last executing test programs: 1.404674113s ago: executing program 2 (id=1053): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x1e00, 0x3fc}, 0x0, r1}) 1.400888125s ago: executing program 2 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x8000000) 1.183001623s ago: executing program 0 (id=1060): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x9}, {0x28, 0x3}, {0x6, 0x1}, {0x4, 0x5}, {0xa2}, {0xfe, 0x1}, {0x4, 0x6}, {0xc, 0x4}, {0x4c, 0x5}, {0x3, 0x7}, {0x5, 0x1}], "1aeb9d19d894b96d"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x10, 0x3}, {0x7, 0x2}, {0x5e, 0x7}, {0xfc}, {0x1, 0x1}, {0x5}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x5}, {0x8, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x0, 0x2}, {0x5}], "b74997eb99590728"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x1, 0x4}], "fb5427408250a323"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1}, {0x5, 0x3}, {0x9, 0x7}, {0x1, 0x4}, {0x3}, {0x5, 0x7}, {0x5, 0x2}], "ed53b7f97890b012"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xff, 0x6}, {0x8f, 0x1}, {0x27, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0x81, 0x4}, {0x0, 0x6}, {0x9}, {0x35, 0x4}, {0x7, 0x3}, {}, {0x6, 0x1}, {0x3}, {0xff}, {0x7, 0x6}, {0x8, 0x6}, {0x9, 0x2}], "860c35c9c1468c13"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xf0, 0x7}, {0x59, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x96}, {0x0, 0x5}, {0x6, 0x4}, {0x6a, 0x6}, {0x4a, 0x7}, {0x6, 0x3}, {0x4, 0x3}, {0x9, 0x5}, {0xfe, 0x2}, {0x5, 0x3}, {0x8, 0x1}, {0x81, 0x6}, {0x5, 0x3}, {0x5, 0x4}, {0x5, 0x7}], "78e2463f0459971f"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20009000}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x1c}}, 0x4000054) 1.144297752s ago: executing program 2 (id=1061): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}]}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xee}]}]}, 0x28}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) 1.142469637s ago: executing program 0 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) 1.04763885s ago: executing program 0 (id=1064): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) 954.48725ms ago: executing program 0 (id=1065): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000740)="2dfc1a259ff0bbc6bbbb9d1b84307f48a88807bdc50b32c541fb911ab23a91264a788eedc4e787fab78773ed01132d5ec0970d3eb98b865fca0f73d9e93f069d84bd34d847405c05c39d6c883ce615d626cf46ca34b83fdcb1085a3011b95549baa3229dc1fb041596b61067927a881dacdc70ad0a2f79a26290c3441ecafa970095070b42bb5ba259b00aa6f492e3774da6d4bb577044616feca7", 0x272777002d2b5b6}, {&(0x7f0000000880)="71ab0923126fc308f717dc0deecbd5f8e1a8bdb16d3b798ff4e23de0a379ed53ce9ee2e12e09cfbcfa80df05292a296eb5ee50233e314364068d6b0ec55dad893bd5d6bd75cdbbcc62e8df6cdc4734fd2a9b4a5211e6ae56f2b80066206fa85923a464fee2131193087f610a45ac984d83b90f18296f4570237b320ddfd5283b4376631d1ea07c970e910e47633e5ea795527367768d9d"}, {&(0x7f0000000940)="806942f74b8c598af8237881658306b3f99ad3fed50a54e644c29672bae14da9bc32efb4824b7370deac717d5543938028b00d2f880c1c9b0c61a4b6bff918895de105c9baf2a15308e32840957bf4113fcc00f422d24f1d228b0b1af0c7eba598470e2b031d"}, {&(0x7f0000000ac0)="1a187272ae672c2c95cdf0786ee3f7894594ae6c907362f13d687c82a55e2e09234086d97232c96b47861d5681179b7ce939801600d23385d0611a14b6dbc4512c333967fa5cf7f1ad3f1082fb2acbf55d8610717ed19604c447da3e525e0be3a7e3b06d29ec2729bccf958f496c67e91cba7b8f01562e534bd558598d72b874a55142410b7938024c9654ae4bfaa4c897fac6014ec5f05c314305523e4eaf249a7ae24f381f497034c3d2d82f9ff9bb6a48e2399536bc2e20c32f1b77a581e25ee7366276a80865594d74e402931cf8e66a36888809d57bb9cbc06a1932"}, {&(0x7f0000000d00)="4e689d46f4d011d1ce06dde75062eb1622e2cb1bdabe20b3a6ea34296fd3db5763525a4dcdaf4205d04b1119f4e79425e44c2ab18b183486c6dfa9cdb79d9bace256a971a50a1902a5fbf70bc20a0b7ad14bb6521594592e8ca5e75018173184f57b3b71a32be48f7755adf82e286a26e78ba9ab5ccbe398876ca8f3a733ee08cc4a196895ada4f3901cd320fa1bbd51e25d3f610b2908cc36bde9"}, {&(0x7f0000000dc0)="4818268937898235337c75ffc70f7bc2dbb3d794a64898e546c8aa43dee920d0613e65b6926436a45c387978037dda99023680293841f01fb090a36b2bfbd403f89d7d5a76411498c773cc5c7d9f30"}, {&(0x7f0000000e40)="ce2da785f1db15442e76af28"}, {&(0x7f0000000e80)="1786e6ce961a181ddef82968ff6ba6ce8a28ec3686ac753953c919933672498563978765d2cfd459f4b17bf4880fb39672c91e34a7f689e132"}, {&(0x7f0000000ec0)="858ad29405a23990be32b3c942b64febc668c4fe3f62a14fc2fb02eb1fcc5fee985fcbee33bb66c6aa6354615a23ae77376e3ba23c9ee64327173b73f2bb7b736dbd0d4383985a3911d88861b188ffda8beb317883b739da8dcb87eb0c6f12c2314f043ffed8bbd0712b77708ee98c3e00f9643881983c8a0abd070694968ab6a3d3ccee0eec3e8f023f8a9285d82c3f08b5162de84f"}], 0x10000000000001ca, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd8", 0x94}, {&(0x7f0000000600)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0", 0xa5}], 0x100000000000009f, 0x0, 0x0, 0x200008c0}], 0x2, 0x2004c444) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be131f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2b86b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffe, 0x3, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="010029bd70"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = dup(r3) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/32, 0x20}], 0x1, 0x2, 0xac) 954.129705ms ago: executing program 1 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000840) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$tun(r3, &(0x7f0000000100)=ANY=[], 0xec0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x9, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0x4, 0x3, 0x3, 0x0, 0x4b}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, r2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) 953.970251ms ago: executing program 2 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 865.586671ms ago: executing program 2 (id=1068): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000240), 0x0, 0x4}, 0x40) 865.257975ms ago: executing program 2 (id=1069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd700002000000140000000c00018008000100", @ANYRES32=r7, @ANYBLOB="08001200810055c60e2fcd570cf805fc736b4d35c633ac94397a7255d24eab0ff36b42707738994ee592bd7eea263012f26f5f6dbaa03d621f94d4351a32fe0307e98ec91b46ee1ec7a2518ed83d914712a1febc60c5e3fa460084042f8e94813dcd738375c578d62591aec3f06c0b461d1ae7d387747944070de3a58dd04f75f61389d35a985b4978391e0f06fc94dccfadb17d75704bcf61768bd4c161c510a6de3cc6f520249a94e7a227"], 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x3, 0x28b, 0x9, 0x400, 0x7, 0x10000, r9}) pread64(r8, &(0x7f0000004380)=""/246, 