last executing test programs: 1m59.819794746s ago: executing program 3 (id=145): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 1m56.720928942s ago: executing program 3 (id=173): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000000)={0x0, 0xf, 0xfffffffd, 0xfffd}) semop(0x0, 0x0, 0x0) 1m55.787083714s ago: executing program 3 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xfff1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1m55.651157258s ago: executing program 3 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m55.551044162s ago: executing program 3 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r0, 0x0, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r5, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 1m55.111292586s ago: executing program 3 (id=184): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 1m55.037545245s ago: executing program 32 (id=184): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 43.386950824s ago: executing program 2 (id=1524): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x60, 0x0) 42.470140803s ago: executing program 2 (id=1526): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f00000000c0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/21) 42.46848337s ago: executing program 2 (id=1528): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 42.400677628s ago: executing program 2 (id=1530): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000002280)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(r0, &(0x7f0000000180)='./file0/../file0\x00', 0x1) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0xd0800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r1}, "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"}) pipe2(&(0x7f0000000000), 0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) lseek(r0, 0x369c, 0x0) 41.869832229s ago: executing program 2 (id=1537): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6142, 0x185) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket(0xa, 0x1, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f00000008c0)) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00000000000000000000000000000018"], 0x28}}], 0x2, 0x0) 40.350087746s ago: executing program 2 (id=1550): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x60, 0x0) 40.224093581s ago: executing program 33 (id=1550): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x60, 0x0) 3.794517893s ago: executing program 5 (id=1848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$isdn(0x22, 0x3, 0x21) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.793497482s ago: executing program 5 (id=1849): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x100000) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cf5fe800000000000000000000000000010ff86"], 0x340a) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 3.219949279s ago: executing program 1 (id=1852): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000100)={0x8680000000000000, 0x10000, 0x3, 0xc, 0x20}) 3.21959066s ago: executing program 1 (id=1853): fsmount(0xffffffffffffffff, 0x0, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(0x0, 0x0) 2.909943317s ago: executing program 1 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x8, 0x70bd26, 0x25dfdbff, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x20d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2000fb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x11) 2.250323726s ago: executing program 1 (id=1857): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0x0, 0x0, 0x0, [0x4]}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x22820, 0x45106}, [@IFLA_CARRIER={0x5, 0x21, 0x81}]}, 0x28}}, 0x6404c8c4) 2.250166058s ago: executing program 5 (id=1858): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x4, 0xd}) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x26000, 0x1f0, 0xfffffff9, 0xfffffffe, 0x0, [{0x0, 0xb, 0x2}, {0x9, 0xc, 0x40, '\x00', 0x80}, {0x4, 0x0, 0x0, '\x00', 0x2}, {0x9, 0x9, 0x2, '\x00', 0x1}, {0x85, 0x0, 0xa, '\x00', 0x80}, {0x3, 0x7, 0x1e, '\x00', 0x7}, {0xe, 0x4, 0x5, '\x00', 0x8}, {0x7, 0xa, 0x7, '\x00', 0xd}, {0x5, 0xb, 0x3, '\x00', 0x3}, {0x8, 0x6, 0x3, '\x00', 0xf2}, {0x7f, 0x4, 0x4}, {0x2, 0xfd, 0xc, '\x00', 0xf}, {0x7, 0xa0, 0x6, '\x00', 0xfc}, {0x5, 0x8, 0xb, '\x00', 0xd}, {0x51, 0x0, 0x7f, '\x00', 0x20}, {0xff, 0x9, 0x8}, {0x7, 0xff, 0x43, '\x00', 0x1}, {0x8, 0xfe, 0x4}, {0x8, 0x40, 0xd0, '\x00', 0xff}, {0x1, 0x3, 0x40, '\x00', 0x82}, {0xff, 0xa, 0xb8}, {0xf, 0x2, 0x2, '\x00', 0x1}, {0x5, 0x5, 0x46, '\x00', 0x3}, {0x20, 0x1, 0xc6, '\x00', 0x8}]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.168614584s ago: executing program 1 (id=1861): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) getsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000080), &(0x7f0000000100)=0x4) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r4, 0x400455c8, 0x9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.909813587s ago: executing program 5 (id=1862): fsmount(0xffffffffffffffff, 0x0, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(0x0, 0x0) 1.718929466s ago: executing program 5 (id=1863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x9) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="b9befd9f3fbe340f5148c0", @ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09f50000000000000000020000000900020073797a3100000000080004400000000f0900010073797a3000000000080003400000000a"], 0x64}}, 0x0) r3 = syz_clone(0xb2960100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x2d, 0x2, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 1.26867804s ago: executing program 0 (id=1868): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000280), &(0x7f0000000300)=[r2], &(0x7f0000000340)}) 1.268363234s ago: executing program 0 (id=1869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x6}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 10) 1.039608833s ago: executing program 0 (id=1871): fsmount(0xffffffffffffffff, 0x0, 0x70) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(0x0, 0x0) 986.165882ms ago: executing program 4 (id=1874): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r1, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [{@euid_gt={'euid>', r1}}, {@obj_type={'obj_type', 0x3d, '\x19\xa3\xc5W\xd7\xc2\xfaH\xa1\f\x18\x15\xddw\xeaE\xc3\xbd\x04\x91Q\xe5\xc0W\xf7\xb3-m\xc0\xc3h\xdf\x88~\'\xb7\xc1R\xd0\x7f\xdd\xba\xde6\xa5{W\xc0~\t\x9e\xc4C\xe9\x02?\x93\xd6'}}, {@smackfsfloor}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '.}]]'}}, {@euid_gt={'euid>', r1}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r1, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [{@euid_gt={'euid>', r1}}, {@obj_type={'obj_type', 0x3d, '\x19\xa3\xc5W\xd7\xc2\xfaH\xa1\f\x18\x15\xddw\xeaE\xc3\xbd\x04\x91Q\xe5\xc0W\xf7\xb3-m\xc0\xc3h\xdf\x88~\'\xb7\xc1R\xd0\x7f\xdd\xba\xde6\xa5{W\xc0~\t\x9e\xc4C\xe9\x02?\x93\xd6'}}, {@smackfsfloor}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '.}]]'}}, {@euid_gt={'euid>', r1}}]}) (async) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) 879.992892ms ago: executing program 0 (id=1875): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x20000, 0x2, 0x36, 0x0, 0x4}, 0x9c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000205f4e592bd8100367a03824efb23288001d00000018000180140002006e657673696d30000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x80000000, 0x6f3f, 0x3, 0xa, 0x6, 0x31, 0x4}, 0x1c) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = accept$packet(r3, &(0x7f00000001c0), &(0x7f0000000200)=0x14) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000240)=0x9, 0x4) 872.412598ms ago: executing program 0 (id=1876): r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000600)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x3, @raw_data="c708189fdcbe38f109fd41eca1fab6cd0322a56c377827c1fce9457335c4cf47591deda9c33bc6cc5b7d3385a843760dd72871795d9eec0df1cf3d0589e7946a9bac962801127e85aca8abe490516e85fa1cca18da61bee3bfa7d0f5ed52f194b6024df56e43d16d7ffeeac46eb01cb5757d29bb22d8abce603d90a7001e3f9be35d285b71faf95797b771ab7048423887417857c97c7c08fc78c4a73b824df30347e9b3a7edbacbafa8e996d0705d042048e6bee4c2de8567b14ab3f6fef57955f02e224730470a"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r5, 0x1, 0x1fff, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r6, 0x409, 0x8) fallocate(r6, 0x3, 0x9100, 0x3) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0xffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088800fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r12 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980400000000003000128008000100736974002400028008000300ac1414bb06000f0003000000066af6d83200"], 0x50}}, 0x0) sendto$packet(r4, &(0x7f0000000300)="05d936277c6f5422007f83477cbbb2a2db1358f706933c23cd4f66801baf3cd3caf8e3e4018a0000000000000000000000000000b767128e499099285f360a2e398e25f3e5fdb8f38728e9f1d5d24b", 0x4f, 0x20040894, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0xa, 0x6, @multicast}, 0x14) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) 808.995319ms ago: executing program 4 (id=1877): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x121e, &(0x7f0000002180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x11e8, 0x3a, 0xff, @dev, @local, {[@fragment={0x33, 0x0, 0x35, 0x1, 0x0, 0x11, 0x67}, @hopopts={0x5fc437fd53cf9597, 0x204, '\x00', [@generic={0xfe, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x763}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @local}]}, @hopopts={0x29, 0x1a, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0xf32a, [0x1, 0x80000000, 0x1, 0xe7, 0x4, 0x8000000000000000]}}, @ra={0x5, 0x2, 0x5e87}, @generic={0x7f, 0x8a, "dece65e8eeaa050ae70dd13cc491d55ec74f545c1504ab4beb578ca144e07fe03d39853816f2eacebdb69f85b25a0858d26cc29caa289c4e144162ebacf6fa0f6fe16ff23b49a5e24b28d5ad7d70af2cdde066a9fe3e69f51438c6f3d48c1d132b6ec97210fff54b8eeade317284c77e1805c94e24760ec2fda0d3377fb9c390fa04c6873529ad5a1a7d"}, @ra={0x5, 0x2, 0x5}, @pad1]}, @dstopts={0x2b, 0x6, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x40, 0x4, [0x715, 0x6, 0x8]}}]}, @routing={0x67, 0xc, 0x2, 0x1, 0x0, [@remote, @empty, @loopback, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2={0xfc, 0x2, '\x00', 0x1}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 808.810753ms ago: executing program 5 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafb0c7d1b1403bb91be0e49e2c1", 0x1b}, {&(0x7f0000000180)="76ab57adf6dc6f5a33cf24f7bc16faa42951c8307dba3acb7cc67691172555870057", 0x22}], 0x2) 807.450224ms ago: executing program 4 (id=1879): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x6000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00000000000000000000000000000018"], 0x28}}], 0x2, 0x0) 719.934006ms ago: executing program 4 (id=1880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x2939, 0x0, 0x3, 0x237}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0xfffffffc) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2f}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x401) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) r10 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_STD(r11, 0x40085618, &(0x7f0000000040)=0x320000) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, 0x0, &(0x7f0000000080)=""/157}, 0x20) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x90, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) 719.43649ms ago: executing program 0 (id=1881): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) (async) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000300000000000008004a00ffad0000000000119078ac141442e000000144546441e0000002fffffff70000000000000004ac1414aa00000006e000000200000001e000000100000009ffffffff00000008ac141422000000057f000001000008006401010200000004ac14140b0000000200404e2000189078040f00000b0000000100000000000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r9, 0x40045565, 0x28d) close(r8) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xa500, 0x0) ioctl$SNDCTL_SEQ_RESET(r10, 0x5100) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0xfffffe1a, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x6, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 642.461676ms ago: executing program 4 (id=1882): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x14) 642.24621ms ago: executing program 4 (id=1883): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000d80)={&(0x7f0000000540), 0x6e, &(0x7f0000000c80)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000980)=""/6, 0x6}, {&(0x7f00000009c0)=""/245, 0xf5}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000b40)=""/243, 0xf3}, {&(0x7f0000000c40)=""/16, 0x10}], 0xa, &(0x7f0000000d40)}, 0x40002140) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x50, r7, 0x1, 0x70bd23, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x800) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x400000d0) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r10, &(0x7f0000000240)="91c7a75e6c19d60b20441f71c086243e7116ce29a4f13ee4065f23e8b586b3e213415597b29508c9cc5b7a69de781c360630cf269c303ede26f85637e4c15dba3415de72b4bfff5896a7615736722d8328305fd429a99e700dbaa0481c3a83c517fc31c76de414b8b64f5bc7d2116612f8fe1b61e33a26e70c1ba66507e39a732d494778e5065d0e27652a3b94ce114dd4e1e5f706d361d0e656f2e3fa7dfce5922a98d438dec18197418d06860f49cf69c1330b532809d69ac42573afb07f2bfbd69da1324b54e1358f339754c6169e8772003da3c2f28183b07a71d231f9cdecedef", 0xe3) 0s ago: executing program 1 (id=1884): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r3 = syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) syz_fuse_handle_req(r4, &(0x7f0000002140)="e30a13e3a5e98707ad15817c5735cf51605645c10c9b4217bb3d1d104f4475676b25373b21475d0b7a9b2d588cd007901a094651a2994bf1b739014c9cc380a467f0e690c657e2daec971df214fc9f83a2b32a25f5111250fdb7b42799d8adb218d7ca5756812810164b25e17dd0884320f47802dfa9af93ce88fddddd9927936042b1e48d381090da0938a1435c69de9cb4f91e2afd4aa243f58278c7980aa2731b79e06e2869422251adfd840d2b3181c54b7e3cfcd220c53980b1a5d7c86674cab848bc1148c84dd8bf1b3357c91c2d75f9e300223045df99c66d16265ce45c560111e8517536d0dd19ed8a9c49617fc490bcc7e022919ed42474123c3470815d003dce053621529776f8aff21d1be0e2eeb1e821c210bece2537adbafedf6611816ee5ab879d03bd4b044d6feaf27a22dee3c2bfaabd0c06bc627f11df8e3d985dfa3457e85026f9964817b921ea36ba92e9cf33a574872d9fa475f209de5257ebfa742bd259976b00d2d4f20c608d42722765e60af82170ac3e551c4c8e0ce3d6627f16b9b4c0ff61767926522132825051be2315cde8bba9ca526d1549b27ecc6d4f053e34ccb6802a59c5770d8ab2e0d0861feb2f129476ca142f00d2e6d8011464d50240b106b3fa4e4db84d23523c2e9ea2b3872949a499950e4d3fcdfa135ce997693ac8226e48c17066014d5e479a0e75ca8ca9691b602e5e695cff51a60ad2be53a11dd9accb689dc99d50295555211da305de9d4a66962b924a3eef1030c892a7708e9662dfd613e7eaf7130db484715a48e57517bc2c00bf60ab5c29698028eb4cb25fda79d45fe837b03c5e3f2a736b8de08a25bc11305004f4499e38d2573b528908a9f7da45436a349818f896b6428e96b57c50174a597786c57e936fc2f185934ec8380e5dac6798533479fcca0871edc24bfd39facbb912191317a9a1fe016406aebec7f1f1b7fcdda3c27e62553ceb80de1903067890e454093752ae2f027b3875f49b9d7320c75fdae0bd1369d0c8afe4909476e01890d436ca67ae338e9062eae8f5feede9f4c6193e593339ad304b9b35e0cb13da1dc63eb6c377b8eddd56669f6e598feb214bd0e306a4de19db9d8b52a231043e67097212666ae6f0dd9db97ebd6048bfc037d21052f8d886095503780533f84340f824f606f9a82b25fe63a15876613e253c19f049a2b98921d7d3edb509cf6a94b1792c456094bd245783d5af2f4c31e7e2fa86599467fa21af4057b1d925aa7cb506fea31d53464be1bacac0013cd39a64a840531980fe8b50b1474aeeebea00f54d68d0e51b2e6b830b63b65ae40174a402e34b4e16852e04ab23b0d1cf430ee7d717ee51bbeda8ec53b20c0f6705d3577b6e1e5ca751722776cb10e82b80039ec25af776c829d029255db6e698139be025f5ed7c7c1c493a2c3c550b48a068c034694397670563b176f4fa58d89d8cfe97c4d5afa6cb8154217acf6e2b76c3225f34b808e5901f8e98da9f5a7e2790a43810b51af10f3982374e8c0a9f15bad393bba8bc33a1a9779dc4e96b3445a18893326cd0855194415e9100c2d26190cb46ebaf9c43d663cea23c8a7fa62094ea079a4ae866735a6ebd1a0041798a20f712c3190004f690838e166b98c31cbd8a6a8a6ffe6538bb639ee6ca7f62e830c3cd28693e66325d66c986a733259c265f3477dc3b72fbb890401c93075fd94a12ddd53a86a19f8ed8fc8669f43b04db27e06dce30df52a3243c6afd6687eecb51ebeb3110e23ba03b608528bd4fc4d33817bf25ffe7b6eb1b265e5881a0aa2caff8cf96ec7ee022f8f8f42d47c2447d0c83b3cb99d3538641cb7afb72e8bdf19536e97305b12203f748bc18428ef3d69e031c4821d9ad3f031f2c5180730ffbc76ea0bfe8a88271246b2d4d7af493dbd312edefe16964ed44ac7d90fc46520ce03f56a924be63a8fbe1cdea90aef3ac60ae4d908db51f74ef20446d8ebd0e2906fd6e0431d9431013ec7b7a490139c2f30865bcf1870e4b93fc934963dc0415e281708318298b371e05f75d2bbe87244ab417ca22c8880931537f8f779eba4d9f8c7ad870f896533c66f04bdf3846bc45993769a280c24fce2fad5f8e9eb7bae125838a22772b345eeefc6c3a3a215273923e04b10e6d8b5282aa7414a750ba21a1e7a4402d523af77eddb93d83144f2f92431dac72ade5cd1ba8c5fd8ad12c5523710487877c3fdaf4d7896278bb156d0454451b5724497ac259a543c3929199f9fb93104ba9d76461d513e9940ff020bc5c1d3b04f2bd9e61c038951a5c54103d568457e7cd156339a7d5689ad250a3a5140550f03fb8c976b03b160672160b946756751ed5ad0ccac09fecb54eb26217b288f64113c648627985195ebb0d56aeb021f0923085e858e6ff7ea97e8ca814ed41096abecc96af05b92f8c4f536a3663b30ef92b56ac6ddefe359732a45539d6623ee3530511566732c56a593ece08b2386e981045dde59b4622ab5c42246c9581ef5b328fd345b97cce226be5209cfb7d6ae46bd454d82ade99b0ceafee987d23173ce6e37a1312e51916cd272c04cdc9bf4c0085e153859d010266f90cc2f2a2e4da2ba17b44f13e1051430d005836642856f75fa9ffeb17f50897caa8581efa7bc637c4fec3ba57b393c1bee8f053499b1c27eab5928e08fbda9768d7c308ef58aa6e0fe0dd351abe268b67878c191ab672f33701868ef3ca09dd111a28dc882f235ed9cc391b4013fbb0152102d69b3179b2373175aff379ad398f20439e928b547f743266e8e345d0b55eccffbe12ff6d12b9ad639995682339b002b8c6f1692d6d1b77f1db6cbc43c139a1c33e083b82f467f28cd0b033ff2c4c4734c5a4bf7de4a442712efe2326c13ec395f0aeab7b935194caa2e43b5646b59937671e45f2ee9d27d467a17c53fe6d3b6971ee1bae8f234a6b5ef11d60d213c1646e6f4a829bcfb58fb3133bb8bd481e904d15190f0f899078b02c7832a3b7a03f5de77396e14ae25473ffbf45c2b86b8ffd5e28ce002e43db7cf7dac8e3f0512b0e00bb4801f5065e588c93cc07ec8c49c89077d4e94803b86798937a3bf96bdbd23471dbbc6dfa5a2bd2b75c9a760a16bbedd4d8fac23ba24c05d522ebd1d27e1f12a024365198f2ae450ed6014acc76c8f57a586ae3aeda3c517d17215904e1040f023f25dc2f5e9eb09cda3a4445690e3c103edb7ae53791c7220af62450544c34494e483dc96b11ea0eef0d83fbf856b537ef03cdfc2870ada7a1b36953b0d6fa18694729009983d1718aaab1ebfdeb751871499b0b05d29d39aff853a712cbafd26eb3a079b19d245b769ea11b739cdd085bc779b450d6d5bf97fae2b4b4123d704c9fe2ce49f47f4ee317c4549cbdc8ccdf6a36220d320daf8df4b150e8b2149a0fb17b4156c0950da8ef10f41ef5cd4dbbcde3498bfb598ff9c514af7febac6aa276658df5f677e9d7883c52a140fb8b693a656de57220da4e2642cf281136b30b9df886f5fa009996e1d3c126c7ba2ec70febe327faa91fa63fd80dd566219fe8684ac1e4f5fa77087fa9e61dfbbb82f5762662be5269b979eb546d22f23d5f6e18a8b30178a4c2d320172627ef7eadfc867ab2795f8b97487e2dc7998ae109b7643533e40bb67e5d00806811c3d5672a23f58d