0x1, 0x0, 0xb, 0x2, 0x3, 0x2, 0x7, 0x9}], 0x1, 0x38, 0x0, 0xb}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000000c0)=0x2) 4.25804203s ago: executing program 4 (id=862): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xffe, 0x0, 0xfffffffffffffffe}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 4.081249054s ago: executing program 5 (id=863): socket$packet(0x11, 0x2, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.04165293s ago: executing program 4 (id=864): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000a40)="5c00d7ddb33f2f2d59f06fedb68e41bfc2e0996cd3f4d686ccedb098bd3ed156995e269abcebf106d57e4b818e2939485a1c9a4adb51602e7c4e5db109f93eb9871c482a6eae0a5aaf269fe0129536830f96cc91fc7e7586140ed40cb6d74e267b5690fddeab840eb32b2bf352b14d17138a6f1ac659d33cddef4a06c5b9991f70a3fe5977994f5f96c65aebd10b849fe0c7e14d2a690e90", 0x98) close(r2) r3 = openat(r2, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x8800, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) 3.969621048s ago: executing program 4 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x6, {0x0, 0x200000100, 0x1ffffffc, 0x2, 0x6, 0x0, {0x5, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0x0, r3, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x3b) syz_fuse_handle_req(r1, &(0x7f00000083c0)="afe1b0a996775868391181b871ea09afb8639d886d7e6a93208bfaf110777da0ad6d2e8fffe28bf0ab778be95c1af09b7899d8488b6c93dcb70dae27dfd4f440a78a8d75d483a0e9bbb38e8c0293a89e82eda33d11bc7c3c7e974db0ce4596d96e5ee43d78a2919e6b3f930b523c479082ebd81214d52843acb4288a9c79a6fe84e8109eac84adf1af416d5765c5dd698df54864b59a09357ba6d3594e30a66f6cf9c96e472a954e5c766a6e5d2b18374eca2c040736bd7cac53bb7055b888514f2284f177f02b493e6a6ca8a3add98a5d5992a76bfb7d034287c6a773a50a007adb2a872ced0874ba8fa23996b6b676252912c92aa464cfcd13a50edc39ecc5e07c44d88bf22cc045583a2cd4276ebbb8e9170213feafb4750aff54f15481c2d5eb62539ef5f2b9e1de797073eb2696f599e4a931ad8793ef6ef4de0f3e02841ba538f3d1cb658be3c7b9504c2e3632c7765d40bfe0454e1c6f3fad17124e658bb338ecd28c1edd547030a730cab24a9fc424b8b15ceef0fc275d2eb602076f132f10d2a023703606514286d19de42bdcbbcc2dd63e5bc6221c36cae9879a84c9abd671f509dcd7f4f249843639f46d7f19201f886813e939ddf89ec5fae30cc3fc87903ab05ffa2ac75bba0ae725605cb9198ef8c77d63a83b35309df1b27fa5805120f8739ebbdbb0d9d514e5aa7481198ff181ca559d1ae8ea28c9cf5e9ed1468469d269f315eb5213bec1f55eb247d8b567964a351b8103477654ed443a1de61b31aba918614f9bab10b36bfd31a0bd8fd245005d348c1d9e26836ea09d8adb4f097aa3696fa27fa6aa47a4363116c6fa63449d5c1c8fad49564f4d84e6147720f3b717497f5f9d27b09821c107c9283ca66b3d1f3f684e62411eae6a5fb8ce54239b3c4c9a678711b949a79e7f08eb779c3f34002844b578225ac5dd8cb56931a1b077281679b1a8385e91261d716ce8e72d72455a6f42a218cacd1363cc645798c119077e29cde84adb0d8b66f79b0e9b6663f40caf5351f834b0e6aa496c57c613a6b82da516939bf67a5b4074eee506ba02a81961ae092805bb54176e4a87d61c1619b11385564853e207ad68fd4a8c9f90e59f69a6c269774a46aed5cbc92c57c1937486eeabea242e78a194b08e872c28ac5ae815421fb6bd6c770cca44bbbf4e7517c32e5634dd3ae4c6c79da57aaedf723683488d82e3346a17ad5a9f8556715ea274c9da1d7ebd083cd02b7a33f166ccbe8a5ef218051ae397f22b7cda9b5ef6001ee2bfd52c454560f89c7885d022cf3c085b6520f84c2cba2541df4968a5bfe3effd05c55091f7a50212a9f081f5c54485b95fbf4badf6b1d0aa59bb734c4f9acba0e9d3e27c18b228f01c08f4af0904a687fb9f4de27d9e96086eafbfd799fb5df1d9229519dbc266169a2d056f6cdb49fce17c2290ff24ec4a5fdb1096d99d0caa334061fa28d4308e69103f2fff538f0b231c4237eecba9ef8e853dff8b1066c461cd509caba267ee5ac2f4d5253cafbb1e49dbd6ad1e22e6d087facbe4870bc1eb57046032ed909cbcc58614eb9000ae561f043bd8b50c4c0778e3a1f45d8996074f7741e6b2ef62c235d08b8cdfa5bc3f2f0ac2f82622eb5c25dc0ac71b59356fa584024b835482fdc1dbf992821dbc094344cde2d03c48a6f2283a9272bcae06adc52e7d42811fa424e6c4c14e9138535413d4770b1d23066108cb7525e1ad6af8e10db4bfd90c51c5f8928bb8e92ee108814ddbd1817c13b845414a718bb7414547eb62868a0ea5ade3c0ffddb0d61434e872a5912c97b74aa52d85e68df1153f0d49ad7091d5328d4e55f149dfafc3fe0d745df53888272b2a47ad29207756ff2acd9ee666b78bf5e9320b3a63b8bc967d3746f50fbfb46e68ad02ca52425715c43716210d08ec8b89a3e5453614e9f1125877a0371773d9db9fc6ff1557f6aa010ce940b357d8a609c9415e044cff7e9abeefbb7eb98f19f763ff12cd51a6635d83648dd6b172894e8965b0319c542563f079574e993ebc0f511055b073f1e67d2894a96de2c355d29b7115ba4a31e9e130452b9d21a5fb95446736186c55d2121c1047379757f7c7d489ff83d3c56f12c4a4a7eb55e7ed23ef93aa9aa8030e4dc7add46ef902e4da157e52cdf1d8399273a687c76a570d53a3a3eedab69c64c6e018a8a3d68739406a710b9fecb160ed04fa7e1bea90a6d99ef0bde9c982a57a252786e555901bdb344b53b01c17a4e2a76c34efd4674acc822e692c3ddb51af58f9ac0ba9edb9ddd5884ca734bf7aa6c35b026c6de4fc226341f1f069554beb3b2da82fa128b208dbf3560b397339e2f0d7933042dd16a594d9a7226619501a466057a9d97b83ef1ca0afceec9a823a0aa28773a7386d55321170721cf3588695de0af30b5fc4d1fae110040693f62255dea0f5745aa7f6c6f9faacc199a92bc7e2358d5f56758621240cf2579b60940a42333393bd34028ff0e334f3794a725d48f929e816c3e6b571b067a4eb48dc2f97e91d15ec2b1e6c883a01d39f9e6810b627a76c8e3ed214f135272e0aaf393eeb35cba9379004b58f53b809e4926da2c4d38b6caf89396456d9ebcbd104f256f7a803f90dd65d25a5d70bf2615e90442df64294824b0acb60de3f4072c4c455e92644c3f492e663bb163ebc74ccc35434ecd79ffa325214ac20a1b36762bf4930663056cc52fab60513ce61389e0680d73e4bbb38c648b1cf3d60dffc9687613b70165e47e430f2e7f3f125025fb9502caf906033c2113a7848855b0e06b1fd35152167e43b6498faf667fbb095020c9692f8ce1b63703724fe47ab4034671b8361ef1d794ed98634f25d99bbf8e4f99819e5a61d0bbd673f217f8819dc3becb5969268a52614f60b2124588a697170d905cce06abec79082438533bd80ceae3b53484c6723823a4b0aa27c001dcb498623cc22a1ff658eb513277e78f7571249af287259d378cc0ef182efd91ecba02b65a205dde7ecdb7873c9e32bf4d236cbf5609aa2d5eeaeba3b94dca539a4dcfd8dfcccfc35fc586f5a02ef1c61d1bdd24fd76845d3d043d296e92359e288e7d015bbc172a786450ab52fe5061a4673b4c612b2060448761bfb7b3b31acef810d4619031725b9b93e8e27b09fa8221553981c745d5625522c68b1daa7f941dea564b64a19ed1657ef052fdb349285d99fc6d5d5e4c1f84adf476460fc5a7ac8722c3a6aa0686a793502dff81bf50286810bc11d14733ecfd7b13e73e09f7119f6a9a1f22d7721f6071028b74eadbe4f10cf7926886085c08a2e051fdde848b1e4c9b39fc2ee45a7463d623ddd95280e7db9b78a56a48f5571e907a0c9eb549f0b73973f364088e97d75956e38b54e6289497a8e31fc547516794668829404885e7361eed875eae0e4e16a9f8bde779011c937345c01eb8cab2863e7828a0395905dbc87f17f38261cbd61bb274b397f90d30fc898cfcd2c1c15a89144965e7369f75b95fd11d0a9555a3cedfff602d9a7510a0e95fe8875cf7d4b9c7d63fc57012b3817a6af6ad273cd1c193c67437244d5ba839c14a31b6bbd67687a3b135d17ea810d9b2d73c7873f2761f784bcb638898a824fd15b526d2728e157d5462f35116bf4e025adb6175c0d4c79919ca72e1810862d92101bed6f0bd94c51b954e2089e958af898a9bed2da45534404cb12d3e62ced9b747999a4d61d36c18fc0276260d495140bce76f171207d04d709359edc3c664b36940ba1ce20d7a9252867562ae44cf88cd6b89bad04e8504240dca7c0c8125aaf35ea865e6abc5728fdb3deecd933c18fa0a0d3a6dcded99c4d44b9d0165a6a4b47189fad3bd9f3eb65e532d9ecb084ab459fe5f9d38616cd2a68c991fe6bebc08be4ea36e126a4d20067a41d06439256f8cfd26c68fd4e20cfa7d9937eea76f23c685df175fcc54e138800972d2b2259add19ba26d82c0aec7232a9c8712e3a38ec3027b580de705c9fd528ca2a7098b9ae195d8c88979ea99c85285c84a0578da1fc936b446bb70420be5622a7343eaff201c4b3f6cd22b581bb7dd8256834278f12332d6a0ce0d76f74d3e87955815aa7c789cf212394710cce9807447d4e3e280b56452bfee1dcdb3d79009b387413ea434581dcd96f936f7e17cb245d1b91705bdbb8aed300126098f4782b65702f6734cc43b00e465a5b76a68437dc2170189a7736fc83379a8c1dcf90656e353c8bdad0de5f0275675ae5fc00be905f9c2bee64e7b688a9f2b9ecab8697355cca46c4e8ac2c09e34e4c99ed87a082e1f022033baeff201e4b12c636085fd239d0ffaca1819c13645dee797c92ffcf84f76c3792de704e13418be7fc09a99e28df9e800f07b4e10c1ad1b076022a1307e5a172c31562b86d1ebc500692b78b5d7eba73be3731b892db518c669fe3e165f55bc8885c57b7f2f43429cc478afc94bcab818842a5a5c8545ff82cf8d58f0ab83d2a45af3c758687d2137dd609af58bfa3f8e01dee45c954ce5c35dbd9bc4a32eaeaf0da46f87ebdb3e957707aade7b78e9df030ecef1fc14faefbc351e2bd09b9a4a69fafd8fa58d08183ffe5788918ef2fbc7f0749f3dae479d195f518d775f698ccde58f154fbdcbd8440d0376dcb25d6bea36ccaaca7bd35e92cac4238bb62bcbb94619e89ce7c2b6780c3b97cfbfd5c71099c98f4f296afd7abbef496ab5afa805f20cad9b2a11c0847ab3a73dee5cbd4db3fdd10c9de14f7d2b85596d72e31fe2171f21102852390ea3b5f7294d2d84942ea54b5578c5587e54a26bf2404999b1df386a9db5b5aff3942197c431f15ff507862947526ddf24d65c53580fcd34719212602682978c257796e38a8c18ab6ce46db1f230cfa600286612cfaac47543479a549ea13247edd00185c3c44bf9ef7a779adf06931c18cd8aed566d9c1cb6a3dddb67f4613876518d34d54c14363c7c34449f7176898c87d23b6b1243574d87df916cf086d8a6cde792cc1c93c2a99b7c884b479f488a89dfbd8ee16f19f6d867ced1d30b1ae04821c61afe03ef06b92b7e8e53522bf9f6ce529858674937d8cc423710056403d09f43122862bd8ef51962224a89d2cc6e80ad69fcd5aa39b53d9cfcaa679ab9f18051fedac16de1a2b65405d9c72ab316d2d4fa4981e873873089fc82dc25de7c773f7bec0a62b272167e49854d7fdef08c700e88ab1e46f9e9ba4106d22d79bdb9ea4c400fbdafc0a2d30e4289f7aec6a8143ea1b94901976a3e9db73138d279de3dfd77e6a7e95fd1c80ab7689b452ce761db7f4cd0bf6af9a6dd22a35795c897d5b70f85204711006221677731c6cf4239b7a8f16f2a04d59cc2c1a954ea267c5e36aaa1443532e475de52b3e39642918ac17acba067182267638add164f35685a3578c17327c4c963e2cbc3c74fff73f261b4496cea0449d10b976c9129507f60e18b542e3aab7709f07fad1fc3555e16a27cb430a21d0b6920ee22cedfcfe45c5fc768bfe105600818d008f9657d140b0829a57ab4fb8b523bc8904036efaea194d01091813c167fb2677f56e1cec6e2f42a941054be1fb1a85a46d1f99298ca5f6a45f9d144caf55823554f58ff17275c3060f2d5cfe1b3fc607c979a64bed1626c254e78a6e3c0b76210b08c74e5d07e4711978722c96f7dc0665c3067c4ab93ccdf42d7469441f94a01c72ef11cefe48443f7b3597127e4b8f39ca85cb3ccc5d0545d5398b5c8cd9168aa7c50394c08fa20e48ccf8683171099a1b498c7544e0c74ba1adeb3026ef6a6f6e4da22bfc8d295771705a0315844043918dd33493f76eb85e91f49e9428220f818fc8bea7324e2a1b61a3de4fa775754ecaae82a33353e5ecb1ea557b1c037ad57bf8d723ecfe05e9848d332dc23eae94287432e0a0b19ac34e07a1aa68ef38936054246f9fb1a476a4d7e4e90b8cb83278011d80a57e722066e2142fc322c123f793f02c634157eaf0fe1c7a0bfbe0f40d95116021d9e42958b23e78dc38b30ae6d39b81ae45499d5a830df429388ef2c04b460bd89a9c30a9da013f4cb3f454dbcd8d2333fea253bc100d647cb787b85e8dc6930f442f2b7562d806a6eb0a2625171f26e7e1955f4bed65280feca3a235b8e37c4efa109435d97913a7facdfce9bf9a3d49adc332514849024124e3bbf7cb0dace4df2dc881867c299cf75ca095a17ebf230e5168abfbb0baaecd60a1f955ac195146917d49b8f1b36ae5bed977d34a9a4fed6a677ee8609e18fd687e3c01ac3ea0042082361acb6fe9fea3ae8b679a5e3547804b17eb186b1121f1ddab56523d24e2a54f3e2576fce3ed78fd88597b354bf878a4011d842311f000ce224d69fca2ff4f6831017f998a8b9238c55e5593fa898523d21dd5fb01d03c1205c0ecd892b75d5d5ec28e347c2ea69bdf2e6a88b5199fd82294f486d3a9c39d7e587373d7838bc6906b659fa9d1ad17a9d10389991e617c2990929e0e6064b072022d45e93cd92fcd77e8eb490ae56af092b0c7ed587282b0dcd1551a0dcdc4692478d6fb3ddb479b9557ddb26d97d2ddb6b945f1145a636fa3f4c7b8c6b1e27bc27dcbb468d39ae3f87899c1296535a58e163bcb5f8f5e75a1ea62cd0500f865fd283b618b9f0842af0f5008885bb61057fe2957f77590ec49304fa02d903181cffb91ccfda6223fa67f408d10b371965a0d948b4f0e16f30c652e62592c339c1afcae8921e53a9e568890268cc58cc6f96156eab8d8c3f5742f31d8392fbaacf84ef645954cd33b83b83eda3a63ac763a308c9a373e023543bb89b134511eacecaf10073749f6ca36c4b7a9a4cdcb317e84e6b52f7e7cb4ace5618b8ac5baacbb3125637d37ca3e68096ec6b16b4b840d93db8b32da23b2db7c1213c7fdb5a636ae895279991c5cb21c1e090e629991f657bcc5ad918757a8f9c4953a15f6609449c89a104fcfd637aa9bb2b2fce6f98ae955bd59c82f785910787664dbaaee88fa6525dbf3c537fec5826d8af1eab7f02a61e924cdf0509ba15074fc4443711e04d30885c007176862cd370cde25e2f07f2ea01e56421df0511e0dedb2bcc732735edb1cbc47cfe4bfd00421329416e6a54c9bf39954230ef4a19d8efb018e6328115b0b4b1eeeb0e419307be7bb124756744dd5d054be43eec960dc180ef2d867556f3f866c27bc309f673a21e9781811fb087feb4b044e69d6a7ba72e008ab6b27d5f487bf7e34466ffd1dc38b08f24f3baee8a119d804530b4f02d3610c60e62682e89028f6310ff830ca63ccd410cf63a2e251bbb15148ffb7dcabd0e2156a2f40416431f2cd3893a63251cfd7642de2d70b9c696068c5b8fc17636ef926d0d292867985a7513469836bdfdc3daf50e7cda86ea4a20953df902b5f6b1f30d715afb46c6985a87953be1cdf120a3a63f5f752e92fab1c201b93f8ff49f850cc338783a93a3a968a12476313683aed7e4ebe5a6b31f9aa578cd5052998813f2216d83afbdc03225efd29e9351b597c8c7018d0ac27581f008436d0bd698b1de91361e3f81ffb3d846bea145dae68f06cf2946d5679689ceaa2f8937dcdf464c6ab2cfdba79a19cee80537d3739d979f245d0bec88d33ad661ea92cc8708357f894c0fbcbdc9d80433d45a2af499b3cfd706db0ead57cb1cac12c91d900a98320c69afce92bf27608f2948597dd4f76fc1f5ebece18dee83ec42e6becfe7b088981501ec5cac179d78c6a6752f76c8cf26c056cba2c611363583171118602ec38a36156c4cb66be176cedf2b4f15166ed9cb3314bc4128f7d0e9dd4133fb643f30e163722cf5755a7d2ce80dfe8d4d1b6798d4fa311835b0f0087231e01e13552a42aa22fa330bf3cc517d6ffe198bba10b3ba62b5c77a472d3e96e3ca6396e5f8505e8d7c38fbaec479104f6a069fa3c8921b82606005c5b92599cc124e0ec5f380f50a5166e286ceed43b3794b4a9b1529eb645dd88964e7c1f5e7eb59d018b5d512bcda73e17b6a69a80e7eab7d9cc367aa1507a208c49a4096db1a21202825cbfe41d0281bd51320b5e7b5128cb8e39468647fd6a5c5cb0ad1765a088b29ed213e66e4c4d25583bd1e1f6f5f0ca44286a01389ddf2475169f3dd85f6852b375449595b06d610ba412954df596d24feb95c302761cbfaddf3989d3a706cb862dee17634e815b232340ef93eaa3d426da09a2a083281d0ea3fa31ffc91fa5a4590ff6d54a72b7b4926c56ff4bb1322d104c8956c1ac848edce067420f126fc150cfa80fb104f10830e0c88036e0ad5446e7ef0882dfbfc67030805eff01262dc40cdaf2509c9a6e92f57cf50c026f2b0d927a829ec0c5a541f3fdd3c8d3d6b0898d9a92450fe78368654469d8322981a42e0d4315b63e9bfd7757fa62f8a0ed3e1a62c15bb7b4e823c8570c1aa27ef516ca066d759f7c5049c5791c7fc5ef76ab26f0ffe99a58dca03dd4514f1a8af07f80dc63a1e9b343f158aa527a4df96f052425ddd61e2251cac94e87739c55c311363f6b026228323835fb95f788b798ead87eef04fc15a24264d167232df2eae4dcac304226b01f518f3dee1ef32d5586e8cf7d71fd0fa9791b4d296c560201b9c5ba13366de60fe6138ddd0227e9e58e670144cd8fc3e17cdfa568a365f00c84820b6c224071ffa61503f8368ad3ab6a8e0aae5fe887929501007923c0b7afab03bffc75abab9af5c6137ee641650345bfb21db35dfd8abd18e3df6c7474d1fc2fa8e709f982bb7cd691faa33691ae878d05c0d2d092763d027df8546d352a1ef64078c1a8034731c0897bfd06f1a704676f2ccbae0c5b34850d0dc1297732155178de788fd8c4fc0eac99fe50a5d8519b5e8391b9a069de7230951a441a3fd9b674affe5267d66b287af099761ea273054331fcbfb35a3d86a14cbec306f0df61207c595148d64f69ca71ffddbcc4fecb4af88d677eebf1337623eee93755cf88216d5c96722648b6e3ac81bf1987565f5b7a70a7698a228b518373d477c57b417987617d3da32b06a35c6f6efc2deaabf549fd7d63a54095b8ee9c1ab1ada51d2e9dd67cf73b8cc700d988d97500bfa1e8fa6f3d603e075cb55f20286e754fdf1683ca47ecda7b246ae2e1dc45c591943f69ebfb01b3ac3566d8db409ae886769598a0829712b6bd516cf98a9af936e9f891056c16a64caec5958e5c220f497efa0ded81435e4f2258c5d197da00cfbff3cdde6013413a307884dc17d25a065eee7449d0559dd1366ca38dbb21584a3c77c057a33a9b9eb2349593187b356c8962c8d169100d2fb6a321029e49a217d0510a06a23df90423bb199c7ade3c55db2eecd230bb7044ab95f071d8484c79e565f78b7ef84cff873e5748d7823abd85ca6ddca8e9a1b01e21590c2b6d52adfa308e83872f80080c7dd67a5249d10a86ec3770bd9cb5347e73c7d1c9603896749a909ae6266046d9f06d3f8aeb3ec679b52f58554d56419539b7871a0dfcec5123d4139e2959aa108d0e58e1d8da57ad0051aa6dfaa7d8a03dad63beec05669124f58128153c13c726853da13a460ce6e66e4cb1070c6c502dbbd6e36f67befb9cbd5beb1c00673301c54a5679d63068a6fdb7511b8027cc3b1bcb6dc659d71c1fb144ec5682a05f2ec100c2e5405e8ab549686afa7c6c283e319c94cf7facdbb63e66edc444922cb4744a79d05f0390aed999df7729f7b0cda96a32432fc7b46ec0a6829a89e28530a0349c0821f2fe956449e35553657a77d7dd578a053ff0c7c71d9ff31728615ad01c132c4cb3ce7689dfdc5d6ee9d28e6da4372738ac557f69aeffa98df8aaa252b1192f2fc0b7d1e7370d1c6f173a86822c4902318e21e435c6c1df6fd1a318ad8bfedf893e65d88551413154505d7cec6d450fc3764cf70ddf0e033b3d819ed9b8156c9112952f0b627863a1f31490bf5eb2b1e9e7f5d155abacff0e5911bf5dd43568af46d57f56f538b58724d225e391902c1b7a6fd282f8b914b7c58ea5166c66465cd07ca4c033ebff0d3ff1cc184b9bcc1c2a472bbaa57f01372b21bdcc9dce9408fe96e993cfba3c1376eaf2961c248a901ef75e8d39ad20a16a603599b13c8c497ea628a8a0fc207bb05f28ce6b65e4526e7abefd07848ee415aa001ae0489cf68ea2c9a9203dad12cddb826d7e55c5341d14c87d2c1dc55192a4ec1ad882638d13db42519a5a6fee298eab143b0955991526bf5d662f4a0bf65591cf59ae73cfc7488fc0deb0638f8df2fc14d8f9417d836ee46c0c70c14950ce23f74ea7261a5a527467bb6bc347a9b1597093285df315bd35b9f188d8ba7bf381c03a39e18863ad1539aae90340a382d93667e22244f06aa992e52e926fa7b1d07ed57a6a83c87ac17cf0e360ed68032c08d5486bbcedf56225e8592812c46676f9c985d1c8f310b5687bac8b6d9758ed94affd3653048b44458edbbaa34678a03cfc85fabb08b5f505de553d487da58c0107879663559e577d85077ec0caef10298140a632ed13b427580200eb1c53dbacafbfc839c234d13096f4823f4f824fcce75eb4c8d4cbee625ca347cd02505e565d2ba23b3172abe8e434e452735a3eefa0332b4887aa9b0940bb82bf866e2d6f26e3a3b3c08f0fad60d1c79be0e8d31827f535f54c09f8c43869efbb1bdf3bd82e75efc26fd9cc235754f9cbf24c140a89b2582ebae7946cc70df7ffe4f275ae194c7b7fba47d2ebfb7a58d4f3bc206535477b60aad8e00ad41672e2cd14ae4dc3e53dd0c0bf78a07b042eae7ef6dce42e31e98e421d00d49e5bfb2b376515d5bc8b7fb9bed46651157abae48f46a6c1da089c7d2883d2398e4462df756c6c41dd28a1652adb48edcef31cf2d712cbe8675dd476d00a5e9b698414bec286f76bb54d6cd07a08de59a659393c1cda10796b33c8b6d0bbd890eac307f92a32285be161fec3c02349280f7d44b23d47fa0f82e97520e16a2b4cd504a0a4a19c289a45949589b34697928ddfaf985986891db7b3da32668a383feb0df495677346516dfd39530a147724e20dcb826007fa146a920303ada23b667db743134a9d604f13df5b6d557a44fa9c1119ee4576b1df5c9d0c32b84a18b19c5f09d6d7efd1095e86c50edf8f44fc8ba55fd3b0f11bece4e9ff98334517341c4e4bd86fd877600c8c34ff3b87d6f26d7706671eb935500f9e13d356d41e014a18bb5e67588d1ea40c5d9cd7d216c76810a40a9155db31cc37ac69effc4849d13fd074f5f32b9130d31ab27c423046e48196e9254980c0f197165fe12f714a0621b6d0850a6eb0669186cd4214f1577c95765e71ca7f24e1dc2cf789c539278d3cc5b267b948f187295cdabf48e7b05443d57b83c1c5a9dafbc772ad776dffa49ecacbfc353328dd7ffdac7737bacf346d4d3427a7302da022b60e1ef876d3c829dacdd2be5e47300ccd4486498b1f9b5209b67d897d10823f27e317e07395b61ec0905c62e5d8b30050ccc1c7f7799363fafabfaaf808fe948c0108d8538d567b507ba2fcc93a62d4bc6f620f787e99060a3e2473d2f12254aaffe6dfe4adf05566fb5984674e9c7b1dce2b39b0098b92fdaf0a97bdc26", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x802, 0xbadd, 0x3, 0x8, {0x0, 0xf, 0x1, 0xfffffffffffffff5, 0x9, 0x4, 0xb499, 0x6, 0xfffffbff, 0x8000, 0x8002, r3, r4, 0x0, 0x6}}, {0x0, 0x1}}}, 0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003e00)={0x14, 0x0, 0x4, 0x5, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) 3.968804646s ago: executing program 5 (id=866): r0 = socket$netlink(0x10, 0x3, 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) ppoll(&(0x7f0000000080)=[{r1, 0x1000}], 0x1, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0x990a22, 0xfffffffd}) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x3c, 0x0, @fd=r0, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f00000006c0)={0x2, 0x6, 0x0, 0x0, 0x4}, 0x1}}) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 3.921371153s ago: executing program 5 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000680)='dummy_udc.0', 0xb) 3.921150946s ago: executing program 5 (id=868): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = syz_io_uring_setup(0xa95, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x149}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r4, 0x20, 0x20, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) 3.021408792s ago: executing program 5 (id=869): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)="0bcde56ca9a6", 