0xf6, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 864.925315ms ago: executing program 1 (id=1070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492", 0x41}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3f000000) 655.416187ms ago: executing program 1 (id=1073): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100001002abd700002d4df2500000000", @ANYRES32=r1, @ANYBLOB="94e406008353000020001280110001006272696467655f736c6176650000000008000580040018"], 0x40}}, 0x200088c2) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xf3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb240}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 655.079088ms ago: executing program 3 (id=1075): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 495.669508ms ago: executing program 1 (id=1076): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xf5, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x13, 0x63, [@remote, @broadcast, @private=0xa010100, @private=0xa010102]}]}}}}}}}, 0x0) 495.461778ms ago: executing program 1 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xffffffe4) 495.226408ms ago: executing program 3 (id=1078): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') (async, rerun: 64) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080) 413.818415ms ago: executing program 3 (id=1079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000030020008510000006", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000001000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b7641a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = accept(0xffffffffffffffff, &(0x7f0000000600)=@ax25={{}, [@bcast, @remote, @bcast, @remote, @default, @null, @rose]}, &(0x7f00000006c0)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e23, 0x605c, @empty, 0x669}}, 0xfffff600, 0x8, 0x520, 0x6, 0x91, 0x9, 0x7}, &(0x7f00000005c0)=0x9c) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x68, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x138, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xa}, @device_a, @device_b, @initial, {0x9, 0xa}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @ntf_ch_w={0x7, 0x0, 0x1}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe49}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x52}], @NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{}, {0x6}, @device_a, @device_b, @from_mac, {0x5, 0x200}}, @tdls_chsw_resp={0xc, 0x6, {0x3c, {0x65, 0x12, {@random="bc4f3439d882", @broadcast, @broadcast}}, {0x68, 0x4, {0x1, 0x3}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb62}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x44}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x138}}, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) accept4(r8, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 413.475452ms ago: executing program 3 (id=1080): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r1}, 0x10) socket$inet6(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x0, 0x2, 0x5e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x4) socket$inet6(0xa, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES16=r14, @ANYBLOB="010000000000fedbdf250300000018000180040002800d0001006574683a6873723000000000aebb9b8cd8e51160ae5f9b3093a5c0199b379b78a4910c93068324a03e27b929ce027d8209331ec5af6e7ad107cc22f318f90f309d5c927253016ccfdf7959c14e578151ca121494e0c8c1b69d6187880a591c210cd9745f5cf4b454f8338f3a99944fb2ee0d78be7ebcc6423415b71ce7c19a10376e6e18a0ba715a803013e7"], 0x2c}}, 0x40000000) 285.723342ms ago: executing program 1 (id=1081): r0 = socket$inet(0x2, 0x3, 0x400000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000400)={{0x0, 0x10000000000001, 0xf, 0x4, 0x1, 0x7, 0x101, 0x4, 0xfffffffa, 0x4, 0xc0000, 0x6, 0x0, 0xff, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{r1, 0xfff, 0x1ffe00000000, 0x7, 0x8000000000000001, 0x4760000000000000, 0x0, 0xbaa8, 0xf941, 0x6, 0x7732a542, 0x4, 0x85, 0x401, 0x7}}) r2 = syz_usbip_server_init(0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) 225.798115ms ago: executing program 3 (id=1082): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xd653, 0x400, 0x20363159, 0x4, 0x8, 0xa457, 0x8, 0x3, 0x1, 0x7, 0x0, 0x5d}}) 225.541099ms ago: executing program 3 (id=1083): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf251900000008000300", @ANYRES32=r5, @ANYBLOB="05001d005c000000050060"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003f00)={&(0x7f0000002f00)=""/4096, 0x1000}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.800359ms ago: executing program 0 (id=1084): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000031a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 0s ago: executing program 0 (id=1085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, 0xffffffffffffffff, 0x3811a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x3, 0x6, &(0x7f0000000000)={0x11, "9124be917ea944c214b5367c2fe313c4c005671fc56af43014ffef1e156e7d73ec"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x303, 0x70bd2a, 0x25dfdbff, {0xa}}, 0x14}}, 0x20000024) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 0s ago: executing program 0 (id=1086): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2008c040}, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="fd000000090209000101008001120100020000004000000000000000000001", 0x1f) kernel console output (not intermixed with test programs): 46][ T7332] ? selinux_file_ioctl+0x13b/0x290 [ 89.962570][ T7332] ? selinux_file_ioctl+0xb6/0x290 [ 89.962598][ T7332] ? __pfx_drm_ioctl+0x10/0x10 [ 89.962618][ T7332] __x64_sys_ioctl+0x18e/0x210 [ 89.962644][ T7332] do_syscall_64+0x115/0x870 [ 89.962665][ T7332] ? clear_bhb_loop+0x40/0x90 [ 89.962686][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.962704][ T7332] RIP: 0033:0x7f58a4b9e019 [ 89.962719][ T7332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.962735][ T7332] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.962752][ T7332] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 89.962764][ T7332] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 89.962774][ T7332] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 89.962784][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.962794][ T7332] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 89.962842][ T7332] [ 90.108545][ T7341] netlink: 'syz.1.553': attribute type 34 has an invalid length. [ 90.138890][ T42] audit: type=1400 audit(1785539449.366:541): avc: denied { ioctl } for pid=7343 