9a2fecf4ab3bac69b2ee54a3868dc08ce6728ee1fbe89a17e51a0731c7d5a52d4a61d02388c3e6d5e1185b5aedff0aeae34ef9fc80d6bd77a562bdb8039d33ac702e2fd69599b1fcbbba02babb7c910a8aafaf61aefa2f1ac1d7cec32a33fce6a047def6e0bbb074628e404fe98b8372fc9f37114c42e4a4fd9405bc792b06dd3e216eaa8d8f287bb089b4916db31dbae1e531669c0691d2cc873a05b43ae1d402edd5c97c8632ffd027820230bd164a3cb48d752693cb21d565ddf688316b02297c8874b302eb85b9516c963e6370818e9009c553eff56b290fc6165a30534b00064ec7aea5f395463990a2e34d1e6c60be6d6299924ba48f8e053a739b13106f3588cea0b604616d21c6148c0653542c4acbc62ef0801577eefe937f0072f81dad9499d82039ee641a63557a049f113e356fbf300cbede2c96504a5dbafc325a90f69ab0e9296e4d9f7a27002d9dcd3041a0ba804685aee731d37404568797dd28e85e5a01a242e571a93d77cbacad84c5a3559581d724103f979b17623fd348d25ecf0c2ef699b63a04515b5cf94fd1be7052c151e3c438785693fba4d52aedee95be5a4e567a85e12249b62f7c379598fb7eb88c7b51f49d743ed01406a2469543873b3a424a0d82d07f6cedbe61f9a06560fdef558dc5b4ddd5d1a4d056f3af6a57eb96bf1e7c60c3d2b352b6494501a0e4a88167195c006857b2cf3146670ade14a171a0200ab12deea2be5df7056aad914d499d215c28a3bc8ab36911a7950445b2835da207b54e6dac27b47471c27068b9ef4661dee2c85fdcf4b61870cacdb73e5ed357690ea007af93eee13d110f539b31523b322206a54af5ba38fc1c364bf52db0379d3cd45901c5e26e096c0ae447f419885ceda270131cf8f70e54e82c187b57b83d6c99859b214d232242cfdea5caa59cfc74f308ee8e09697d019405ec734e9e7f3b3311108daf60d99c5043b98a68185153a44c7cb2161c7f738edb396901dee035ed5ec9538702417da690c920df3fde123e4aab72cafd83684af3ef256b05177a454a89ee5eb13b2515075d7d688ba5b665770c9526b9361bca1c6bdb813740de039815c81a6dfbf58004a76d937586e8a7b6200ec186738edf609339ce5673c9bee11ffb34f7a1b05a5735a8ee86b1cecba89d0073b57abf891e0dac858c9a6e85acadfb6117d7de2c664a8a0263e56e4914a3c2a35e17c6dfaf0a9f92c05cf83793ab9d4ae783c8e3643b754228259cd0545a74be001c9e05e20480e37da3c0431d74b22e372c7e141938d659844f8db7f7409754a8b418dd80c8ce39f23b769bf3358c5c39ab1dbc154c712135cf52af376798248c89c2faaa455bcc4e8afa901b1829609ae222c9235d118e121d78d004c10827d0d4a04db3bfc0ba967ae36499a6a4c19cbbf3bb0c44d2eaa47d6e0d40ee5f184ba0d1e36f55b4f8ed6dc7001ba788ccbc52319983a9e62c76d4b51dd4ad1b6a60023e7cbb3fe9b7a1f7566713a3df70ba27d9efdc50e9c7940a509f9086f05128a70c0846edf4c66ae674a07efa5449b9b61ba432a074c6e28d03c6377cde41c821b5f2ced7eaab0d14125decd200b9a9c9c4572cf9a8c1efe8ffb5c24614aef17c870d95e898174add74097d7c0ee82fc28c06bed24be1c25f6b201f112bcb9f01f93653780c2ec392ef95668a2e7992b9c36c78b11b096b15421ce6e9f0c55956e169b142fca8bf72a4acb1fc4a062ef893a7429f5ee4283b2c6ba43810216eefca4ee29fb5cacb7eb7fd6c260e2c4912a47ff27e645cb60a6eeb5228af0e3f9e50f8a77f937169e0b07f1dce9dbff2e8f0159dfabecd494112147ccebda54b30e00dd3edaac50dabc214e628341dabdea9cf46dc1f2996b336a012856edcf32371ccde02bbeede0e4f9b287ee4a18d4dbc1466c356806b214bebad14210e80d481370f0d21ab07c1909cdbff964c3cbda1ba993b6b6031f5bbc87dfa94862c38a825eb66c7fe34b8a7e1d4bd7b0c50a2d7df423ed71fc918a81ca77defc363ef4cab136b57d87c31e517cd1a7243a27e2e5f80dd7a6f1331db0338282d8d90589873771743db65644cd5c78334d748213946a4278524ce5c43f80625ba4a22cdfd75abc283dc87e97e4adf5767484dec04e487b8f839195935ae3d047ab7e062ef2447c0b757982da66221df84e9ba5d5a654418a1c840bc8fe8e7b5f22a48b4e39b5af8c60c5744d22d2ca62f58876ef9046ae47bbde3857cc7d5ef4f04f24c2b5d8e0697b5a47a18cf46b7460b97e7de7e11b1ec5f6c4c1c908a879730415f312c691abb43ed3221679236e0dd60b26d04e1f63a9880bcde6549f769f74f7b3a5dfa83f30c58885dce6c5c6b4fad06278575d42d5c0885573767c40fa4b45caa1dcc370442053db92717fcc6a87a7e937e4c8731396580f81c94ac5c3b645871fc376b888884268fc7d638e1d75655afc56c1fd832c465190e1cdc322554d02fcf2f3d3fcf024265c074150dea0daed4bc47f7a4463cf2099e5b0b22064a4723585d93e6bbcc09ee9c396b7d0c70a3cf67d563ca236dda498c4c12a4dd3f9bc60ba841c0603be56841e532bc2123dc5b253ab9ddef4884af76663dc79d4852bddba420af473b9a82e8ede41b981697cb1edbf3634dc013666bf8f6c586a9e7e085fea42256401dcc395e28468a193274ce2628e80585ff479e3650db2c0d41bf40f28cbc474342d1c48d7d1515d6f84a813a19ad8ac08e286f53db385f721fd2068731c30c6a58217fb64c669cf1707110e122b770635129663b380b477cfbb6a38c6d3338fbf61cd41c2af999f806120b38a3cbba7d40ee0cc26abe0e0fff7a9b2b341d0dea6b47edcc97e983c72baf720d065c08e8ab5e0d3d63d870d9595ae7289fcf2177210ad7b8ce4ec58479a7a335d703faeda70d26c466f90d640917467f193e3087baaf111080eaedff79e26a332d668fbd7fdd6e66a07cdeef215107e8be9664d8c7ce8fcdcd85158a4c3745949d59c8a07149bfec689bfbfb05bb13df934bfb7a6775884a7cdf80e3034d259d9f6d6312cf05b3ef51538f3efccdcec7ed353f4a572d734465a9629b07462a256d499fccbf09a6b3dc8107610155d988d1cf5204d85e6f279ae7d046509de4b87491305886e8ab064e7da7fb229dda2b9d66a4a284b8bc9d1c166bf9ea00979ac606b3f5d95b65cb8522481433640c8e2baf2342da0e5b692eb96b143784f0705990269342a3aeb2db3c9ddf72497ba912486146a1d2750a040c53ef6dd8a66f5ad934a16f3e9f841509b31df675df0ebe5f88207d6fe35fa63d4f6314ce8366584c0296a0c9cced42a63ebd2f4911a772fd68d1233f5283738a8a8dc3de99fe8d04d257e2652a9af0d4d05cada494d97b5926d28f0d822b6a740c9fca6d9176a9b6b8d5c4f3c19aef5a1e1ba90ff5665e00a8487b11ebe6ab73766b9a210788a4dc7dc4f9cd94b00c03f1b558e2ea4ad4b5843a4fa7f68bce75979f2c2031cceb1f90656a435665ed2090b727d59c88dacad14d25c047d44dd896d970f0c40313a2eba4ea22ef0d784924adb82af223560d49f5c79de8e2e09bf8405fb49f253cb570b26a4a6236a18d2c8be73d0b213465fb7eb4c15afb18782d0e50832b9e6082acb370080eae154c884fa5116414a393d42abe445aca7eae02ba2f01ae82da78ddc80f89314e1db44d4eddb0fab78465376edd8e9564d6c56e6a6ca25718037be51430307db65ce464e3e7ab0639ceaf7bf362ba1ef9e9b559490451da6cdd7547cddfb5d2e92478d915b610ecaab5da3e7285d5034284dc5a98fe134222cdedbd2826e9778b628a6297bda20ac51e08b54593899b6236218e3dec9e7788a49d56f6830f945f27ca709d5a3fffc417e799f7daf38ed3456d0494044c733bf53edda153d9af9827dd1792a63fb7b13853ed42d15d6654b6dbe42bf3e250606cf5da08fe6d51c564e8fcfa96383c70f58eba4911da71fd1d71d47c29cbf67fb264be816760c8a878c07450ab2baec8040525306c2da52bc58145724f3cab2a1a5689ad86230fe0ecc6c3351e3b8fd932fdbab7d76af2600889c984d2cd215448aaf879128c4171a074a5e0b4e84b696165c287e7a63b82c2b0d3d1bb8e1b60120250eb32013e34029cd24fbfe36098cc6596c43dc314782774dbeee43a7745f6b770df3b51c246e8c39989e110bbb52035bfe067786deb15ec17257557a197caf15f97abbd248b36077e3ce28077f2e1ca6fe504063afed433693a0aebb6a87bd0bd5deb9c8d7d2e6389ada3fab3d13c9e8658b23ebf5b0b9d48b1b4aec75c8eb518e710660e7358a7903d0ede2d2415f12f29b0f5f91f3afb87291ac705279085f3258c683f5f1eae29fb52c554d04a83b1e342ae3415800f99e441702ec26bf0a90f525b3a1e74e92efd9d425f0238634b504b6e06ef7be50722e9be61cc8fa2b025013aa194ed3414b0c2deef55b94329ad3b6c875ae9cd82f663df86aceb0d183390f55450ce4bff78e31fa2bef4e72d0f2f8ccbbce2055602506d653a11a92da54d6f12322d74c2b99fdff2fbaa2d264d6ed1b5990c572e062b3828be31054aef11e52fcacf7ad0ffd17b906f4646e5c251c9b70d419050828dbdec546828984f9bd6f05f76ad49204bf7966b82ba434232eedf125988fc87c1e61d80bff9c7ac4229c922e56d340654be74e66443fbab70acc84594e6e57ddb8667d2c26be8b338455420e9ab99e169198c1d0f297cce181b3b84cc22422e48c5004a0e272405bcf2475cf297a14023f922671658337b6cb9b0f1f9591522e0eda3ccf8126c4abe9c346ad878df9d5b262f565a49ebc1ff7337bf06c2b13d7cb85ea1b977c5910d0314001a5e1e2e2212a88bb1113d8460352119d113bd4fb58e4abc147d95b3323f6cb883a53a753ee0479738cb60051040cf1bbcf6f99587c0333aa5a3a638d9af42560db137e2ee77a28924f48c31964c68f17aa34b8c8decdca371973217c390fdb9aa14e00f66ed55b8b9feecd512b04f17d3529c2d5ac23c8c23f2997e94f535c8d5f312dd987c9b3db67eda2e25af14df0efd93aa5ef5553ed7c4dba6699538ff4c1323c8fd5379489c3151ecba7343285353e6a4cd20c208edcc87686ba5986ae856cfe628fb963ce8957fd6437b4d52fa3b4956efeb55b01d2e3f43e17b2d08988a9724010e12b9be283c1d3fb7bc6e665fa2fa65614ebfdc4e6e78293fd2566e2fbe0302d089a8246b5b073f4219950fb4425f9e51d4147b5b2090e09b54960300115b921591822060cde022382fe79d8ac824339fadd63ae8f1623fb1d5bc50d0a6bc737616ed7dcf50e2a461092c2490a89bc274238e973d271c26ea9d363c7a1c2eac30aad18a9fa662a38e4de0be0016317dcb276762e7a43a4425e27c8c960b3c0d4dbee7ba494008504a8f411f03f93d16c13bcd42006eec14547ae459dffc6426ef649c85bc862d7020a2798f9c95b085eaa7e1703580ecc2aad2bad69d74329c638b45c2300eba564ab7f1f2e5dd90cc457b5536af41c1000c9d33c02f429d1464d1b9f318dab0efa9c0c1ef7e0772aa68e0d424a6dc746294d7a61a00410c14f27e5de9581c879365c49f78b05d06c9031a98d0497017f9869e0c2db1f56658c0b8eb6caed68d4a908c4eef1823f24835e189958daa8c7c56a307607d28244a62f6072026aaf0d57771db7f010e2375d217cf6543615de5b961248a42becaad6b00d59fd4c2885248046f4afac9d1bdf6edbf4e1f52d8a10f47d086f9765411c4635f32c2edb47b14409f72862b92fc4188648b618219b893a09df257e6e7b5b84a5fc1cf3104397c45f587a56b8a500292d633b7d34abd6eda4c8d6facfc9edba361e05d0b939c11c2a60c73cacff5d8f0ae385cafa3b08c128de404c2760d688232d411de667114ebac3053d9a0926aa3a97ecfbe444528a80dd4124605c623b07d06769296e7a5bc2bf900a40f2cd7fa6b2970c0872c2cd0adf5489685015f40032d4f1fb49347d998487607e451ad71d519acf2b708779925d8873d24015bee9fb2d1aaea4338c50a6702778e859922d2558f9fd42fa8cddf0b3d0511f3ff7b3c3bc04aa0a0fe4e70d8cca15d1c827f7c30bf65a224a7de07705c555ce64f790d1f1c007511d0f7e45b4e1eaaf4bf9a9d4823252c6650d0906f19439f09122e0633db43277ac2bfc42d9bf2a95cd846e29de8ec58efd6b2826fa4d317bafbd31d75d91977d90b4e994da4a029c7c6420649849750b87f8d4f3d18afd81cb3c0abf87864ffed3fcd3291dd42d9374835c43242fdf3bbecf9458c2cb8ff8ff706286505fc2e64e8a137aa6ac3cbf06d0521b287625541ba6093c86d334072b71cbd9b382b17d2e41dc292d3d963cb7db577b36f1120c0317a99c78a141c48226765edf45de260c93988a3e0fae78de13013458e450c7e1bdfdf0aa80e8b8003f60b2b72163239f447468f6943ce140d984b85acd843273e0a7b22cd32f91ed46dec2b074daf33b1f5ce20934f9e91c8d90e9acaa87dcbb5d857618373690cebc6bbc4f214faa4d72c50927e3cb97220e29349943928e0dce64a06ec65a0145caee5b65f713fa0f346fd7c3975910ea7ba223dc8b2ba8720dbd493c4f9b2ed2b2675c836391264f91e00d569abac19a4174b0d7a921c928edcc08978c5f79182a7f7946447366f01e181eaf7b7090122cd3adf394fba9d3f352fa7566662a794cfe57fbd1bff6704616d06933c2819636655194adbdca4e57202c75449e6cb4db08a8892d68334acdeaaeda02ba787ebcce534ac38a20a09d70e9beae6c00b3e5e3689d8252db23b46d8dfaeb73a637b6f207cecf9435e0aa13c8e26ef452e5510c69ba5606c8a01d752f229b284a78faa87981dbe5527ccd6cd555db750f980678bdf45b4ecb590bf3f5ad811f9022fbd1c4a63c644a371b6378d978f2fb8ed5d1e549335d9272f4cbf17a84a812393d9dfa51b0295e67ffbb65ad2955ce087b5da3e3d3dc48b7f043723b16eee7188c96f99ee629f6335898e191909b4bf48aa4b2750a10dde52520a5b7c2121d0d86444e080bc360d22835025be0f7104d5404313f8b028c5ebd983d4487f2e28e99a186a170dd37ef5539e86b66b59dbda0f5ece7d4ac81b711703e00a2e802e0112e2cd8685916f2ef16ad7a59fba9e8e1331eb30db9d8bac4181785fb5d72d105f10beec2d66e812cf0f4613ef2af280380a58a704cb287ccd330f688abac3e3ccc335adc5219d059b9edd0646fba70ef4987cf5001f1f60557aae4f4544312993ad1925513307946fc9e8686492fcf93ae98e60960038eab746a1d065a43d5139e3ca2cd75d1832aa6f8c4aa16856917f04e6f2cb3547db4e1c49a9702724ba9650a4e7bb087964d665bb971a7bd938438d61ade806768f851b0d56d27bd5a1dbf3e0607982e9c59c59f6c11c357e7fbe1ba451c05d2a531f008a9b4f1d19bff87d0bc5b33749a1c06c47cdfb6d594f5e634ea42a71cc9df52908316285fdf3251cd8609add57f832a07ba501c003d6f8a64714bdf49251afdb628eaea1dd6cc8f36b3aea78ddc0dbe8d7dfc15d6bfdf6dfced9eb946a4980d5a3833b098e58d551553383a8b09a7f9488594e5607736e55550c30facd7baf883f08aecde673f42944b5980a28f66ef165940f518290601d853f53046f4e6d4f78a0a3c80d6c19b6d588a4f50ad927466d911593fa4d17d4882a99615fef849c983fce48f800181822a548f3021da9a37a01f96aa88b45759559d3709938a4313ecc901daa97548df028f18c782dc712b29c858b6932bf3087163aa1b13684b301414340c9585e6436a6e7a6dc260a79d220f730a5ce9936bb49893eb64dd8e41eb5bb6cf522bef851b1", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x2b59, 0x100, 0x4, 0x2ee, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1c, 0x0, 0x0, 0x7ffffffffffffffd, &(0x7f0000000300)=[r8, r8], 0x2}) io_uring_enter(r5, 0x2fa, 0xf400, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086315}], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) kernel console output (not intermixed with test programs): ame+0x77/0x7f [ 145.933226][ T9700] RIP: 0033:0x7f075379acb9 [ 145.933235][ T9700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.933246][ T9700] RSP: 002b:00007f07545fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.933257][ T9700] RAX: ffffffffffffffda RBX: 00007f0753a15fa0 RCX: 00007f075379acb9 [ 145.933263][ T9700] RDX: 00002000000000c0 RSI: 0000000080184151 RDI: 0000000000000005 [ 145.933270][ T9700] RBP: 00007f07545fe090 R08: 0000000000000000 R09: 0000000000000000 [ 145.933276][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.933282][ T9700] R13: 00007f0753a16038 R14: 00007f0753a15fa0 R15: 00007ffc6e06aa48 [ 145.933296][ T9700] [ 145.933306][ T9700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.124459][ T9716] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 146.126880][ T9716] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 146.127844][ T9718] binder: 9717:9718 ioctl 4018620d 0 returned -22 [ 146.131384][ T9716] tipc: Enabling of bearer rejected, already enabled [ 146.190912][ T9723] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 146.193605][ T9723] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 146.319425][ T9740] binder: BINDER_SET_CONTEXT_MGR already set [ 146.321779][ T9740] binder: 9738:9740 ioctl 4018620d 200000000100 returned -16 [ 146.326098][ T9740] binder: BINDER_SET_CONTEXT_MGR already set [ 146.329388][ T9740] binder: 9738:9740 ioctl 4018620d 200000004a80 returned -16 [ 146.376564][ T9749] binder: 9748:9749 ioctl 4018620d 0 returned -22 [ 146.427175][ T9756] syzkaller0: entered promiscuous mode [ 146.429546][ T9756] syzkaller0: entered allmulticast mode [ 146.448491][ T9751] tipc: Enabling of bearer rejected, failed to enable media [ 146.853646][ T9769] FAULT_INJECTION: forcing a failure. [ 146.853646][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 146.859943][ T9769] CPU: 3 UID: 0 PID: 9769 Comm: syz.4.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.859963][ T9769] Tainted: [L]=SOFTLOCKUP [ 146.859967][ T9769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.859973][ T9769] Call Trace: [ 146.859977][ T9769] [ 146.859981][ T9769] dump_stack_lvl+0x100/0x190 [ 146.860001][ T9769] should_fail_ex.cold+0x5/0xa [ 146.860021][ T9769] should_failslab+0xc2/0x120 [ 146.860036][ T9769] ? tomoyo_realpath_from_path+0xb6/0x690 [ 146.860049][ T9769] __kmalloc_noprof+0xf6/0x9c0 [ 146.860063][ T9769] ? tomoyo_realpath_from_path+0xb6/0x690 [ 146.860075][ T9769] tomoyo_realpath_from_path+0xb6/0x690 [ 146.860093][ T9769] tomoyo_path_number_perm+0x23c/0x580 [ 146.860114][ T9769] ? tomoyo_path_number_perm+0x22e/0x580 [ 146.860135][ T9769] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.860166][ T9769] ? find_held_lock+0x2b/0x80 [ 146.860181][ T9769] ? hook_file_ioctl_common+0x146/0x410 [ 146.860195][ T9769] ? __fget_files+0x215/0x3d0 [ 146.860211][ T9769] ? __fget_files+0x21f/0x3d0 [ 146.860226][ T9769] security_file_ioctl+0xd3/0x230 [ 146.860239][ T9769] __x64_sys_ioctl+0xb7/0x210 [ 146.860251][ T9769] do_syscall_64+0xc9/0xf80 [ 146.860264][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.860276][ T9769] RIP: 0033:0x7f896c19acb9 [ 146.860285][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.860296][ T9769] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.860307][ T9769] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 146.860314][ T9769] RDX: 0000200000000180 RSI: 00000000c058560f RDI: 0000000000000003 [ 146.860321][ T9769] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 146.860327][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.860333][ T9769] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 146.860347][ T9769] [ 146.860352][ T9769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.014311][ T9773] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 147.019903][ T9773] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 147.024354][ T9773] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 147.024357][ T40] audit: type=1400 audit(1774522924.003:624): avc: denied { firmware_load } for pid=9772 comm="syz.0.1314" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.169660][ T9782] binder: 9780:9782 ioctl 4018620d 0 returned -22 [ 147.216161][ T9785] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 147.219197][ T9785] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 147.224516][ T9786] syzkaller0: entered promiscuous mode [ 147.226898][ T9786] syzkaller0: entered allmulticast mode [ 147.230731][ T9785] tipc: Enabling of bearer rejected, already enabled [ 147.620622][ T9807] binder: 9805:9807 ioctl c0306201 0 returned -14 [ 147.716498][ T9809] tipc: Enabling of bearer rejected, failed to enable media [ 147.915048][ T9818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.962190][ T9825] syzkaller0: entered promiscuous mode [ 147.964548][ T9825] syzkaller0: entered allmulticast mode [ 148.050038][ T9831] binder: 9830:9831 ioctl c0306201 0 returned -14 [ 148.123829][ T9833] tipc: Enabling of bearer rejected, failed to enable media [ 148.252807][ T40] audit: type=1400 audit(1774522925.233:625): avc: denied { map } for pid=9844 comm="syz.2.1343" path="socket:[32699]" dev="sockfs" ino=32699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 148.270106][ T40] audit: type=1400 audit(1774522925.253:626): avc: denied { connect } for pid=9844 comm="syz.2.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.324253][ T9857] syzkaller0: entered promiscuous mode [ 148.326015][ T9857] syzkaller0: entered allmulticast mode [ 148.450217][ T9862] binder: 9861:9862 ioctl c0306201 0 returned -14 [ 148.476754][ T9864] FAULT_INJECTION: forcing a failure. [ 148.476754][ T9864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.482029][ T9864] CPU: 3 UID: 0 PID: 9864 Comm: syz.4.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.482056][ T9864] Tainted: [L]=SOFTLOCKUP [ 148.482062][ T9864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.482073][ T9864] Call Trace: [ 148.482078][ T9864] [ 148.482084][ T9864] dump_stack_lvl+0x100/0x190 [ 148.482112][ T9864] should_fail_ex.cold+0x5/0xa [ 148.482141][ T9864] _copy_from_user+0x2e/0xd0 [ 148.482165][ T9864] snd_pcm_common_ioctl+0x13c5/0x37d0 [ 148.482191][ T9864] ? do_vfs_ioctl+0x226/0x13e0 [ 148.482207][ T9864] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.482225][ T9864] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 148.482263][ T9864] snd_pcm_ioctl+0x84/0xc0 [ 148.482284][ T9864] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 148.482306][ T9864] __x64_sys_ioctl+0x18e/0x210 [ 148.482323][ T9864] do_syscall_64+0xc9/0xf80 [ 148.482366][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.482385][ T9864] RIP: 0033:0x7f896c19acb9 [ 148.482398][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.482420][ T9864] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.482437][ T9864] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 148.482447][ T9864] RDX: 00002000000000c0 RSI: 0000000080184151 RDI: 0000000000000005 [ 148.482457][ T9864] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 148.482467][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.482477][ T9864] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 148.482500][ T9864] [ 148.530652][ T9866] tipc: Enabling of bearer rejected, failed to enable media [ 148.679273][ T9880] syzkaller0: entered promiscuous mode [ 148.680913][ T9880] syzkaller0: entered allmulticast mode [ 148.801889][ T9894] binder: 9893:9894 ioctl 4018620d 0 returned -22 [ 148.839677][ T9896] tipc: Enabling of bearer rejected, failed to enable media [ 149.131825][ T9915] syzkaller0: entered promiscuous mode [ 149.134275][ T9915] syzkaller0: entered allmulticast mode [ 149.280172][ T9919] binder: 9918:9919 ioctl 4018620d 0 returned -22 [ 149.355374][ T9926] FAULT_INJECTION: forcing a failure. [ 149.355374][ T9926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.361023][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.0.