0x6) 1.290519415s ago: executing program 1 (id=870): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc6010", 0x15}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xa6, 0xfff1}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b22, &(0x7f0000000040)) ioctl(r0, 0x6, &(0x7f00000000c0)="d7b8d0d301ec1af46e34e0d5f60c867b23dfdb942c99e80789decebcf62d5f4da92abb460af6ed844b8295b11d265f6ac9cee4ab3bc6633b5d8f82cb22e7eb77e76d4784bd8943ed98a797e11d789b31015bae11ea89392789ff00b443e8c384ff277d2843a190e6") write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 1.201029213s ago: executing program 1 (id=871): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f0000002700)=[{0x0}, {&(0x7f0000000100)="9e705eb8439051bad0bdf8bf8705874beae838bc5fd20e0d35f3561b8b6c4b2b69532744fda233b2dee448b5", 0x2c}], 0x2) 821.198224ms ago: executing program 4 (id=872): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './sys\x00'}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="dc507563000000"], 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$inet6(r1, 0x0, 0x0, 0x4008000, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @loopback, 0x2}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES16], 0xb4}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b80)="a9a1146246fc8b0caa97c010fd9b049f26f2cc3947293203ac5e0015f63b94a4038652b4727397c9980f994acfeff5b77f5ddb7f5f797696f6dfe86ad3f035063bd50021fb4077eba32f5c0913b96ea1bf0c6bbf16e67c159de8a72e8e901bb5c53bd78235832e93e38718a3ba3ef80e7cab40cfe1041370b5035dccd8ffae374ae9e5fc8d0b547d2ba7b1fa67bdffe7bd06a5e643193a93e0cb51c967352069ef3046a85b7f4190050bea6e5139cca7b1cfe12a9659ef42ca5f234266fbc1d735684e667d0a505fa4f798d7c2abbd9c43ad84ebfa3703c5266c6480d2dcf5fb8661", 0xe2}, {&(0x7f00000007c0)="2f526ce53a8084bfbb9d4b4b8da0f05495eeb5fc782fc2483c61b5efbc61b4fac064c3231918f3d9e5d9b9ea2d67b92ac1274adbde70c73fa9a0b7e96994bc6be566be1a99b0fda4e7f2552e0469a2d59e8673d43d5b76804425c51b3e4b938b6d122ccfee681d0148aeb77d3f758dbdc3ccd076051626b79351d4b42d565d2a4ad9ae508acff81fcd5a524f2a013822f0abcdd8e61ff1ce5e3181207e", 0x9d}, {&(0x7f0000000880)}], 0x3, &(0x7f0000000900)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffffb}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @broadcast, @empty}}}], 0x68}}], 0x3, 0x4000) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000180)=0xf577, 0x4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xe200, 0x0) ioctl$CDROM_SELECT_SPEED(r5, 0x5322, 0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) openat$snapshot(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000540)=@md0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='vfat\x00', 0x2000000, &(0x7f0000000680)='nfs\x00') add_key(0x0, 0x0, &(0x7f0000000200)="30820555", 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write(r7, &(0x7f0000000200)='1', 0x1) 280.745889ms ago: executing program 1 (id=873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 220.889626ms ago: executing program 1 (id=874): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async, rerun: 64) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8003}}, 0xabb6, 0x867, 0x40a4f, 0xc2, 0x2a, 0x0, 0xa9}, 0x9c) write$ppp(r1, &(0x7f0000000240)="bf3b627b2b98c54de3c3fe40f8f4f4dd3d50e71d0447983c3dea3eee9053fd4c04f513514c4197631f1f458ac15dc5fd171e12eeaa07196fdd448ea29bb3054d4c05250cd461dd95b7", 0x49) (async) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) (async) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @mcast1, 0x3}, 0x1c) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 149.109167ms ago: executing program 1 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="319c00000000b1108e88ae4fdf270700030c", 0x12) 148.625057ms ago: executing program 1 (id=876): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) unshare(0x2a020480) r2 = inotify_init() r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r4) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x124, 0x41, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="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"]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3, r9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x400000008001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=877): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f00000009c0), 0x100) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000a80), 0x100) kernel console output (not intermixed with test programs): 000001 [ 92.374591][ T7245] R13: 00007f4965c26038 R14: 00007f4965c25fa0 R15: 00007ffd13fdad78 [ 92.374613][ T7245] [ 92.511704][ T7256] FAULT_INJECTION: forcing a failure. [ 92.511704][ T7256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.515962][ T7256] CPU: 1 UID: 0 PID: 7256 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(full) [ 92.515977][ T7256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.515983][ T7256] Call Trace: [ 92.515988][ T7256] [ 92.515992][ T7256] dump_stack_lvl+0x100/0x190 [ 92.516013][ T7256] should_fail_ex.cold+0x5/0xa [ 92.516028][ T7256] _copy_from_user+0x2e/0xd0 [ 92.516045][ T7256] copy_msghdr_from_user+0x9f/0x4c0 [ 92.516058][ T7256] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.516075][ T7256] ___sys_sendmsg+0x106/0x1e0 [ 92.516087][ T7256] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.516097][ T7256] ? __lock_acquire+0x49f/0x1a40 [ 92.516111][ T7256] ? get_pid_task+0x106/0x250 [ 92.516145][ T7256] __sys_sendmsg+0x160/0x210 [ 92.516160][ T7256] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.516182][ T7256] do_syscall_64+0x115/0x870 [ 92.516194][ T7256] ? clear_bhb_loop+0x70/0xc0 [ 92.516208][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.516218][ T7256] RIP: 0033:0x7f496599e0d9 [ 92.516228][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.516239][ T7256] RSP: 002b:00007f49667fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.516251][ T7256] RAX: ffffffffffffffda RBX: 00007f4965c25fa0 RCX: 00007f496599e0d9 [ 92.516257][ T7256] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 92.516264][ T7256] RBP: 00007f49667fb090 R08: 0000000000000000 R09: 0000000000000000 [ 92.516270][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.516276][ T7256] R13: 00007f4965c26038 R14: 00007f4965c25fa0 R15: 00007ffd13fdad78 [ 92.516289][ T7256] [ 92.529283][ T73] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.573111][ T73] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 92.588409][ T73] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.591140][ T73] usb 6-1: Product: syz [ 92.592397][ T73] usb 6-1: Manufacturer: syz [ 92.593761][ T73] usb 6-1: SerialNumber: syz [ 92.600112][ T73] usb 6-1: config 0 descriptor?? [ 92.602278][ T7194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.605785][ T73] hub 6-1:0.0: bad descriptor, ignoring hub [ 92.610024][ T73] hub 6-1:0.0: probe with driver hub failed with error -5 [ 92.697992][ T7266] null_blk: disk nullb1 created [ 92.922263][ T7278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.925711][ T7278] block device autoloading is deprecated and will be removed. [ 92.939547][ T73] usb 6-1: USB disconnect, device number 19 [ 93.028908][ T7272] md: could not open device unknown-block(0,0). [ 93.030983][ T7272] md: md_import_device returned -6 [ 93.075231][ T7283] overlayfs: overlapping lowerdir path [ 93.082546][ T7285] netlink: Setting conntrack mark requires 'commit' flag. [ 93.084775][ T7285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.131248][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 93.134199][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.526'. [ 93.193072][ T7293] can0: slcan on ptm0. [ 93.507720][ T7310] can1: slcan on ptm1. [ 93.570398][ T7306] null_blk: disk nullb1 created [ 93.572788][ T7314] can2: slcan on ptm2. [ 93.771669][ T7325] FAULT_INJECTION: forcing a failure. [ 93.771669][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 93.775545][ T7325] CPU: 0 UID: 0 PID: 7325 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 93.775560][ T7325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.775567][ T7325] Call Trace: [ 93.775583][ T7325] [ 93.775589][ T7325] dump_stack_lvl+0x100/0x190 [ 93.775622][ T7325] should_fail_ex.cold+0x5/0xa [ 93.775637][ T7325] should_failslab+0xc2/0x120 [ 93.775670][ T7325] __kmalloc_noprof+0xfc/0x820 [ 93.775688][ T7325] ? rcu_is_watching+0x12/0xc0 [ 93.775706][ T7325] ? tomoyo_realpath_from_path+0xb6/0x690 [ 93.775728][ T7325] tomoyo_realpath_from_path+0xb6/0x690 [ 93.775742][ T7325] tomoyo_path_number_perm+0x23c/0x580 [ 93.775757][ T7325] ? tomoyo_path_number_perm+0x22e/0x580 [ 93.775773][ T7325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.775801][ T7325] ? find_held_lock+0x2b/0x80 [ 93.775811][ T7325] ? __fget_files+0x215/0x3d0 [ 93.775823][ T7325] ? hook_file_ioctl_common+0x140/0x440 [ 93.775836][ T7325] ? __fget_files+0x215/0x3d0 [ 93.775849][ T7325] ? __fget_files+0x21f/0x3d0 [ 93.775862][ T7325] security_file_ioctl+0xd3/0x230 [ 93.775891][ T7325] __x64_sys_ioctl+0xb7/0x210 [ 93.775909][ T7325] do_syscall_64+0x115/0x870 [ 93.775922][ T7325] ? clear_bhb_loop+0x70/0xc0 [ 93.775935][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.775946][ T7325] RIP: 0033:0x7f496599e0d9 [ 93.775956][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.775967][ T7325] RSP: 002b:00007f49667da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.775977][ T7325] RAX: ffffffffffffffda RBX: 00007f4965c26090 RCX: 00007f496599e0d9 [ 93.775984][ T7325] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 93.775990][ T7325] RBP: 00007f49667da090 R08: 0000000000000000 R09: 0000000000000000 [ 93.775997][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.776003][ T7325] R13: 00007f4965c26128 R14: 00007f4965c26090 R15: 00007ffd13fdad78 [ 93.776017][ T7325] [ 93.779719][ T7292] can0 (unregistered): slcan off ptm0. [ 93.782552][ T7325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.842265][ T7314] Line length is too long: Should be less than 4094 [ 93.979542][ T7313] can2 (unregistered): slcan off ptm2. [ 93.982687][ T7309] can1 (unregistered): slcan off ptm1. [ 93.983952][ T7337] overlayfs: overlapping lowerdir path [ 94.093880][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'. [ 94.285331][ T7365] trusted_key: encrypted_key: insufficient parameters specified [ 94.382688][ T7367] null_blk: disk nullb1 created [ 94.426645][ T5938] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 94.568371][ T7383] overlayfs: overlapping lowerdir path [ 94.576741][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 94.580357][ T5938] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.591304][ T5938] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.601216][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.608043][ T5938] usb 7-1: Product: syz [ 94.609642][ T5938] usb 7-1: Manufacturer: syz [ 94.616237][ T5938] usb 7-1: SerialNumber: syz [ 94.623057][ T5938] usb 7-1: config 0 descriptor?? [ 94.628368][ T7357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.642291][ T5938] hub 7-1:0.0: bad descriptor, ignoring hub [ 94.645026][ T5938] hub 7-1:0.0: probe with driver hub failed with error -5 [ 94.673955][ T7392] FAULT_INJECTION: forcing a failure. [ 94.673955][ T7392] name failslab, interval 1, probability 0, space 0, times 0 [ 94.679783][ T7392] CPU: 3 UID: 0 PID: 7392 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(full) [ 94.679799][ T7392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.679806][ T7392] Call Trace: [ 94.679819][ T7392] [ 94.679823][ T7392] dump_stack_lvl+0x100/0x190 [ 94.679876][ T7392] should_fail_ex.cold+0x5/0xa [ 94.679897][ T7392] should_failslab+0xc2/0x120 [ 94.679917][ T7392] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.679931][ T7392] ? do_getname+0x35/0x390 [ 94.679949][ T7392] do_getname+0x35/0x390 [ 94.679964][ T7392] __x64_sys_renameat2+0xca/0x140 [ 94.679979][ T7392] do_syscall_64+0x115/0x870 [ 94.680006][ T7392] ? clear_bhb_loop+0x70/0xc0 [ 94.680020][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.680031][ T7392] RIP: 0033:0x7f7890d9e0d9 [ 94.680040][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.680050][ T7392] RSP: 002b:00007f7891c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 94.680067][ T7392] RAX: ffffffffffffffda RBX: 00007f7891025fa0 RCX: 00007f7890d9e0d9 [ 94.680074][ T7392] RDX: ffffffffffffff9c RSI: 0000200000000580 RDI: ffffffffffffff9c [ 94.680080][ T7392] RBP: 00007f7891c17090 R08: 0000000000000000 R09: 0000000000000000 [ 94.680086][ T7392] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 94.680093][ T7392] R13: 00007f7891026038 R14: 00007f7891025fa0 R15: 00007ffd41c27aa8 [ 94.680106][ T7392] [ 94.750273][ T7395] overlayfs: failed to resolve './bus': -2 [ 94.820853][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 94.820869][ T42] audit: type=1800 audit(1786971539.580:509): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.554" name="power" dev="configfs" ino=19385 res=0 errno=0 [ 94.840745][ T7402] null_blk: disk nullb1 created [ 94.871742][ T7405] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 94.958792][ T7407] null_blk: disk nullb1 created [ 94.961818][ T848] usb 7-1: USB disconnect, device number 30 [ 95.060776][ T42] audit: type=1400 audit(1786971539.820:510): avc: denied { create } for pid=7413 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 95.199580][ T42] audit: type=1400 audit(1786971539.960:511): avc: denied { write } for pid=7416 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.199847][ T7417] Bluetooth: MGMT ver 1.23 [ 95.212478][ T42] audit: type=1400 audit(1786971539.970:512): avc: denied { ioctl } for pid=7416 comm="syz.1.561" path="socket:[19965]" dev="sockfs" ino=19965 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.219915][ T42] audit: type=1400 audit(1786971539.970:513): avc: denied { getopt } for pid=7416 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.271037][ T42] audit: type=1400 audit(1786971540.030:514): avc: denied { mount } for pid=7425 comm="syz.1.563" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 95.277992][ T42] audit: type=1400 audit(1786971540.030:515): avc: denied { write } for pid=7425 comm="syz.1.563" name="functions" dev="configfs" ino=9887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.284632][ T42] audit: type=1400 audit(1786971540.030:516): avc: denied { write } for pid=7425 comm="syz.1.563" name="c.1" dev="configfs" ino=10773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.291717][ T848] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 95.292272][ T42] audit: type=1400 audit(1786971540.030:517): avc: denied { write } for pid=7425 comm="syz.1.563" name="c.1" dev="configfs" ino=10773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.301355][ T42] audit: type=1400 audit(1786971540.040:518): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 95.353032][ T7432] null_blk: disk nullb1 created [ 95.364087][ T7434] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 95.471054][ T848] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.478512][ T848] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 95.488483][ T848] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.496406][ T848] usb 7-1: Product: syz [ 95.498257][ T848] usb 7-1: Manufacturer: syz [ 95.502205][ T848] usb 7-1: SerialNumber: syz [ 95.508134][ T848] usb 7-1: config 0 descriptor?? [ 95.510466][ T7357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.517557][ T848] hub 7-1:0.0: bad descriptor, ignoring hub [ 95.519396][ T848] hub 7-1:0.0: probe with driver hub failed with error -5 [ 95.575710][ T7453] FAULT_INJECTION: forcing a failure. [ 95.575710][ T7453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.581560][ T7453] CPU: 0 UID: 0 PID: 7453 Comm: syz.3.575 Not tainted syzkaller #0 PREEMPT(full) [ 95.581576][ T7453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.581594][ T7453] Call Trace: [ 95.581600][ T7453] [ 95.581605][ T7453] dump_stack_lvl+0x100/0x190 [ 95.581673][ T7453] should_fail_ex.cold+0x5/0xa [ 95.581701][ T7453] _copy_from_user+0x2e/0xd0 [ 95.581750][ T7453] move_addr_to_kernel+0x65/0x170 [ 95.581779][ T7453] __sys_connect+0xb5/0x170 [ 95.581792][ T7453] ? __pfx___sys_connect+0x10/0x10 [ 95.581803][ T7453] ? __fget_files+0x21f/0x3d0 [ 95.581833][ T7453] ? __pfx_ksys_write+0x10/0x10 [ 95.581847][ T7453] __x64_sys_connect+0x72/0xb0 [ 95.581859][ T7453] ? lockdep_hardirqs_on+0x78/0x100 [ 95.581879][ T7453] do_syscall_64+0x115/0x870 [ 95.581891][ T7453] ? clear_bhb_loop+0x70/0xc0 [ 95.581906][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.581917][ T7453] RIP: 0033:0x7f496599e0d9 [ 95.581927][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.581938][ T7453] RSP: 002b:00007f49667fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 95.581950][ T7453] RAX: ffffffffffffffda RBX: 00007f4965c25fa0 RCX: 00007f496599e0d9 [ 95.581956][ T7453] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 95.581962][ T7453] RBP: 00007f49667fb090 R08: 0000000000000000 R09: 0000000000000000 [ 95.581968][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.581974][ T7453] R13: 00007f4965c26038 R14: 00007f4965c25fa0 R15: 00007ffd13fdad78 [ 95.581988][ T7453] [ 95.816874][ T10] usb 7-1: USB disconnect, device number 31 [ 95.904710][ T7457] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 95.941671][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.127812][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.140709][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.143018][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.144924][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.151658][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.154506][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.238063][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.292936][ T7484] FAULT_INJECTION: forcing a failure. [ 96.292936][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.297257][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) [ 96.297271][ T7484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.297278][ T7484] Call Trace: [ 96.297282][ T7484] [ 96.297286][ T7484] dump_stack_lvl+0x100/0x190 [ 96.297306][ T7484] should_fail_ex.cold+0x5/0xa [ 96.297320][ T7484] _copy_from_user+0x2e/0xd0 [ 96.297338][ T7484] copy_msghdr_from_user+0x9f/0x4c0 [ 96.297350][ T7484] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.297367][ T7484] ___sys_sendmsg+0x106/0x1e0 [ 96.297379][ T7484] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.297389][ T7484] ? __lock_acquire+0x49f/0x1a40 [ 96.297440][ T7484] ? get_pid_task+0x106/0x250 [ 96.297472][ T7484] __sys_sendmsg+0x160/0x210 [ 96.297487][ T7484] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.297508][ T7484] do_syscall_64+0x115/0x870 [ 96.297521][ T7484] ? clear_bhb_loop+0x70/0xc0 [ 96.297534][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.297545][ T7484] RIP: 0033:0x7f6c5139e0d9 [ 96.297555][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.297566][ T7484] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.297577][ T7484] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 96.297583][ T7484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 96.297590][ T7484] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.297596][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.297602][ T7484] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 96.297616][ T7484] [ 96.371244][ T7477] orangefs_mount: mount request failed with -4 [ 96.398333][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.403286][ T7488] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 96.523386][ T7510] FAULT_INJECTION: forcing a failure. [ 96.523386][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.529429][ T7510] CPU: 2 UID: 0 PID: 7510 Comm: syz.2.596 Not tainted syzkaller #0 PREEMPT(full) [ 96.529446][ T7510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.529453][ T7510] Call Trace: [ 96.529457][ T7510] [ 96.529462][ T7510] dump_stack_lvl+0x100/0x190 [ 96.529482][ T7510] should_fail_ex.cold+0x5/0xa [ 96.529498][ T7510] _copy_from_user+0x2e/0xd0 [ 96.529516][ T7510] move_addr_to_kernel+0x65/0x170 [ 96.529528][ T7510] __sys_connect+0xb5/0x170 [ 96.529541][ T7510] ? __pfx___sys_connect+0x10/0x10 [ 96.529552][ T7510] ? __fget_files+0x21f/0x3d0 [ 96.529570][ T7510] ? __pfx_ksys_write+0x10/0x10 [ 96.529583][ T7510] __x64_sys_connect+0x72/0xb0 [ 96.529595][ T7510] ? lockdep_hardirqs_on+0x78/0x100 [ 96.529608][ T7510] do_syscall_64+0x115/0x870 [ 96.529620][ T7510] ? clear_bhb_loop+0x70/0xc0 [ 96.529633][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.529644][ T7510] RIP: 0033:0x7f6c5139e0d9 [ 96.529654][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.529665][ T7510] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 96.529676][ T7510] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 96.529682][ T7510] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 96.529689][ T7510] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.529695][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.529701][ T7510] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 96.529714][ T7510] [ 96.574272][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.594958][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.600019][ T7517] process 'syz.1.597' launched './file0' with NULL argv: empty string added [ 96.601139][ T7462] bridge_slave_0: entered allmulticast mode [ 96.607648][ T7462] bridge_slave_0: entered promiscuous mode [ 96.611028][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.613357][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.615782][ T7462] bridge_slave_1: entered allmulticast mode [ 96.620573][ T7462] bridge_slave_1: entered promiscuous mode [ 96.651622][ T7462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.656059][ T7462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.665111][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 96.671223][ T7522] FAULT_INJECTION: forcing a failure. [ 96.671223][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 96.677945][ T7522] CPU: 2 UID: 0 PID: 7522 Comm: syz.2.600 Not tainted syzkaller #0 PREEMPT(full) [ 96.677962][ T7522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.677969][ T7522] Call Trace: [ 96.677973][ T7522] [ 96.677978][ T7522] dump_stack_lvl+0x100/0x190 [ 96.677998][ T7522] should_fail_ex.cold+0x5/0xa [ 96.678013][ T7522] should_failslab+0xc2/0x120 [ 96.678045][ T7522] __kmalloc_noprof+0xfc/0x820 [ 96.678064][ T7522] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 96.678095][ T7522] kernfs_fop_write_iter+0x26a/0x5f0 [ 96.678112][ T7522] vfs_write+0x6ac/0x1050 [ 96.678123][ T7522] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 96.678140][ T7522] ? __pfx_vfs_write+0x10/0x10 [ 96.678158][ T7522] ksys_write+0x12a/0x250 [ 96.678167][ T7522] ? __pfx_ksys_write+0x10/0x10 [ 96.678181][ T7522] do_syscall_64+0x115/0x870 [ 96.678194][ T7522] ? clear_bhb_loop+0x70/0xc0 [ 96.678207][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.678218][ T7522] RIP: 0033:0x7f6c5139e0d9 [ 96.678228][ T7522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.678239][ T7522] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.678250][ T7522] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 96.678256][ T7522] RDX: 000000000000000d RSI: 0000200000000900 RDI: 0000000000000009 [ 96.678262][ T7522] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.678268][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.678275][ T7522] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 96.678288][ T7522] [ 96.678757][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 96.706740][ T73] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 96.721213][ T7462] team0: Port device team_slave_0 added [ 96.726881][ T7524] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 96.753419][ T12] bridge_slave_1: left allmulticast mode [ 96.758687][ T12] bridge_slave_1: left promiscuous mode [ 96.763882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.786066][ T12] bridge_slave_0: left allmulticast mode [ 96.788215][ T12] bridge_slave_0: left promiscuous mode [ 96.790035][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.876848][ T7529] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 96.879156][ T73] usb 8-1: Using ep0 maxpacket: 32 [ 96.882880][ T73] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.892643][ T73] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.901412][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.905901][ T73] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.908598][ T73] usb 8-1: Product: syz [ 96.909884][ T73] usb 8-1: Manufacturer: syz [ 96.911406][ T73] usb 8-1: SerialNumber: syz [ 96.911805][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.915500][ T73] usb 8-1: config 0 descriptor?? [ 96.916087][ T7496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.920545][ T12] bond0 (unregistering): Released all slaves [ 96.921874][ T73] hub 8-1:0.0: bad descriptor, ignoring hub [ 96.924298][ T73] hub 8-1:0.0: probe with driver hub failed with error -5 [ 96.928912][ T7462] team0: Port device team_slave_1 added [ 96.956193][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.958570][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.967218][ T7462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.971563][ T7462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.973636][ T7462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.981735][ T7462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.027599][ T7462] hsr_slave_0: entered promiscuous mode [ 97.029842][ T7462] hsr_slave_1: entered promiscuous mode [ 97.031841][ T7462] debugfs: 'hsr0' already exists in 'hsr' [ 97.033576][ T7462] Cannot create hsr debugfs directory [ 97.083052][ T7539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7539 comm=syz.2.604 [ 97.086490][ T5438] 8021q: adding VLAN 0 to HW filter on device eth1 [ 97.095387][ T7539] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 97.133409][ T7541] FAULT_INJECTION: forcing a failure. [ 97.133409][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.140650][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 97.140666][ T7541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.140673][ T7541] Call Trace: [ 97.140678][ T7541] [ 97.140682][ T7541] dump_stack_lvl+0x100/0x190 [ 97.140704][ T7541] should_fail_ex.cold+0x5/0xa [ 97.140719][ T7541] _copy_to_user+0x32/0xd0 [ 97.140736][ T7541] simple_read_from_buffer+0xcb/0x170 [ 97.140762][ T7541] proc_fail_nth_read+0x1af/0x230 [ 97.140805][ T7541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.140823][ T7541] ? rw_verify_area+0xce/0x6d0 [ 97.140838][ T7541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.140855][ T7541] vfs_read+0x1e4/0xb40 [ 97.140873][ T7541] ? __pfx_vfs_read+0x10/0x10 [ 97.140889][ T7541] ? __fget_files+0x215/0x3d0 [ 97.140903][ T7541] ? __fget_files+0x21f/0x3d0 [ 97.140918][ T7541] ksys_read+0x12a/0x250 [ 97.140927][ T7541] ? __pfx_ksys_read+0x10/0x10 [ 97.140941][ T7541] do_syscall_64+0x115/0x870 [ 97.140953][ T7541] ? clear_bhb_loop+0x70/0xc0 [ 97.140966][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.140978][ T7541] RIP: 0033:0x7f6c5135e90e [ 97.140987][ T7541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.140998][ T7541] RSP: 002b:00007f6c4f5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.141009][ T7541] RAX: ffffffffffffffda RBX: 00007f6c4f5f66c0 RCX: 00007f6c5135e90e [ 97.141016][ T7541] RDX: 000000000000000f RSI: 00007f6c4f5f60a0 RDI: 0000000000000003 [ 97.141022][ T7541] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.141028][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.141034][ T7541] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 97.141048][ T7541] [ 97.226779][ T34] usb 8-1: USB disconnect, device number 21 [ 97.316270][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.325072][ T12] hsr_slave_0: left promiscuous mode [ 97.329465][ T12] hsr_slave_1: left promiscuous mode [ 97.331672][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.334119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.338872][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.341322][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.352235][ T12] veth1_macvtap: left promiscuous mode [ 97.354153][ T12] veth0_macvtap: left promiscuous mode [ 97.355988][ T12] veth1_vlan: left promiscuous mode [ 97.360086][ T12] veth0_vlan: left promiscuous mode [ 97.527950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.536929][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.576670][ T34] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 97.583756][ T7557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.588419][ T7557] block device autoloading is deprecated and will be removed. [ 97.593122][ T7556] md: md130 stopped. [ 97.709226][ T7462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.713340][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.716202][ T7462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.725708][ T7559] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 97.726248][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.730109][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.731829][ T7462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.735226][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 97.741401][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.741507][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.744089][ T7462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.746359][ T34] usb 8-1: Product: syz [ 97.749956][ T34] usb 8-1: Manufacturer: syz [ 97.751492][ T34] usb 8-1: SerialNumber: syz [ 97.752114][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.754857][ T34] usb 8-1: config 0 descriptor?? [ 97.759062][ T7496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.762308][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 97.764608][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 97.779849][ T7561] FAULT_INJECTION: forcing a failure. [ 97.779849][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.785706][ T7561] CPU: 3 UID: 0 PID: 7561 Comm: syz.2.610 Not tainted syzkaller #0 PREEMPT(full) [ 97.785721][ T7561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.785728][ T7561] Call Trace: [ 97.785732][ T7561] [ 97.785736][ T7561] dump_stack_lvl+0x100/0x190 [ 97.785805][ T7561] should_fail_ex.cold+0x5/0xa [ 97.785834][ T7561] _copy_to_user+0x32/0xd0 [ 97.785899][ T7561] simple_read_from_buffer+0xcb/0x170 [ 97.785930][ T7561] proc_fail_nth_read+0x1af/0x230 [ 97.785956][ T7561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.785974][ T7561] ? rw_verify_area+0xce/0x6d0 [ 97.785996][ T7561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.786013][ T7561] vfs_read+0x1e4/0xb40 [ 97.786031][ T7561] ? __pfx_vfs_read+0x10/0x10 [ 97.786046][ T7561] ? __fget_files+0x215/0x3d0 [ 97.786061][ T7561] ? __fget_files+0x21f/0x3d0 [ 97.786076][ T7561] ksys_read+0x12a/0x250 [ 97.786085][ T7561] ? __pfx_ksys_read+0x10/0x10 [ 97.786098][ T7561] do_syscall_64+0x115/0x870 [ 97.786119][ T7561] ? clear_bhb_loop+0x70/0xc0 [ 97.786133][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.786144][ T7561] RIP: 0033:0x7f6c5135e90e [ 97.786154][ T7561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.786164][ T7561] RSP: 002b:00007f6c4f5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.786176][ T7561] RAX: ffffffffffffffda RBX: 00007f6c4f5f66c0 RCX: 00007f6c5135e90e [ 97.786183][ T7561] RDX: 000000000000000f RSI: 00007f6c4f5f60a0 RDI: 0000000000000005 [ 97.786189][ T7561] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.786195][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.786201][ T7561] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 97.786215][ T7561] [ 97.850936][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.877553][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.894101][ T7462] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.900960][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.903273][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.909778][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.912085][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.033967][ T7592] validate_nla: 98 callbacks suppressed [ 98.033979][ T7592] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 98.041245][ T7592] netlink: 224 bytes leftover after parsing attributes in process `syz.1.615'. [ 98.074178][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.076780][ T34] usb 8-1: USB disconnect, device number 22 [ 98.164583][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.198495][ T7564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.202044][ T7564] block device autoloading is deprecated and will be removed. [ 98.206720][ T5085] Bluetooth: hci0: command tx timeout [ 98.300828][ T7462] veth0_vlan: entered promiscuous mode [ 98.307213][ T7462] veth1_vlan: entered promiscuous mode [ 98.325222][ T7462] veth0_macvtap: entered promiscuous mode [ 98.329555][ T7462] veth1_macvtap: entered promiscuous mode [ 98.337542][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.343275][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.367230][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.370164][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.373051][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.375989][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.571914][ T7621] FAULT_INJECTION: forcing a failure. [ 98.571914][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.575994][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.3.620 Not tainted syzkaller #0 PREEMPT(full) [ 98.576009][ T7621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.576016][ T7621] Call Trace: [ 98.576020][ T7621] [ 98.576025][ T7621] dump_stack_lvl+0x100/0x190 [ 98.576044][ T7621] should_fail_ex.cold+0x5/0xa [ 98.576059][ T7621] _copy_from_user+0x2e/0xd0 [ 98.576076][ T7621] copy_msghdr_from_user+0x9f/0x4c0 [ 98.576113][ T7621] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 98.576130][ T7621] ___sys_sendmsg+0x106/0x1e0 [ 98.576142][ T7621] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.576151][ T7621] ? __lock_acquire+0x49f/0x1a40 [ 98.576180][ T7621] ? get_pid_task+0x106/0x250 [ 98.576211][ T7621] __sys_sendmsg+0x160/0x210 [ 98.576230][ T7621] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.576251][ T7621] do_syscall_64+0x115/0x870 [ 98.576264][ T7621] ? clear_bhb_loop+0x70/0xc0 [ 98.576278][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.576288][ T7621] RIP: 0033:0x7f496599e0d9 [ 98.576298][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.576313][ T7621] RSP: 002b:00007f49667fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.576325][ T7621] RAX: ffffffffffffffda RBX: 00007f4965c25fa0 RCX: 00007f496599e0d9 [ 98.576331][ T7621] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 98.576338][ T7621] RBP: 00007f49667fb090 R08: 0000000000000000 R09: 0000000000000000 [ 98.576344][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.576350][ T7621] R13: 00007f4965c26038 R14: 00007f4965c25fa0 R15: 00007ffd13fdad78 [ 98.576364][ T7621] [ 99.194277][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 100.196766][ T7592] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 100.206718][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.209699][ T7592] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 100.286731][ T5085] Bluetooth: hci0: command tx timeout [ 101.017791][ T7592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.022277][ T7592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.025933][ T7592] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.030737][ T7592] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.034760][ T7592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.038246][ T7592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.043379][ T7592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.047875][ T7592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.050493][ T7592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.054223][ T7592] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.091288][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.096423][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.109685][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.112205][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.114054][ T7644] FAULT_INJECTION: forcing a failure. [ 101.114054][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.119953][ T7644] CPU: 1 UID: 0 PID: 7644 Comm: syz.3.628 Not tainted syzkaller #0 PREEMPT(full) [ 101.119974][ T7644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.119985][ T7644] Call Trace: [ 101.119991][ T7644] [ 101.119998][ T7644] dump_stack_lvl+0x100/0x190 [ 101.120028][ T7644] should_fail_ex.cold+0x5/0xa [ 101.120053][ T7644] _copy_to_user+0x32/0xd0 [ 101.120081][ T7644] simple_read_from_buffer+0xcb/0x170 [ 101.120104][ T7644] proc_fail_nth_read+0x1af/0x230 [ 101.120135][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.120166][ T7644] ? rw_verify_area+0xce/0x6d0 [ 101.120191][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.120220][ T7644] vfs_read+0x1e4/0xb40 [ 101.120251][ T7644] ? __pfx_vfs_read+0x10/0x10 [ 101.120277][ T7644] ? __fget_files+0x215/0x3d0 [ 101.120300][ T7644] ? __fget_files+0x21f/0x3d0 [ 101.120326][ T7644] ksys_read+0x12a/0x250 [ 101.120342][ T7644] ? __pfx_ksys_read+0x10/0x10 [ 101.120365][ T7644] do_syscall_64+0x115/0x870 [ 101.120387][ T7644] ? clear_bhb_loop+0x70/0xc0 [ 101.120415][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.120433][ T7644] RIP: 0033:0x7f496595e90e [ 101.120448][ T7644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.120464][ T7644] RSP: 002b:00007f49667fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.120482][ T7644] RAX: ffffffffffffffda RBX: 00007f49667fb6c0 RCX: 00007f496595e90e [ 101.120493][ T7644] RDX: 000000000000000f RSI: 00007f49667fb0a0 RDI: 0000000000000005 [ 101.120503][ T7644] RBP: 00007f49667fb090 R08: 0000000000000000 R09: 0000000000000000 [ 101.120514][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.120524][ T7644] R13: 00007f4965c26038 R14: 00007f4965c25fa0 R15: 00007ffd13fdad78 [ 101.120549][ T7644] [ 101.133902][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 101.133913][ T42] audit: type=1400 audit(1786971545.890:547): avc: denied { mounton } for pid=7462 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 101.466794][ T73] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 101.486639][ T34] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 101.546687][ T5730] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 101.617319][ T73] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 101.621197][ T73] usb 8-1: config 1 interface 0 has no altsetting 0 [ 101.624809][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.627451][ T73] usb 8-1: Product: syz [ 101.628813][ T73] usb 8-1: Manufacturer: syz [ 101.630365][ T73] usb 8-1: SerialNumber: syz [ 101.638235][ T34] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 101.642288][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 101.645877][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.648472][ T34] usb 7-1: Product: syz [ 101.649806][ T34] usb 7-1: Manufacturer: syz [ 101.651282][ T34] usb 7-1: SerialNumber: syz [ 101.706684][ T5730] usb 9-1: Using ep0 maxpacket: 16 [ 101.711135][ T5730] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 101.714955][ T5730] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.720958][ T5730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.723623][ T5730] usb 9-1: Product: syz [ 101.724989][ T5730] usb 9-1: Manufacturer: syz [ 101.726591][ T5730] usb 9-1: SerialNumber: syz [ 101.730149][ T5730] usb 9-1: config 0 descriptor?? [ 102.039763][ T73] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 102.057744][ C3] raw-gadget.1 gadget.2: ignoring, device is not running [ 102.061216][ C3] raw-gadget.1 gadget.2: ignoring, device is not running [ 102.065723][ C3] raw-gadget.1 gadget.2: ignoring, device is not running [ 102.068394][ C3] raw-gadget.1 gadget.2: ignoring, device is not running [ 102.073256][ T34] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 32 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 102.081232][ T34] usb 7-1: USB disconnect, device number 32 [ 102.085133][ T34] usblp1: removed [ 102.266707][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 102.276660][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.391607][ T7663] FAULT_INJECTION: forcing a failure. [ 102.391607][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 102.397155][ T7663] CPU: 2 UID: 0 PID: 7663 Comm: syz.3.632 Not tainted syzkaller #0 PREEMPT(full) [ 102.397180][ T7663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.397191][ T7663] Call Trace: [ 102.397198][ T7663] [ 102.397206][ T7663] dump_stack_lvl+0x100/0x190 [ 102.397238][ T7663] should_fail_ex.cold+0x5/0xa [ 102.397262][ T7663] should_failslab+0xc2/0x120 [ 102.397309][ T7663] __kmalloc_noprof+0xfc/0x820 [ 102.397339][ T7663] ? get_pid_task+0xfc/0x250 [ 102.397355][ T7663] ? usblp_write+0x312/0x8c0 [ 102.397401][ T7663] usblp_write+0x312/0x8c0 [ 102.397424][ T7663] ? rw_verify_area+0xce/0x6d0 [ 102.397448][ T7663] vfs_write+0x2aa/0x1050 [ 102.397458][ T7663] ? __pfx_usblp_write+0x10/0x10 [ 102.397471][ T7663] ? __pfx_vfs_write+0x10/0x10 [ 102.397480][ T7663] ? find_held_lock+0x2b/0x80 [ 102.397490][ T7663] ? __fget_files+0x215/0x3d0 [ 102.397502][ T7663] ? __fget_files+0x215/0x3d0 [ 102.397515][ T7663] ? __fget_files+0x21f/0x3d0 [ 102.397529][ T7663] ksys_write+0x12a/0x250 [ 102.397539][ T7663] ? __pfx_ksys_write+0x10/0x10 [ 102.397552][ T7663] do_syscall_64+0x115/0x870 [ 102.397566][ T7663] ? clear_bhb_loop+0x70/0xc0 [ 102.397580][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.397591][ T7663] RIP: 0033:0x7f496599e0d9 [ 102.397601][ T7663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.397612][ T7663] RSP: 002b:00007f49667da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.397623][ T7663] RAX: ffffffffffffffda RBX: 00007f4965c26090 RCX: 00007f496599e0d9 [ 102.397629][ T7663] RDX: 0000000000000002 RSI: 00002000000007c0 RDI: 0000000000000004 [ 102.397636][ T7663] RBP: 00007f49667da090 R08: 0000000000000000 R09: 0000000000000000 [ 102.397642][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.397648][ T7663] R13: 00007f4965c26128 R14: 00007f4965c26090 R15: 00007ffd13fdad78 [ 102.397661][ T7663] [ 102.417401][ T29] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 102.489981][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.493241][ T29] usb 6-1: Product: syz [ 102.494929][ T29] usb 6-1: Manufacturer: syz [ 102.505028][ T29] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input15 [ 102.510422][ T42] audit: type=1400 audit(1786971547.270:548): avc: denied { read } for pid=5121 comm="acpid" name="mouse2" dev="devtmpfs" ino=3144 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.517553][ T42] audit: type=1400 audit(1786971547.270:549): avc: denied { open } for pid=5121 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3144 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.527092][ T42] audit: type=1400 audit(1786971547.270:550): avc: denied { ioctl } for pid=5121 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3144 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.701466][ T7661] FAULT_INJECTION: forcing a failure. [ 102.701466][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 102.706969][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.1.635 Not tainted syzkaller #0 PREEMPT(full) [ 102.706993][ T7661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.707003][ T7661] Call Trace: [ 102.707010][ T7661] [ 102.707022][ T7661] dump_stack_lvl+0x100/0x190 [ 102.707052][ T7661] should_fail_ex.cold+0x5/0xa [ 102.707072][ T7661] should_failslab+0xc2/0x120 [ 102.707097][ T7661] kmem_cache_alloc_noprof+0x91/0x6a0 [ 102.707120][ T7661] ? do_getname+0x35/0x390 [ 102.707172][ T7661] do_getname+0x35/0x390 [ 102.707197][ T7661] do_sys_openat2+0xc7/0x1e0 [ 102.707218][ T7661] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.707240][ T7661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.707263][ T7661] ? __fget_files+0x21f/0x3d0 [ 102.707286][ T7661] __x64_sys_openat+0x12d/0x210 [ 102.707309][ T7661] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.707328][ T7661] ? ksys_write+0x1ac/0x250 [ 102.707350][ T7661] do_syscall_64+0x115/0x870 [ 102.707375][ T7661] ? clear_bhb_loop+0x70/0xc0 [ 102.707396][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.707413][ T7661] RIP: 0033:0x7f8a72d9e0d9 [ 102.707429][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.707444][ T7661] RSP: 002b:00007f8a73bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.707461][ T7661] RAX: ffffffffffffffda RBX: 00007f8a73025fa0 RCX: 00007f8a72d9e0d9 [ 102.707472][ T7661] RDX: 00000000000c0000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 102.707483][ T7661] RBP: 00007f8a73bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 102.707494][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.707504][ T7661] R13: 00007f8a73026038 R14: 00007f8a73025fa0 R15: 00007ffe26944358 [ 102.707528][ T7661] [ 102.709161][ T29] usb 6-1: USB disconnect, device number 20 [ 102.813443][ T7666] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 102.820819][ T7666] x_tables: duplicate underflow at hook 2 [ 103.076963][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.077113][ T5740] Bluetooth: hci0: command 0x0419 tx timeout [ 103.077196][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.096734][ T6150] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 103.245047][ T5740] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 103.248286][ T6150] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 103.254464][ T6150] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.257135][ T6150] usb 7-1: Product: syz [ 103.258543][ T6150] usb 7-1: Manufacturer: syz [ 103.268428][ T6150] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input16 [ 103.381288][ T42] audit: type=1400 audit(1786971548.140:551): avc: denied { read } for pid=7677 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.488388][ T7668] IPVS: lc: FWM 3 0x00000003 - no destination available [ 103.489407][ T29] IPVS: starting estimator thread 0... [ 103.494258][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 103.558135][ T42] audit: type=1400 audit(1786971548.320:552): avc: denied { create } for pid=7685 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.566216][ T42] audit: type=1400 audit(1786971548.320:553): avc: denied { read } for pid=7685 comm="syz.1.643" path="socket:[23607]" dev="sockfs" ino=23607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.576721][ T7682] IPVS: using max 44 ests per chain, 105600 per kthread [ 103.581358][ T42] audit: type=1400 audit(1786971548.320:554): avc: denied { read } for pid=7685 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.610800][ T42] audit: type=1400 audit(1786971548.370:555): avc: denied { write } for pid=7685 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.658813][ T6150] usb 7-1: USB disconnect, device number 33 [ 103.842791][ T7700] xt_l2tp: missing protocol rule (udp|l2tpip) [ 103.901222][ T42] audit: type=1400 audit(1786971548.660:556): avc: denied { write } for pid=7701 comm="syz.1.649" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.901343][ T7702] random: crng reseeded on system resumption [ 103.955332][ T7704] FAULT_INJECTION: forcing a failure. [ 103.955332][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.959678][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.1.650 Not tainted syzkaller #0 PREEMPT(full) [ 103.959694][ T7704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.959701][ T7704] Call Trace: [ 103.959706][ T7704] [ 103.959721][ T7704] dump_stack_lvl+0x100/0x190 [ 103.959745][ T7704] should_fail_ex.cold+0x5/0xa [ 103.959760][ T7704] _copy_from_iter+0x1f4/0x1690 [ 103.959781][ T7704] ? __pfx__copy_from_iter+0x10/0x10 [ 103.959798][ T7704] ? find_held_lock+0x2b/0x80 [ 103.959809][ T7704] ? rawv6_sendmsg+0xb3c/0x4420 [ 103.959838][ T7704] ? rawv6_sendmsg+0xb3c/0x4420 [ 103.959850][ T7704] rawv6_sendmsg+0x244a/0x4420 [ 103.959859][ T7704] ? find_held_lock+0x2b/0x80 [ 103.959874][ T7704] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 103.959886][ T7704] ? __pfx_avc_has_perm+0x10/0x10 [ 103.959918][ T7704] ? __pfx_sock_has_perm+0x10/0x10 [ 103.959941][ T7704] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 103.959951][ T7704] ? inet_sendmsg+0x11c/0x140 [ 103.959973][ T7704] inet_sendmsg+0x11c/0x140 [ 103.959990][ T7704] sock_write_iter+0x4ea/0x5b0 [ 103.960001][ T7704] ? __pfx_inet_sendmsg+0x10/0x10 [ 103.960016][ T7704] ? __pfx_sock_write_iter+0x10/0x10 [ 103.960030][ T7704] ? bpf_lsm_file_permission+0x9/0x10 [ 103.960054][ T7704] ? security_file_permission+0x76/0x210 [ 103.960082][ T7704] ? rw_verify_area+0xce/0x6d0 [ 103.960100][ T7704] vfs_write+0x6ac/0x1050 [ 103.960110][ T7704] ? __pfx_sock_write_iter+0x10/0x10 [ 103.960121][ T7704] ? __pfx_vfs_write+0x10/0x10 [ 103.960130][ T7704] ? find_held_lock+0x2b/0x80 [ 103.960147][ T7704] ksys_write+0x1f8/0x250 [ 103.960157][ T7704] ? __pfx_ksys_write+0x10/0x10 [ 103.960170][ T7704] do_syscall_64+0x115/0x870 [ 103.960183][ T7704] ? clear_bhb_loop+0x70/0xc0 [ 103.960196][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.960207][ T7704] RIP: 0033:0x7f8a72d9e0d9 [ 103.960217][ T7704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.960229][ T7704] RSP: 002b:00007f8a73bb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.960240][ T7704] RAX: ffffffffffffffda RBX: 00007f8a73025fa0 RCX: 00007f8a72d9e0d9 [ 103.960246][ T7704] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 103.960253][ T7704] RBP: 00007f8a73bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 103.960259][ T7704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.960265][ T7704] R13: 00007f8a73026038 R14: 00007f8a73025fa0 R15: 00007ffe26944358 [ 103.960278][ T7704] [ 104.236191][ T7715] FAULT_INJECTION: forcing a failure. [ 104.236191][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.237430][ T29] usb 8-1: USB disconnect, device number 23 [ 104.241028][ T7715] CPU: 2 UID: 0 PID: 7715 Comm: syz.2.654 Not tainted syzkaller #0 PREEMPT(full) [ 104.241043][ T7715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.241050][ T7715] Call Trace: [ 104.241054][ T7715] [ 104.241058][ T7715] dump_stack_lvl+0x100/0x190 [ 104.241079][ T7715] should_fail_ex.cold+0x5/0xa [ 104.241095][ T7715] _copy_to_user+0x32/0xd0 [ 104.241113][ T7715] simple_read_from_buffer+0xcb/0x170 [ 104.241127][ T7715] proc_fail_nth_read+0x1af/0x230 [ 104.241145][ T7715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.241163][ T7715] ? rw_verify_area+0xce/0x6d0 [ 104.241179][ T7715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.241196][ T7715] vfs_read+0x1e4/0xb40 [ 104.241214][ T7715] ? __pfx_vfs_read+0x10/0x10 [ 104.241230][ T7715] ? __fget_files+0x215/0x3d0 [ 104.241244][ T7715] ? __fget_files+0x21f/0x3d0 [ 104.241259][ T7715] ksys_read+0x12a/0x250 [ 104.241268][ T7715] ? __pfx_ksys_read+0x10/0x10 [ 104.241281][ T7715] do_syscall_64+0x115/0x870 [ 104.241294][ T7715] ? clear_bhb_loop+0x70/0xc0 [ 104.241307][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.241318][ T7715] RIP: 0033:0x7f6c5135e90e [ 104.241328][ T7715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.241339][ T7715] RSP: 002b:00007f6c4f5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.241355][ T7715] RAX: ffffffffffffffda RBX: 00007f6c4f5f66c0 RCX: 00007f6c5135e90e [ 104.241362][ T7715] RDX: 000000000000000f RSI: 00007f6c4f5f60a0 RDI: 0000000000000003 [ 104.241368][ T7715] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.241374][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.241381][ T7715] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 104.241394][ T7715] [ 104.308510][ T29] usblp0: removed [ 104.338343][ T848] usb 9-1: USB disconnect, device number 2 [ 104.340160][ T7719] program syz.2.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.386964][ T34] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 104.451383][ T7732] syzkaller1: entered promiscuous mode [ 104.454287][ T7732] syzkaller1: entered allmulticast mode [ 104.475003][ T7732] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.537368][ T34] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 104.543978][ T34] usb 6-1: config 0 has no interfaces? [ 104.546468][ T7741] FAULT_INJECTION: forcing a failure. [ 104.546468][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 104.548254][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.551530][ T7741] CPU: 2 UID: 0 PID: 7741 Comm: syz.2.664 Not tainted syzkaller #0 PREEMPT(full) [ 104.551545][ T7741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.551552][ T7741] Call Trace: [ 104.551556][ T7741] [ 104.551560][ T7741] dump_stack_lvl+0x100/0x190 [ 104.551585][ T7741] should_fail_ex.cold+0x5/0xa [ 104.551607][ T7741] should_failslab+0xc2/0x120 [ 104.551631][ T7741] __kmalloc_noprof+0xfc/0x820 [ 104.551650][ T7741] ? rcu_is_watching+0x12/0xc0 [ 104.551670][ T7741] ? tomoyo_realpath_from_path+0xb6/0x690 [ 104.551697][ T7741] tomoyo_realpath_from_path+0xb6/0x690 [ 104.551711][ T7741] tomoyo_path_number_perm+0x23c/0x580 [ 104.551726][ T7741] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.551742][ T7741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.551770][ T7741] ? find_held_lock+0x2b/0x80 [ 104.551780][ T7741] ? __fget_files+0x215/0x3d0 [ 104.551792][ T7741] ? hook_file_ioctl_common+0x140/0x440 [ 104.551804][ T7741] ? __fget_files+0x215/0x3d0 [ 104.551819][ T7741] ? __fget_files+0x21f/0x3d0 [ 104.551832][ T7741] security_file_ioctl+0xd3/0x230 [ 104.551850][ T7741] __x64_sys_ioctl+0xb7/0x210 [ 104.551867][ T7741] do_syscall_64+0x115/0x870 [ 104.551880][ T7741] ? clear_bhb_loop+0x70/0xc0 [ 104.551894][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.551905][ T7741] RIP: 0033:0x7f6c5139e0d9 [ 104.551915][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.551925][ T7741] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.551936][ T7741] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 104.551943][ T7741] RDX: 0000200000000180 RSI: 000000008028640c RDI: 0000000000000003 [ 104.551949][ T7741] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.551955][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.551961][ T7741] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 104.551975][ T7741] [ 104.551980][ T7741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.553535][ T34] usb 6-1: Product: syz [ 104.632471][ T34] usb 6-1: Manufacturer: syz [ 104.633904][ T34] usb 6-1: SerialNumber: syz [ 104.640979][ T34] usb 6-1: config 0 descriptor?? [ 104.733987][ T7752] FAULT_INJECTION: forcing a failure. [ 104.733987][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 104.740989][ T7752] CPU: 2 UID: 0 PID: 7752 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 104.741013][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.741023][ T7752] Call Trace: [ 104.741029][ T7752] [ 104.741036][ T7752] dump_stack_lvl+0x100/0x190 [ 104.741066][ T7752] should_fail_ex.cold+0x5/0xa [ 104.741087][ T7752] ? __pfx_write_leasetime+0x10/0x10 [ 104.741155][ T7752] should_failslab+0xc2/0x120 [ 104.741178][ T7752] ? __pfx_write_leasetime+0x10/0x10 [ 104.741202][ T7752] __kmalloc_cache_noprof+0x91/0x6c0 [ 104.741220][ T7752] ? simple_transaction_get+0x82/0x1a0 [ 104.741242][ T7752] ? __pfx_write_leasetime+0x10/0x10 [ 104.741265][ T7752] simple_transaction_get+0x82/0x1a0 [ 104.741285][ T7752] nfsctl_transaction_write+0xcd/0x1a0 [ 104.741310][ T7752] vfs_write+0x2aa/0x1050 [ 104.741332][ T7752] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 104.741358][ T7752] ? __pfx_vfs_write+0x10/0x10 [ 104.741372][ T7752] ? __fget_files+0x215/0x3d0 [ 104.741396][ T7752] ? __fget_files+0x21f/0x3d0 [ 104.741419][ T7752] ksys_write+0x12a/0x250 [ 104.741434][ T7752] ? __pfx_ksys_write+0x10/0x10 [ 104.741456][ T7752] do_syscall_64+0x115/0x870 [ 104.741475][ T7752] ? clear_bhb_loop+0x70/0xc0 [ 104.741495][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.741512][ T7752] RIP: 0033:0x7f6c5139e0d9 [ 104.741526][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.741542][ T7752] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.741560][ T7752] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 104.741570][ T7752] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 104.741580][ T7752] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.741590][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.741599][ T7752] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 104.741621][ T7752] [ 104.746621][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 