comm="syz.3.554" path="socket:[19915]" dev="sockfs" ino=19915 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 90.322177][ T42] audit: type=1400 audit(1785539449.546:542): avc: denied { ioctl } for pid=7353 comm="syz.1.559" path="socket:[19941]" dev="sockfs" ino=19941 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.477269][ T7366] netlink: 'syz.0.564': attribute type 34 has an invalid length. [ 90.585134][ T7380] FAULT_INJECTION: forcing a failure. [ 90.585134][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 90.614669][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT(full) [ 90.614697][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.614708][ T7380] Call Trace: [ 90.614715][ T7380] [ 90.614723][ T7380] dump_stack_lvl+0x100/0x190 [ 90.614753][ T7380] should_fail_ex.cold+0x5/0xa [ 90.614778][ T7380] should_failslab+0xc2/0x120 [ 90.614830][ T7380] __kmalloc_cache_noprof+0x91/0x6c0 [ 90.614861][ T7380] ? __trace_eprobe_create+0x2d6/0x1d10 [ 90.614895][ T7380] __trace_eprobe_create+0x2d6/0x1d10 [ 90.614930][ T7380] ? rcu_is_watching+0x12/0xc0 [ 90.614958][ T7380] ? __pfx___trace_eprobe_create+0x10/0x10 [ 90.614990][ T7380] ? __kmalloc_noprof+0x343/0x820 [ 90.615013][ T7380] ? argv_split+0x173/0x420 [ 90.615054][ T7380] ? argv_split+0x359/0x420 [ 90.615074][ T7380] ? __pfx___trace_eprobe_create+0x10/0x10 [ 90.615103][ T7380] trace_probe_create+0xef/0x100 [ 90.615126][ T7380] ? __pfx_trace_probe_create+0x10/0x10 [ 90.615153][ T7380] create_dyn_event+0xee/0x1d0 [ 90.615183][ T7380] trace_parse_run_command+0x1ab/0x3b0 [ 90.615205][ T7380] ? __pfx_create_dyn_event+0x10/0x10 [ 90.615236][ T7380] vfs_write+0x2aa/0x1050 [ 90.615265][ T7380] ? __pfx_dyn_event_write+0x10/0x10 [ 90.615293][ T7380] ? __pfx_vfs_write+0x10/0x10 [ 90.615320][ T7380] ? __fget_files+0x215/0x3d0 [ 90.615346][ T7380] ? __fget_files+0x21f/0x3d0 [ 90.615371][ T7380] ksys_write+0x12a/0x250 [ 90.615398][ T7380] ? __pfx_ksys_write+0x10/0x10 [ 90.615432][ T7380] do_syscall_64+0x115/0x870 [ 90.615454][ T7380] ? clear_bhb_loop+0x40/0x90 [ 90.615476][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.615495][ T7380] RIP: 0033:0x7f58a4b9e019 [ 90.615511][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.615529][ T7380] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.615554][ T7380] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 90.615566][ T7380] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 90.615576][ T7380] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 90.615587][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.615599][ T7380] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 90.615624][ T7380] [ 90.749443][ T7387] use of bytesused == 0 is deprecated and will be removed in the future, [ 90.753736][ T7387] use the actual size instead. [ 90.779729][ T7391] netlink: 'syz.1.574': attribute type 34 has an invalid length. [ 90.818942][ T7399] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 90.821419][ T7399] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 90.830642][ T42] audit: type=1400 audit(1785539450.056:543): avc: denied { ioctl } for pid=7398 comm="syz.0.577" path="socket:[17281]" dev="sockfs" ino=17281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.916185][ T7406] FAULT_INJECTION: forcing a failure. [ 90.916185][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.920817][ T7406] CPU: 2 UID: 0 PID: 7406 Comm: syz.0.580 Not tainted syzkaller #0 PREEMPT(full) [ 90.920832][ T7406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.920838][ T7406] Call Trace: [ 90.920842][ T7406] [ 90.920847][ T7406] dump_stack_lvl+0x100/0x190 [ 90.920865][ T7406] should_fail_ex.cold+0x5/0xa [ 90.920878][ T7406] _copy_from_iter+0x1f4/0x1690 [ 90.920897][ T7406] ? __pfx__copy_from_iter+0x10/0x10 [ 90.920911][ T7406] ? _parse_integer_limit+0x1ac/0x220 [ 90.920924][ T7406] ? _kstrtoull+0x13c/0x1f0 [ 90.920934][ T7406] ? __pfx__kstrtoull+0x10/0x10 [ 90.920945][ T7406] tun_get_user+0x3ba/0x3c20 [ 90.920962][ T7406] ? __pfx_tun_get_user+0x10/0x10 [ 90.920974][ T7406] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 90.920994][ T7406] ? find_held_lock+0x2b/0x80 [ 90.921003][ T7406] ? tun_get+0x191/0x370 [ 90.921018][ T7406] ? tun_get+0x191/0x370 [ 90.921042][ T7406] tun_chr_write_iter+0xdc/0x200 [ 90.921054][ T7406] vfs_write+0x6ac/0x1050 [ 90.921071][ T7406] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 90.921083][ T7406] ? __pfx_vfs_write+0x10/0x10 [ 90.921098][ T7406] ? find_held_lock+0x2b/0x80 [ 90.921116][ T7406] ksys_write+0x12a/0x250 [ 90.921132][ T7406] ? __pfx_ksys_write+0x10/0x10 [ 90.921152][ T7406] do_syscall_64+0x115/0x870 [ 90.921164][ T7406] ? clear_bhb_loop+0x40/0x90 [ 90.921177][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.921188][ T7406] RIP: 0033:0x7f58a4b9e019 [ 90.921197][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.921208][ T7406] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.921219][ T7406] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 90.921225][ T7406] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003 [ 90.921231][ T7406] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 90.921238][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.921244][ T7406] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 90.921257][ T7406] [ 91.251706][ T847] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 91.310775][ T7418] can: request_module (can-proto-0) failed. [ 91.334576][ T7423] netlink: 'syz.2.587': attribute type 34 has an invalid length. [ 91.430180][ T847] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.433674][ T847] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.441087][ T847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.444841][ T847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.671440][ T847] usb 6-1: GET_CAPABILITIES returned 0 [ 91.673245][ T847] usbtmc 6-1:16.0: can't read capabilities [ 91.677044][ T7448] zero sized request [ 91.678586][ T42] audit: type=1400 audit(1785539450.906:544): avc: denied { ioctl } for pid=7447 comm="syz.0.598" path="/152/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 91.690478][ T7448] Cannot find add_set index 0 as target [ 91.711428][ T7451] netlink: 'syz.2.599': attribute type 34 has an invalid length. [ 91.733612][ T7444] netlink: 'syz.3.595': attribute type 4 has an invalid length. [ 91.785779][ T7456] vxfs: unable to read disk superblock at 1 [ 91.791741][ T7456] vxfs: unable to read disk superblock at 8 [ 91.794903][ T7456] vxfs: can't find superblock. [ 91.919215][ T7463] openvswitch: netlink: Message has 5 unknown bytes. [ 91.921563][ T7462] openvswitch: netlink: Message has 5 unknown bytes. [ 91.930005][ T42] audit: type=1400 audit(1785539451.156:545): avc: denied { getopt } for pid=7407 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.043835][ T7468] bond21: Removing last arp target with arp_interval on [ 92.143127][ T42] audit: type=1400 audit(1785539451.366:546): avc: denied { write } for pid=7477 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.145732][ T7475] bond16: Removing last arp target with arp_interval on [ 92.148851][ T7479] netlink: 'syz.2.609': attribute type 34 has an invalid length. [ 92.205597][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.492340][ T7506] 9pnet_fd: Insufficient options for proto=fd [ 92.595688][ T7512] FAULT_INJECTION: forcing a failure. [ 92.595688][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 92.600001][ T7512] CPU: 3 UID: 0 PID: 7512 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 92.600017][ T7512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.600029][ T7512] Call Trace: [ 92.600033][ T7512] [ 92.600038][ T7512] dump_stack_lvl+0x100/0x190 [ 92.600068][ T7512] should_fail_ex.cold+0x5/0xa [ 92.600082][ T7512] should_failslab+0xc2/0x120 [ 92.600097][ T7512] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.600110][ T7512] ? __alloc_skb+0x5b7/0x710 [ 92.600131][ T7512] ? __alloc_skb+0x140/0x710 [ 92.600150][ T7512] __alloc_skb+0x140/0x710 [ 92.600161][ T7512] ? __alloc_skb+0x5b7/0x710 [ 92.600172][ T7512] ? __pfx___alloc_skb+0x10/0x10 [ 92.600188][ T7512] netlink_ack+0x117/0xb80 [ 92.600208][ T7512] netlink_rcv_skb+0x333/0x420 [ 92.600218][ T7512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.600239][ T7512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.600254][ T7512] ? netlink_deliver_tap+0x1ae/0xcc0 [ 92.600274][ T7512] netlink_unicast+0x585/0x850 [ 92.600286][ T7512] ? __pfx_netlink_unicast+0x10/0x10 [ 92.600300][ T7512] netlink_sendmsg+0x8b0/0xda0 [ 92.600313][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.600325][ T7512] ? selinux_socket_sendmsg+0x198/0x2f0 [ 92.600346][ T7512] ____sys_sendmsg+0xa4d/0xbe0 [ 92.600363][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.600375][ T7512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.600396][ T7512] ___sys_sendmsg+0x190/0x1e0 [ 92.600414][ T7512] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.600430][ T7512] ? __lock_acquire+0x49f/0x1a40 [ 92.600443][ T7512] ? get_pid_task+0x106/0x250 [ 92.600467][ T7512] __sys_sendmsg+0x160/0x210 [ 92.600480][ T7512] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.600500][ T7512] do_syscall_64+0x115/0x870 [ 92.600517][ T7512] ? clear_bhb_loop+0x40/0x90 [ 92.600530][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.600541][ T7512] RIP: 0033:0x7f58a4b9e019 [ 92.600551][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.600562][ T7512] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.600574][ T7512] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 92.600580][ T7512] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 000000000000000c [ 92.600587][ T7512] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 92.600593][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.600599][ T7512] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 92.600612][ T7512] [ 92.730017][ T7517] netlink: 'syz.3.622': attribute type 34 has an invalid length. [ 92.956338][ T5096] Bluetooth: hci4: sending frame failed (-49) [ 92.961561][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 92.978096][ T7523] __nla_validate_parse: 20 callbacks suppressed [ 92.978110][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 93.221697][ T7537] FAULT_INJECTION: forcing a failure. [ 93.221697][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 93.226208][ T7537] CPU: 2 UID: 0 PID: 7537 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT(full) [ 93.226223][ T7537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.226230][ T7537] Call Trace: [ 93.226234][ T7537] [ 93.226239][ T7537] dump_stack_lvl+0x100/0x190 [ 93.226257][ T7537] should_fail_ex.cold+0x5/0xa [ 93.226272][ T7537] should_failslab+0xc2/0x120 [ 93.226287][ T7537] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 93.226301][ T7537] ? __d_alloc+0x35/0xa50 [ 93.226330][ T7537] __d_alloc+0x35/0xa50 [ 93.226344][ T7537] d_alloc+0x4a/0x1e0 [ 93.226357][ T7537] lookup_one_qstr_excl+0x171/0x250 [ 93.226374][ T7537] start_dirop+0x59/0xb0 [ 93.226385][ T7537] simple_start_creating+0xf9/0x110 [ 93.226397][ T7537] ? __pfx_simple_start_creating+0x10/0x10 [ 93.226409][ T7537] ? mntput+0x70/0xa0 [ 93.226418][ T7537] ? simple_pin_fs+0xa3/0x190 [ 93.226429][ T7537] debugfs_start_creating.part.0+0x82/0x170 [ 93.226448][ T7537] debugfs_create_dir+0x72/0x440 [ 93.226460][ T7537] ieee80211_debugfs_recreate_netdev+0x1d1/0x1790 [ 93.226487][ T7537] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 93.226503][ T7537] ? ieee80211_link_setup+0x68/0xa0 [ 93.226522][ T7537] ? ieee80211_setup_sdata+0x620/0xdc0 [ 93.226542][ T7537] ieee80211_if_change_type+0x2a9/0x790 [ 93.226561][ T7537] ieee80211_change_iface+0xad/0x920 [ 93.226573][ T7537] ? cfg80211_mlme_purge_registrations+0x1eb/0x2b0 [ 93.226595][ T7537] cfg80211_change_iface+0x569/0xdf0 [ 93.226615][ T7537] nl80211_set_interface+0x875/0xc80 [ 93.226634][ T7537] ? __pfx_nl80211_set_interface+0x10/0x10 [ 93.226651][ T7537] ? __nla_parse+0x40/0x60 [ 93.226664][ T7537] ? nl80211_pre_doit+0x30e/0xae0 [ 93.226676][ T7537] ? nl80211_pre_doit+0x19a/0xae0 [ 93.226691][ T7537] genl_family_rcv_msg_doit+0x214/0x300 [ 93.226707][ T7537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.226724][ T7537] ? bpf_lsm_capable+0x9/0x10 [ 93.226735][ T7537] ? security_capable+0x80/0x260 [ 93.226749][ T7537] ? ns_capable+0xd2/0xf0 [ 93.226764][ T7537] genl_rcv_msg+0x560/0x800 [ 93.226778][ T7537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.226808][ T7537] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 93.226821][ T7537] ? __pfx_nl80211_set_interface+0x10/0x10 [ 93.226912][ T7537] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.226932][ T7537] netlink_rcv_skb+0x159/0x420 [ 93.226943][ T7537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.226956][ T7537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.226972][ T7537] ? netlink_deliver_tap+0x1ae/0xcc0 [ 93.226991][ T7537] genl_rcv+0x28/0x40 [ 93.227002][ T7537] netlink_unicast+0x585/0x850 [ 93.227014][ T7537] ? __pfx_netlink_unicast+0x10/0x10 [ 93.227029][ T7537] netlink_sendmsg+0x8b0/0xda0 [ 93.227042][ T7537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.227054][ T7537] ? selinux_socket_sendmsg+0x198/0x2f0 [ 93.227073][ T7537] ____sys_sendmsg+0xa4d/0xbe0 [ 93.227090][ T7537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.227101][ T7537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.227128][ T7537] ___sys_sendmsg+0x190/0x1e0 [ 93.227146][ T7537] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.227162][ T7537] ? __lock_acquire+0x49f/0x1a40 [ 93.227176][ T7537] ? get_pid_task+0x106/0x250 [ 93.227201][ T7537] __sys_sendmsg+0x160/0x210 [ 93.227215][ T7537] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.227236][ T7537] do_syscall_64+0x115/0x870 [ 93.227249][ T7537] ? clear_bhb_loop+0x40/0x90 [ 93.227262][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.227273][ T7537] RIP: 0033:0x7f58a4b9e019 [ 93.227283][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.227293][ T7537] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.227305][ T7537] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 93.227312][ T7537] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 93.227318][ T7537] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 93.227324][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.227330][ T7537] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 93.227344][ T7537] [ 93.455484][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 93.561743][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 93.629850][ T7562] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 93.717951][ T7569] ima: Unable to open file: / (-22) [ 93.726178][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 93.835011][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 94.186691][ T5749] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.336675][ T5749] usb 8-1: Using ep0 maxpacket: 8 [ 94.340656][ T5749] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.345322][ T5749] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.349574][ T5749] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.352441][ T5749] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.356234][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.371591][ T5749] usb 8-1: config 0 descriptor?? [ 94.521996][ T7610] FAULT_INJECTION: forcing a failure. [ 94.521996][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.528225][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.0.657 Not tainted syzkaller #0 PREEMPT(full) [ 94.528251][ T7610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.528270][ T7610] Call Trace: [ 94.528278][ T7610] [ 94.528286][ T7610] dump_stack_lvl+0x100/0x190 [ 94.528333][ T7610] should_fail_ex.cold+0x5/0xa [ 94.528357][ T7610] _copy_from_user+0x2e/0xd0 [ 94.528389][ T7610] kstrtouint_from_user+0xd6/0x1d0 [ 94.528409][ T7610] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 94.528427][ T7610] ? __lock_acquire+0x49f/0x1a40 [ 94.528461][ T7610] proc_fail_nth_write+0x83/0x220 [ 94.528490][ T7610] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.528524][ T7610] vfs_write+0x2aa/0x1050 [ 94.528553][ T7610] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.528587][ T7610] ? __pfx_vfs_write+0x10/0x10 [ 94.528614][ T7610] ? __fget_files+0x215/0x3d0 [ 94.528640][ T7610] ? __fget_files+0x21f/0x3d0 [ 94.528666][ T7610] ksys_write+0x12a/0x250 [ 94.528694][ T7610] ? __pfx_ksys_write+0x10/0x10 [ 94.528728][ T7610] do_syscall_64+0x115/0x870 [ 94.528762][ T7610] ? clear_bhb_loop+0x40/0x90 [ 94.528785][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.528804][ T7610] RIP: 0033:0x7f58a4b5e84e [ 94.528820][ T7610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.528837][ T7610] RSP: 002b:00007f58a5a55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.528856][ T7610] RAX: ffffffffffffffda RBX: 00007f58a5a566c0 RCX: 00007f58a4b5e84e [ 94.528868][ T7610] RDX: 0000000000000001 RSI: 00007f58a5a560a0 RDI: 0000000000000005 [ 94.528878][ T7610] RBP: 00007f58a5a56090 R08: 0000000000000000 R09: 0000000000000000 [ 94.528890][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.528900][ T7610] R13: 00007f58a4e26128 R14: 00007f58a4e26090 R15: 00007ffe58189a58 [ 94.528925][ T7610] [ 94.644689][ T7612] FAULT_INJECTION: forcing a failure. [ 94.644689][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 94.648901][ T7612] CPU: 2 UID: 0 PID: 7612 Comm: syz.0.658 Not tainted syzkaller #0 PREEMPT(full) [ 94.648915][ T7612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.648922][ T7612] Call Trace: [ 94.648926][ T7612] [ 94.648931][ T7612] dump_stack_lvl+0x100/0x190 [ 94.648950][ T7612] should_fail_ex.cold+0x5/0xa [ 94.648964][ T7612] should_failslab+0xc2/0x120 [ 94.648979][ T7612] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.649005][ T7612] ? __kernfs_new_node+0xd2/0xa10 [ 94.649021][ T7612] __kernfs_new_node+0xd2/0xa10 [ 94.649036][ T7612] ? __pfx___kernfs_new_node+0x10/0x10 [ 94.649051][ T7612] ? find_held_lock+0x2b/0x80 [ 94.649061][ T7612] ? kernfs_root+0xee/0x2a0 [ 94.649071][ T7612] ? kernfs_root+0xee/0x2a0 [ 94.649084][ T7612] kernfs_new_node+0x117/0x150 [ 94.649099][ T7612] kernfs_create_link+0xcc/0x240 [ 94.649116][ T7612] sysfs_do_create_link_sd+0x90/0x140 [ 94.649128][ T7612] sysfs_create_link+0x61/0xc0 [ 94.649139][ T7612] driver_sysfs_add+0x112/0x2d0 [ 94.649153][ T7612] really_probe+0x146/0xa60 [ 94.649168][ T7612] __driver_probe_device+0x20e/0x450 [ 94.649180][ T7612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.649194][ T7612] driver_probe_device+0x4a/0x140 [ 94.649208][ T7612] __driver_attach+0x21f/0x5b0 [ 94.649222][ T7612] ? __pfx___driver_attach+0x10/0x10 [ 94.649235][ T7612] bus_for_each_dev+0x13e/0x1d0 [ 94.649245][ T7612] ? __pfx_bus_for_each_dev+0x10/0x10 [ 94.649255][ T7612] ? bus_add_driver+0x2b5/0x5b0 [ 94.649270][ T7612] bus_add_driver+0x305/0x5b0 [ 94.649283][ T7612] driver_register+0x1e2/0x360 [ 94.649299][ T7612] usb_gadget_register_driver_owner+0x132/0x210 [ 94.649328][ T7612] dev_config+0xdce/0x1610 [ 94.649351][ T7612] ? __pfx_dev_config+0x10/0x10 [ 94.649370][ T7612] vfs_write+0x2aa/0x1050 [ 94.649387][ T7612] ? __pfx_dev_config+0x10/0x10 [ 94.649403][ T7612] ? __pfx_vfs_write+0x10/0x10 [ 94.649419][ T7612] ? __fget_files+0x215/0x3d0 [ 94.649433][ T7612] ? __fget_files+0x21f/0x3d0 [ 94.649448][ T7612] ksys_write+0x12a/0x250 [ 94.649468][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 94.649489][ T7612] do_syscall_64+0x115/0x870 [ 94.649502][ T7612] ? clear_bhb_loop+0x40/0x90 [ 