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.361043][ T9926] Tainted: [L]=SOFTLOCKUP [ 149.361047][ T9926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.361053][ T9926] Call Trace: [ 149.361058][ T9926] [ 149.361063][ T9926] dump_stack_lvl+0x100/0x190 [ 149.361083][ T9926] should_fail_ex.cold+0x5/0xa [ 149.361104][ T9926] _copy_from_user+0x2e/0xd0 [ 149.361121][ T9926] kstrtouint_from_user+0xd6/0x1d0 [ 149.361132][ T9926] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 149.361143][ T9926] ? __lock_acquire+0x4a5/0x2630 [ 149.361157][ T9926] ? lock_acquire+0x17c/0x330 [ 149.361171][ T9926] proc_fail_nth_write+0x83/0x220 [ 149.361189][ T9926] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.361209][ T9926] vfs_write+0x2aa/0x1070 [ 149.361223][ T9926] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.361240][ T9926] ? __pfx_vfs_write+0x10/0x10 [ 149.361251][ T9926] ? find_held_lock+0x2b/0x80 [ 149.361267][ T9926] ? __fget_files+0x215/0x3d0 [ 149.361283][ T9926] ? __fget_files+0x21f/0x3d0 [ 149.361301][ T9926] ksys_write+0x12a/0x250 [ 149.361313][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 149.361327][ T9926] ? fdget+0x18b/0x210 [ 149.361342][ T9926] do_syscall_64+0xc9/0xf80 [ 149.361358][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.361372][ T9926] RIP: 0033:0x7fdd5d95b58e [ 149.361382][ T9926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.361393][ T9926] RSP: 002b:00007fdd5e7ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.361405][ T9926] RAX: ffffffffffffffda RBX: 00007fdd5e7ed6c0 RCX: 00007fdd5d95b58e [ 149.361412][ T9926] RDX: 0000000000000001 RSI: 00007fdd5e7ed0a0 RDI: 0000000000000004 [ 149.361419][ T9926] RBP: 00007fdd5e7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 149.361426][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.361432][ T9926] R13: 00007fdd5dc16128 R14: 00007fdd5dc16090 R15: 00007fff957647f8 [ 149.361447][ T9926] [ 149.365180][ T9923] tipc: Enabling of bearer rejected, failed to enable media [ 149.573901][ T9940] syzkaller0: entered promiscuous mode [ 149.576811][ T9940] syzkaller0: entered allmulticast mode [ 149.720436][ T9946] binder: 9945:9946 ioctl 4018620d 0 returned -22 [ 149.892964][ T9952] tipc: Enabling of bearer rejected, failed to enable media [ 150.018604][ T9971] syzkaller0: entered promiscuous mode [ 150.020913][ T9971] syzkaller0: entered allmulticast mode [ 150.096451][ T9976] binder: 9975:9976 ioctl c0306201 0 returned -14 [ 150.123947][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 150.416622][ T9994] tipc: Enabling of bearer rejected, failed to enable media [ 150.422503][ T9998] binder: BINDER_SET_CONTEXT_MGR already set [ 150.425106][ T9998] binder: 9997:9998 ioctl 4018620d 2000000000c0 returned -16 [ 150.433175][ T9998] binder: BINDER_SET_CONTEXT_MGR already set [ 150.435562][ T9998] binder: 9997:9998 ioctl 4018620d 200000000040 returned -16 [ 150.474719][T10003] binder: BINDER_SET_CONTEXT_MGR already set [ 150.476668][T10003] binder: 10001:10003 ioctl 4018620d 200000000100 returned -16 [ 150.479528][T10004] syzkaller0: entered promiscuous mode [ 150.480920][T10003] binder: BINDER_SET_CONTEXT_MGR already set [ 150.481310][T10004] syzkaller0: entered allmulticast mode [ 150.483061][T10003] binder: 10001:10003 ioctl 4018620d 200000004a80 returned -16 [ 150.490821][T10003] binder: 10001:10003 ioctl c0306201 0 returned -14 [ 150.522246][T10006] FAULT_INJECTION: forcing a failure. [ 150.522246][T10006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.528336][T10006] CPU: 2 UID: 0 PID: 10006 Comm: syz.2.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.528366][T10006] Tainted: [L]=SOFTLOCKUP [ 150.528371][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.528382][T10006] Call Trace: [ 150.528388][T10006] [ 150.528395][T10006] dump_stack_lvl+0x100/0x190 [ 150.528442][T10006] should_fail_ex.cold+0x5/0xa [ 150.528471][T10006] _copy_to_user+0x32/0xd0 [ 150.528508][T10006] simple_read_from_buffer+0xcb/0x170 [ 150.528531][T10006] proc_fail_nth_read+0x1af/0x230 [ 150.528555][T10006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.528576][T10006] ? rw_verify_area+0xce/0x6d0 [ 150.528592][T10006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.528615][T10006] vfs_read+0x1e4/0xb30 [ 150.528636][T10006] ? __pfx_vfs_read+0x10/0x10 [ 150.528652][T10006] ? find_held_lock+0x2b/0x80 [ 150.528674][T10006] ? __fget_files+0x215/0x3d0 [ 150.528696][T10006] ? __fget_files+0x21f/0x3d0 [ 150.528723][T10006] ksys_read+0x12a/0x250 [ 150.528740][T10006] ? __pfx_ksys_read+0x10/0x10 [ 150.528759][T10006] ? fput+0x79/0x100 [ 150.528784][T10006] do_syscall_64+0xc9/0xf80 [ 150.528812][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.528829][T10006] RIP: 0033:0x7f075375b58e [ 150.528844][T10006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.528859][T10006] RSP: 002b:00007f07545fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.528876][T10006] RAX: ffffffffffffffda RBX: 00007f07545fe6c0 RCX: 00007f075375b58e [ 150.528887][T10006] RDX: 000000000000000f RSI: 00007f07545fe0a0 RDI: 0000000000000006 [ 150.528897][T10006] RBP: 00007f07545fe090 R08: 0000000000000000 R09: 0000000000000000 [ 150.528907][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.528916][T10006] R13: 00007f0753a16038 R14: 00007f0753a15fa0 R15: 00007ffc6e06aa48 [ 150.528939][T10006] [ 150.725559][T10020] tipc: Enabling of bearer rejected, already enabled [ 150.743737][T10023] binder: 10022:10023 ioctl c0306201 0 returned -14 [ 150.760018][T10025] input: syz0 as /devices/virtual/input/input14 [ 150.973711][T10036] syzkaller0: entered promiscuous mode [ 150.975539][T10036] syzkaller0: entered allmulticast mode [ 151.117414][T10042] binder: 10041:10042 ioctl c0306201 0 returned -14 [ 151.124604][T10044] tipc: Enabling of bearer rejected, already enabled [ 151.347309][ T40] audit: type=1400 audit(1774522928.323:627): avc: denied { create } for pid=10060 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.354280][ T40] audit: type=1400 audit(1774522928.333:628): avc: denied { connect } for pid=10060 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.404479][ T40] audit: type=1400 audit(1774522928.383:629): avc: denied { bind } for pid=10060 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.412021][ T40] audit: type=1400 audit(1774522928.383:630): avc: denied { listen } for pid=10060 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.418790][ T40] audit: type=1400 audit(1774522928.383:631): avc: denied { accept } for pid=10060 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.585617][T10072] syzkaller0: entered promiscuous mode [ 151.588084][T10072] syzkaller0: entered allmulticast mode [ 151.680917][T10074] binder: 10073:10074 ioctl c0306201 0 returned -14 [ 151.715760][T10076] tipc: Enabled bearer , priority 0 [ 151.725157][T10075] tipc: Disabling bearer [ 151.932501][T10089] netlink: 'syz.2.1438': attribute type 1 has an invalid length. [ 151.950623][T10089] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.000279][T10096] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 152.003314][T10096] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 152.038187][T10098] binder: 10097:10098 ioctl c0306201 0 returned -14 [ 152.049413][ T40] audit: type=1400 audit(1774522929.033:632): avc: denied { create } for pid=10099 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 152.062114][ T40] audit: type=1400 audit(1774522929.043:633): avc: denied { getopt } for pid=10099 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 152.062395][T10100] tmpfs: Unknown parameter 'ô… [ 152.062395][T10100] ÷äÑIm[ñüÃÔMÒÀË îÓqµ:^Rx/¶'œ€t<… l<•vj\ùÜ4:O„VRµß—*i•b†?‘à2øîEöÜ„LU_„¾›X`@-' [ 152.145346][T10108] tipc: Enabled bearer , priority 0 [ 152.155946][T10107] tipc: Disabling bearer [ 152.345848][T10120] binder: BINDER_SET_CONTEXT_MGR already set [ 152.348436][T10120] binder: 10119:10120 ioctl 4018620d 200000000100 returned -16 [ 152.353481][T10120] binder: BINDER_SET_CONTEXT_MGR already set [ 152.355876][T10120] binder: 10119:10120 ioctl 4018620d 200000004a80 returned -16 [ 152.385440][T10124] binder: BINDER_SET_CONTEXT_MGR already set [ 152.387586][T10124] binder: 10123:10124 ioctl 4018620d 2000000000c0 returned -16 [ 152.393298][T10124] binder: BINDER_SET_CONTEXT_MGR already set [ 152.395482][T10124] binder: 10123:10124 ioctl 4018620d 200000000040 returned -16 [ 152.399048][T10126] FAULT_INJECTION: forcing a failure. [ 152.399048][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.403544][T10126] CPU: 1 UID: 0 PID: 10126 Comm: syz.1.1457 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.403563][T10126] Tainted: [L]=SOFTLOCKUP [ 152.403567][T10126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.403573][T10126] Call Trace: [ 152.403578][T10126] [ 152.403583][T10126] dump_stack_lvl+0x100/0x190 [ 152.403618][T10126] should_fail_ex.cold+0x5/0xa [ 152.403638][T10126] _copy_from_user+0x2e/0xd0 [ 152.403660][T10126] move_addr_to_kernel+0x65/0x170 [ 152.403679][T10126] __sys_sendto+0x1c9/0x520 [ 152.403692][T10126] ? __pfx___sys_sendto+0x10/0x10 [ 152.403717][T10126] ? ksys_write+0x1ac/0x250 [ 152.403729][T10126] ? __pfx_ksys_write+0x10/0x10 [ 152.403743][T10126] __x64_sys_sendto+0xe0/0x1c0 [ 152.403755][T10126] ? do_syscall_64+0x94/0xf80 [ 152.403767][T10126] ? lockdep_hardirqs_on+0x78/0x100 [ 152.403778][T10126] do_syscall_64+0xc9/0xf80 [ 152.403790][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.403802][T10126] RIP: 0033:0x7fcd9599acb9 [ 152.403812][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.403822][T10126] RSP: 002b:00007fcd9679c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 152.403833][T10126] RAX: ffffffffffffffda RBX: 00007fcd95c15fa0 RCX: 00007fcd9599acb9 [ 152.403840][T10126] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 152.403847][T10126] RBP: 00007fcd9679c090 R08: 0000200000000140 R09: 0000000000000014 [ 152.403866][T10126] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 152.403872][T10126] R13: 00007fcd95c16038 R14: 00007fcd95c15fa0 R15: 00007ffef80c12f8 [ 152.403886][T10126] [ 152.539158][T10133] tipc: Enabled bearer , priority 0 [ 152.543106][T10132] tipc: Disabling bearer [ 152.635233][ T40] audit: type=1400 audit(1774522929.613:634): avc: denied { link } for pid=10138 comm="syz.1.1463" name="file0" dev="9p" ino=72876165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.675039][T10141] syzkaller0: entered promiscuous mode [ 152.676890][T10141] syzkaller0: entered allmulticast mode [ 152.810810][ T40] audit: type=1400 audit(1774522929.793:635): avc: denied { write } for pid=10151 comm="syz.0.1469" path="socket:[36270]" dev="sockfs" ino=36270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.802367][T10165] tipc: Enabling of bearer rejected, already enabled [ 153.834104][T10173] binder: BINDER_SET_CONTEXT_MGR already set [ 153.836475][T10173] binder: 10172:10173 ioctl 4018620d 2000000000c0 returned -16 [ 153.842650][T10173] binder: BINDER_SET_CONTEXT_MGR already set [ 153.845181][T10173] binder: 10172:10173 ioctl 4018620d 200000000040 returned -16 [ 153.893027][T10179] tipc: Enabling of bearer rejected, already enabled [ 153.900264][T10179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.918943][T10179] tipc: Resetting bearer [ 154.011902][T10189] tipc: Enabled bearer , priority 0 [ 154.016937][T10188] tipc: Disabling bearer [ 154.295537][T10203] binder: BINDER_SET_CONTEXT_MGR already set [ 154.297431][T10203] binder: 10202:10203 ioctl 4018620d 200000000100 returned -16 [ 154.302658][T10203] binder: BINDER_SET_CONTEXT_MGR already set [ 154.304573][T10203] binder: 10202:10203 ioctl 4018620d 200000004a80 returned -16 [ 154.307208][T10203] binder: 10202:10203 ioctl c0306201 0 returned -14 [ 154.316497][T10204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10204 comm=syz.0.1488 [ 154.385619][T10208] syzkaller0: entered promiscuous mode [ 154.388047][T10208] syzkaller0: entered allmulticast mode [ 154.933127][ T40] audit: type=1400 audit(1774522931.913:636): avc: denied { bind } for pid=10219 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.627600][T10212] tipc: Enabling of bearer rejected, already enabled [ 155.636152][T10223] tun0: tun_chr_ioctl cmd 1074025675 [ 155.638508][T10223] tun0: persist enabled [ 155.640383][T10224] tun0: tun_chr_ioctl cmd 1074025675 [ 155.642775][T10224] tun0: persist disabled [ 155.698187][T10229] binder: BINDER_SET_CONTEXT_MGR already set [ 155.700768][T10229] binder: 10228:10229 ioctl 4018620d 200000000100 returned -16 [ 155.705772][T10229] binder: BINDER_SET_CONTEXT_MGR already set [ 155.710775][T10229] binder: 10228:10229 ioctl 4018620d 200000004a80 returned -16 [ 155.728942][T10233] FAULT_INJECTION: forcing a failure. [ 155.728942][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.730389][T10229] binder: 10228:10229 ioctl c0306201 0 returned -14 [ 155.734377][T10233] CPU: 2 UID: 0 PID: 10233 Comm: syz.1.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.734404][T10233] Tainted: [L]=SOFTLOCKUP [ 155.734409][T10233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.734419][T10233] Call Trace: [ 155.734425][T10233] [ 155.734433][T10233] dump_stack_lvl+0x100/0x190 [ 155.734479][T10233] should_fail_ex.cold+0x5/0xa [ 155.734508][T10233] _copy_to_user+0x32/0xd0 [ 155.734539][T10233] simple_read_from_buffer+0xcb/0x170 [ 155.734560][T10233] proc_fail_nth_read+0x1af/0x230 [ 155.734584][T10233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.734607][T10233] ? rw_verify_area+0xce/0x6d0 [ 155.734622][T10233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.734644][T10233] vfs_read+0x1e4/0xb30 [ 155.734665][T10233] ? __pfx_vfs_read+0x10/0x10 [ 155.734679][T10233] ? find_held_lock+0x2b/0x80 [ 155.734701][T10233] ? __fget_files+0x215/0x3d0 [ 155.734725][T10233] ? __fget_files+0x21f/0x3d0 [ 155.734750][T10233] ksys_read+0x12a/0x250 [ 155.734768][T10233] ? __pfx_ksys_read+0x10/0x10 [ 155.734791][T10233] do_syscall_64+0xc9/0xf80 [ 155.734820][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.734837][T10233] RIP: 0033:0x7fcd9595b58e [ 155.734851][T10233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.734866][T10233] RSP: 002b:00007fcd9679bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.734883][T10233] RAX: ffffffffffffffda RBX: 00007fcd9679c6c0 RCX: 00007fcd9595b58e [ 155.734893][T10233] RDX: 000000000000000f RSI: 00007fcd9679c0a0 RDI: 0000000000000004 [ 155.734903][T10233] RBP: 00007fcd9679c090 R08: 0000000000000000 R09: 0000000000000000 [ 155.734912][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.734922][T10233] R13: 00007fcd95c16038 R14: 00007fcd95c15fa0 R15: 00007ffef80c12f8 [ 155.734945][T10233] [ 155.895392][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 156.022258][T10251] binder: BINDER_SET_CONTEXT_MGR already set [ 156.024252][T10251] binder: 10250:10251 ioctl 4018620d 2000000000c0 returned -16 [ 156.030639][T10251] binder: BINDER_SET_CONTEXT_MGR already set [ 156.033372][T10251] binder: 10250:10251 ioctl 4018620d 200000000040 returned -16 [ 156.073630][T10255] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 156.075985][T10255] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 156.163140][T10259] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 156.166181][T10259] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 156.216476][T10263] binder: BINDER_SET_CONTEXT_MGR already set [ 156.220621][T10263] binder: 10262:10263 ioctl 4018620d 200000000100 returned -16 [ 156.226463][T10263] binder: BINDER_SET_CONTEXT_MGR already set [ 156.229822][T10263] binder: 10262:10263 ioctl 4018620d 200000004a80 returned -16 [ 156.233550][T10263] binder: 10262:10263 ioctl c0306201 0 returned -14 [ 157.474713][T10295] binder: BINDER_SET_CONTEXT_MGR already set [ 157.476869][T10295] binder: 10294:10295 ioctl 4018620d 200000000100 returned -16 [ 157.482225][T10295] binder: BINDER_SET_CONTEXT_MGR already set [ 157.484311][T10295] binder: 10294:10295 ioctl 4018620d 200000004a80 returned -16 [ 158.607843][T10322] FAULT_INJECTION: forcing a failure. [ 158.607843][T10322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.615704][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.4.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.615733][T10322] Tainted: [L]=SOFTLOCKUP [ 158.615740][T10322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.615750][T10322] Call Trace: [ 158.615756][T10322] [ 158.615763][T10322] dump_stack_lvl+0x100/0x190 [ 158.615791][T10322] should_fail_ex.cold+0x5/0xa [ 158.615820][T10322] _copy_from_user+0x2e/0xd0 [ 158.615844][T10322] copy_msghdr_from_user+0x9f/0x4f0 [ 158.615862][T10322] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.615883][T10322] ? _kstrtoull+0x13c/0x1f0 [ 158.615898][T10322] ? __pfx__kstrtoull+0x10/0x10 [ 158.615918][T10322] ___sys_sendmsg+0x106/0x1e0 [ 158.615936][T10322] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.615983][T10322] __sys_sendmmsg+0x205/0x430 [ 158.616009][T10322] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.616037][T10322] ? __fget_files+0x215/0x3d0 [ 158.616057][T10322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.616088][T10322] ? fput+0x79/0x100 [ 158.616110][T10322] ? ksys_write+0x1ac/0x250 [ 158.616128][T10322] ? __pfx_ksys_write+0x10/0x10 [ 158.616150][T10322] __x64_sys_sendmmsg+0x9c/0x100 [ 158.616171][T10322] ? lockdep_hardirqs_on+0x78/0x100 [ 158.616189][T10322] do_syscall_64+0xc9/0xf80 [ 158.616209][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.616226][T10322] RIP: 0033:0x7f896c19acb9 [ 158.616240][T10322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.616257][T10322] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.616274][T10322] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 158.616286][T10322] RDX: 0000000000000002 RSI: 0000200000006480 RDI: 0000000000000003 [ 158.616297][T10322] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 158.616307][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.616317][T10322] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 158.616341][T10322] [ 159.799776][T10360] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 160.396517][T10347] syzkaller0: entered promiscuous mode [ 160.398414][T10347] syzkaller0: entered allmulticast mode [ 160.857459][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.878331][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.889716][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.895764][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.899038][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.867206][T10403] tipc: Enabling of bearer rejected, failed to enable media [ 162.880782][T10379] lo speed is unknown, defaulting to 1000 [ 163.009099][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 163.032197][T10419] syzkaller0: entered promiscuous mode [ 163.034559][T10419] syzkaller0: entered allmulticast mode [ 163.039393][T10379] vxcan1 speed is unknown, defaulting to 1000 [ 163.083358][ T5950] Bluetooth: hci3: command tx timeout [ 163.098921][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 163.098936][ T40] audit: type=1400 audit(1774522940.083:638): avc: denied { write } for pid=10416 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.348643][T10429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1567'. [ 164.287362][T10432] FAULT_INJECTION: forcing a failure. [ 164.287362][T10432] name failslab, interval 1, probability 0, space 0, times 0 [ 164.291993][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.0.