104.946668][ T10] usb 9-1: device descriptor read/64, error -71 [ 105.156686][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.160014][ T5740] Bluetooth: hci0: command 0x0419 tx timeout [ 105.163090][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.186693][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 105.317226][ T10] usb 9-1: device descriptor read/64, error -71 [ 105.367090][ T7789] FAULT_INJECTION: forcing a failure. [ 105.367090][ T7789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.371210][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.2.682 Not tainted syzkaller #0 PREEMPT(full) [ 105.371238][ T7789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.371246][ T7789] Call Trace: [ 105.371250][ T7789] [ 105.371255][ T7789] dump_stack_lvl+0x100/0x190 [ 105.371275][ T7789] should_fail_ex.cold+0x5/0xa [ 105.371290][ T7789] _copy_from_user+0x2e/0xd0 [ 105.371308][ T7789] copy_msghdr_from_user+0x9f/0x4c0 [ 105.371322][ T7789] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.371339][ T7789] ___sys_sendmsg+0x106/0x1e0 [ 105.371350][ T7789] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.371360][ T7789] ? __lock_acquire+0x49f/0x1a40 [ 105.371375][ T7789] ? get_pid_task+0x106/0x250 [ 105.371404][ T7789] __sys_sendmsg+0x160/0x210 [ 105.371420][ T7789] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.371441][ T7789] do_syscall_64+0x115/0x870 [ 105.371453][ T7789] ? clear_bhb_loop+0x70/0xc0 [ 105.371467][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.371477][ T7789] RIP: 0033:0x7f6c5139e0d9 [ 105.371487][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.371498][ T7789] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.371509][ T7789] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 105.371516][ T7789] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 105.371522][ T7789] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 105.371528][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.371534][ T7789] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 105.371547][ T7789] [ 105.433327][ T10] usb usb9-port1: attempt power cycle [ 105.596251][ T7797] misc userio: No port type given on /dev/userio [ 105.668863][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 105.767759][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 105.787269][ T10] usb 9-1: device descriptor read/8, error -71 [ 106.026827][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 106.047314][ T10] usb 9-1: device descriptor read/8, error -71 [ 106.156927][ T10] usb usb9-port1: unable to enumerate USB device [ 106.695733][ T7839] FAULT_INJECTION: forcing a failure. [ 106.695733][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 106.699953][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.2.691 Not tainted syzkaller #0 PREEMPT(full) [ 106.699977][ T7839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.699988][ T7839] Call Trace: [ 106.699995][ T7839] [ 106.700002][ T7839] dump_stack_lvl+0x100/0x190 [ 106.700033][ T7839] should_fail_ex.cold+0x5/0xa [ 106.700056][ T7839] should_failslab+0xc2/0x120 [ 106.700082][ T7839] kmem_cache_alloc_noprof+0x91/0x6a0 [ 106.700105][ T7839] ? do_getname+0x35/0x390 [ 106.700134][ T7839] do_getname+0x35/0x390 [ 106.700159][ T7839] do_sys_openat2+0xc7/0x1e0 [ 106.700182][ T7839] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.700205][ T7839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.700228][ T7839] ? __fget_files+0x21f/0x3d0 [ 106.700252][ T7839] __x64_sys_openat+0x12d/0x210 [ 106.700275][ T7839] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.700297][ T7839] ? ksys_write+0x1ac/0x250 [ 106.700328][ T7839] do_syscall_64+0x115/0x870 [ 106.700347][ T7839] ? clear_bhb_loop+0x70/0xc0 [ 106.700369][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.700387][ T7839] RIP: 0033:0x7f6c5139e0d9 [ 106.700402][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.700419][ T7839] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.700436][ T7839] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 106.700447][ T7839] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 106.700458][ T7839] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.700468][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.700479][ T7839] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 106.700520][ T7839] [ 107.028723][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 107.028740][ T42] audit: type=1400 audit(1786971551.790:578): avc: denied { write } for pid=7853 comm="syz.2.698" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.162788][ T34] usb 6-1: USB disconnect, device number 21 [ 107.236754][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.246758][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.521597][ T42] audit: type=1400 audit(1786971552.280:579): avc: denied { ioctl } for pid=7881 comm="syz.2.708" path="socket:[23807]" dev="sockfs" ino=23807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.916727][ T848] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 108.077530][ T848] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.082189][ T848] usb 9-1: config 0 has no interfaces? [ 108.087016][ T848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.096657][ T848] usb 9-1: Product: syz [ 108.098403][ T848] usb 9-1: Manufacturer: syz [ 108.100373][ T848] usb 9-1: SerialNumber: syz [ 108.107109][ T848] usb 9-1: config 0 descriptor?? [ 108.342022][ T42] audit: type=1400 audit(1786971553.100:580): avc: denied { associate } for pid=7900 comm="syz.2.715" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.426654][ T848] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 108.576713][ T73] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 108.577336][ T848] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 108.583390][ T848] usb 6-1: config 1 interface 0 has no altsetting 0 [ 108.587556][ T848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.590147][ T848] usb 6-1: Product: syz [ 108.591483][ T848] usb 6-1: Manufacturer: syz [ 108.592988][ T848] usb 6-1: SerialNumber: syz [ 108.727526][ T73] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 108.731536][ T73] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 108.734086][ T73] usb 7-1: config 1 has no interface number 0 [ 108.736015][ T73] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 108.739059][ T73] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 108.742295][ T73] usb 7-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 108.747448][ T73] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.750287][ T73] usb 7-1: Product: syz [ 108.751987][ T73] usb 7-1: Manufacturer: syz [ 108.754388][ T73] usb 7-1: SerialNumber: syz [ 108.759526][ T7901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 108.762066][ T7901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 108.766524][ T73] usb 7-1: Expected 3 endpoints, found: 2 [ 108.965780][ T5803] usb 7-1: USB disconnect, device number 34 [ 108.979065][ T42] audit: type=1400 audit(1786971553.740:581): avc: denied { write } for pid=7905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.008208][ T848] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 109.016023][ T848] usb 6-1: USB disconnect, device number 22 [ 109.021270][ T848] usblp0: removed [ 109.037521][ T42] audit: type=1400 audit(1786971553.800:582): avc: denied { write } for pid=7908 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.160575][ T42] audit: type=1400 audit(1786971553.920:583): avc: denied { write } for pid=7912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.199379][ T7918] FAULT_INJECTION: forcing a failure. [ 109.199379][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 109.203248][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.2.717 Not tainted syzkaller #0 PREEMPT(full) [ 109.203262][ T7918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.203269][ T7918] Call Trace: [ 109.203274][ T7918] [ 109.203278][ T7918] dump_stack_lvl+0x100/0x190 [ 109.203299][ T7918] should_fail_ex.cold+0x5/0xa [ 109.203314][ T7918] should_failslab+0xc2/0x120 [ 109.203330][ T7918] kmem_cache_alloc_noprof+0x91/0x6a0 [ 109.203343][ T7918] ? __pfx_map_id_range_down+0x10/0x10 [ 109.203372][ T7918] ? security_inode_alloc+0x3b/0x2c0 [ 109.203392][ T7918] security_inode_alloc+0x3b/0x2c0 [ 109.203407][ T7918] inode_init_always_gfp+0xc77/0xfb0 [ 109.203423][ T7918] alloc_inode+0x8e/0x250 [ 109.203438][ T7918] sock_alloc+0x44/0x280 [ 109.203462][ T7918] do_accept+0xf9/0x530 [ 109.203474][ T7918] ? do_raw_spin_lock+0x128/0x260 [ 109.203490][ T7918] ? __pfx_do_accept+0x10/0x10 [ 109.203510][ T7918] __sys_accept4+0x108/0x200 [ 109.203522][ T7918] ? __pfx___sys_accept4+0x10/0x10 [ 109.203535][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 109.203547][ T7918] __x64_sys_accept4+0x96/0x100 [ 109.203559][ T7918] ? lockdep_hardirqs_on+0x78/0x100 [ 109.203572][ T7918] do_syscall_64+0x115/0x870 [ 109.203584][ T7918] ? clear_bhb_loop+0x70/0xc0 [ 109.203597][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.203608][ T7918] RIP: 0033:0x7f6c5139e0d9 [ 109.203618][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.203628][ T7918] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 109.203639][ T7918] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 109.203645][ T7918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 109.203651][ T7918] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.203657][ T7918] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 109.203663][ T7918] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 109.203676][ T7918] [ 109.271271][ T42] audit: type=1400 audit(1786971553.960:584): avc: denied { write } for pid=7916 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.794894][ T42] audit: type=1400 audit(1786971554.550:585): avc: denied { write } for pid=7931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.851639][ T42] audit: type=1400 audit(1786971554.610:586): avc: denied { write } for pid=7937 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.206805][ T5730] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 110.297445][ T7947] syzkaller0: entered promiscuous mode [ 110.299832][ T7947] syzkaller0: entered allmulticast mode [ 110.322937][ T42] audit: type=1400 audit(1786971555.080:587): avc: denied { write } for pid=7948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.366677][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 110.369517][ T5730] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.374545][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.381112][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.384487][ T5730] usb 6-1: Product: syz [ 110.386298][ T5730] usb 6-1: Manufacturer: syz [ 110.388473][ T5730] usb 6-1: SerialNumber: syz [ 110.406665][ T5730] usb 6-1: config 0 descriptor?? [ 110.430830][ T7955] tipc: Started in network mode [ 110.432410][ T7955] tipc: Node identity 2000004, cluster identity 4711 [ 110.434465][ T7955] tipc: Node number set to 33554436 [ 110.555903][ T5938] usb 9-1: USB disconnect, device number 7 [ 110.608945][ T7960] FAULT_INJECTION: forcing a failure. [ 110.608945][ T7960] name failslab, interval 1, probability 0, space 0, times 0 [ 110.612846][ T7960] CPU: 3 UID: 0 PID: 7960 Comm: syz.4.729 Not tainted syzkaller #0 PREEMPT(full) [ 110.612861][ T7960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.612872][ T7960] Call Trace: [ 110.612876][ T7960] [ 110.612881][ T7960] dump_stack_lvl+0x100/0x190 [ 110.612943][ T7960] should_fail_ex.cold+0x5/0xa [ 110.612972][ T7960] ? __pfx_write_leasetime+0x10/0x10 [ 110.613011][ T7960] should_failslab+0xc2/0x120 [ 110.613045][ T7960] ? __pfx_write_leasetime+0x10/0x10 [ 110.613061][ T7960] __kmalloc_cache_noprof+0x91/0x6c0 [ 110.613079][ T7960] ? simple_transaction_get+0x82/0x1a0 [ 110.613100][ T7960] ? __pfx_write_leasetime+0x10/0x10 [ 110.613115][ T7960] simple_transaction_get+0x82/0x1a0 [ 110.613128][ T7960] nfsctl_transaction_write+0xcd/0x1a0 [ 110.613146][ T7960] vfs_write+0x2aa/0x1050 [ 110.613161][ T7960] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 110.613178][ T7960] ? __pfx_vfs_write+0x10/0x10 [ 110.613187][ T7960] ? __fget_files+0x215/0x3d0 [ 110.613202][ T7960] ? __fget_files+0x21f/0x3d0 [ 110.613217][ T7960] ksys_write+0x12a/0x250 [ 110.613226][ T7960] ? __pfx_ksys_write+0x10/0x10 [ 110.613240][ T7960] do_syscall_64+0x115/0x870 [ 110.613260][ T7960] ? clear_bhb_loop+0x70/0xc0 [ 110.613274][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.613285][ T7960] RIP: 0033:0x7ff92559e0d9 [ 110.613295][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.613305][ T7960] RSP: 002b:00007ff92652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.613316][ T7960] RAX: ffffffffffffffda RBX: 00007ff925825fa0 RCX: 00007ff92559e0d9 [ 110.613323][ T7960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 110.613329][ T7960] RBP: 00007ff92652f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.613335][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.613341][ T7960] R13: 00007ff925826038 R14: 00007ff925825fa0 R15: 00007ffe849a2ee8 [ 110.613354][ T7960] [ 110.625122][ T7956] FAULT_INJECTION: forcing a failure. [ 110.625122][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 110.687942][ T7956] CPU: 2 UID: 0 PID: 7956 Comm: syz.2.727 Not tainted syzkaller #0 PREEMPT(full) [ 110.687968][ T7956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.687987][ T7956] Call Trace: [ 110.687994][ T7956] [ 110.688001][ T7956] dump_stack_lvl+0x100/0x190 [ 110.688031][ T7956] should_fail_ex.cold+0x5/0xa [ 110.688054][ T7956] should_failslab+0xc2/0x120 [ 110.688080][ T7956] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 110.688102][ T7956] ? is_bpf_text_address+0x94/0x1a0 [ 110.688154][ T7956] ? __alloc_skb+0x140/0x710 [ 110.688188][ T7956] __alloc_skb+0x140/0x710 [ 110.688211][ T7956] ? __pfx___alloc_skb+0x10/0x10 [ 110.688238][ T7956] tipc_buf_acquire+0x26/0xe0 [ 110.688265][ T7956] tipc_msg_build+0x112/0x1100 [ 110.688290][ T7956] ? __pfx_tipc_msg_build+0x10/0x10 [ 110.688319][ T7956] tipc_send_group_bcast+0x736/0xa20 [ 110.688353][ T7956] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 110.688375][ T7956] ? down_write+0x146/0x1f0 [ 110.688401][ T7956] ? __pfx_woken_wake_function+0x10/0x10 [ 110.688448][ T7956] ? avc_has_perm_noaudit+0x145/0x3b0 [ 110.688498][ T7956] __tipc_sendmsg+0x4a3/0x1ab0 [ 110.688522][ T7956] ? __pfx___tipc_sendmsg+0x10/0x10 [ 110.688539][ T7956] ? __lock_acquire+0x49f/0x1a40 [ 110.688570][ T7956] ? __pfx_sock_has_perm+0x10/0x10 [ 110.688607][ T7956] ? __local_bh_enable_ip+0x9e/0x120 [ 110.688648][ T7956] tipc_sendmsg+0x4f/0x70 [ 110.688665][ T7956] ____sys_sendmsg+0xa4d/0xbe0 [ 110.688681][ T7956] ? __pfx_tipc_sendmsg+0x10/0x10 [ 110.688697][ T7956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.688717][ T7956] ? __pfx__kstrtoull+0x10/0x10 [ 110.688749][ T7956] ___sys_sendmsg+0x190/0x1e0 [ 110.688767][ T7956] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.688794][ T7956] ? find_held_lock+0x2b/0x80 [ 110.688823][ T7956] __sys_sendmmsg+0x20c/0x440 [ 110.688847][ T7956] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.688867][ T7956] ? ksys_write+0x190/0x250 [ 110.688899][ T7956] ? fput+0x79/0x100 [ 110.688920][ T7956] ? ksys_write+0x1ac/0x250 [ 110.688934][ T7956] ? __pfx_ksys_write+0x10/0x10 [ 110.688952][ T7956] __x64_sys_sendmmsg+0x9c/0x100 [ 110.688978][ T7956] ? lockdep_hardirqs_on+0x78/0x100 [ 110.688996][ T7956] do_syscall_64+0x115/0x870 [ 110.689027][ T7956] ? clear_bhb_loop+0x70/0xc0 [ 110.689047][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.689064][ T7956] RIP: 0033:0x7f6c5139e0d9 [ 110.689078][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.689093][ T7956] RSP: 002b:00007f6c4f5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.689110][ T7956] RAX: ffffffffffffffda RBX: 00007f6c51626090 RCX: 00007f6c5139e0d9 [ 110.689120][ T7956] RDX: 04000000000000e4 RSI: 0000200000003240 RDI: 0000000000000006 [ 110.689130][ T7956] RBP: 00007f6c4f5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 110.689139][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.689148][ T7956] R13: 00007f6c51626128 R14: 00007f6c51626090 R15: 00007ffebf46afd8 [ 110.689170][ T7956] [ 110.877995][ T5740] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 111.123443][ T7977] netlink: 144 bytes leftover after parsing attributes in process `syz.2.735'. [ 111.206689][ T5938] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 111.359533][ T5938] usb 9-1: unable to get BOS descriptor or descriptor too short [ 111.362942][ T5938] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.367818][ T5938] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 111.373849][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.377385][ T5938] usb 9-1: Product: syz [ 111.379143][ T5938] usb 9-1: Manufacturer: syz [ 111.381141][ T5938] usb 9-1: SerialNumber: syz [ 111.408761][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.742'. [ 111.588517][ T8003] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 111.597504][ T5938] cdc_ncm 9-1:1.0: bind() failure [ 111.601411][ T5938] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 111.603624][ T5938] cdc_ncm 9-1:1.1: bind() failure [ 111.609664][ T5938] usb 9-1: USB disconnect, device number 8 [ 111.640335][ T8005] FAULT_INJECTION: forcing a failure. [ 111.640335][ T8005] name failslab, interval 1, probability 0, space 0, times 0 [ 111.645125][ T8005] CPU: 2 UID: 0 PID: 8005 Comm: syz.2.747 Not tainted syzkaller #0 PREEMPT(full) [ 111.645141][ T8005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.645148][ T8005] Call Trace: [ 111.645153][ T8005] [ 111.645158][ T8005] dump_stack_lvl+0x100/0x190 [ 111.645178][ T8005] should_fail_ex.cold+0x5/0xa [ 111.645194][ T8005] should_failslab+0xc2/0x120 [ 111.645209][ T8005] __kmalloc_noprof+0xfc/0x820 [ 111.645223][ T8005] ? __pfx_dynamic_dname+0x10/0x10 [ 111.645241][ T8005] ? tomoyo_encode2+0xfb/0x3c0 [ 111.645265][ T8005] tomoyo_encode2+0xfb/0x3c0 [ 111.645277][ T8005] tomoyo_encode+0x29/0x50 [ 111.645286][ T8005] tomoyo_realpath_from_path+0x18c/0x690 [ 111.645300][ T8005] tomoyo_path_number_perm+0x23c/0x580 [ 111.645315][ T8005] ? tomoyo_path_number_perm+0x22e/0x580 [ 111.645331][ T8005] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 111.645359][ T8005] ? find_held_lock+0x2b/0x80 [ 111.645370][ T8005] ? __fget_files+0x215/0x3d0 [ 111.645381][ T8005] ? hook_file_ioctl_common+0x140/0x440 [ 111.645393][ T8005] ? __fget_files+0x215/0x3d0 [ 111.645406][ T8005] ? __fget_files+0x21f/0x3d0 [ 111.645419][ T8005] security_file_ioctl+0xd3/0x230 [ 111.645449][ T8005] __x64_sys_ioctl+0xb7/0x210 [ 111.645467][ T8005] do_syscall_64+0x115/0x870 [ 111.645480][ T8005] ? clear_bhb_loop+0x70/0xc0 [ 111.645493][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.645504][ T8005] RIP: 0033:0x7f6c5139e0d9 [ 111.645514][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.645525][ T8005] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.645536][ T8005] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 111.645542][ T8005] RDX: 0000200000000840 RSI: 000000004048aec9 RDI: 0000000000000004 [ 111.645549][ T8005] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.645555][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.645561][ T8005] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 111.645574][ T8005] [ 111.645587][ T8005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.213857][ T8024] FAULT_INJECTION: forcing a failure. [ 112.213857][ T8024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.217979][ T8024] CPU: 2 UID: 0 PID: 8024 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 112.217994][ T8024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.218002][ T8024] Call Trace: [ 112.218006][ T8024] [ 112.218011][ T8024] dump_stack_lvl+0x100/0x190 [ 112.218030][ T8024] should_fail_ex.cold+0x5/0xa [ 112.218044][ T8024] _copy_from_iter+0x1f4/0x1690 [ 112.218074][ T8024] ? __pfx__copy_from_iter+0x10/0x10 [ 112.218090][ T8024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.218112][ T8024] copy_page_from_iter+0x238/0x300 [ 112.218129][ T8024] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 112.218165][ T8024] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 112.218176][ T8024] ? unwind_get_return_address+0x59/0xa0 [ 112.218189][ T8024] ? arch_stack_walk+0xa6/0xf0 [ 112.218213][ T8024] ? _kstrtoull+0x13c/0x1f0 [ 112.218224][ T8024] ? __pfx__kstrtoull+0x10/0x10 [ 112.218236][ T8024] tun_get_user+0x16d6/0x3c20 [ 112.218253][ T8024] ? __pfx_tun_get_user+0x10/0x10 [ 112.218265][ T8024] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 112.218291][ T8024] ? find_held_lock+0x2b/0x80 [ 112.218302][ T8024] ? tun_get+0x191/0x370 [ 112.218314][ T8024] ? tun_get+0x191/0x370 [ 112.218327][ T8024] tun_chr_write_iter+0xdc/0x200 [ 112.218340][ T8024] vfs_write+0x6ac/0x1050 [ 112.218351][ T8024] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.218364][ T8024] ? __pfx_vfs_write+0x10/0x10 [ 112.218372][ T8024] ? find_held_lock+0x2b/0x80 [ 112.218390][ T8024] ksys_write+0x12a/0x250 [ 112.218399][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 112.218412][ T8024] do_syscall_64+0x115/0x870 [ 112.218425][ T8024] ? clear_bhb_loop+0x70/0xc0 [ 112.218438][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.218449][ T8024] RIP: 0033:0x7ff92555e90e [ 112.218458][ T8024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.218469][ T8024] RSP: 002b:00007ff92652efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.218480][ T8024] RAX: ffffffffffffffda RBX: 00007ff92652f6c0 RCX: 00007ff92555e90e [ 112.218487][ T8024] RDX: 000000000000002e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 112.218493][ T8024] RBP: 00007ff92652f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.218499][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.218506][ T8024] R13: 00007ff925826038 R14: 00007ff925825fa0 R15: 00007ffe849a2ee8 [ 112.218519][ T8024] [ 112.278069][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 112.278089][ T42] audit: type=1400 audit(1786971557.030:598): avc: denied { create } for pid=8027 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.315177][ T42] audit: type=1400 audit(1786971557.040:599): avc: denied { setopt } for pid=8027 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.321930][ T42] audit: type=1400 audit(1786971557.040:600): avc: denied { connect } for pid=8027 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.546621][ T5938] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 112.696623][ T5938] usb 9-1: Using ep0 maxpacket: 16 [ 112.698932][ T5938] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.702496][ T5938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.707282][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.709846][ T5938] usb 9-1: Product: syz [ 112.711130][ T5938] usb 9-1: Manufacturer: syz [ 112.712527][ T5938] usb 9-1: SerialNumber: syz [ 112.715451][ T5938] usb 9-1: config 0 descriptor?? [ 112.720151][ T5938] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.723005][ T5938] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 112.985830][ T5730] usb 6-1: USB disconnect, device number 23 [ 113.081607][ T42] audit: type=1400 audit(1786971557.840:601): avc: denied { read } for pid=8043 comm="syz.1.762" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.088687][ T42] audit: type=1400 audit(1786971557.840:602): avc: denied { open } for pid=8043 comm="syz.1.762" path="/131/config" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.097724][ T42] audit: type=1400 audit(1786971557.840:603): avc: denied { read } for pid=8043 comm="syz.1.762" name="g1" dev="configfs" ino=9886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.113889][ T42] audit: type=1800 audit(1786971557.840:604): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.762" name="use" dev="configfs" ino=23995 res=0 errno=0 [ 113.185945][ T42] audit: type=1400 audit(1786971557.940:605): avc: denied { map } for pid=8045 comm="syz.1.763" path="/proc/341/net/netlink" dev="proc" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 113.187501][ T8047] trusted_key: syz.1.763 sent an empty control message without MSG_MORE. [ 113.280025][ T42] audit: type=1800 audit(1786971558.040:606): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.765" name="use" dev="configfs" ino=24004 res=0 errno=0 [ 113.283444][ T8052] FAULT_INJECTION: forcing a failure. [ 113.283444][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.290848][ T8052] CPU: 2 UID: 0 PID: 8052 Comm: syz.1.765 Not tainted syzkaller #0 PREEMPT(full) [ 113.290871][ T8052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.290882][ T8052] Call Trace: [ 113.290889][ T8052] [ 113.290896][ T8052] dump_stack_lvl+0x100/0x190 [ 113.290926][ T8052] should_fail_ex.cold+0x5/0xa [ 113.290950][ T8052] _copy_to_user+0x32/0xd0 [ 113.290978][ T8052] simple_read_from_buffer+0xcb/0x170 [ 113.291001][ T8052] proc_fail_nth_read+0x1af/0x230 [ 113.291047][ T8052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.291075][ T8052] ? rw_verify_area+0xce/0x6d0 [ 113.291124][ T8052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.291151][ T8052] vfs_read+0x1e4/0xb40 [ 113.291180][ T8052] ? __pfx_vfs_read+0x10/0x10 [ 113.291205][ T8052] ? __fget_files+0x215/0x3d0 [ 113.291230][ T8052] ? __fget_files+0x21f/0x3d0 [ 113.291255][ T8052] ksys_read+0x12a/0x250 [ 113.291271][ T8052] ? __pfx_ksys_read+0x10/0x10 [ 113.291293][ T8052] do_syscall_64+0x115/0x870 [ 113.291313][ T8052] ? clear_bhb_loop+0x70/0xc0 [ 113.291335][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.291354][ T8052] RIP: 0033:0x7f8a72d5e90e [ 113.291368][ T8052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.291385][ T8052] RSP: 002b:00007f8a73baffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.291402][ T8052] RAX: ffffffffffffffda RBX: 00007f8a73bb06c0 RCX: 00007f8a72d5e90e [ 113.291414][ T8052] RDX: 000000000000000f RSI: 00007f8a73bb00a0 RDI: 0000000000000006 [ 113.291423][ T8052] RBP: 00007f8a73bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 113.291434][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.291443][ T8052] R13: 00007f8a73026038 R14: 00007f8a73025fa0 R15: 00007ffe26944358 [ 113.291466][ T8052] [ 113.323882][ T5938] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 113.415420][ T42] audit: type=1400 audit(1786971558.170:607): avc: denied { bind } for pid=8055 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.719902][ T848] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 113.778637][ T5938] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.781556][ T5938] em28xx 9-1:0.0: board has no eeprom [ 113.836765][ T5938] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.839328][ T5938] em28xx 9-1:0.0: dvb set to bulk mode. [ 113.841447][ T5804] em28xx 9-1:0.0: Binding DVB extension [ 113.853696][ T5938] usb 9-1: USB disconnect, device number 9 [ 113.859380][ T5938] em28xx 9-1:0.0: Disconnecting em28xx [ 113.872671][ T5804] em28xx 9-1:0.0: Registering input extension [ 113.876708][ T848] usb 6-1: Using ep0 maxpacket: 16 [ 113.876840][ T5938] em28xx 9-1:0.0: Closing input extension [ 113.880577][ T848] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.885396][ T848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.890011][ T848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.892532][ T848] usb 6-1: Product: syz [ 113.893805][ T848] usb 6-1: Manufacturer: syz [ 113.895239][ T848] usb 6-1: SerialNumber: syz [ 113.900747][ T5938] em28xx 9-1:0.0: Freeing device [ 113.900831][ T848] usb 6-1: config 0 descriptor?? [ 113.906516][ T848] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.912271][ T848] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 114.346038][ T8078] FAULT_INJECTION: forcing a failure. [ 114.346038][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 114.351009][ T8078] CPU: 3 UID: 0 PID: 8078 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(full) [ 114.351031][ T8078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.351041][ T8078] Call Trace: [ 114.351046][ T8078] [ 114.351053][ T8078] dump_stack_lvl+0x100/0x190 [ 114.351081][ T8078] should_fail_ex.cold+0x5/0xa [ 114.351127][ T8078] should_failslab+0xc2/0x120 [ 114.351150][ T8078] __kmalloc_noprof+0xfc/0x820 [ 114.351168][ T8078] ? __pfx_dynamic_dname+0x10/0x10 [ 114.351193][ T8078] ? tomoyo_encode2+0xfb/0x3c0 [ 114.351213][ T8078] tomoyo_encode2+0xfb/0x3c0 [ 114.351230][ T8078] tomoyo_encode+0x29/0x50 [ 114.351244][ T8078] tomoyo_realpath_from_path+0x18c/0x690 [ 114.351264][ T8078] tomoyo_path_number_perm+0x23c/0x580 [ 114.351286][ T8078] ? tomoyo_path_number_perm+0x22e/0x580 [ 114.351309][ T8078] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.351352][ T8078] ? find_held_lock+0x2b/0x80 [ 114.351368][ T8078] ? __fget_files+0x215/0x3d0 [ 114.351384][ T8078] ? hook_file_ioctl_common+0x140/0x440 [ 114.351401][ T8078] ? __fget_files+0x215/0x3d0 [ 114.351420][ T8078] ? __fget_files+0x21f/0x3d0 [ 114.351440][ T8078] security_file_ioctl+0xd3/0x230 [ 114.351464][ T8078] __x64_sys_ioctl+0xb7/0x210 [ 114.351489][ T8078] do_syscall_64+0x115/0x870 [ 114.351508][ T8078] ? clear_bhb_loop+0x70/0xc0 [ 114.351527][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.351543][ T8078] RIP: 0033:0x7ff92559e0d9 [ 114.351557][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.351572][ T8078] RSP: 002b:00007ff92652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.351588][ T8078] RAX: ffffffffffffffda RBX: 00007ff925825fa0 RCX: 00007ff92559e0d9 [ 114.351599][ T8078] RDX: 0000200000000000 RSI: 000000004048aecb RDI: 0000000000000005 [ 114.351608][ T8078] RBP: 00007ff92652f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.351618][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.351628][ T8078] R13: 00007ff925826038 R14: 00007ff925825fa0 R15: 00007ffe849a2ee8 [ 114.351649][ T8078] [ 114.351666][ T8078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.377489][ T848] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 114.501885][ T848] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.504752][ T848] em28xx 6-1:0.0: board has no eeprom [ 114.567010][ T848] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.569937][ T848] em28xx 6-1:0.0: dvb set to bulk mode. [ 114.572133][ T29] em28xx 6-1:0.0: Binding DVB extension [ 114.580028][ T848] usb 6-1: USB disconnect, device number 24 [ 114.584584][ T848] em28xx 6-1:0.0: Disconnecting em28xx [ 114.597754][ T29] em28xx 6-1:0.0: Registering input extension [ 114.601058][ T848] em28xx 6-1:0.0: Closing input extension [ 114.611904][ T848] em28xx 6-1:0.0: Freeing device [ 114.676745][ T5803] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 114.806691][ T5803] usb 7-1: device descriptor read/64, error -71 [ 115.046740][ T5803] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 115.156723][ T5938] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 115.176642][ T5803] usb 7-1: device descriptor read/64, error -71 [ 115.286952][ T5803] usb usb7-port1: attempt power cycle [ 115.307171][ T5938] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 115.310993][ T5938] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.314280][ T5938] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 115.317464][ T5938] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.322671][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 115.325231][ T5938] usb 9-1: Product: syz [ 115.326640][ T5938] usb 9-1: Manufacturer: syz [ 115.330636][ T8092] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.334297][ T5938] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 115.343432][ T5938] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 115.621016][ T10] usb 9-1: USB disconnect, device number 10 [ 115.626671][ T5803] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 115.633109][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 115.638323][ T10] garmin_gps 9-1:1.0: device disconnected [ 115.647156][ T5803] usb 7-1: device descriptor read/8, error -71 [ 115.729309][ T8094] overlayfs: failed to resolve 'redirect_dir=on': -2 [ 115.886827][ T5803] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 115.907433][ T5803] usb 7-1: device descriptor read/8, error -71 [ 116.017157][ T5803] usb usb7-port1: unable to enumerate USB device [ 116.193014][ T8111] capability: warning: `syz.4.789' uses 32-bit capabilities (legacy support in use) [ 116.316653][ T5803] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 116.467291][ T5803] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 116.470904][ T5803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.475863][ T5803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.478476][ T5803] usb 6-1: Product: syz [ 116.479861][ T5803] usb 6-1: Manufacturer: syz [ 116.481368][ T5803] usb 6-1: SerialNumber: syz [ 116.797058][ T8113] syz.4.790 (8113): drop_caches: 2 [ 116.851721][ T8116] ip_tables: iptables: counters copy to user failed while replacing table [ 117.394376][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 117.688994][ T8148] FAULT_INJECTION: forcing a failure. [ 117.688994][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 117.693135][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.2.804 Not tainted syzkaller #0 PREEMPT(full) [ 117.693150][ T8148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.693157][ T8148] Call Trace: [ 117.693162][ T8148] [ 117.693166][ T8148] dump_stack_lvl+0x100/0x190 [ 117.693256][ T8148] should_fail_ex.cold+0x5/0xa [ 117.693285][ T8148] should_failslab+0xc2/0x120 [ 117.693323][ T8148] __kmalloc_cache_noprof+0x91/0x6c0 [ 117.693341][ T8148] ? alloc_fdtable+0xbd/0x2d0 [ 117.693360][ T8148] alloc_fdtable+0xbd/0x2d0 [ 117.693372][ T8148] expand_files+0x171/0xb10 [ 117.693386][ T8148] ? __pfx_expand_files+0x10/0x10 [ 117.693398][ T8148] ? do_raw_spin_lock+0x128/0x260 [ 117.693428][ T8148] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.693443][ T8148] ? __file_has_perm+0x336/0x460 [ 117.693485][ T8148] alloc_fd+0x632/0x7a0 [ 117.693501][ T8148] receive_fd+0xb2/0x2d0 [ 117.693513][ T8148] scm_detach_fds+0x267/0x730 [ 117.693538][ T8148] __scm_recv_common.isra.0+0x124/0x520 [ 117.693551][ T8148] ? __pfx___scm_recv_common.isra.0+0x10/0x10 [ 117.693567][ T8148] ? do_raw_spin_lock+0x128/0x260 [ 117.693581][ T8148] ? find_held_lock+0x2b/0x80 [ 117.693593][ T8148] scm_recv_unix+0x99/0x400 [ 117.693605][ T8148] ? __pfx_scm_recv_unix+0x10/0x10 [ 117.693617][ T8148] ? unix_destroy_fpl+0x70/0xa0 [ 117.693636][ T8148] ? rcu_is_watching+0x12/0xc0 [ 117.693654][ T8148] ? unix_destroy_fpl+0x70/0xa0 [ 117.693665][ T8148] ? kfree+0x1e5/0x6c0 [ 117.693674][ T8148] ? unix_free_vertices+0x185/0x240 [ 117.693688][ T8148] __unix_dgram_recvmsg+0x744/0xc30 [ 117.693704][ T8148] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 117.693722][ T8148] ? __pfx__kstrtoull+0x10/0x10 [ 117.693743][ T8148] unix_dgram_recvmsg+0xcd/0x100 [ 117.693755][ T8148] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 117.693768][ T8148] sock_recvmsg+0x1d5/0x220 [ 117.693792][ T8148] ____sys_recvmsg+0x21e/0x670 [ 117.693804][ T8148] ? __pfx_____sys_recvmsg+0x10/0x10 [ 117.693821][ T8148] ? get_pid_task+0x106/0x250 [ 117.693839][ T8148] ___sys_recvmsg+0x16a/0x1a0 [ 117.693850][ T8148] ? __pfx____sys_recvmsg+0x10/0x10 [ 117.693862][ T8148] ? rcu_read_lock_any_held+0x6a/0xa0 [ 117.693872][ T8148] ? vfs_write+0x15d/0x1050 [ 117.693889][ T8148] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.693905][ T8148] __x64_sys_recvmsg+0x19a/0x260 [ 117.693921][ T8148] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 117.693943][ T8148] do_syscall_64+0x115/0x870 [ 117.693963][ T8148] ? clear_bhb_loop+0x70/0xc0 [ 117.693977][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.693988][ T8148] RIP: 0033:0x7f6c5139e0d9 [ 117.693998][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.694009][ T8148] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 117.694021][ T8148] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 117.694028][ T8148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.694035][ T8148] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.694041][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.694047][ T8148] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 117.694060][ T8148] [ 117.830223][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 117.833159][ T8150] bridge_slave_1: left allmulticast mode [ 117.834923][ T8150] bridge_slave_1: left promiscuous mode [ 117.837969][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.842072][ T8150] bridge_slave_0: left allmulticast mode [ 117.843917][ T8150] bridge_slave_0: left promiscuous mode [ 117.845763][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.154839][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.157890][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.222075][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.225977][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.319857][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.322769][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 118.496817][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 118.550574][ T8167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.811'. [ 118.692924][ T8175] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 119.093030][ T29] usb 6-1: USB disconnect, device number 25 [ 119.257800][ T8199] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 119.900026][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 119.900039][ T42] audit: type=1400 audit(1786971564.660:617): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.068339][ T8220] binder: 8219:8220 ioctl c0306201 0 returned -14 [ 120.108190][ T8223] syzkaller0: entered promiscuous mode [ 120.110100][ T8223] syzkaller0: entered allmulticast mode [ 120.115144][ T8223] FAULT_INJECTION: forcing a failure. [ 120.115144][ T8223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.120085][ T8223] CPU: 3 UID: 0 PID: 8223 Comm: syz.2.833 Not tainted syzkaller #0 PREEMPT(full) [ 120.120107][ T8223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.120118][ T8223] Call Trace: [ 120.120124][ T8223] [ 120.120130][ T8223] dump_stack_lvl+0x100/0x190 [ 120.120163][ T8223] should_fail_ex.cold+0x5/0xa [ 120.120187][ T8223] _copy_from_user+0x2e/0xd0 [ 120.120227][ T8223] move_addr_to_kernel+0x65/0x170 [ 120.120248][ T8223] copy_msghdr_from_user+0x3f0/0x4c0 [ 120.120267][ T8223] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.120296][ T8223] ___sys_sendmsg+0x106/0x1e0 [ 120.120313][ T8223] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.120327][ T8223] ? __lock_acquire+0x49f/0x1a40 [ 120.120352][ T8223] ? get_pid_task+0x106/0x250 [ 120.120395][ T8223] __sys_sendmsg+0x160/0x210 [ 120.120421][ T8223] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.120458][ T8223] do_syscall_64+0x115/0x870 [ 120.120477][ T8223] ? clear_bhb_loop+0x70/0xc0 [ 120.120500][ T8223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.120519][ T8223] RIP: 0033:0x7f6c5139e0d9 [ 120.120536][ T8223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.120551][ T8223] RSP: 002b:00007f6c4f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.120566][ T8223] RAX: ffffffffffffffda RBX: 00007f6c51625fa0 RCX: 00007f6c5139e0d9 [ 120.120573][ T8223] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 120.120579][ T8223] RBP: 00007f6c4f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.120586][ T8223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.120592][ T8223] R13: 00007f6c51626038 R14: 00007f6c51625fa0 R15: 00007ffebf46afd8 [ 120.120605][ T8223] [ 120.435962][ T8239] binder: 8238:8239 ioctl c0306201 0 returned -14 [ 120.486194][ T8241] FAULT_INJECTION: forcing a failure. [ 120.486194][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 120.490370][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.4.841 Not tainted syzkaller #0 PREEMPT(full) [ 120.490386][ T8241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.490403][ T8241] Call Trace: [ 120.490409][ T8241] [ 120.490414][ T8241] dump_stack_lvl+0x100/0x190 [ 120.490435][ T8241] should_fail_ex.cold+0x5/0xa [ 120.490450][ T8241] should_failslab+0xc2/0x120 [ 120.490466][ T8241] __kmalloc_noprof+0xfc/0x820 [ 120.490479][ T8241] ? __pfx_dynamic_dname+0x10/0x10 [ 120.490505][ T8241] ? tomoyo_encode2+0xfb/0x3c0 [ 120.490526][ T8241] tomoyo_encode2+0xfb/0x3c0 [ 120.490538][ T8241] tomoyo_encode+0x29/0x50 [ 120.490547][ T8241] tomoyo_realpath_from_path+0x18c/0x690 [ 120.490560][ T8241] tomoyo_path_number_perm+0x23c/0x580 [ 120.490576][ T8241] ? tomoyo_path_number_perm+0x22e/0x580 [ 120.490592][ T8241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.490620][ T8241] ? find_held_lock+0x2b/0x80 [ 120.490631][ T8241] ? __fget_files+0x215/0x3d0 [ 120.490642][ T8241] ? hook_file_ioctl_common+0x140/0x440 [ 120.490654][ T8241] ? __fget_files+0x215/0x3d0 [ 120.490667][ T8241] ? __fget_files+0x21f/0x3d0 [ 120.490680][ T8241] security_file_ioctl+0xd3/0x230 [ 120.490706][ T8241] __x64_sys_ioctl+0xb7/0x210 [ 120.490724][ T8241] do_syscall_64+0x115/0x870 [ 120.490737][ T8241] ? clear_bhb_loop+0x70/0xc0 [ 120.490750][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.490761][ T8241] RIP: 0033:0x7ff92559e0d9 [ 120.490771][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.490781][ T8241] RSP: 002b:00007ff92652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.490793][ T8241] RAX: ffffffffffffffda RBX: 00007ff925825fa0 RCX: 00007ff92559e0d9 [ 120.490800][ T8241] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 120.490807][ T8241] RBP: 00007ff92652f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.490813][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.490818][ T8241] R13: 00007ff925826038 R14: 00007ff925825fa0 R15: 00007ffe849a2ee8 [ 120.490832][ T8241] [ 120.490932][ T8241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.501244][ T42] audit: type=1400 audit(1786971565.260:618): avc: denied { mounton } for pid=8242 comm="syz.2.843" path="/proc/572/task" dev="proc" ino=24251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 120.504627][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.508748][ T42] audit: type=1400 audit(1786971565.260:619): avc: denied { create } for pid=8242 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.512794][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.524987][ T42] audit: type=1400 audit(1786971565.260:620): avc: denied { getopt } for pid=8242 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.531169][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.566690][ T5730] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 120.576720][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.600748][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.675231][ T8250] syzkaller0: entered promiscuous mode [ 120.678201][ T8250] syzkaller0: entered allmulticast mode [ 120.726743][ T5730] usb 6-1: device descriptor read/64, error -71 [ 120.929852][ T8259] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 120.966677][ T5730] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 121.045173][ T8264] nvmet: disable ns before setting buffered_io value. [ 121.049851][ T8264] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 121.097426][ T5730] usb 6-1: device descriptor read/64, error -71 [ 121.121440][ T36] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a62c8322-1e02-4f1a-8be4-5ff9b9981241. [ 121.124323][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.129880][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.131342][ T8264] nvme nvme5: creating 4 I/O queues. [ 121.132260][ T8244] bridge_slave_0: entered allmulticast mode [ 121.138043][ T8264] nvme nvme5: new ctrl: "testsubsys" [ 121.138543][ T8244] bridge_slave_0: entered promiscuous mode [ 121.143641][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.146031][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.148439][ T8244] bridge_slave_1: entered allmulticast mode [ 121.151246][ T8244] bridge_slave_1: entered promiscuous mode [ 121.174159][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.179526][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.194633][ T8244] team0: Port device team_slave_0 added [ 121.198381][ T8244] team0: Port device team_slave_1 added [ 121.207327][ T5730] usb usb6-port1: attempt power cycle [ 121.213940][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.216275][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.224658][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.230614][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.232908][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.241298][ T8244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.272889][ T8244] hsr_slave_0: entered promiscuous mode [ 121.276147][ T8244] hsr_slave_1: entered promiscuous mode [ 121.380788][ T8244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.385473][ T8244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.388303][ T8244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.392543][ T8244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.395364][ T8244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.401072][ T8244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.404217][ T8244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.409834][ T8244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.465885][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.479220][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.484525][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.486881][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.496906][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.499244][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.563573][ T5730] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 121.587290][ T5730] usb 6-1: device descriptor read/8, error -71 [ 121.724497][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.826766][ T5730] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 121.847393][ T5730] usb 6-1: device descriptor read/8, error -71 [ 121.884758][ T8244] veth0_vlan: entered promiscuous mode [ 121.893091][ T8244] veth1_vlan: entered promiscuous mode [ 121.896791][ T5825] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 121.914714][ T8244] veth0_macvtap: entered promiscuous mode [ 121.922653][ T8244] veth1_macvtap: entered promiscuous mode [ 121.937681][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.947562][ T8244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.957286][ T5730] usb usb6-port1: unable to enumerate USB device [ 121.967389][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.021089][ T7833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.024248][ T7833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.054963][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.058195][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.067362][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.067582][ T5825] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 122.074127][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.077901][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.077924][ T5825] usb 9-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.077939][ T5825] usb 9-1: config 1 interface 0 has no altsetting 0 [ 122.079563][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.092145][ T5825] usb 9-1: Product: syz [ 122.092177][ T42] audit: type=1400 audit(1786971566.850:621): avc: denied { mounton } for pid=8244 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 122.093535][ T5825] usb 9-1: Manufacturer: syz [ 122.093545][ T5825] usb 9-1: SerialNumber: syz [ 122.103500][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.272007][ T8298] nvmet: disable ns before setting buffered_io value. [ 122.274919][ T8298] FAULT_INJECTION: forcing a failure. [ 122.274919][ T8298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.281601][ T8298] CPU: 1 UID: 0 PID: 8298 Comm: syz.5.849 Not tainted syzkaller #0 PREEMPT(full) [ 122.281616][ T8298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.281623][ T8298] Call Trace: [ 122.281627][ T8298] [ 122.281632][ T8298] dump_stack_lvl+0x100/0x190 [ 122.281665][ T8298] should_fail_ex.cold+0x5/0xa [ 122.281683][ T8298] _copy_from_iter+0x1f4/0x1690 [ 122.281704][ T8298] ? __pfx__copy_from_iter+0x10/0x10 [ 122.281718][ T8298] ? kasan_save_track+0x14/0x30 [ 122.281732][ T8298] ? __kasan_kmalloc+0xaa/0xb0 [ 122.281758][ T8298] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 122.281770][ T8298] ? configfs_write_iter+0x388/0x4e0 [ 122.281799][ T8298] configfs_write_iter+0xb3/0x4e0 [ 122.281814][ T8298] vfs_write+0x6ac/0x1050 [ 122.281826][ T8298] ? __pfx_configfs_write_iter+0x10/0x10 [ 122.281840][ T8298] ? __pfx_vfs_write+0x10/0x10 [ 122.281859][ T8298] ksys_write+0x12a/0x250 [ 122.281868][ T8298] ? __pfx_ksys_write+0x10/0x10 [ 122.281882][ T8298] do_syscall_64+0x115/0x870 [ 122.281894][ T8298] ? clear_bhb_loop+0x70/0xc0 [ 122.281908][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.281919][ T8298] RIP: 0033:0x7f8faff9e0d9 [ 122.281928][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.281938][ T8298] RSP: 002b:00007f8fb0ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.281949][ T8298] RAX: ffffffffffffffda RBX: 00007f8fb0225fa0 RCX: 00007f8faff9e0d9 [ 122.281956][ T8298] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 122.281962][ T8298] RBP: 00007f8fb0ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 122.281967][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.281973][ T8298] R13: 00007f8fb0226038 R14: 00007f8fb0225fa0 R15: 00007ffed344b348 [ 122.281987][ T8298] [ 122.283335][ T8298] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.361684][ T234] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a62c8322-1e02-4f1a-8be4-5ff9b9981241. [ 122.366518][ T8299] nvme nvme6: creating 4 I/O queues. [ 122.378509][ T8299] nvme nvme6: new ctrl: "testsubsys" [ 122.676721][ T5085] Bluetooth: hci4: command tx timeout [ 123.059983][ T8306] FAULT_INJECTION: forcing a failure. [ 123.059983][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 123.065328][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.5.851 Not tainted syzkaller #0 PREEMPT(full) [ 123.065352][ T8306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.065363][ T8306] Call Trace: [ 123.065369][ T8306] [ 123.065377][ T8306] dump_stack_lvl+0x100/0x190 [ 123.065408][ T8306] should_fail_ex.cold+0x5/0xa [ 123.065433][ T8306] should_failslab+0xc2/0x120 [ 123.065459][ T8306] __kmalloc_noprof+0xfc/0x820 [ 123.065480][ T8306] ? rcu_is_watching+0x12/0xc0 [ 123.065510][ T8306] ? tomoyo_realpath_from_path+0xb6/0x690 [ 123.065534][ T8306] tomoyo_realpath_from_path+0xb6/0x690 [ 123.065557][ T8306] tomoyo_path_number_perm+0x23c/0x580 [ 123.065582][ T8306] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.065609][ T8306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.065656][ T8306] ? find_held_lock+0x2b/0x80 [ 123.065674][ T8306] ? __fget_files+0x215/0x3d0 [ 123.065693][ T8306] ? hook_file_ioctl_common+0x140/0x440 [ 123.065717][ T8306] ? __fget_files+0x215/0x3d0 [ 123.065738][ T8306] ? __fget_files+0x21f/0x3d0 [ 123.065762][ T8306] security_file_ioctl+0xd3/0x230 [ 123.065789][ T8306] __x64_sys_ioctl+0xb7/0x210 [ 123.065819][ T8306] do_syscall_64+0x115/0x870 [ 123.065840][ T8306] ? clear_bhb_loop+0x70/0xc0 [ 123.065861][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.065877][ T8306] RIP: 0033:0x7f8faff9e0d9 [ 123.065892][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.065908][ T8306] RSP: 002b:00007f8fb0ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.065927][ T8306] RAX: ffffffffffffffda RBX: 00007f8fb0226090 RCX: 00007f8faff9e0d9 [ 123.065937][ T8306] RDX: 0000200000000440 RSI: 00000000c0502100 RDI: 0000000000000003 [ 123.065947][ T8306] RBP: 00007f8fb0ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.065959][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.065968][ T8306] R13: 00007f8fb0226128 R14: 00007f8fb0226090 R15: 00007ffed344b348 [ 123.065992][ T8306] [ 123.065999][ T8306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.452622][ T42] audit: type=1400 audit(1786971569.210:622): avc: denied { mounton } for pid=8327 comm="syz.1.859" path="/160/file0" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 124.452709][ T8328] fuse: Unknown parameter 'groSpid' [ 124.675884][ T29] usb 9-1: USB disconnect, device number 11 [ 124.703914][ T8332] capability: warning: `syz.4.861' uses deprecated v2 capabilities in a way that may be insecure [ 124.711392][ T42] audit: type=1400 audit(1786971569.470:623): avc: denied { create } for pid=8331 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.718297][ T42] audit: type=1400 audit(1786971569.480:624): avc: denied { write } for pid=8331 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.756629][ T5085] Bluetooth: hci4: command tx timeout [ 124.858231][ T6150] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 124.986660][ T6150] usb 6-1: device descriptor read/64, error -71 [ 125.001650][ T8343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8343 comm=syz.5.866 [ 125.079828][ T42] audit: type=1326 audit(1786971569.840:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.5.868" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8faff9e0d9 code=0x0 [ 125.226735][ T6150] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 125.356655][ T6150] usb 6-1: device descriptor read/64, error -71 [ 125.466960][ T6150] usb usb6-port1: attempt power cycle [ 125.806692][ T6150] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 125.827349][ T6150] usb 6-1: device descriptor read/8, error -71 [ 126.066671][ T6150] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 126.087191][ T6150] usb 6-1: device descriptor read/8, error -71 [ 126.166642][ T5803] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 126.197189][ T6150] usb usb6-port1: unable to enumerate USB device [ 126.317232][ T5803] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 126.320989][ T5803] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.324192][ T5803] usb 10-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.329225][ T5803] usb 10-1: config 1 interface 0 has no altsetting 0 [ 126.332979][ T5803] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.335589][ T5803] usb 10-1: Product: syz [ 126.337491][ T5803] usb 10-1: Manufacturer: syz [ 126.339351][ T5803] usb 10-1: SerialNumber: syz [ 126.836949][ T5085] Bluetooth: hci4: command tx timeout [ 127.670860][ T8356] warning: `syz.1.870' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.149169][ T848] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 128.158720][ T848] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 128.188869][ T42] audit: type=1400 audit(1786971572.950:626): avc: denied { setopt } for pid=8361 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.419395][ T848] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 128.906400][ T8379] fuse: Bad value for 'fd' [ 128.913070][ T8379] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 128.926649][ T5085] Bluetooth: hci4: command tx timeout [ 128.929267][ T848] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 128.942126][ T1487] usb 10-1: USB disconnect, device number 2 [ 128.966379][ T8366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.966388][ T8362] ceph: No mds server is up or the cluster is laggy [ 128.974646][ T8366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.977961][ T8381] nvmet: disable ns before setting buffered_io value. [ 128.983931][ T8366] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.988225][ T8366] ================================================================== [ 128.991337][ T8366] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40 [ 128.991796][ T8381] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 128.993843][ T8366] Read of size 1 at addr ffff8880262d55a0 by task syz.4.872/8366 [ 128.993863][ T8366] [ 128.993874][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.4.872 Not tainted syzkaller #0 PREEMPT(full) [ 128.993898][ T8366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.993910][ T8366] Call Trace: [ 128.993918][ T8366] [ 128.993926][ T8366] dump_stack_lvl+0x100/0x190 [ 128.993959][ T8366] print_report+0x13d/0x4b0 [ 128.994002][ T8366] ? __virt_addr_valid+0x239/0x430 [ 128.994035][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 128.994050][ T8366] kasan_report+0xdf/0x1c0 [ 128.994075][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 128.994092][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 128.994107][ T8366] __kasan_check_byte+0x36/0x50 [ 128.994127][ T8366] lock_acquire+0x132/0x370 [ 128.994141][ T8366] ? do_raw_spin_lock+0x128/0x260 [ 128.994157][ T8366] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.994173][ T8366] _raw_spin_lock_bh+0x33/0x40 [ 128.994183][ T8366] ? bt_accept_unlink+0x64/0x370 [ 128.994219][ T8366] bt_accept_unlink+0x64/0x370 [ 128.994236][ T8366] ? __local_bh_enable_ip+0x9e/0x120 [ 128.994264][ T8366] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 128.994294][ T8366] l2cap_chan_del+0xa6/0x920 [ 128.994319][ T8366] l2cap_conn_del+0x34f/0x6b0 [ 128.994346][ T8366] l2cap_connect_cfm+0x97b/0xf20 [ 128.994376][ T8366] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.994395][ T8366] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 128.994418][ T8366] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.994436][ T8366] hci_conn_failed+0x18c/0x370 [ 128.994457][ T8366] hci_abort_conn_sync+0x7d9/0xb20 [ 128.994490][ T8366] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 128.994519][ T8366] ? find_held_lock+0x2b/0x80 [ 128.994534][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 128.994559][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 128.994584][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 128.994609][ T8366] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 128.994635][ T8366] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 128.994661][ T8366] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 128.994687][ T8366] hci_suspend_sync+0x8b7/0xa70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.994714][ T8366] ? __pfx_hci_suspend_sync+0x10/0x10 [ 128.994740][ T8366] ? mgmt_pending_find+0x13e/0x1a0 [ 128.994752][ T8366] hci_suspend_dev+0x31d/0x540 [ 128.994764][ T8366] ? __pfx_hci_suspend_dev+0x10/0x10 [ 128.994775][ T8366] ? kobject_get+0xbb/0x150 [ 128.994798][ T8366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.994826][ T8366] hci_suspend_notifier+0x21e/0x330 [ 128.994840][ T8366] notifier_call_chain+0x99/0x3f0 [ 128.994855][ T8366] blocking_notifier_call_chain_robust+0xc8/0x160 [ 128.994869][ T8366] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 128.994882][ T8366] ? pin_hibernation_swap_type+0x145/0x1a0 [ 128.994899][ T8366] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.994915][ T8366] pm_notifier_call_chain_robust+0x27/0x60 [ 128.994931][ T8366] snapshot_open+0x189/0x2b0 [ 128.994943][ T8366] ? __pfx_snapshot_open+0x10/0x10 [ 128.994955][ T8366] misc_open+0x26d/0x450 [ 128.995003][ T8366] ? __pfx_misc_open+0x10/0x10 [ 128.995013][ T8366] chrdev_open+0x234/0x6a0 [ 128.995054][ T8366] ? __pfx_chrdev_open+0x10/0x10 [ 128.995068][ T8366] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 128.995088][ T8366] do_dentry_open+0x6ab/0x14d0 [ 128.995100][ T8366] ? __pfx_chrdev_open+0x10/0x10 [ 128.995114][ T8366] vfs_open+0x82/0x3f0 [ 128.995129][ T8366] path_openat+0x2873/0x4280 [ 128.995146][ T8366] ? __pfx_path_openat+0x10/0x10 [ 128.995161][ T8366] do_file_open+0x20e/0x430 [ 128.995175][ T8366] ? __pfx_do_file_open+0x10/0x10 [ 128.995191][ T8366] ? alloc_fd+0x471/0x7a0 [ 128.995204][ T8366] ? do_getname+0x191/0x390 [ 128.995219][ T8366] do_sys_openat2+0x10f/0x1e0 [ 128.995232][ T8366] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.995248][ T8366] __x64_sys_openat+0x12d/0x210 [ 128.995262][ T8366] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.995277][ T8366] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 128.995312][ T8366] ? syscall_user_dispatch+0x76/0x130 [ 128.995336][ T8366] do_syscall_64+0x115/0x870 [ 128.995350][ T8366] ? clear_bhb_loop+0x70/0xc0 [ 128.995369][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.995383][ T8366] RIP: 0033:0x7ff92559e0d9 [ 128.995394][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.995407][ T8366] RSP: 002b:00007ff9264ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.995422][ T8366] RAX: ffffffffffffffda RBX: 00007ff925826180 RCX: 00007ff92559e0d9 [ 128.995430][ T8366] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 128.995439][ T8366] RBP: 00007ff925635024 R08: 0000000000000000 R09: 0000000000000000 [ 128.995446][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.995453][ T8366] R13: 00007ff925826218 R14: 00007ff925826180 R15: 00007ffe849a2ee8 [ 128.995464][ T8366] [ 128.995468][ T8366] [ 129.152107][ T8366] Allocated by task 8173: [ 129.153422][ T8366] kasan_save_stack+0x30/0x50 [ 129.154820][ T8366] kasan_save_track+0x14/0x30 [ 129.156211][ T8366] __kasan_kmalloc+0xaa/0xb0 [ 129.157555][ T8366] __kmalloc_noprof+0x322/0x820 [ 129.159074][ T8366] sk_prot_alloc+0x10b/0x2a0 [ 129.160481][ T8366] sk_alloc+0x36/0xe80 [ 129.161729][ T8366] af_alg_accept+0xd1/0x610 [ 129.163114][ T8366] do_accept+0x340/0x530 [ 129.164437][ T8366] __sys_accept4+0x108/0x200 [ 129.165855][ T8366] __x64_sys_accept4+0x96/0x100 [ 129.167357][ T8366] do_syscall_64+0x115/0x870 [ 129.168749][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.170506][ T8366] [ 129.171259][ T8366] Freed by task 8172: [ 129.172436][ T8366] kasan_save_stack+0x30/0x50 [ 129.173851][ T8366] kasan_save_track+0x14/0x30 [ 129.175342][ T8366] kasan_save_free_info+0x3b/0x70 [ 129.176923][ T8366] __kasan_slab_free+0x5f/0x80 [ 129.178418][ T8366] kfree+0x22b/0x6c0 [ 129.179654][ T8366] __sk_destruct+0x88c/0xab0 [ 129.181104][ T8366] sk_destruct+0xc8/0xf0 [ 129.182461][ T8366] __sk_free+0xf4/0x3e0 [ 129.183770][ T8366] sk_free+0x61/0x90 [ 129.185019][ T8366] af_alg_release+0x9c/0x100 [ 129.186466][ T8366] __sock_release+0xb3/0x260 [ 129.187936][ T8366] sock_close+0x1c/0x30 [ 129.189250][ T8366] __fput+0x3ff/0xb50 [ 129.190527][ T8366] task_work_run+0x150/0x240 [ 129.191983][ T8366] exit_to_user_mode_loop+0x1d8/0x700 [ 129.193650][ T8366] do_syscall_64+0x666/0x870 [ 129.195119][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.196961][ T8366] [ 129.197727][ T8366] The buggy address belongs to the object at ffff8880262d5000 [ 129.197727][ T8366] which belongs to the cache kmalloc-2k of size 2048 [ 129.202000][ T8366] The buggy address is located 1440 bytes inside of [ 129.202000][ T8366] freed 2048-byte region [ffff8880262d5000, ffff8880262d5800) [ 129.206221][ T8366] [ 129.206992][ T8366] The buggy address belongs to the physical page: [ 129.209003][ T8366] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880262d4000 pfn:0x262d0 [ 129.212111][ T8366] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 129.214702][ T8366] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 129.217296][ T8366] page_type: f5(slab) [ 129.218564][ T8366] raw: 00fff00000000240 ffff88801c042f00 ffffea00016a6e10 ffffea0000b1f210 [ 129.221193][ T8366] raw: ffff8880262d4000 0000000800080001 00000000f5000000 0000000000000000 [ 129.223826][ T8366] head: 00fff00000000240 ffff88801c042f00 ffffea00016a6e10 ffffea0000b1f210 [ 129.226611][ T8366] head: ffff8880262d4000 0000000800080001 00000000f5000000 0000000000000000 [ 129.229259][ T8366] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 129.231853][ T8366] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 129.234530][ T8366] page dumped because: kasan: bad access detected [ 129.236697][ T8366] page_owner tracks the page as allocated [ 129.238481][ T8366] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5723, tgid 5723 (syz-executor), ts 45988294135, free_ts 44681590844 [ 129.244931][ T8366] post_alloc_hook+0xfd/0x120 [ 129.246403][ T8366] get_page_from_freelist+0xf48/0x3530 [ 129.248097][ T8366] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 129.249987][ T8366] new_slab+0xa2/0x640 [ 129.251266][ T8366] refill_objects+0xe3/0x410 [ 129.252658][ T8366] __pcs_replace_empty_main+0x376/0x680 [ 129.254373][ T8366] __kmalloc_cache_noprof+0x479/0x6c0 [ 129.256039][ T8366] rxrpc_alloc_connection+0xa3/0x770 [ 129.257729][ T8366] rxrpc_prealloc_service_connection+0x26/0x390 [ 129.259675][ T8366] rxrpc_service_prealloc_one+0x2c5/0x1040 [ 129.261496][ T8366] rxrpc_kernel_charge_accept+0xdd/0x120 [ 129.263268][ T8366] afs_charge_preallocation+0xd8/0x360 [ 129.265017][ T8366] afs_open_socket+0x31e/0x3f0 [ 129.266513][ T8366] afs_net_init+0x825/0xb00 [ 129.267931][ T8366] ops_init+0x1e2/0x5f0 [ 129.269252][ T8366] setup_net+0x118/0x3a0 [ 129.270581][ T8366] page last free pid 0 tgid 0 stack trace: [ 129.272389][ T8366] __free_frozen_pages+0x79f/0x1090 [ 129.274010][ T8366] __folio_put+0x3b4/0x5f0 [ 129.275419][ T8366] skb_release_data+0x649/0x8e0 [ 129.276936][ T8366] napi_consume_skb+0x1a6/0x320 [ 129.278452][ T8366] skb_defer_free_flush+0x1f1/0x290 [ 129.280080][ T8366] net_rx_action+0x3ca/0xf20 [ 129.281524][ T8366] handle_softirqs+0x1ea/0x9b0 [ 129.283034][ T8366] __irq_exit_rcu+0x162/0x210 [ 129.284509][ T8366] irq_exit_rcu+0x9/0x30 [ 129.285834][ T8366] common_interrupt+0xbe/0xe0 [ 129.287308][ T8366] asm_common_interrupt+0x26/0x40 [ 129.288906][ T8366] [ 129.289673][ T8366] Memory state around the buggy address: [ 129.291416][ T8366] ffff8880262d5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.293891][ T8366] ffff8880262d5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.296275][ T8366] >ffff8880262d5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.298744][ T8366] ^ [ 129.300354][ T8366] ffff8880262d5600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.302813][ T8366] ffff8880262d5680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.305286][ T8366] ================================================================== [ 129.307882][ T8366] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.310147][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.4.872 Not tainted syzkaller #0 PREEMPT(full) [ 129.312977][ T8366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.316076][ T8366] Call Trace: [ 129.317133][ T8366] [ 129.318068][ T8366] dump_stack_lvl+0x100/0x190 [ 129.319563][ T8366] vpanic+0x552/0x970 [ 129.321028][ T8366] ? __pfx_vpanic+0x10/0x10 [ 129.322494][ T8366] ? mark_held_locks+0x40/0x70 [ 129.324032][ T8366] ? irqentry_exit+0x24d/0xa10 [ 129.325546][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 129.327105][ T8366] panic+0xd1/0xe0 [ 129.328296][ T8366] ? __pfx_panic+0x10/0x10 [ 129.329715][ T8366] check_panic_on_warn.cold+0x19/0x34 [ 129.331526][ T8366] end_report.part.0+0x3a/0x90 [ 129.332995][ T8366] kasan_report.cold+0xe/0x18 [ 129.334386][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 129.335904][ T8366] ? _raw_spin_lock_bh+0x33/0x40 [ 129.337472][ T8366] __kasan_check_byte+0x36/0x50 [ 129.338993][ T8366] lock_acquire+0x132/0x370 [ 129.340433][ T8366] ? do_raw_spin_lock+0x128/0x260 [ 129.342026][ T8366] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 129.343725][ T8366] _raw_spin_lock_bh+0x33/0x40 [ 129.345233][ T8366] ? bt_accept_unlink+0x64/0x370 [ 129.346780][ T8366] bt_accept_unlink+0x64/0x370 [ 129.348284][ T8366] ? __local_bh_enable_ip+0x9e/0x120 [ 129.349981][ T8366] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 129.351686][ T8366] l2cap_chan_del+0xa6/0x920 [ 129.353135][ T8366] l2cap_conn_del+0x34f/0x6b0 [ 129.354619][ T8366] l2cap_connect_cfm+0x97b/0xf20 [ 129.356168][ T8366] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 129.357875][ T8366] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 129.359783][ T8366] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 129.361491][ T8366] hci_conn_failed+0x18c/0x370 [ 129.363002][ T8366] hci_abort_conn_sync+0x7d9/0xb20 [ 129.364636][ T8366] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 129.366395][ T8366] ? find_held_lock+0x2b/0x80 [ 129.367886][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 129.370160][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 129.372405][ T8366] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 129.374655][ T8366] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 129.376965][ T8366] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 129.379340][ T8366] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 129.381093][ T8366] hci_suspend_sync+0x8b7/0xa70 [ 129.382638][ T8366] ? __pfx_hci_suspend_sync+0x10/0x10 [ 129.384339][ T8366] ? mgmt_pending_find+0x13e/0x1a0 [ 129.385943][ T8366] hci_suspend_dev+0x31d/0x540 [ 129.387452][ T8366] ? __pfx_hci_suspend_dev+0x10/0x10 [ 129.389118][ T8366] ? kobject_get+0xbb/0x150 [ 129.390500][ T8366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.392319][ T8366] hci_suspend_notifier+0x21e/0x330 [ 129.393894][ T8366] notifier_call_chain+0x99/0x3f0 [ 129.395467][ T8366] blocking_notifier_call_chain_robust+0xc8/0x160 [ 129.397408][ T8366] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 129.399539][ T8366] ? pin_hibernation_swap_type+0x145/0x1a0 [ 129.401309][ T8366] ? do_raw_spin_unlock+0x145/0x1e0 [ 129.402895][ T8366] pm_notifier_call_chain_robust+0x27/0x60 [ 129.404672][ T8366] snapshot_open+0x189/0x2b0 [ 129.406096][ T8366] ? __pfx_snapshot_open+0x10/0x10 [ 129.407653][ T8366] misc_open+0x26d/0x450 [ 129.408978][ T8366] ? __pfx_misc_open+0x10/0x10 [ 129.410411][ T8366] chrdev_open+0x234/0x6a0 [ 129.411776][ T8366] ? __pfx_chrdev_open+0x10/0x10 [ 129.413302][ T8366] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 129.415187][ T8366] do_dentry_open+0x6ab/0x14d0 [ 129.416633][ T8366] ? __pfx_chrdev_open+0x10/0x10 [ 129.418160][ T8366] vfs_open+0x82/0x3f0 [ 129.419388][ T8366] path_openat+0x2873/0x4280 [ 129.420679][ T8366] ? __pfx_path_openat+0x10/0x10 [ 129.422043][ T8366] do_file_open+0x20e/0x430 [ 129.423374][ T8366] ? __pfx_do_file_open+0x10/0x10 [ 129.424889][ T8366] ? alloc_fd+0x471/0x7a0 [ 129.426182][ T8366] ? do_getname+0x191/0x390 [ 129.427572][ T8366] do_sys_openat2+0x10f/0x1e0 [ 129.429047][ T8366] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.430651][ T8366] __x64_sys_openat+0x12d/0x210 [ 129.432144][ T8366] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.433772][ T8366] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 129.435653][ T8366] ? syscall_user_dispatch+0x76/0x130 [ 129.437276][ T8366] do_syscall_64+0x115/0x870 [ 129.438691][ T8366] ? clear_bhb_loop+0x70/0xc0 [ 129.440147][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.441921][ T8366] RIP: 0033:0x7ff92559e0d9 [ 129.443284][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.449011][ T8366] RSP: 002b:00007ff9264ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.451519][ T8366] RAX: ffffffffffffffda RBX: 00007ff925826180 RCX: 00007ff92559e0d9 [ 129.453901][ T8366] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 129.456259][ T8366] RBP: 00007ff925635024 R08: 0000000000000000 R09: 0000000000000000 [ 129.458927][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.461370][ T8366] R13: 00007ff925826218 R14: 00007ff925826180 R15: 00007ffe849a2ee8 [ 129.463799][ T8366] [ 129.465316][ T8366] Kernel Offset: disabled [ 129.466651][ T8366] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:59:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000035941 RBX=0000000000000000 RCX=ffffc90030351000 RDX=0000000000080000 RSI=ffffffff81e8c2fc RDI=ffff888026f54a80 RBP=0000000000000001 RSP=ffffc9000480eed8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000901ddd R13=0000000000000000 R14=ffff8880262f4a80 R15=ffffc9000480efa0 RIP=ffffffff81e8c2fe RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff9264ed6c0 ffffffff 00c00000 GS =0000 ffff8880d5bde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b306fcbe0 CR3=000000002c974000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d84cd8052a4e133e a42e2fac6b64edca a547c521b7bfba49 cd136323c28381ba ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f07ee295f64b6d9d c9808ca024aaae62 a72f0b16ab690f3f 55b4234ab93706dd ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 486f0bbcf78ab883 47e8b82ca84e5d3c 01565e8e44a5ec55 3427ee327a046d91 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9189d69590e361dc b51977a1d97e80fe 3e4a1d30bfd11ea9 3cae1aff7e6de033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 60bae9809b440510 660091db8d3e3d9f b1a5648b95dae3b0 7d7b5f913f23a7b3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b953eaf97e076729 3b9ffbb8d3812c86 73d20f75c9abe57c 6eb8a90ce1a1d961 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdd802 RDX=ffff888039c60000 RSI=ffffffff81fdd7dc RDI=ffff888039c60000 RBP=ffff88806a443520 RSP=ffffc90004947488 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4886a5 R14=0000000000000001 R15=ffff88806a53c880 RIP=ffffffff81fdd7de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fad5e757e20 CR3=0000000038fea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7ce6feb0 00007ffe7ce6feb0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad5dbf2823 00007fad5dbf2823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad5dbf2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad5dbf2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555764e9ad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffc1082880 0304801000278004 0100000e08060601 54ec000400000800 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f316e30656d76 6e2f6b636f6c622f 7373616c632f7379 732f2e01ffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01048010002a8004 0100001008060601 54ec000400000800 28800401c7080008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1046f60064697777 2f316e30656d766e 2f6b636f6c622f73 73616c632f737973 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffc108288003 0480100027800401 00000e0806060154 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec00040000080025 800401c70800080e 46f600646977772f 316e30656d766e2f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c2000 RBX=ffff88801f6f0ba0 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9bb78e30 RBP=ffff88801f6f0000 RSP=ffffc9000061f9f8 R8 =0000000000000001 R9 =0000000000080000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5ebbb RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000052f9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebf469160 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebf46b4c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebf46b4c6 00007ffebf46b4cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c51435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c51435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c514357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6c51435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a35170 RDI=ffffffff9bc05ec0 RBP=ffffffff9bc05e80 RSP=ffffc9000475f720 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000047bcc R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3780c2a R15=dffffc0000000000 RIP=ffffffff85a35197 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8fb0ee86c0 ffffffff 00c00000 GS =0000 ffff8880d5ede000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b306ed000 CR3=000000002da25000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed344b836 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed344b836 00007ffed344b83c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb0035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb0035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb00357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb0035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fb01f25f8 00007f8fb01f25c8 00007f8fb01f2600 00007f8fb01f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000