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.292011][T10432] Tainted: [L]=SOFTLOCKUP [ 164.292015][T10432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.292021][T10432] Call Trace: [ 164.292025][T10432] [ 164.292029][T10432] dump_stack_lvl+0x100/0x190 [ 164.292047][T10432] should_fail_ex.cold+0x5/0xa [ 164.292067][T10432] should_failslab+0xc2/0x120 [ 164.292082][T10432] __kmalloc_cache_noprof+0x80/0x810 [ 164.292093][T10432] ? ip6_dst_lookup_tail.constprop.0+0x8ef/0x2110 [ 164.292104][T10432] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 164.292116][T10432] ? ip6_setup_cork+0x21e/0x1530 [ 164.292140][T10432] ? ip6_setup_cork+0x21e/0x1530 [ 164.292156][T10432] ip6_setup_cork+0x21e/0x1530 [ 164.292175][T10432] ip6_make_skb+0x267/0x400 [ 164.292186][T10432] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 164.292208][T10432] ? __pfx_ip6_make_skb+0x10/0x10 [ 164.292223][T10432] ? find_held_lock+0x2b/0x80 [ 164.292237][T10432] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 164.292250][T10432] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 164.292265][T10432] ? udpv6_sendmsg+0x2340/0x2d20 [ 164.292278][T10432] udpv6_sendmsg+0x2340/0x2d20 [ 164.292292][T10432] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 164.292311][T10432] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 164.292327][T10432] ? avc_has_perm+0x135/0x1e0 [ 164.292355][T10432] ? __might_fault+0x30/0x140 [ 164.292367][T10432] ? __might_fault+0xc5/0x140 [ 164.292378][T10432] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 164.292392][T10432] ? inet6_sendmsg+0x105/0x140 [ 164.292405][T10432] inet6_sendmsg+0x105/0x140 [ 164.292420][T10432] ____sys_sendmsg+0x704/0xc30 [ 164.292431][T10432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.292443][T10432] ? _kstrtoull+0x13c/0x1f0 [ 164.292454][T10432] ? __pfx__kstrtoull+0x10/0x10 [ 164.292466][T10432] ___sys_sendmsg+0x190/0x1e0 [ 164.292477][T10432] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.292504][T10432] __sys_sendmmsg+0x205/0x430 [ 164.292520][T10432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.292538][T10432] ? __fget_files+0x215/0x3d0 [ 164.292567][T10432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.292586][T10432] ? fput+0x79/0x100 [ 164.292601][T10432] ? ksys_write+0x1ac/0x250 [ 164.292612][T10432] ? __pfx_ksys_write+0x10/0x10 [ 164.292626][T10432] __x64_sys_sendmmsg+0x9c/0x100 [ 164.292640][T10432] ? lockdep_hardirqs_on+0x78/0x100 [ 164.292652][T10432] do_syscall_64+0xc9/0xf80 [ 164.292664][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.292675][T10432] RIP: 0033:0x7fdd5d99acb9 [ 164.292685][T10432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.292695][T10432] RSP: 002b:00007fdd5e80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.292706][T10432] RAX: ffffffffffffffda RBX: 00007fdd5dc15fa0 RCX: 00007fdd5d99acb9 [ 164.292713][T10432] RDX: 0000000000000002 RSI: 0000200000006480 RDI: 0000000000000003 [ 164.292719][T10432] RBP: 00007fdd5e80e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.292725][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.292731][T10432] R13: 00007fdd5dc16038 R14: 00007fdd5dc15fa0 R15: 00007fff957647f8 [ 164.292745][T10432] [ 164.338152][T10379] chnl_net:caif_netlink_parms(): no params data found [ 164.381543][T10438] binder: BINDER_SET_CONTEXT_MGR already set [ 164.406739][T10438] binder: 10437:10438 ioctl 4018620d 200000000040 returned -16 [ 164.435996][ T40] audit: type=1400 audit(1774522941.413:639): avc: denied { mount } for pid=10445 comm="syz.0.1573" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.449008][ T40] audit: type=1400 audit(1774522941.423:640): avc: denied { remount } for pid=10445 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.465829][ T40] audit: type=1400 audit(1774522941.443:641): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.506274][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.509789][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.512937][T10379] bridge_slave_0: entered allmulticast mode [ 164.515844][T10379] bridge_slave_0: entered promiscuous mode [ 164.533807][T10452] FAULT_INJECTION: forcing a failure. [ 164.533807][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 164.540831][T10452] CPU: 2 UID: 0 PID: 10452 Comm: syz.0.1575 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.540858][T10452] Tainted: [L]=SOFTLOCKUP [ 164.540864][T10452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.540874][T10452] Call Trace: [ 164.540880][T10452] [ 164.540886][T10452] dump_stack_lvl+0x100/0x190 [ 164.540913][T10452] should_fail_ex.cold+0x5/0xa [ 164.540942][T10452] should_failslab+0xc2/0x120 [ 164.540964][T10452] ? tomoyo_realpath_from_path+0xb6/0x690 [ 164.540982][T10452] __kmalloc_noprof+0xf6/0x9c0 [ 164.541005][T10452] ? tomoyo_realpath_from_path+0xb6/0x690 [ 164.541023][T10452] tomoyo_realpath_from_path+0xb6/0x690 [ 164.541046][T10452] tomoyo_path_number_perm+0x23c/0x580 [ 164.541070][T10452] ? tomoyo_path_number_perm+0x22e/0x580 [ 164.541097][T10452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.541146][T10452] ? find_held_lock+0x2b/0x80 [ 164.541168][T10452] ? hook_file_ioctl_common+0x146/0x410 [ 164.541188][T10452] ? __fget_files+0x215/0x3d0 [ 164.541212][T10452] ? __fget_files+0x21f/0x3d0 [ 164.541235][T10452] security_file_ioctl+0xd3/0x230 [ 164.541254][T10452] __x64_sys_ioctl+0xb7/0x210 [ 164.541272][T10452] do_syscall_64+0xc9/0xf80 [ 164.541300][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.541316][T10452] RIP: 0033:0x7fdd5d99acb9 [ 164.541331][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.541345][T10452] RSP: 002b:00007fdd5e80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.541362][T10452] RAX: ffffffffffffffda RBX: 00007fdd5dc15fa0 RCX: 00007fdd5d99acb9 [ 164.541373][T10452] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 164.541383][T10452] RBP: 00007fdd5e80e090 R08: 0000000000000000 R09: 0000000000000000 [ 164.541393][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.541402][T10452] R13: 00007fdd5dc16038 R14: 00007fdd5dc15fa0 R15: 00007fff957647f8 [ 164.541426][T10452] [ 164.541961][T10452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.614848][T10452] binder_alloc: 10451: binder_alloc_buf size 65856 failed, no address space [ 164.617756][T10452] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 164.655061][T10454] binder_alloc: 10453: binder_alloc_buf size 65856 failed, no address space [ 164.657885][T10454] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 164.714181][ T40] audit: type=1400 audit(1774522941.693:642): avc: denied { getopt } for pid=10455 comm="syz.0.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.721585][ T40] audit: type=1400 audit(1774522941.693:643): avc: denied { setopt } for pid=10455 comm="syz.0.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.148465][ T5950] Bluetooth: hci3: command tx timeout [ 165.728336][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.731535][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.734609][T10379] bridge_slave_1: entered allmulticast mode [ 165.738757][T10379] bridge_slave_1: entered promiscuous mode [ 165.772527][T10465] syzkaller0: entered promiscuous mode [ 165.774373][T10465] syzkaller0: entered allmulticast mode [ 166.042757][T10478] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1581'. [ 166.047438][ T40] audit: type=1400 audit(1774522943.033:644): avc: denied { bind } for pid=10475 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.054013][ T40] audit: type=1400 audit(1774522943.043:645): avc: denied { name_bind } for pid=10475 comm="syz.1.1581" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 166.060829][ T40] audit: type=1400 audit(1774522943.043:646): avc: denied { node_bind } for pid=10475 comm="syz.1.1581" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 166.874634][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.879841][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.897808][T10379] team0: Port device team_slave_0 added [ 166.901387][T10379] team0: Port device team_slave_1 added [ 166.915045][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.917313][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.925737][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.930479][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.932680][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.940950][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.965804][T10379] hsr_slave_0: entered promiscuous mode [ 166.968733][T10379] hsr_slave_1: entered promiscuous mode [ 166.970921][T10379] debugfs: 'hsr0' already exists in 'hsr' [ 166.973009][T10379] Cannot create hsr debugfs directory [ 167.099298][T10379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.104539][T10379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.152020][T10379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.228078][ T5950] Bluetooth: hci3: command tx timeout [ 168.233983][T10379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.289309][T10510] syzkaller0: entered promiscuous mode [ 168.291506][T10510] syzkaller0: entered allmulticast mode [ 168.306550][ T40] audit: type=1400 audit(1774522945.283:647): avc: denied { create } for pid=10524 comm="syz.4.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 169.308271][ T5950] Bluetooth: hci3: command tx timeout [ 169.420106][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 169.466455][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.483347][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.493228][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.496682][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.533903][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.537091][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.614468][T10552] FAULT_INJECTION: forcing a failure. [ 169.614468][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 169.622393][T10552] CPU: 2 UID: 0 PID: 10552 Comm: syz.4.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.622426][T10552] Tainted: [L]=SOFTLOCKUP [ 169.622432][T10552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.622443][T10552] Call Trace: [ 169.622449][T10552] [ 169.622455][T10552] dump_stack_lvl+0x100/0x190 [ 169.622483][T10552] should_fail_ex.cold+0x5/0xa [ 169.622515][T10552] should_failslab+0xc2/0x120 [ 169.622538][T10552] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 169.622563][T10552] ? ip6_setup_cork+0x740/0x1530 [ 169.622592][T10552] ? kmemdup_noprof+0x29/0x60 [ 169.622612][T10552] ? __kasan_kmalloc+0xaa/0xb0 [ 169.622630][T10552] kmemdup_noprof+0x29/0x60 [ 169.622651][T10552] ip6_setup_cork+0x740/0x1530 [ 169.622682][T10552] ip6_make_skb+0x267/0x400 [ 169.622700][T10552] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 169.622728][T10552] ? __pfx_ip6_make_skb+0x10/0x10 [ 169.622753][T10552] ? find_held_lock+0x2b/0x80 [ 169.622775][T10552] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 169.622795][T10552] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 169.622820][T10552] ? udpv6_sendmsg+0x2340/0x2d20 [ 169.622839][T10552] udpv6_sendmsg+0x2340/0x2d20 [ 169.622862][T10552] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 169.622892][T10552] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 169.622917][T10552] ? avc_has_perm+0x135/0x1e0 [ 169.622964][T10552] ? __might_fault+0x30/0x140 [ 169.622984][T10552] ? __might_fault+0xc5/0x140 [ 169.623001][T10552] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 169.623024][T10552] ? inet6_sendmsg+0x105/0x140 [ 169.623043][T10552] inet6_sendmsg+0x105/0x140 [ 169.623067][T10552] ____sys_sendmsg+0x704/0xc30 [ 169.623086][T10552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.623105][T10552] ? _kstrtoull+0x13c/0x1f0 [ 169.623122][T10552] ? __pfx__kstrtoull+0x10/0x10 [ 169.623142][T10552] ___sys_sendmsg+0x190/0x1e0 [ 169.623161][T10552] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.623206][T10552] __sys_sendmmsg+0x205/0x430 [ 169.623233][T10552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.623261][T10552] ? __fget_files+0x215/0x3d0 [ 169.623283][T10552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.623314][T10552] ? fput+0x79/0x100 [ 169.623337][T10552] ? ksys_write+0x1ac/0x250 [ 169.623356][T10552] ? __pfx_ksys_write+0x10/0x10 [ 169.623378][T10552] __x64_sys_sendmmsg+0x9c/0x100 [ 169.623401][T10552] ? lockdep_hardirqs_on+0x78/0x100 [ 169.623423][T10552] do_syscall_64+0xc9/0xf80 [ 169.623445][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.623462][T10552] RIP: 0033:0x7f896c19acb9 [ 169.623478][T10552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.623494][T10552] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.623513][T10552] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 169.623524][T10552] RDX: 0000000000000002 RSI: 0000200000006480 RDI: 0000000000000003 [ 169.623534][T10552] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.623543][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.623554][T10552] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 169.623577][T10552] [ 169.786518][ T40] audit: type=1400 audit(1774522946.763:648): avc: denied { create } for pid=10555 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.792961][ T40] audit: type=1400 audit(1774522946.763:649): avc: denied { setopt } for pid=10555 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.804835][ T40] audit: type=1400 audit(1774522946.763:650): avc: denied { accept } for pid=10555 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.865363][T10560] binder_alloc: 10559: binder_alloc_buf size 65856 failed, no address space [ 169.872805][T10560] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 170.500960][T10577] FAULT_INJECTION: forcing a failure. [ 170.500960][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 170.505198][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.1.1607 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.505217][T10577] Tainted: [L]=SOFTLOCKUP [ 170.505221][T10577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.505228][T10577] Call Trace: [ 170.505233][T10577] [ 170.505238][T10577] dump_stack_lvl+0x100/0x190 [ 170.505258][T10577] should_fail_ex.cold+0x5/0xa [ 170.505278][T10577] should_failslab+0xc2/0x120 [ 170.505293][T10577] ? tomoyo_encode2+0xfb/0x3c0 [ 170.505305][T10577] __kmalloc_noprof+0xf6/0x9c0 [ 170.505320][T10577] ? tomoyo_encode2+0xfb/0x3c0 [ 170.505330][T10577] tomoyo_encode2+0xfb/0x3c0 [ 170.505344][T10577] tomoyo_encode+0x29/0x50 [ 170.505356][T10577] tomoyo_realpath_from_path+0x18c/0x690 [ 170.505371][T10577] tomoyo_path_number_perm+0x23c/0x580 [ 170.505393][T10577] ? tomoyo_path_number_perm+0x22e/0x580 [ 170.505412][T10577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.505443][T10577] ? find_held_lock+0x2b/0x80 [ 170.505457][T10577] ? hook_file_ioctl_common+0x146/0x410 [ 170.505471][T10577] ? __fget_files+0x215/0x3d0 [ 170.505487][T10577] ? __fget_files+0x21f/0x3d0 [ 170.505502][T10577] security_file_ioctl+0xd3/0x230 [ 170.505515][T10577] __x64_sys_ioctl+0xb7/0x210 [ 170.505527][T10577] do_syscall_64+0xc9/0xf80 [ 170.505541][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.505553][T10577] RIP: 0033:0x7fcd9599acb9 [ 170.505562][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.505573][T10577] RSP: 002b:00007fcd9679c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.505584][T10577] RAX: ffffffffffffffda RBX: 00007fcd95c15fa0 RCX: 00007fcd9599acb9 [ 170.505591][T10577] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 170.505598][T10577] RBP: 00007fcd9679c090 R08: 0000000000000000 R09: 0000000000000000 [ 170.505604][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.505610][T10577] R13: 00007fcd95c16038 R14: 00007fcd95c15fa0 R15: 00007ffef80c12f8 [ 170.505624][T10577] [ 170.505637][T10577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.584212][T10577] binder_alloc: 10576: binder_alloc_buf size 65856 failed, no address space [ 170.587739][T10577] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 170.980453][T10569] syzkaller0: entered promiscuous mode [ 170.982272][T10569] syzkaller0: entered allmulticast mode [ 171.046420][ T40] audit: type=1400 audit(1774522948.023:651): avc: denied { setopt } for pid=10585 comm="syz.0.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.614803][T10591] binder_alloc: 10590: binder_alloc_buf size 65856 failed, no address space [ 171.617871][T10591] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 172.112024][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.238510][ T40] audit: type=1400 audit(1774522949.223:652): avc: denied { append } for pid=10614 comm="syz.4.1619" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 172.250654][ T40] audit: type=1400 audit(1774522949.233:653): avc: denied { create } for pid=10614 comm="syz.4.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.252632][T10379] veth0_vlan: entered promiscuous mode [ 172.262736][ T40] audit: type=1400 audit(1774522949.243:654): avc: denied { ioctl } for pid=10614 comm="syz.4.1619" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.282511][T10379] veth1_vlan: entered promiscuous mode [ 172.305555][T10379] veth0_macvtap: entered promiscuous mode [ 172.310088][T10379] veth1_macvtap: entered promiscuous mode [ 172.320454][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.322854][ T40] audit: type=1400 audit(1774522949.303:655): avc: denied { map } for pid=10624 comm="syz.0.1621" path="socket:[37732]" dev="sockfs" ino=37732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.327713][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.330449][ T40] audit: type=1400 audit(1774522949.303:656): avc: denied { accept } for pid=10624 comm="syz.0.1621" path="socket:[37732]" dev="sockfs" ino=37732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.349807][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.354895][ T62] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.359602][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.365387][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.374969][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.421480][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.424050][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.444109][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.446851][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.558282][ T942] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 173.708020][ T942] usb 9-1: device descriptor read/64, error -71 [ 173.848435][T10656] syzkaller0: entered promiscuous mode [ 173.851470][T10656] syzkaller0: entered allmulticast mode [ 173.958267][ T942] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 174.098411][ T942] usb 9-1: device descriptor read/64, error -71 [ 174.214245][ T942] usb usb9-port1: attempt power cycle [ 174.429112][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 174.439977][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 174.559732][ T942] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 174.592188][ T942] usb 9-1: device descriptor read/8, error -71 [ 174.759491][T10681] overlayfs: missing 'lowerdir' [ 174.830954][ T942] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 174.856158][ T942] usb 9-1: device descriptor read/8, error -71 [ 174.970295][ T942] usb usb9-port1: unable to enumerate USB device [ 175.268316][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 175.268331][ T40] audit: type=1400 audit(1774522952.253:660): avc: denied { bind } for pid=10693 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.287314][ T40] audit: type=1400 audit(1774522952.263:661): avc: denied { create } for pid=10693 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 175.288365][T10694] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1642'. [ 175.340970][ T40] audit: type=1400 audit(1774522952.323:662): avc: denied { accept } for pid=10693 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.521298][T10704] netlink: 'syz.0.1646': attribute type 1 has an invalid length. [ 176.063944][T10693] delete_channel: no stack [ 176.315379][T10704] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 176.370041][T10713] binder_alloc: 10712: binder_alloc_buf size 65856 failed, no address space [ 176.375545][T10713] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 176.432536][T10717] syzkaller0: entered promiscuous mode [ 176.434407][T10717] syzkaller0: entered allmulticast mode [ 176.437739][T10717] TC_ACT_REPEAT abuse ? [ 176.490929][ T40] audit: type=1400 audit(1774522953.473:663): avc: denied { name_bind 0x1000000 } for pid=10721 comm="syz.0.1652" path="socket:[40167]" dev="sockfs" ino=40167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.556737][T10731] FAULT_INJECTION: forcing a failure. [ 176.556737][T10731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.562224][T10731] CPU: 2 UID: 0 PID: 10731 Comm: syz.4.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.562243][T10731] Tainted: [L]=SOFTLOCKUP [ 176.562247][T10731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.562253][T10731] Call Trace: [ 176.562257][T10731] [ 176.562262][T10731] dump_stack_lvl+0x100/0x190 [ 176.562296][T10731] should_fail_ex.cold+0x5/0xa [ 176.562316][T10731] _copy_from_user+0x2e/0xd0 [ 176.562353][T10731] binder_ioctl+0x491/0x7450 [ 176.562376][T10731] ? tomoyo_path_number_perm+0x188/0x580 [ 176.562397][T10731] ? __pfx_binder_ioctl+0x10/0x10 [ 176.562409][T10731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.562427][T10731] ? do_vfs_ioctl+0x226/0x13e0 [ 176.562437][T10731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.562446][T10731] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 176.562460][T10731] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.562481][T10731] ? selinux_file_ioctl+0x139/0x290 [ 176.562492][T10731] ? selinux_file_ioctl+0xb4/0x290 [ 176.562504][T10731] ? __pfx_binder_ioctl+0x10/0x10 [ 176.562514][T10731] __x64_sys_ioctl+0x18e/0x210 [ 176.562525][T10731] do_syscall_64+0xc9/0xf80 [ 176.562542][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.562556][T10731] RIP: 0033:0x7f896c19acb9 [ 176.562566][T10731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.562576][T10731] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.562588][T10731] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 176.562594][T10731] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 176.562601][T10731] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 176.562607][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.562613][T10731] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 176.562627][T10731] [ 176.562632][T10731] binder: 10729:10731 ioctl c0306201 200000000c00 returned -14 [ 176.574360][T10733] team0: Device gtp0 is of different type [ 176.624213][T10738] binder_alloc: 10732: binder_alloc_buf size 65856 failed, no address space [ 176.646177][T10738] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 176.779635][T10746] input: syz1 as /devices/virtual/input/input16 [ 177.910163][T10746] netlink: 'syz.0.1660': attribute type 29 has an invalid length. [ 177.934974][T10758] syzkaller0: entered promiscuous mode [ 177.936849][T10758] syzkaller0: entered allmulticast mode [ 178.010597][T10776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18622 sclass=netlink_route_socket pid=10776 comm=syz.4.1666 [ 178.288224][ T852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.305068][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1671'. [ 178.438065][ T852] usb 5-1: Using ep0 maxpacket: 8 [ 178.441298][ T852] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.443861][ T852] usb 5-1: config 179 has no interface number 0 [ 178.445876][ T852] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 178.449924][ T852] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 178.453371][ T852] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 178.458575][ T852] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 178.467736][ T852] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.468084][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1671'. [ 178.473207][ T852] usb 5-1: config 179 interface 65 has no altsetting 0 [ 178.479595][ T852] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 178.483417][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.489864][T10778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 178.508532][ T852] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input17 [ 178.529798][T10791] netlink: 'syz.5.1671': attribute type 3 has an invalid length. [ 178.558191][ T5331] input input17: unable to receive magic message: -110 [ 178.575901][ T5331] input input17: unable to receive magic message: -32 [ 178.583452][ T5331] input input17: unable to receive magic message: -32 [ 178.602731][ T5331] input input17: unable to receive magic message: -32 [ 178.617298][ T5331] input input17: unable to receive magic message: -32 [ 178.632490][ T5331] input input17: unable to receive magic message: -32 [ 178.644076][ T5331] input input17: unable to receive magic message: -32 [ 178.701697][T10778] input input17: unable to receive magic message: -32 [ 178.825680][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 179.045324][T10797] FAULT_INJECTION: forcing a failure. [ 179.045324][T10797] name failslab, interval 1, probability 0, space 0, times 0 [ 179.050782][T10797] CPU: 2 UID: 0 PID: 10797 Comm: syz.4.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.050811][T10797] Tainted: [L]=SOFTLOCKUP [ 179.050817][T10797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.050827][T10797] Call Trace: [ 179.050834][T10797] [ 179.050841][T10797] dump_stack_lvl+0x100/0x190 [ 179.050869][T10797] should_fail_ex.cold+0x5/0xa [ 179.050899][T10797] should_failslab+0xc2/0x120 [ 179.050922][T10797] ? tomoyo_realpath_from_path+0xb6/0x690 [ 179.050941][T10797] __kmalloc_noprof+0xf6/0x9c0 [ 179.050964][T10797] ? tomoyo_realpath_from_path+0xb6/0x690 [ 179.050983][T10797] tomoyo_realpath_from_path+0xb6/0x690 [ 179.051007][T10797] tomoyo_path_number_perm+0x23c/0x580 [ 179.051032][T10797] ? tomoyo_path_number_perm+0x22e/0x580 [ 179.051060][T10797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.051116][T10797] ? find_held_lock+0x2b/0x80 [ 179.051138][T10797] ? hook_file_ioctl_common+0x146/0x410 [ 179.051159][T10797] ? __fget_files+0x215/0x3d0 [ 179.051184][T10797] ? __fget_files+0x21f/0x3d0 [ 179.051207][T10797] security_file_ioctl+0xd3/0x230 [ 179.051227][T10797] __x64_sys_ioctl+0xb7/0x210 [ 179.051246][T10797] do_syscall_64+0xc9/0xf80 [ 179.051266][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.051283][T10797] RIP: 0033:0x7f896c19acb9 [ 179.051297][T10797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.051313][T10797] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.051329][T10797] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 179.051340][T10797] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 179.051350][T10797] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 179.051360][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.051369][T10797] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 179.051393][T10797] [ 179.051400][T10797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.178890][T10799] binder: BINDER_SET_CONTEXT_MGR already set [ 179.180967][T10799] binder: 10798:10799 ioctl 4018620d 2000000000c0 returned -16 [ 179.341228][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.364608][T10790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.530553][ T852] usb 5-1: USB disconnect, device number 6 [ 179.532508][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.596544][ T5944] Bluetooth: hci4: sending frame failed (-49) [ 179.609780][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 179.611496][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 180.758317][T10836] syzkaller0: entered promiscuous mode [ 180.760906][T10836] syzkaller0: entered allmulticast mode [ 180.918314][T10848] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 180.969833][ T40] audit: type=1400 audit(1774522957.953:664): avc: denied { bind } for pid=10846 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 180.999502][ T40] audit: type=1400 audit(1774522957.973:665): avc: denied { override_creds } for pid=10846 comm="syz.1.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.558087][ T34] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 181.718122][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 181.722406][ T34] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.726197][ T34] usb 6-1: config 179 has no interface number 0 [ 181.729235][ T34] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 181.734564][ T34] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 181.745013][ T34] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 181.750388][ T34] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 181.755889][ T34] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 181.762620][ T34] usb 6-1: config 179 interface 65 has no altsetting 0 [ 181.765621][ T34] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 181.769969][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.784701][T10860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.791867][ T34] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input18 [ 181.838152][ T5331] input input18: unable to receive magic message: -110 [ 181.871270][ T5331] input input18: unable to receive magic message: -32 [ 181.885782][ T5331] input input18: unable to receive magic message: -32 [ 181.899187][ T5331] input input18: unable to receive magic message: -32 [ 182.004255][T10860] input input18: unable to receive magic message: -32 [ 182.113535][T10873] binder: 10872:10873 unknown command 553648128 [ 182.115575][T10873] binder: 10872:10873 ioctl c0306201 200000000c00 returned -22 [ 182.128987][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 183.178571][T10884] lo speed is unknown, defaulting to 1000 [ 183.190800][T10888] FAULT_INJECTION: forcing a failure. [ 183.190800][T10888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.194852][T10888] CPU: 2 UID: 0 PID: 10888 Comm: syz.4.1698 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.194870][T10888] Tainted: [L]=SOFTLOCKUP [ 183.194874][T10888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.194881][T10888] Call Trace: [ 183.194885][T10888] [ 183.194890][T10888] dump_stack_lvl+0x100/0x190 [ 183.194908][T10888] should_fail_ex.cold+0x5/0xa [ 183.194929][T10888] _copy_from_user+0x2e/0xd0 [ 183.194944][T10888] binder_thread_write+0xeeb/0x4d70 [ 183.194961][T10888] ? __lock_acquire+0x4a5/0x2630 [ 183.194972][T10888] ? __pfx_binder_thread_write+0x10/0x10 [ 183.194983][T10888] ? binder_debug+0xe0/0x190 [ 183.194998][T10888] ? __pfx_binder_debug+0x10/0x10 [ 183.195017][T10888] ? __might_fault+0xc5/0x140 [ 183.195034][T10888] binder_ioctl+0x28b8/0x7450 [ 183.195048][T10888] ? tomoyo_path_number_perm+0x188/0x580 [ 183.195070][T10888] ? __pfx_binder_ioctl+0x10/0x10 [ 183.195082][T10888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.195099][T10888] ? do_vfs_ioctl+0x226/0x13e0 [ 183.195110][T10888] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 183.195119][T10888] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 183.195132][T10888] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 183.195153][T10888] ? selinux_file_ioctl+0x139/0x290 [ 183.195164][T10888] ? selinux_file_ioctl+0xb4/0x290 [ 183.195176][T10888] ? __pfx_binder_ioctl+0x10/0x10 [ 183.195186][T10888] __x64_sys_ioctl+0x18e/0x210 [ 183.195197][T10888] do_syscall_64+0xc9/0xf80 [ 183.195211][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.195222][T10888] RIP: 0033:0x7f896c19acb9 [ 183.195231][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.195242][T10888] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.195252][T10888] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 183.195259][T10888] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 183.195266][T10888] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.195272][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.195278][T10888] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 183.195292][T10888] [ 183.195297][T10888] binder: 10887:10888 ioctl c0306201 200000000c00 returned -14 [ 183.283318][T10884] vxcan1 speed is unknown, defaulting to 1000 [ 183.331235][ T6025] usb 6-1: USB disconnect, device number 8 [ 183.331326][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 183.793582][T10908] syzkaller0: entered promiscuous mode [ 183.795988][T10908] syzkaller0: entered allmulticast mode [ 184.104902][ T40] audit: type=1400 audit(1774522961.083:666): avc: denied { append } for pid=10912 comm="syz.1.1706" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.052014][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.055143][T10913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.068993][T10913] bridge0: port 3(batadv0) entered disabled state [ 186.446016][ T40] audit: type=1400 audit(1774522963.423:667): avc: denied { bind } for pid=10948 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.458084][ T40] audit: type=1400 audit(1774522963.423:668): avc: denied { write } for pid=10948 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.465069][ T40] audit: type=1400 audit(1774522963.423:669): avc: denied { read } for pid=10948 comm="syz.0.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.505763][T10952] FAULT_INJECTION: forcing a failure. [ 186.505763][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 186.510081][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.5.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.510100][T10952] Tainted: [L]=SOFTLOCKUP [ 186.510104][T10952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.510110][T10952] Call Trace: [ 186.510114][T10952] [ 186.510118][T10952] dump_stack_lvl+0x100/0x190 [ 186.510137][T10952] should_fail_ex.cold+0x5/0xa [ 186.510156][T10952] should_failslab+0xc2/0x120 [ 186.510171][T10952] ? tomoyo_encode2+0xfb/0x3c0 [ 186.510183][T10952] __kmalloc_noprof+0xf6/0x9c0 [ 186.510197][T10952] ? tomoyo_encode2+0xfb/0x3c0 [ 186.510207][T10952] tomoyo_encode2+0xfb/0x3c0 [ 186.510221][T10952] tomoyo_encode+0x29/0x50 [ 186.510232][T10952] tomoyo_realpath_from_path+0x18c/0x690 [ 186.510248][T10952] tomoyo_path_number_perm+0x23c/0x580 [ 186.510265][T10952] ? tomoyo_path_number_perm+0x22e/0x580 [ 186.510283][T10952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.510320][T10952] ? find_held_lock+0x2b/0x80 [ 186.510335][T10952] ? hook_file_ioctl_common+0x146/0x410 [ 186.510349][T10952] ? __fget_files+0x215/0x3d0 [ 186.510365][T10952] ? __fget_files+0x21f/0x3d0 [ 186.510380][T10952] security_file_ioctl+0xd3/0x230 [ 186.510392][T10952] __x64_sys_ioctl+0xb7/0x210 [ 186.510404][T10952] do_syscall_64+0xc9/0xf80 [ 186.510417][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.510428][T10952] RIP: 0033:0x7fbde819acb9 [ 186.510438][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.510448][T10952] RSP: 002b:00007fbde90ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.510459][T10952] RAX: ffffffffffffffda RBX: 00007fbde8415fa0 RCX: 00007fbde819acb9 [ 186.510466][T10952] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 186.510473][T10952] RBP: 00007fbde90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 186.510479][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.510485][T10952] R13: 00007fbde8416038 R14: 00007fbde8415fa0 R15: 00007fff78a9c098 [ 186.510499][T10952] [ 186.510511][T10952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.648022][ T59] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 186.778106][ T6660] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.796300][ T1265] Bluetooth: hci4: Frame reassembly failed (-84) [ 186.799007][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 186.799413][ T1265] Bluetooth: hci4: Frame reassembly failed (-84) [ 186.802822][ T59] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.806188][ T59] usb 9-1: config 179 has no interface number 0 [ 186.808342][ T59] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 186.812451][ T59] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 186.817245][ T59] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 186.822277][ T59] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 186.827197][ T59] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.832452][ T59] usb 9-1: config 179 interface 65 has no altsetting 0 [ 186.834766][ T59] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 186.837648][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.843089][T10947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 186.851995][ T59] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input19 [ 186.888360][ T5331] input input19: unable to receive magic message: -110 [ 186.892206][ T5331] input input19: unable to receive magic message: -32 [ 186.899872][ T5331] input input19: unable to receive magic message: -32 [ 186.909354][ T5331] input input19: unable to receive magic message: -32 [ 186.912319][ T5331] input input19: unable to receive magic message: -32 [ 186.915788][ T5331] input input19: unable to receive magic message: -32 [ 186.919322][ T5331] input input19: unable to receive magic message: -32 [ 186.928010][ T6660] usb 5-1: Using ep0 maxpacket: 8 [ 186.931585][ T6660] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.935460][ T6660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.940072][ T6660] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 64800, setting to 1024 [ 186.944514][ T6660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 186.948937][ T6660] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.954102][ T6660] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.957711][ T6660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.050770][T10947] input input19: unable to receive magic message: -32 [ 187.128457][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 187.174777][ T6660] usb 5-1: usb_control_msg returned -71 [ 187.176562][ T6660] usbtmc 5-1:16.0: can't read capabilities [ 187.189164][ T6660] usb 5-1: USB disconnect, device number 7 [ 187.479456][ T59] usb 9-1: USB disconnect, device number 15 [ 187.481465][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 188.828202][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 188.830614][T11010] FAULT_INJECTION: forcing a failure. [ 188.830614][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.835455][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 188.836935][T11010] CPU: 3 UID: 0 PID: 11010 Comm: syz.4.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.836963][T11010] Tainted: [L]=SOFTLOCKUP [ 188.836969][T11010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.836980][T11010] Call Trace: [ 188.836989][T11010] [ 188.836997][T11010] dump_stack_lvl+0x100/0x190 [ 188.837056][T11010] should_fail_ex.cold+0x5/0xa [ 188.837084][T11010] _copy_from_user+0x2e/0xd0 [ 188.837116][T11010] copy_msghdr_from_user+0x9f/0x4f0 [ 188.837143][T11010] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.837162][T11010] ? _kstrtoull+0x13c/0x1f0 [ 188.837178][T11010] ? __pfx__kstrtoull+0x10/0x10 [ 188.837198][T11010] ___sys_sendmsg+0x106/0x1e0 [ 188.837216][T11010] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.837253][T11010] ? __pfx___might_resched+0x10/0x10 [ 188.837278][T11010] __sys_sendmmsg+0x205/0x430 [ 188.837303][T11010] ? __pfx___sys_sendmmsg+0x10/0x10 [ 188.837329][T11010] ? __fget_files+0x215/0x3d0 [ 188.837348][T11010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.837376][T11010] ? fput+0x79/0x100 [ 188.837398][T11010] ? ksys_write+0x1ac/0x250 [ 188.837416][T11010] ? __pfx_ksys_write+0x10/0x10 [ 188.837438][T11010] __x64_sys_sendmmsg+0x9c/0x100 [ 188.837461][T11010] ? lockdep_hardirqs_on+0x78/0x100 [ 188.837479][T11010] do_syscall_64+0xc9/0xf80 [ 188.837500][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.837518][T11010] RIP: 0033:0x7f896c19acb9 [ 188.837534][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.837551][T11010] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 188.837569][T11010] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 188.837580][T11010] RDX: 0000000000000002 RSI: 0000200000006480 RDI: 0000000000000003 [ 188.837590][T11010] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 188.837600][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.837610][T11010] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 188.837634][T11010] [ 188.920574][T11012] program syz.4.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.927548][T11012] ata1.00: non-matching transfer count (0/2304) [ 188.970906][T11015] FAULT_INJECTION: forcing a failure. [ 188.970906][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 188.975010][T11015] CPU: 1 UID: 0 PID: 11015 Comm: syz.0.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.975028][T11015] Tainted: [L]=SOFTLOCKUP [ 188.975032][T11015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.975038][T11015] Call Trace: [ 188.975043][T11015] [ 188.975048][T11015] dump_stack_lvl+0x100/0x190 [ 188.975067][T11015] should_fail_ex.cold+0x5/0xa [ 188.975086][T11015] should_failslab+0xc2/0x120 [ 188.975102][T11015] ? tomoyo_realpath_from_path+0xb6/0x690 [ 188.975115][T11015] __kmalloc_noprof+0xf6/0x9c0 [ 188.975129][T11015] ? tomoyo_realpath_from_path+0xb6/0x690 [ 188.975141][T11015] tomoyo_realpath_from_path+0xb6/0x690 [ 188.975157][T11015] tomoyo_path_number_perm+0x23c/0x580 [ 188.975174][T11015] ? tomoyo_path_number_perm+0x22e/0x580 [ 188.975193][T11015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 188.975224][T11015] ? find_held_lock+0x2b/0x80 [ 188.975239][T11015] ? hook_file_ioctl_common+0x146/0x410 [ 188.975257][T11015] ? __fget_files+0x215/0x3d0 [ 188.975273][T11015] ? __fget_files+0x21f/0x3d0 [ 188.975288][T11015] security_file_ioctl+0xd3/0x230 [ 188.975301][T11015] __x64_sys_ioctl+0xb7/0x210 [ 188.975313][T11015] do_syscall_64+0xc9/0xf80 [ 188.975326][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.975338][T11015] RIP: 0033:0x7fdd5d99acb9 [ 188.975348][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.975359][T11015] RSP: 002b:00007fdd5e80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.975370][T11015] RAX: ffffffffffffffda RBX: 00007fdd5dc15fa0 RCX: 00007fdd5d99acb9 [ 188.975377][T11015] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 188.975383][T11015] RBP: 00007fdd5e80e090 R08: 0000000000000000 R09: 0000000000000000 [ 188.975389][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.975396][T11015] R13: 00007fdd5dc16038 R14: 00007fdd5dc15fa0 R15: 00007fff957647f8 [ 188.975409][T11015] [ 188.975414][T11015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 189.164379][T11033] FAULT_INJECTION: forcing a failure. [ 189.164379][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 189.170541][T11033] CPU: 1 UID: 0 PID: 11033 Comm: syz.5.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.170561][T11033] Tainted: [L]=SOFTLOCKUP [ 189.170564][T11033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.170571][T11033] Call Trace: [ 189.170574][T11033] [ 189.170578][T11033] dump_stack_lvl+0x100/0x190 [ 189.170597][T11033] should_fail_ex.cold+0x5/0xa [ 189.170618][T11033] should_failslab+0xc2/0x120 [ 189.170632][T11033] __kmalloc_cache_noprof+0x80/0x810 [ 189.170643][T11033] ? binder_transaction+0x705/0x9bc0 [ 189.170653][T11033] ? binder_transaction+0x73a/0x9bc0 [ 189.170662][T11033] ? binder_transaction+0x705/0x9bc0 [ 189.170674][T11033] ? binder_transaction+0x73a/0x9bc0 [ 189.170683][T11033] ? _raw_spin_unlock+0x28/0x50 [ 189.170700][T11033] binder_transaction+0x73a/0x9bc0 [ 189.170716][T11033] ? __lock_acquire+0x4a5/0x2630 [ 189.170730][T11033] ? __lock_acquire+0x4a5/0x2630 [ 189.170743][T11033] ? __pfx_binder_transaction+0x10/0x10 [ 189.170756][T11033] ? find_held_lock+0x2b/0x80 [ 189.170770][T11033] ? is_bpf_text_address+0x8a/0x1a0 [ 189.170787][T11033] ? is_bpf_text_address+0x8a/0x1a0 [ 189.170803][T11033] ? bpf_ksym_find+0x128/0x1c0 [ 189.170817][T11033] ? __lock_acquire+0x4a5/0x2630 [ 189.170828][T11033] ? arch_stack_walk+0xa6/0xf0 [ 189.170847][T11033] ? find_held_lock+0x2b/0x80 [ 189.170861][T11033] ? __might_fault+0xc5/0x140 [ 189.170872][T11033] ? __might_fault+0xc5/0x140 [ 189.170888][T11033] binder_thread_write+0xf37/0x4d70 [ 189.170903][T11033] ? __lock_acquire+0x4a5/0x2630 [ 189.170913][T11033] ? __pfx_binder_thread_write+0x10/0x10 [ 189.170924][T11033] ? binder_debug+0xe0/0x190 [ 189.170939][T11033] ? __pfx_binder_debug+0x10/0x10 [ 189.170967][T11033] ? __might_fault+0xc5/0x140 [ 189.170984][T11033] binder_ioctl+0x28b8/0x7450 [ 189.170999][T11033] ? tomoyo_path_number_perm+0x188/0x580 [ 189.171023][T11033] ? __pfx_binder_ioctl+0x10/0x10 [ 189.171035][T11033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.171053][T11033] ? do_vfs_ioctl+0x226/0x13e0 [ 189.171064][T11033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.171073][T11033] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 189.171087][T11033] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 189.171108][T11033] ? selinux_file_ioctl+0x139/0x290 [ 189.171118][T11033] ? selinux_file_ioctl+0xb4/0x290 [ 189.171130][T11033] ? __pfx_binder_ioctl+0x10/0x10 [ 189.171141][T11033] __x64_sys_ioctl+0x18e/0x210 [ 189.171152][T11033] do_syscall_64+0xc9/0xf80 [ 189.171165][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.171176][T11033] RIP: 0033:0x7fbde819acb9 [ 189.171186][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.171196][T11033] RSP: 002b:00007fbde90ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.171208][T11033] RAX: ffffffffffffffda RBX: 00007fbde8415fa0 RCX: 00007fbde819acb9 [ 189.171215][T11033] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 189.171221][T11033] RBP: 00007fbde90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 189.171228][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.171234][T11033] R13: 00007fbde8416038 R14: 00007fbde8415fa0 R15: 00007fff78a9c098 [ 189.171247][T11033] [ 189.320155][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1742'. [ 189.329717][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 189.675837][T11060] binder_alloc: 11058: binder_alloc_buf size 65856 failed, no address space [ 189.679532][T11060] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 189.763688][ T40] audit: type=1400 audit(1774522966.743:670): avc: denied { connect } for pid=11063 comm="syz.4.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.771329][T11064] qnx6: unable to set blocksize [ 190.213505][T11080] FAULT_INJECTION: forcing a failure. [ 190.213505][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.218840][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.4.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.218860][T11080] Tainted: [L]=SOFTLOCKUP [ 190.218864][T11080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.218871][T11080] Call Trace: [ 190.218874][T11080] [ 190.218878][T11080] dump_stack_lvl+0x100/0x190 [ 190.218897][T11080] should_fail_ex.cold+0x5/0xa [ 190.218916][T11080] _copy_from_user+0x2e/0xd0 [ 190.218931][T11080] binder_ioctl+0x491/0x7450 [ 190.218946][T11080] ? tomoyo_path_number_perm+0x188/0x580 [ 190.218969][T11080] ? __pfx_binder_ioctl+0x10/0x10 [ 190.218980][T11080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.218998][T11080] ? do_vfs_ioctl+0x226/0x13e0 [ 190.219009][T11080] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.219017][T11080] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 190.219031][T11080] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.219057][T11080] ? selinux_file_ioctl+0x139/0x290 [ 190.219068][T11080] ? selinux_file_ioctl+0xb4/0x290 [ 190.219080][T11080] ? __pfx_binder_ioctl+0x10/0x10 [ 190.219090][T11080] __x64_sys_ioctl+0x18e/0x210 [ 190.219101][T11080] do_syscall_64+0xc9/0xf80 [ 190.219115][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.219126][T11080] RIP: 0033:0x7f896c19acb9 [ 190.219135][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.219145][T11080] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.219156][T11080] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 190.219163][T11080] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 190.219169][T11080] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 190.219176][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.219182][T11080] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 190.219196][T11080] [ 190.219201][T11080] binder: 11079:11080 ioctl c0306201 2000000001c0 returned -14 [ 190.261765][T11084] binder: 11083:11084 ioctl c0306201 200000000540 returned -11 [ 190.352107][ T40] audit: type=1400 audit(1774522967.333:671): avc: denied { write } for pid=11083 comm="syz.1.1756" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.589876][ T6031] hid_parser_main: 4086 callbacks suppressed [ 190.589899][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.595477][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.598731][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.601657][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.604692][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.607518][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.610850][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.613823][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.616948][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.620014][ T6031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 190.629636][ T6031] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 191.005414][T11110] netlink: 'syz.0.1760': attribute type 5 has an invalid length. [ 191.231252][ T40] audit: type=1400 audit(1774522968.213:672): avc: denied { lock } for pid=11127 comm="syz.5.1767" path="pid:[4026532876]" dev="nsfs" ino=4026532876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.632326][T11155] binder: 11154:11155 unknown command 0 [ 191.634835][T11155] binder: 11154:11155 ioctl c0306201 2000000001c0 returned -22 [ 191.742396][T11160] binder: 11159:11160 ioctl 400c6615 2000000002c0 returned -22 [ 191.746523][T11160] binder_alloc: 11159: binder_alloc_buf size 65856 failed, no address space [ 191.750467][T11160] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 191.796679][T11162] FAULT_INJECTION: forcing a failure. [ 191.796679][T11162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.803045][T11162] CPU: 0 UID: 0 PID: 11162 Comm: syz.5.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.803074][T11162] Tainted: [L]=SOFTLOCKUP [ 191.803080][T11162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.803090][T11162] Call Trace: [ 191.803113][T11162] [ 191.803120][T11162] dump_stack_lvl+0x100/0x190 [ 191.803163][T11162] should_fail_ex.cold+0x5/0xa [ 191.803193][T11162] _copy_from_user+0x2e/0xd0 [ 191.803224][T11162] binder_thread_write+0x953/0x4d70 [ 191.803258][T11162] ? __lock_acquire+0x4a5/0x2630 [ 191.803280][T11162] ? __pfx_binder_thread_write+0x10/0x10 [ 191.803299][T11162] ? binder_debug+0xe0/0x190 [ 191.803321][T11162] ? __pfx_binder_debug+0x10/0x10 [ 191.803345][T11162] ? binder_debug+0xe0/0x190 [ 191.803367][T11162] ? __pfx_binder_debug+0x10/0x10 [ 191.803404][T11162] binder_ioctl+0x28b8/0x7450 [ 191.803429][T11162] ? tomoyo_path_number_perm+0x188/0x580 [ 191.803463][T11162] ? __pfx_binder_ioctl+0x10/0x10 [ 191.803482][T11162] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 191.803510][T11162] ? do_vfs_ioctl+0x226/0x13e0 [ 191.803527][T11162] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 191.803556][T11162] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 191.803578][T11162] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 191.803611][T11162] ? selinux_file_ioctl+0x139/0x290 [ 191.803627][T11162] ? selinux_file_ioctl+0xb4/0x290 [ 191.803646][T11162] ? __pfx_binder_ioctl+0x10/0x10 [ 191.803662][T11162] __x64_sys_ioctl+0x18e/0x210 [ 191.803681][T11162] do_syscall_64+0xc9/0xf80 [ 191.803702][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.803720][T11162] RIP: 0033:0x7fbde819acb9 [ 191.803734][T11162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.803750][T11162] RSP: 002b:00007fbde90ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.803767][T11162] RAX: ffffffffffffffda RBX: 00007fbde8415fa0 RCX: 00007fbde819acb9 [ 191.803777][T11162] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 191.803787][T11162] RBP: 00007fbde90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 191.803797][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.803806][T11162] R13: 00007fbde8416038 R14: 00007fbde8415fa0 R15: 00007fff78a9c098 [ 191.803830][T11162] [ 191.803917][T11162] binder: 11161:11162 ioctl c0306201 2000000001c0 returned -14 [ 192.358417][ T6031] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.421879][T11194] syzkaller0: entered promiscuous mode [ 192.423624][T11194] syzkaller0: entered allmulticast mode [ 192.510978][ T6031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.515290][ T6031] usb 5-1: config 0 has no interfaces? [ 192.518944][ T6031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.522965][ T6031] usb 5-1: config 0 has no interfaces? [ 192.526314][ T6031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.532739][ T6031] usb 5-1: config 0 has no interfaces? [ 192.536806][ T6031] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 192.540737][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 192.543955][ T6031] usb 5-1: Product: syz [ 192.545617][ T6031] usb 5-1: Manufacturer: syz [ 192.547466][ T6031] usb 5-1: SerialNumber: syz [ 192.552971][ T6031] usb 5-1: config 0 descriptor?? [ 192.967978][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.971489][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.983600][T11178] openvswitch: netlink: Key type 31 is not supported [ 192.987747][ T6031] usb 5-1: USB disconnect, device number 8 [ 193.308060][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 193.308393][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 193.398898][ T40] audit: type=1400 audit(1774522970.383:673): avc: denied { accept } for pid=11208 comm="syz.1.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 193.412191][T11209] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 193.895107][T11202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.947521][T11249] FAULT_INJECTION: forcing a failure. [ 193.947521][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 193.952756][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.0.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.952775][T11249] Tainted: [L]=SOFTLOCKUP [ 193.952779][T11249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.952785][T11249] Call Trace: [ 193.952789][T11249] [ 193.952793][T11249] dump_stack_lvl+0x100/0x190 [ 193.952812][T11249] should_fail_ex.cold+0x5/0xa [ 193.952832][T11249] should_failslab+0xc2/0x120 [ 193.952847][T11249] __kmalloc_cache_noprof+0x80/0x810 [ 193.952857][T11249] ? __lock_acquire+0x4a5/0x2630 [ 193.952867][T11249] ? drm_atomic_state_alloc+0xb8/0x120 [ 193.952882][T11249] ? drm_atomic_state_alloc+0xb8/0x120 [ 193.952894][T11249] drm_atomic_state_alloc+0xb8/0x120 [ 193.952906][T11249] drm_mode_atomic_ioctl+0x395/0x2680 [ 193.952920][T11249] ? find_held_lock+0x2b/0x80 [ 193.952940][T11249] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 193.952953][T11249] ? __lock_acquire+0x4a5/0x2630 [ 193.952970][T11249] ? drm_is_current_master+0x2c/0x40 [ 193.952983][T11249] ? drm_is_current_master+0x2c/0x40 [ 193.952997][T11249] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.953011][T11249] drm_ioctl_kernel+0x1f3/0x3e0 [ 193.953022][T11249] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 193.953035][T11249] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 193.953050][T11249] drm_ioctl+0x5e6/0xc60 [ 193.953062][T11249] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 193.953076][T11249] ? __pfx_drm_ioctl+0x10/0x10 [ 193.953109][T11249] ? selinux_file_ioctl+0x139/0x290 [ 193.953120][T11249] ? selinux_file_ioctl+0xb4/0x290 [ 193.953132][T11249] ? __pfx_drm_ioctl+0x10/0x10 [ 193.953143][T11249] __x64_sys_ioctl+0x18e/0x210 [ 193.953155][T11249] do_syscall_64+0xc9/0xf80 [ 193.953168][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.953180][T11249] RIP: 0033:0x7fdd5d99acb9 [ 193.953189][T11249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.953200][T11249] RSP: 002b:00007fdd5e80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.953211][T11249] RAX: ffffffffffffffda RBX: 00007fdd5dc15fa0 RCX: 00007fdd5d99acb9 [ 193.953217][T11249] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 193.953224][T11249] RBP: 00007fdd5e80e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.953230][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.953236][T11249] R13: 00007fdd5dc16038 R14: 00007fdd5dc15fa0 R15: 00007fff957647f8 [ 193.953250][T11249] [ 194.348171][T11268] overlayfs: workdir and upperdir must reside under the same mount [ 194.427410][T11275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.431067][T11275] IPv6: NLM_F_CREATE should be set when creating new route [ 194.513594][T11285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.532923][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.580669][T11286] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1811'. [ 194.584518][T11286] openvswitch: netlink: Message has 6 unknown bytes. [ 194.671658][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.689243][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.871930][ T6024] lo speed is unknown, defaulting to 1000 [ 194.875399][ T6024] sz1: Port: 1 Link DOWN [ 194.875607][ T1147] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.880612][ T1147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.883743][ T9] lo speed is unknown, defaulting to 1000 [ 194.883865][ T1147] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.888967][ T1147] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.098406][ T5950] Bluetooth: hci1: Unexpected cc 0x60ac with no status [ 195.109865][T11299] syzkaller0: entered promiscuous mode [ 195.112185][T11299] syzkaller0: entered allmulticast mode [ 195.120983][ T40] audit: type=1400 audit(1774522972.103:674): avc: denied { map } for pid=11298 comm="syz.1.1817" path="socket:[39859]" dev="sockfs" ino=39859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.128093][ T40] audit: type=1400 audit(1774522972.103:675): avc: denied { read } for pid=11298 comm="syz.1.1817" path="socket:[39859]" dev="sockfs" ino=39859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.344594][T11311] 9p: Bad value for 'rfdno' [ 195.360291][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1822'. [ 195.419886][T11314] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3183071107 (203716550848 ns) > initial count (190329080192 ns). Using initial count to start timer. [ 196.028505][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 196.085659][T11345] smc: net device bond0 applied user defined pnetid SYZ2 [ 196.089744][T11345] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1833'. [ 196.110182][T11345] smc: removing net device bond0 with user defined pnetid SYZ2 [ 196.111509][ T40] audit: type=1400 audit(1774522973.093:676): avc: denied { getopt } for pid=11347 comm="syz.4.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.121127][T11345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.129225][T11345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.134850][T11345] bond0 (unregistering): Released all slaves [ 196.140475][T11349] xt_NFQUEUE: number of total queues is 0 [ 196.160758][T11304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.341027][T11352] FAULT_INJECTION: forcing a failure. [ 196.341027][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 196.346344][T11352] CPU: 2 UID: 0 PID: 11352 Comm: syz.4.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.346387][T11352] Tainted: [L]=SOFTLOCKUP [ 196.346394][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.346405][T11352] Call Trace: [ 196.346411][T11352] [ 196.346419][T11352] dump_stack_lvl+0x100/0x190 [ 196.346466][T11352] should_fail_ex.cold+0x5/0xa [ 196.346497][T11352] should_failslab+0xc2/0x120 [ 196.346521][T11352] __kmalloc_cache_noprof+0x80/0x810 [ 196.346541][T11352] ? binder_alloc_new_buf+0x1c2/0x2f70 [ 196.346575][T11352] ? binder_alloc_new_buf+0x1c2/0x2f70 [ 196.346592][T11352] binder_alloc_new_buf+0x1c2/0x2f70 [ 196.346610][T11352] ? binder_debug+0xe0/0x190 [ 196.346633][T11352] ? __pfx_binder_debug+0x10/0x10 [ 196.346664][T11352] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 196.346690][T11352] binder_transaction+0x1f5a/0x9bc0 [ 196.346716][T11352] ? __lock_acquire+0x4a5/0x2630 [ 196.346747][T11352] ? __pfx_binder_transaction+0x10/0x10 [ 196.346769][T11352] ? find_held_lock+0x2b/0x80 [ 196.346790][T11352] ? is_bpf_text_address+0x8a/0x1a0 [ 196.346815][T11352] ? is_bpf_text_address+0x8a/0x1a0 [ 196.346840][T11352] ? bpf_ksym_find+0x128/0x1c0 [ 196.346864][T11352] ? __lock_acquire+0x4a5/0x2630 [ 196.346881][T11352] ? arch_stack_walk+0xa6/0xf0 [ 196.346911][T11352] ? find_held_lock+0x2b/0x80 [ 196.346932][T11352] ? __might_fault+0xc5/0x140 [ 196.346950][T11352] ? __might_fault+0xc5/0x140 [ 196.346978][T11352] binder_thread_write+0x9a7/0x4d70 [ 196.347004][T11352] ? __lock_acquire+0x4a5/0x2630 [ 196.347021][T11352] ? __pfx_binder_thread_write+0x10/0x10 [ 196.347040][T11352] ? binder_debug+0xe0/0x190 [ 196.347062][T11352] ? __pfx_binder_debug+0x10/0x10 [ 196.347086][T11352] ? binder_debug+0xe0/0x190 [ 196.347108][T11352] ? __pfx_binder_debug+0x10/0x10 [ 196.347147][T11352] binder_ioctl+0x28b8/0x7450 [ 196.347171][T11352] ? tomoyo_path_number_perm+0x188/0x580 [ 196.347218][T11352] ? __pfx_binder_ioctl+0x10/0x10 [ 196.347237][T11352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.347265][T11352] ? do_vfs_ioctl+0x226/0x13e0 [ 196.347282][T11352] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.347297][T11352] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 196.347319][T11352] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 196.347368][T11352] ? selinux_file_ioctl+0x139/0x290 [ 196.347386][T11352] ? selinux_file_ioctl+0xb4/0x290 [ 196.347405][T11352] ? __pfx_binder_ioctl+0x10/0x10 [ 196.347422][T11352] __x64_sys_ioctl+0x18e/0x210 [ 196.347441][T11352] do_syscall_64+0xc9/0xf80 [ 196.347463][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.347481][T11352] RIP: 0033:0x7f896c19acb9 [ 196.347495][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.347512][T11352] RSP: 002b:00007f896d02d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.347529][T11352] RAX: ffffffffffffffda RBX: 00007f896c415fa0 RCX: 00007f896c19acb9 [ 196.347540][T11352] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 196.347550][T11352] RBP: 00007f896d02d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.347561][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.347570][T11352] R13: 00007f896c416038 R14: 00007f896c415fa0 R15: 00007ffd97143b28 [ 196.347594][T11352] [ 196.526261][T11354] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.529704][T11354] @0Ù: renamed from bond_slave_1 [ 196.736975][T11359] FAULT_INJECTION: forcing a failure. [ 196.736975][T11359] name failslab, interval 1, probability 0, space 0, times 0 [ 196.741292][T11359] CPU: 3 UID: 0 PID: 11359 Comm: syz.5.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.741310][T11359] Tainted: [L]=SOFTLOCKUP [ 196.741314][T11359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.741321][T11359] Call Trace: [ 196.741325][T11359] [ 196.741330][T11359] dump_stack_lvl+0x100/0x190 [ 196.741361][T11359] should_fail_ex.cold+0x5/0xa [ 196.741384][T11359] should_failslab+0xc2/0x120 [ 196.741400][T11359] __kmalloc_cache_noprof+0x80/0x810 [ 196.741411][T11359] ? binder_alloc_new_buf+0x1903/0x2f70 [ 196.741425][T11359] ? binder_alloc_new_buf+0x1903/0x2f70 [ 196.741436][T11359] binder_alloc_new_buf+0x1903/0x2f70 [ 196.741454][T11359] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 196.741469][T11359] binder_transaction+0x1f5a/0x9bc0 [ 196.741485][T11359] ? __lock_acquire+0x4a5/0x2630 [ 196.741503][T11359] ? __pfx_binder_transaction+0x10/0x10 [ 196.741516][T11359] ? find_held_lock+0x2b/0x80 [ 196.741530][T11359] ? is_bpf_text_address+0x8a/0x1a0 [ 196.741547][T11359] ? is_bpf_text_address+0x8a/0x1a0 [ 196.741574][T11359] ? bpf_ksym_find+0x128/0x1c0 [ 196.741590][T11359] ? __lock_acquire+0x4a5/0x2630 [ 196.741600][T11359] ? arch_stack_walk+0xa6/0xf0 [ 196.741619][T11359] ? find_held_lock+0x2b/0x80 [ 196.741633][T11359] ? __might_fault+0xc5/0x140 [ 196.741644][T11359] ? __might_fault+0xc5/0x140 [ 196.741661][T11359] binder_thread_write+0xf37/0x4d70 [ 196.741677][T11359] ? __lock_acquire+0x4a5/0x2630 [ 196.741687][T11359] ? __pfx_binder_thread_write+0x10/0x10 [ 196.741698][T11359] ? binder_debug+0xe0/0x190 [ 196.741712][T11359] ? __pfx_binder_debug+0x10/0x10 [ 196.741732][T11359] ? __might_fault+0xc5/0x140 [ 196.741749][T11359] binder_ioctl+0x28b8/0x7450 [ 196.741763][T11359] ? tomoyo_path_number_perm+0x188/0x580 [ 196.741785][T11359] ? __pfx_binder_ioctl+0x10/0x10 [ 196.741797][T11359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.741814][T11359] ? do_vfs_ioctl+0x226/0x13e0 [ 196.741825][T11359] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.741835][T11359] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 196.741848][T11359] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 196.741870][T11359] ? selinux_file_ioctl+0x139/0x290 [ 196.741880][T11359] ? selinux_file_ioctl+0xb4/0x290 [ 196.741892][T11359] ? __pfx_binder_ioctl+0x10/0x10 [ 196.741903][T11359] __x64_sys_ioctl+0x18e/0x210 [ 196.741941][T11359] do_syscall_64+0xc9/0xf80 [ 196.741954][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.741967][T11359] RIP: 0033:0x7fbde819acb9 [ 196.741976][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.741987][T11359] RSP: 002b:00007fbde90ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.741998][T11359] RAX: ffffffffffffffda RBX: 00007fbde8415fa0 RCX: 00007fbde819acb9 [ 196.742005][T11359] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 196.742011][T11359] RBP: 00007fbde90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 196.742018][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.742024][T11359] R13: 00007fbde8416038 R14: 00007fbde8415fa0 R15: 00007fff78a9c098 [ 196.742038][T11359] [ 196.891592][T11363] trusted_key: encrypted_key: insufficient parameters specified [ 196.971852][T11373] FAULT_INJECTION: forcing a failure. [ 196.971852][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 196.976560][T11373] CPU: 3 UID: 0 PID: 11373 Comm: syz.5.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.976589][T11373] Tainted: [L]=SOFTLOCKUP [ 196.976595][T11373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.976604][T11373] Call Trace: [ 196.976611][T11373] [ 196.976617][T11373] dump_stack_lvl+0x100/0x190 [ 196.976643][T11373] should_fail_ex.cold+0x5/0xa [ 196.976671][T11373] should_failslab+0xc2/0x120 [ 196.976694][T11373] ? drm_atomic_state_init+0x183/0x540 [ 196.976712][T11373] __kmalloc_noprof+0xf6/0x9c0 [ 196.976734][T11373] ? drm_atomic_state_init+0x183/0x540 [ 196.976750][T11373] drm_atomic_state_init+0x183/0x540 [ 196.976766][T11373] ? kasan_save_track+0x14/0x30 [ 196.976786][T11373] drm_atomic_state_alloc+0xd3/0x120 [ 196.976804][T11373] drm_mode_atomic_ioctl+0x395/0x2680 [ 196.976825][T11373] ? find_held_lock+0x2b/0x80 [ 196.976856][T11373] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 196.976875][T11373] ? __lock_acquire+0x4a5/0x2630 [ 196.976910][T11373] ? drm_is_current_master+0x2c/0x40 [ 196.976927][T11373] ? drm_is_current_master+0x2c/0x40 [ 196.976947][T11373] ? do_raw_spin_unlock+0x145/0x1e0 [ 196.976968][T11373] drm_ioctl_kernel+0x1f3/0x3e0 [ 196.976983][T11373] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 196.977003][T11373] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 196.977026][T11373] drm_ioctl+0x5e6/0xc60 [ 196.977045][T11373] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 196.977064][T11373] ? __pfx_drm_ioctl+0x10/0x10 [ 196.977089][T11373] ? selinux_file_ioctl+0x139/0x290 [ 196.977106][T11373] ? selinux_file_ioctl+0xb4/0x290 [ 196.977124][T11373] ? __pfx_drm_ioctl+0x10/0x10 [ 196.977140][T11373] __x64_sys_ioctl+0x18e/0x210 [ 196.977158][T11373] do_syscall_64+0xc9/0xf80 [ 196.977179][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.977195][T11373] RIP: 0033:0x7fbde819acb9 [ 196.977210][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.977225][T11373] RSP: 002b:00007fbde90ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.977241][T11373] RAX: ffffffffffffffda RBX: 00007fbde8415fa0 RCX: 00007fbde819acb9 [ 196.977252][T11373] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 196.977262][T11373] RBP: 00007fbde90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 196.977271][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.977280][T11373] R13: 00007fbde8416038 R14: 00007fbde8415fa0 R15: 00007fff78a9c098 [ 196.977302][T11373] [ 197.048167][T11376] /dev/nullb0: Can't open blockdev [ 197.130022][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 197.483319][T11392] FAULT_INJECTION: forcing a failure. [ 197.483319][T11392] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 197.488965][T11392] CPU: 3 UID: 0 PID: 11392 Comm: syz.1.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.488995][T11392] Tainted: [L]=SOFTLOCKUP [ 197.489000][T11392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.489011][T11392] Call Trace: [ 197.489017][T11392] [ 197.489024][T11392] dump_stack_lvl+0x100/0x190 [ 197.489050][T11392] should_fail_ex.cold+0x5/0xa [ 197.489076][T11392] ? prepare_alloc_pages+0x16d/0x5f0 [ 197.489104][T11392] should_fail_alloc_page+0xeb/0x140 [ 197.489128][T11392] prepare_alloc_pages+0x1f0/0x5f0 [ 197.489156][T11392] __alloc_frozen_pages_noprof+0x193/0x2410 [ 197.489177][T11392] ? __lock_acquire+0x4a5/0x2630 [ 197.489195][T11392] ? stack_depot_save_flags+0x27/0x9c0 [ 197.489219][T11392] ? is_bpf_text_address+0x94/0x1a0 [ 197.489249][T11392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.489272][T11392] ? __pfx___might_resched+0x10/0x10 [ 197.489298][T11392] ? __mutex_lock+0x26a/0x1b90 [ 197.489318][T11392] ? find_held_lock+0x2b/0x80 [ 197.489340][T11392] ? binder_alloc_new_buf+0x167c/0x2f70 [ 197.489359][T11392] ? binder_alloc_new_buf+0x167c/0x2f70 [ 197.489375][T11392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.489401][T11392] ? policy_nodemask+0xed/0x4f0 [ 197.489427][T11392] alloc_pages_mpol+0x1fb/0x550 [ 197.489451][T11392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.489473][T11392] ? rcu_is_watching+0x12/0xc0 [ 197.489496][T11392] ? kfree+0x2a9/0x690 [ 197.489514][T11392] alloc_pages_noprof+0x131/0x390 [ 197.489538][T11392] binder_alloc_new_buf+0x18c4/0x2f70 [ 197.489568][T11392] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 197.489594][T11392] binder_transaction+0x1f5a/0x9bc0 [ 197.489620][T11392] ? __lock_acquire+0x4a5/0x2630 [ 197.489650][T11392] ? __pfx_binder_transaction+0x10/0x10 [ 197.489672][T11392] ? find_held_lock+0x2b/0x80 [ 197.489694][T11392] ? is_bpf_text_address+0x8a/0x1a0 [ 197.489718][T11392] ? is_bpf_text_address+0x8a/0x1a0 [ 197.489743][T11392] ? bpf_ksym_find+0x128/0x1c0 [ 197.489766][T11392] ? __lock_acquire+0x4a5/0x2630 [ 197.489783][T11392] ? arch_stack_walk+0xa6/0xf0 [ 197.489813][T11392] ? find_held_lock+0x2b/0x80 [ 197.489834][T11392] ? __might_fault+0xc5/0x140 [ 197.489851][T11392] ? __might_fault+0xc5/0x140 [ 197.489879][T11392] binder_thread_write+0x9a7/0x4d70 [ 197.489927][T11392] ? __lock_acquire+0x4a5/0x2630 [ 197.489951][T11392] ? __pfx_binder_thread_write+0x10/0x10 [ 197.489968][T11392] ? binder_debug+0xe0/0x190 [ 197.489991][T11392] ? __pfx_binder_debug+0x10/0x10 [ 197.490015][T11392] ? binder_debug+0xe0/0x190 [ 197.490037][T11392] ? __pfx_binder_debug+0x10/0x10 [ 197.490074][T11392] binder_ioctl+0x28b8/0x7450 [ 197.490098][T11392] ? tomoyo_path_number_perm+0x188/0x580 [ 197.490133][T11392] ? __pfx_binder_ioctl+0x10/0x10 [ 197.490149][T11392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.490173][T11392] ? do_vfs_ioctl+0x226/0x13e0 [ 197.490189][T11392] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 197.490202][T11392] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 197.490221][T11392] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 197.490256][T11392] ? selinux_file_ioctl+0x139/0x290 [ 197.490273][T11392] ? selinux_file_ioctl+0xb4/0x290 [ 197.490291][T11392] ? __pfx_binder_ioctl+0x10/0x10 [ 197.490308][T11392] __x64_sys_ioctl+0x18e/0x210 [ 197.490327][T11392] do_syscall_64+0xc9/0xf80 [ 197.490347][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.490365][T11392] RIP: 0033:0x7fcd9599acb9 [ 197.490380][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.490396][T11392] RSP: 002b:00007fcd9679c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.490413][T11392] RAX: ffffffffffffffda RBX: 00007fcd95c15fa0 RCX: 00007fcd9599acb9 [ 197.490425][T11392] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 197.490435][T11392] RBP: 00007fcd9679c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.490445][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.490454][T11392] R13: 00007fcd95c16038 R14: 00007fcd95c15fa0 R15: 00007ffef80c12f8 [ 197.490476][T11392] [ 198.513774][T11401] can0: slcan on pty22. [ 198.618588][T11398] can0 (unregistered): slcan off pty22. [ 198.692549][T11410] binder: 11404:11410 ioctl 80984120 200000000100 returned -22 [ 198.698706][T11410] binder_alloc: 11404: binder_alloc_buf size 65856 failed, no address space [ 198.702385][T11410] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 198.757730][ T40] audit: type=1400 audit(1774522975.733:677): avc: denied { getopt } for pid=11415 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.219227][ T40] audit: type=1400 audit(1774522976.203:678): avc: denied { bind } for pid=11422 comm="syz.5.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.227666][ T40] audit: type=1400 audit(1774522976.203:679): avc: denied { listen } for pid=11422 comm="syz.5.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.237008][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1863'. [ 199.241622][ T40] audit: type=1400 audit(1774522976.233:680): avc: denied { write } for pid=11422 comm="syz.5.1863" path="socket:[45340]" dev="sockfs" ino=45340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.464566][ T40] audit: type=1400 audit(1774522976.443:681): avc: denied { append } for pid=11428 comm="syz.4.1866" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.679067][T11435] FAULT_INJECTION: forcing a failure. [ 199.679067][T11435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.684890][T11435] CPU: 2 UID: 0 PID: 11435 Comm: syz.0.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.684909][T11435] Tainted: [L]=SOFTLOCKUP [ 199.684913][T11435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.684920][T11435] Call Trace: [ 199.684924][T11435] [ 199.684930][T11435] dump_stack_lvl+0x100/0x190 [ 199.684950][T11435] should_fail_ex.cold+0x5/0xa [ 199.684968][T11435] ? prepare_alloc_pages+0x16d/0x5f0 [ 199.684986][T11435] should_fail_alloc_page+0xeb/0x140 [ 199.685002][T11435] prepare_alloc_pages+0x1f0/0x5f0 [ 199.685021][T11435] __alloc_frozen_pages_noprof+0x193/0x2410 [ 199.685037][T11435] ? find_held_lock+0x2b/0x80 [ 199.685052][T11435] ? is_bpf_text_address+0x8a/0x1a0 [ 199.685068][T11435] ? is_bpf_text_address+0x8a/0x1a0 [ 199.685085][T11435] ? bpf_ksym_find+0x128/0x1c0 [ 199.685095][T11435] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.685107][T11435] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 199.685131][T11435] ? is_bpf_text_address+0x94/0x1a0 [ 199.685147][T11435] ? kernel_text_address+0x8d/0x100 [ 199.685160][T11435] ? prepare_alloc_pages+0x16d/0x5f0 [ 199.685175][T11435] ? __kernel_text_address+0xd/0x30 [ 199.685190][T11435] ? register_lock_class+0x40/0x560 [ 199.685203][T11435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.685221][T11435] ? policy_nodemask+0xed/0x4f0 [ 199.685237][T11435] alloc_pages_mpol+0x1fb/0x550 [ 199.685253][T11435] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 199.685267][T11435] ? __lock_acquire+0x4a5/0x2630 [ 199.685280][T11435] alloc_pages_noprof+0x131/0x390 [ 199.685296][T11435] pte_alloc_one+0x1e/0x3e0 [ 199.685314][T11435] __pte_alloc+0x6d/0x3f0 [ 199.685329][T11435] ? __pfx___pte_alloc+0x10/0x10 [ 199.685345][T11435] ? walk_to_pmd+0x302/0x4c0 [ 199.685363][T11435] __get_locked_pte+0xa1/0xc0 [ 199.685380][T11435] insert_page+0xcc/0x220 [ 199.685397][T11435] ? __pfx_insert_page+0x10/0x10 [ 199.685418][T11435] vm_insert_page+0x2c6/0x430 [ 199.685436][T11435] binder_alloc_new_buf+0x2101/0x2f70 [ 199.685455][T11435] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 199.685471][T11435] binder_transaction+0x1f5a/0x9bc0 [ 199.685486][T11435] ? __lock_acquire+0x4a5/0x2630 [ 199.685504][T11435] ? __pfx_binder_transaction+0x10/0x10 [ 199.685517][T11435] ? find_held_lock+0x2b/0x80 [ 199.685530][T11435] ? is_bpf_text_address+0x8a/0x1a0 [ 199.685547][T11435] ? is_bpf_text_address+0x8a/0x1a0 [ 199.685563][T11435] ? bpf_ksym_find+0x128/0x1c0 [ 199.685577][T11435] ? __lock_acquire+0x4a5/0x2630 [ 199.685587][T11435] ? arch_stack_walk+0xa6/0xf0 [ 199.685606][T11435] ? find_held_lock+0x2b/0x80 [ 199.685620][T11435] ? __might_fault+0xc5/0x140 [ 199.685631][T11435] ? __might_fault+0xc5/0x140 [ 199.685648][T11435] binder_thread_write+0x9a7/0x4d70 [ 199.685663][T11435] ? __lock_acquire+0x4a5/0x2630 [ 199.685673][T11435] ? __pfx_binder_thread_write+0x10/0x10 [ 199.685685][T11435] ? binder_debug+0xe0/0x190 [ 199.685699][T11435] ? __pfx_binder_debug+0x10/0x10 [ 199.685715][T11435] ? binder_debug+0xe0/0x190 [ 199.685746][T11435] ? __pfx_binder_debug+0x10/0x10 [ 199.685770][T11435] binder_ioctl+0x28b8/0x7450 [ 199.685784][T11435] ? tomoyo_path_number_perm+0x188/0x580 [ 199.685806][T11435] ? __pfx_binder_ioctl+0x10/0x10 [ 199.685817][T11435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.685834][T11435] ? do_vfs_ioctl+0x226/0x13e0 [ 199.685845][T11435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.685854][T11435] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 199.685868][T11435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.685925][T11435] ? selinux_file_ioctl+0x139/0x290 [ 199.685936][T11435] ? selinux_file_ioctl+0xb4/0x290 [ 199.685948][T11435] ? __pfx_binder_ioctl+0x10/0x10 [ 199.685958][T11435] __x64_sys_ioctl+0x18e/0x210 [ 199.685970][T11435] do_syscall_64+0xc9/0xf80 [ 199.685983][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.685995][T11435] RIP: 0033:0x7fdd5d99acb9 [ 199.686005][T11435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.686015][T11435] RSP: 002b:00007fdd5e80e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.686025][T11435] RAX: ffffffffffffffda RBX: 00007fdd5dc15fa0 RCX: 00007fdd5d99acb9 [ 199.686032][T11435] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 199.686039][T11435] RBP: 00007fdd5e80e090 R08: 0000000000000000 R09: 0000000000000000 [ 199.686045][T11435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.686051][T11435] R13: 00007fdd5dc16038 R14: 00007fdd5dc15fa0 R15: 00007fff957647f8 [ 199.686065][T11435] [ 199.686128][T11435] binder_alloc: 11434: binder_install_single_page failed to insert page at offset 0 with -12 [ 200.002812][T11448] tmpfs: Unknown parameter 'euid>00000000000000000000' [ 200.101844][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1876'. [ 200.829899][ T5944] Bluetooth: hci4: command 0xfc11 tx timeout [ 200.838984][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 201.121476][T11482] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804ff3f000 pfn:0x4ff3f [ 201.128685][T11482] memcg:ffff88803cb48d40 [ 201.130568][T11482] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 201.134079][T11482] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 201.137678][T11482] raw: ffff88804ff3f000 0000000000000000 00000001ffffffff ffff88803cb48d40 [ 201.141500][T11482] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 201.145792][T11482] page_owner tracks the page as allocated [ 201.152542][T11482] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11482, tgid 11482 (syz.1.1884), ts 201121444743, free_ts 201068990578 [ 201.152857][ T40] audit: type=1400 audit(1774522978.143:682): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 201.161606][T11482] post_alloc_hook+0x1e1/0x250 [ 201.168400][ T40] audit: type=1400 audit(1774522978.153:683): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.168823][ T40] audit: type=1400 audit(1774522978.153:684): avc: denied { search } for pid=5328 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.170836][T11482] get_page_from_freelist+0xe3d/0x2e10 [ 201.177207][ T40] audit: type=1400 audit(1774522978.153:685): avc: denied { add_name } for pid=5328 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.186187][T11482] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 201.188286][ T40] audit: type=1400 audit(1774522978.153:686): avc: denied { create } for pid=5328 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.196591][T11482] alloc_pages_mpol+0x1fb/0x550 [ 201.209177][T11482] folio_alloc_noprof+0x22/0x330 [ 201.211330][T11482] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 201.214076][T11482] filemap_alloc_folio_noprof+0x5e/0x80 [ 201.216450][T11482] page_cache_ra_order+0x54b/0xfe0 [ 201.218724][T11482] filemap_fault+0x1b56/0x37c0 [ 201.220845][T11482] __do_fault+0x10d/0x550 [ 201.222715][T11482] do_fault+0x2db/0x1990 [ 201.224549][T11482] __handle_mm_fault+0x1807/0x2b50 [ 201.226749][T11482] handle_mm_fault+0x36d/0xa20 [ 201.229284][T11482] do_user_addr_fault+0x5a3/0x12f0 [ 201.231586][T11482] exc_page_fault+0x6f/0xd0 [ 201.233584][T11482] asm_exc_page_fault+0x26/0x30 [ 201.235844][T11482] page last free pid 11484 tgid 11482 stack trace: [ 201.238678][T11482] __free_frozen_pages+0x822/0x1130 [ 201.240867][T11482] qlist_free_all+0x47/0xe0 [ 201.242927][T11482] kasan_quarantine_reduce+0x1a0/0x1f0 [ 201.245212][T11482] __kasan_kmalloc+0x8a/0xb0 [ 201.247284][T11482] drm_atomic_state_alloc+0xb8/0x120 [ 201.249604][T11482] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 201.252449][T11482] drm_client_modeset_dpms+0x17e/0x210 [ 201.254944][T11482] drm_fb_helper_blank+0x208/0x270 [ 201.257166][T11482] fb_blank+0xbb/0x200 [ 201.259036][T11482] do_fb_ioctl+0x539/0x7e0 [ 201.261044][T11482] fb_ioctl+0xe5/0x150 [ 201.262907][T11482] __x64_sys_ioctl+0x18e/0x210 [ 201.264941][T11482] do_syscall_64+0xc9/0xf80 [ 201.267062][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.270352][T11482] ------------[ cut here ]------------ [ 201.272645][T11482] kernel BUG at mm/filemap.c:858! [ 201.274888][T11482] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 201.278660][T11482] CPU: 2 UID: 0 PID: 11482 Comm: syz.1.1884 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.282979][T11482] Tainted: [L]=SOFTLOCKUP [ 201.284383][T11482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.287654][T11482] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 201.289764][T11482] Code: cb c6 ff 48 c7 c6 20 19 9d 8b 4c 89 ef e8 a9 0b 12 00 90 0f 0b e8 61 cb c6 ff 48 c7 c6 80 19 9d 8b 4c 89 ef e8 92 0b 12 00 90 <0f> 0b e8 4a cb c6 ff 90 0f 0b 90 e9 9b fe ff ff e8 3c cb c6 ff 90 [ 201.296025][T11482] RSP: 0018:ffffc900064e7808 EFLAGS: 00010293 [ 201.298033][T11482] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 201.300524][T11482] RDX: ffff888057388000 RSI: ffffffff825240c8 RDI: ffff888057388484 [ 201.303080][T11482] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 201.305639][T11482] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 201.308167][T11482] R13: ffffea00013fcfc0 R14: 0000000000000000 R15: 1ffff92000c9cf2b [ 201.310702][T11482] FS: 000055555e7aa500(0000) GS:ffff8880d67dc000(0000) knlGS:0000000000000000 [ 201.313567][T11482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.315689][T11482] CR2: 00002000000002c0 CR3: 0000000056f43000 CR4: 0000000000352ef0 [ 201.318242][T11482] Call Trace: [ 201.319318][T11482] [ 201.320334][T11482] ? __pfx___filemap_add_folio+0x10/0x10 [ 201.322179][T11482] filemap_add_folio+0x1d8/0x690 [ 201.323899][T11482] ? __pfx_filemap_add_folio+0x10/0x10 [ 201.325648][T11482] page_cache_ra_order+0x614/0xfe0 [ 201.327363][T11482] filemap_fault+0x1b56/0x37c0 [ 201.328924][T11482] ? debug_object_free+0x28d/0x550 [ 201.330599][T11482] ? __pfx_filemap_fault+0x10/0x10 [ 201.332291][T11482] ? __pfx_filemap_map_pages+0x10/0x10 [ 201.334033][T11482] __do_fault+0x10d/0x550 [ 201.335411][T11482] ? __pfx_filemap_map_pages+0x10/0x10 [ 201.337138][T11482] do_fault+0x2db/0x1990 [ 201.338505][T11482] __handle_mm_fault+0x1807/0x2b50 [ 201.340130][T11482] ? reacquire_held_locks+0xce/0x1e0 [ 201.341859][T11482] ? __pfx___handle_mm_fault+0x10/0x10 [ 201.343631][T11482] ? lock_vma_under_rcu+0x17c/0x5a0 [ 201.345459][T11482] ? lockdep_hardirqs_on+0x78/0x100 [ 201.347284][T11482] handle_mm_fault+0x36d/0xa20 [ 201.348851][T11482] do_user_addr_fault+0x5a3/0x12f0 [ 201.350518][T11482] exc_page_fault+0x6f/0xd0 [ 201.352027][T11482] asm_exc_page_fault+0x26/0x30 [ 201.353563][T11482] RIP: 0033:0x7fcd95870737 [ 201.354975][T11482] Code: 83 ea 01 48 d3 e2 44 89 c1 49 d3 e1 f7 d2 89 c1 22 17 49 f7 d1 89 d0 4c 21 ce 48 d3 e6 09 f0 88 07 c3 90 48 85 d2 75 98 89 f0 <88> 07 c3 48 89 d7 e8 ee 29 fe ff 66 2e 0f 1f 84 00 00 00 00 00 66 [ 201.361123][T11482] RSP: 002b:00007ffef80c1418 EFLAGS: 00010246 [ 201.363073][T11482] RAX: 0000000000000014 RBX: 0000000000000001 RCX: 0000000000000000 [ 201.365589][T11482] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 00002000000002c0 [ 201.368107][T11482] RBP: 00007ffef80c1540 R08: 0000000000000000 R09: 0000000000000000 [ 201.370656][T11482] R10: 0000000000000014 R11: 0000000000000000 R12: 00007ffef80c1580 [ 201.373210][T11482] R13: 00007fcd95c1609c R14: 0000000000031069 R15: 00007ffef80c1560 [ 201.375793][T11482] [ 201.376786][T11482] Modules linked in: [ 201.378279][T11482] ---[ end trace 0000000000000000 ]--- [ 201.381549][T11482] RIP: 0010:__filemap_add_folio+0xf7f/0x1220 [ 201.383660][T11482] Code: cb c6 ff 48 c7 c6 20 19 9d 8b 4c 89 ef e8 a9 0b 12 00 90 0f 0b e8 61 cb c6 ff 48 c7 c6 80 19 9d 8b 4c 89 ef e8 92 0b 12 00 90 <0f> 0b e8 4a cb c6 ff 90 0f 0b 90 e9 9b fe ff ff e8 3c cb c6 ff 90 [ 201.406528][T11482] RSP: 0018:ffffc900064e7808 EFLAGS: 00010293 [ 201.408847][T11482] RAX: 0000000000000000 RBX: 0000000000112c00 RCX: 0000000000000000 [ 201.411662][T11482] RDX: ffff888057388000 RSI: ffffffff825240c8 RDI: ffff888057388484 [ 201.414307][T11482] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 201.416963][T11482] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 201.426373][T11482] R13: ffffea00013fcfc0 R14: 0000000000000000 R15: 1ffff92000c9cf2b [ 201.429283][T11482] FS: 000055555e7aa500(0000) GS:ffff8880d65dc000(0000) knlGS:0000000000000000 [ 201.432304][T11482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.434688][T11482] CR2: 00007f69fcf47e20 CR3: 0000000056f43000 CR4: 0000000000352ef0 [ 201.437329][T11482] Kernel panic - not syncing: Fatal exception [ 201.440190][T11482] Kernel Offset: disabled [ 201.441617][T11482] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:18:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000131244 RBX=ffffffff8e297ac0 RCX=ffffffff8b76b4b5 RDX=0000000000000001 RSI=ffffffff8bfa3520 RDI=ffffffff81dccfdb RBP=0000000000000000 RSP=ffffffff8e207e00 R8 =0000000000000000 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=0000000000000000 R12=fffffbfff1c52f58 R13=0000000000000000 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c30e930 CR3=000000002501f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0f4c5083a31bc82 b50a9f1652fc3d79 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8242fd0da666321 b2b468900030342b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5e537ba124a0b30 b8d3f65ec3721847 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 761da032d5c47183 09c2837823cff20c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000b300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007a79560384 977c97d65505e1e1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007af47cddbf 0000007b4cf61e23 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007a8f3e4825 e90bd4a4e20d7ad8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6b04c2910433f6a 88720d34d9927dce ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fb489552c978e90 a79b60c31bbc2a08 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6656057944120f2 98b34445addb6e2d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba5dc1e43756f826 de3e309c26cf3006 361c78de697a5bcc c90895b297554113 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 739ae30765a61b0c e7263ae3611bfef8 126611d2c75b4fb6 b814e46dc731fc17 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 efedeccdf931d271 7ab08381f2c2a33d 0072879e16c65497 338f35e1544b32a1 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9dd6fb2b7fb0af73 25c49ad60928530b 33c169cf490f8606 8d419781c1de38d4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 982a92e5fc7dfae3 f256e6d061d306f7 e5e1d44d11ce943b 2a65270e5d06e578 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47492d739ae30765 a61b0ce7263ae361 1bfef8126611d2c7 5b4fb6b814e46dc7 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000f25e RBX=ffffffff93fb4520 RCX=000000000000f263 RDX=0000000000000094 RSI=000000000000f262 RDI=000000000004b9bd RBP=0000000000000008 RSP=ffffc9000373f9e8 R8 =000000000000f263 R9 =ffffffff9605ffa6 R10=0000000000000008 R11=0000000000000001 R12=ffffffff97443cb0 R13=0000000000000f36 R14=ffffffff976b1b48 R15=dead000000000122 RIP=ffffffff81e2c45f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556c5f5500 ffffffff 00c00000 GS =0000 ffff8880d66dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd95984380 CR3=000000003b685000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000041 Opmask01=0000000000000001 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=00000000efffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff47d9a80b 00007fff47d9a80b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff47d9ad10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff47d9ad10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d3238343131545b 5d3430363934322e 31303220205b3e34 3c00303231783000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5732323431315451 5734303633343224 3130322020513434 3600303231723000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f746e65696c635f 6d726420205d3238 343131545b5d3430 363934322e313032 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 663d7373616c6374 20745f7366706d74 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a725f7463656a62 6f3a755f6d657473 79733d747865746e 6f637420745f6467 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c7379733a725f 6d65747379733a75 5f6d65747379733d 747865746e6f6373 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022736567617373 656d223d656d616e 202264676f6c7379 73223d6d6d6f6320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865746e6f637320 3335373d6f6e6920 227366706d747665 64223d7665642022 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc900064e70e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff85699f40 RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555e7aa500 ffffffff 00c00000 GS =0000 ffff8880d67dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000002c0 CR3=0000000056f43000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd97144016 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd97144016 00007ffd9714401c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f896c2086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f896c208728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f896c20869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f896c20871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000185524 RBX=ffff88801e2f8000 RCX=ffffffff8b76b4b5 RDX=0000000000000001 RSI=ffffffff8bfa3520 RDI=ffffffff81dccfdb RBP=0000000000000003 RSP=ffffc90000197df0 R8 =0000000000000000 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000003 R12=ffffed1003c5f000 R13=0000000000000003 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd9679bf88 CR3=0000000036bae000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef80c17e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef80c17e6 00007ffef80c17ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd95a086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd95a08728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd95a0869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd95a0871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000