94.649516][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.649527][ T7612] RIP: 0033:0x7f58a4b9e019 [ 94.649537][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.649548][ T7612] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.649559][ T7612] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 94.649566][ T7612] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 94.649572][ T7612] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 94.649578][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.649584][ T7612] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 94.649598][ T7612] [ 94.650080][ T7612] gadgetfs gadget.0: really_probe: driver_sysfs_add failed [ 94.661358][ T7568] ima: policy update failed [ 94.664468][ T7612] gadgetfs: bound to dummy_udc driver [ 94.664860][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 94.664912][ T42] audit: type=1802 audit(1785539453.886:555): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.645" res=0 errno=0 [ 94.784263][ T5749] hid_parser_main: 28 callbacks suppressed [ 94.784289][ T5749] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 94.788695][ T5749] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 94.790417][ T7614] validate_nla: 2 callbacks suppressed [ 94.790426][ T7614] netlink: 'syz.0.659': attribute type 34 has an invalid length. [ 94.791027][ T5749] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 94.792840][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 94.795275][ T5749] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 94.795290][ T5749] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 94.795670][ T5749] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 94.854216][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 95.099143][ T7628] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 95.159610][ T7633] netlink: 'syz.0.666': attribute type 9 has an invalid length. [ 95.162081][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 95.171241][ T7633] netlink: 'syz.0.666': attribute type 9 has an invalid length. [ 95.173715][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 95.186603][ T5817] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.190232][ T5817] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.193839][ T5817] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.202316][ T5817] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.236258][ T7637] netlink: 'syz.0.668': attribute type 34 has an invalid length. [ 95.239357][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 95.368118][ T7642] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.648224][ T7655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.899365][ T7664] netlink: 'syz.0.677': attribute type 34 has an invalid length. [ 96.053959][ T7669] syzkaller1: entered promiscuous mode [ 96.055933][ T7669] syzkaller1: entered allmulticast mode [ 96.062200][ T5749] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 96.927216][ T7408] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -110 [ 96.944736][ T42] audit: type=1400 audit(1785539456.166:556): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 96.957627][ T1478] usb 6-1: USB disconnect, device number 3 [ 96.996828][ T7683] netlink: 'syz.1.686': attribute type 34 has an invalid length. [ 97.137666][ T7681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.380313][ T7699] FAULT_INJECTION: forcing a failure. [ 97.380313][ T7699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.384497][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.3.691 Not tainted syzkaller #0 PREEMPT(full) [ 97.384513][ T7699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.384525][ T7699] Call Trace: [ 97.384530][ T7699] [ 97.384535][ T7699] dump_stack_lvl+0x100/0x190 [ 97.384567][ T7699] should_fail_ex.cold+0x5/0xa [ 97.384582][ T7699] _copy_from_iter+0x1f4/0x1690 [ 97.384602][ T7699] ? __lock_acquire+0x49f/0x1a40 [ 97.384617][ T7699] ? __pfx__copy_from_iter+0x10/0x10 [ 97.384631][ T7699] ? __lock_acquire+0x49f/0x1a40 [ 97.384649][ T7699] copy_page_from_iter+0x238/0x300 [ 97.384666][ T7699] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 97.384682][ T7699] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 97.384693][ T7699] ? unwind_get_return_address+0x59/0xa0 [ 97.384704][ T7699] ? arch_stack_walk+0xa6/0xf0 [ 97.384728][ T7699] ? _kstrtoull+0x13c/0x1f0 [ 97.384738][ T7699] ? __pfx__kstrtoull+0x10/0x10 [ 97.384749][ T7699] tun_get_user+0x16d6/0x3c20 [ 97.384765][ T7699] ? __pfx_tun_get_user+0x10/0x10 [ 97.384777][ T7699] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 97.384796][ T7699] ? find_held_lock+0x2b/0x80 [ 97.384806][ T7699] ? tun_get+0x191/0x370 [ 97.384821][ T7699] ? tun_get+0x191/0x370 [ 97.384840][ T7699] tun_chr_write_iter+0xdc/0x200 [ 97.384851][ T7699] vfs_write+0x6ac/0x1050 [ 97.384868][ T7699] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 97.384880][ T7699] ? __pfx_vfs_write+0x10/0x10 [ 97.384895][ T7699] ? find_held_lock+0x2b/0x80 [ 97.384912][ T7699] ksys_write+0x12a/0x250 [ 97.384928][ T7699] ? __pfx_ksys_write+0x10/0x10 [ 97.384952][ T7699] do_syscall_64+0x115/0x870 [ 97.384972][ T7699] ? clear_bhb_loop+0x40/0x90 [ 97.384985][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.384996][ T7699] RIP: 0033:0x7f839355e84e [ 97.385006][ T7699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.385017][ T7699] RSP: 002b:00007f839452ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.385029][ T7699] RAX: ffffffffffffffda RBX: 00007f83945306c0 RCX: 00007f839355e84e [ 97.385036][ T7699] RDX: 0000000000000031 RSI: 0000200000006340 RDI: 00000000000000c8 [ 97.385042][ T7699] RBP: 00007f8394530090 R08: 0000000000000000 R09: 0000000000000000 [ 97.385048][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.385054][ T7699] R13: 00007f8393826038 R14: 00007f8393825fa0 R15: 00007ffc678b4a98 [ 97.385067][ T7699] [ 97.624087][ T42] audit: type=1400 audit(1785539456.846:557): avc: denied { mounton } for pid=7700 comm="syz.1.692" path="/file0" dev="ramfs" ino=19284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 97.644143][ T42] audit: type=1400 audit(1785539456.866:558): avc: denied { create } for pid=7704 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 97.672835][ T5890] usb 8-1: USB disconnect, device number 4 [ 97.750734][ T7714] netlink: 'syz.2.695': attribute type 34 has an invalid length. [ 97.812383][ T7721] loop5: detected capacity change from 0 to 7 [ 97.921441][ T42] audit: type=1400 audit(1785539457.146:559): avc: denied { read } for pid=7723 comm="syz.1.699" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.929642][ T42] audit: type=1400 audit(1785539457.146:560): avc: denied { open } for pid=7723 comm="syz.1.699" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.951189][ T7721] Dev loop5: unable to read RDB block 7 [ 97.951612][ T42] audit: type=1400 audit(1785539457.146:561): avc: denied { ioctl } for pid=7723 comm="syz.1.699" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.952995][ T7721] loop5: unable to read partition table [ 97.953114][ T7721] loop5: partition table beyond EOD, [ 97.954061][ T7722] loop5: detected capacity change from 7 to 0 [ 97.961009][ T42] audit: type=1400 audit(1785539457.156:562): avc: denied { listen } for pid=7723 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.962777][ T7721] truncated [ 97.978605][ T7721] loop_reread_partitions: partition scan of loop5 (CD:qP ) failed (rc=-5) [ 98.067273][ T7734] FAULT_INJECTION: forcing a failure. [ 98.067273][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 98.075886][ T7734] CPU: 1 UID: 0 PID: 7734 Comm: syz.2.702 Not tainted syzkaller #0 PREEMPT(full) [ 98.075903][ T7734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.075910][ T7734] Call Trace: [ 98.075914][ T7734] [ 98.075918][ T7734] dump_stack_lvl+0x100/0x190 [ 98.075936][ T7734] should_fail_ex.cold+0x5/0xa [ 98.075950][ T7734] should_failslab+0xc2/0x120 [ 98.075965][ T7734] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 98.075979][ T7734] ? copy_process+0x69a/0x8030 [ 98.075996][ T7734] copy_process+0x69a/0x8030 [ 98.076018][ T7734] ? __pfx_copy_process+0x10/0x10 [ 98.076033][ T7734] ? __kasan_kmalloc+0xaa/0xb0 [ 98.076046][ T7734] ? lockdep_init_map_type+0x5c/0x250 [ 98.076061][ T7734] ? lockdep_init_map_type+0x5c/0x250 [ 98.076075][ T7734] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 98.076089][ T7734] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 98.076107][ T7734] vhost_task_create+0x1db/0x370 [ 98.076121][ T7734] ? __pfx_vhost_task_create+0x10/0x10 [ 98.076137][ T7734] ? __pfx_vhost_task_fn+0x10/0x10 [ 98.076150][ T7734] ? __pfx___mutex_lock+0x10/0x10 [ 98.076163][ T7734] ? kasan_quarantine_put+0x104/0x240 [ 98.076179][ T7734] kvm_mmu_post_init_vm+0x1b3/0x360 [ 98.076195][ T7734] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 98.076211][ T7734] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 98.076226][ T7734] kvm_vcpu_ioctl+0x730/0x1700 [ 98.076240][ T7734] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.076252][ T7734] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.076266][ T7734] ? do_vfs_ioctl+0x226/0x13e0 [ 98.076282][ T7734] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.076297][ T7734] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.076319][ T7734] ? __fget_files+0x215/0x3d0 [ 98.076329][ T7734] ? hook_file_ioctl_common+0x140/0x440 [ 98.076360][ T7734] ? selinux_file_ioctl+0x13b/0x290 [ 98.076378][ T7734] ? selinux_file_ioctl+0xb6/0x290 [ 98.076395][ T7734] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.076408][ T7734] __x64_sys_ioctl+0x18e/0x210 [ 98.076425][ T7734] do_syscall_64+0x115/0x870 [ 98.076437][ T7734] ? clear_bhb_loop+0x40/0x90 [ 98.076450][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.076461][ T7734] RIP: 0033:0x7ff9f1b9e019 [ 98.076471][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.076482][ T7734] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.076493][ T7734] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 98.076500][ T7734] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 98.076506][ T7734] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.076513][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.076519][ T7734] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 98.076532][ T7734] [ 98.076782][ T42] audit: type=1400 audit(1785539457.296:563): avc: denied { read } for pid=7729 comm="syz.3.701" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.140150][ T7744] netlink: 'syz.1.705': attribute type 34 has an invalid length. [ 98.181633][ T42] audit: type=1400 audit(1785539457.296:564): avc: denied { open } for pid=7729 comm="syz.3.701" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.188871][ T7744] __nla_validate_parse: 9 callbacks suppressed [ 98.188890][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 98.249669][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 98.401993][ T7753] bridge_slave_0: left allmulticast mode [ 98.403905][ T7753] bridge_slave_0: left promiscuous mode [ 98.408594][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.417733][ T7753] bridge_slave_1: left allmulticast mode [ 98.419955][ T7753] bridge_slave_1: left promiscuous mode [ 98.422049][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.437353][ T7753] bond0: (slave bond_slave_0): Releasing backup interface [ 98.447776][ T7753] bond0: (slave bond_slave_1): Releasing backup interface [ 98.454340][ T7762] gfs2: error -5 reading superblock [ 98.455655][ T7753] team0: Port device team_slave_0 removed [ 98.463162][ T7753] team0: Port device team_slave_1 removed [ 98.465784][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.469279][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.472975][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.475585][ T7753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.481820][ T7753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.501614][ T7748] team0: Mode changed to "loadbalance" [ 98.504992][ T7753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.707'. [ 98.512890][ T7762] syzkaller1: entered promiscuous mode [ 98.514683][ T7762] syzkaller1: entered allmulticast mode [ 98.535076][ T7748] Bluetooth: MGMT ver 1.23 [ 98.683919][ T7772] netlink: 'syz.1.716': attribute type 34 has an invalid length. [ 98.695622][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 98.883136][ T7730] ceph: No mds server is up or the cluster is laggy [ 99.017940][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 99.063029][ T7793] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 99.106657][ T847] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 99.175817][ T7801] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.187984][ T7801] cramfs: wrong magic [ 99.257494][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 99.262840][ T847] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.268202][ T847] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.272221][ T847] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.276133][ T847] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.283728][ T847] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.288520][ T847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.300836][ T7807] netlink: 'syz.1.729': attribute type 34 has an invalid length. [ 99.303413][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 99.499982][ T847] usb 7-1: GET_CAPABILITIES returned 0 [ 99.503088][ T847] usbtmc 7-1:16.0: can't read capabilities [ 99.583367][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 99.730426][ T847] usb 7-1: USB disconnect, device number 10 [ 99.957714][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 99.957732][ T42] audit: type=1400 audit(1785539459.186:572): avc: denied { map } for pid=7826 comm="syz.3.737" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.970239][ T42] audit: type=1400 audit(1785539459.186:573): avc: denied { call } for pid=7826 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.971514][ T7827] binder: 7826:7827 unknown command 0 [ 99.978349][ T42] audit: type=1400 audit(1785539459.186:574): avc: denied { transfer } for pid=7826 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.980795][ T7827] binder: 7826:7827 ioctl c0306201 200000004a40 returned -22 [ 99.992525][ T7830] netlink: 'syz.1.738': attribute type 34 has an invalid length. [ 99.995948][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 99.996138][ T7827] comedi comedi2: comedi_config --init_data is deprecated [ 100.063111][ T7833] netlink: 'syz.3.740': attribute type 13 has an invalid length. [ 100.072545][ T7833] gretap0: refused to change device tx_queue_len [ 100.075426][ T7833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.135894][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 100.246511][ T42] audit: type=1400 audit(1785539459.466:575): avc: denied { create } for pid=7846 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.254893][ T42] audit: type=1400 audit(1785539459.476:576): avc: denied { setopt } for pid=7846 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.271362][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 100.289269][ T7849] nvme_fabrics: unknown parameter or missing value 'o--8_`iUL%gkhpG嫑IMު9.P(gíHw sa' in ctrl creation request [ 100.391118][ T7858] netlink: 'syz.2.750': attribute type 34 has an invalid length. [ 100.578850][ T42] audit: type=1400 audit(1785539459.796:577): avc: denied { read } for pid=7872 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.748415][ T7883] netlink: 'syz.2.761': attribute type 34 has an invalid length. [ 100.902357][ T42] audit: type=1400 audit(1785539460.126:578): avc: denied { ioctl } for pid=7895 comm="syz.2.767" path="socket:[23649]" dev="sockfs" ino=23649 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.911100][ T42] audit: type=1400 audit(1785539460.126:579): avc: denied { write } for pid=7895 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 100.911781][ T7896] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.936561][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.067037][ T29] usb 5-1: device descriptor read/64, error -71 [ 101.086559][ T847] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.126021][ T42] audit: type=1400 audit(1785539460.346:580): avc: denied { ioctl } for pid=7901 comm="syz.2.769" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 101.246583][ T847] usb 8-1: Using ep0 maxpacket: 32 [ 101.251203][ T847] usb 8-1: unable to get BOS descriptor or descriptor too short [ 101.258045][ T847] usb 8-1: string descriptor 0 read error: -22 [ 101.260826][ T847] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 101.264047][ T847] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 101.277369][ T847] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 101.280917][ T847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 101.286968][ T847] dvb-usb: bulk message failed: -22 (2/0) [ 101.299046][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.304450][ T847] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 101.306561][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.308665][ T847] usb 8-1: media controller created [ 101.313140][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.315872][ T847] dw2102: i2c transfer failed. [ 101.318293][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.321929][ T847] dw2102: i2c transfer failed. [ 101.324502][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.326795][ T847] dw2102: i2c transfer failed. [ 101.328689][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.330601][ T847] dw2102: i2c transfer failed. [ 101.332288][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.334155][ T847] dw2102: i2c transfer failed. [ 101.336538][ T847] dvb-usb: bulk message failed: -22 (6/0) [ 101.338932][ T847] dw2102: i2c transfer failed. [ 101.340801][ T847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 101.357766][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.379519][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 101.381389][ T847] dw2102: command 0x0e transfer failed. [ 101.384786][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 101.387273][ T847] dw2102: command 0x0e transfer failed. [ 101.436494][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.436566][ T29] usb 5-1: device descriptor read/64, error -71 [ 101.544376][ T7912] netlink: 'syz.2.771': attribute type 34 has an invalid length. [ 101.560119][ T29] usb usb5-port1: attempt power cycle [ 101.589114][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.598652][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.602818][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.610399][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.614391][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.623494][ T10] usb 6-1: config 0 descriptor?? [ 101.646212][ T7917] FAULT_INJECTION: forcing a failure. [ 101.646212][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 101.651685][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.2.773 Not tainted syzkaller #0 PREEMPT(full) [ 101.651719][ T7917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.651729][ T7917] Call Trace: [ 101.651735][ T7917] [ 101.651742][ T7917] dump_stack_lvl+0x100/0x190 [ 101.651772][ T7917] should_fail_ex.cold+0x5/0xa [ 101.651797][ T7917] should_failslab+0xc2/0x120 [ 101.651819][ T7917] __kvmalloc_node_noprof+0x116/0x970 [ 101.651840][ T7917] ? relay_open_buf.part.0+0x199/0xb70 [ 101.651861][ T7917] relay_open_buf.part.0+0x199/0xb70 [ 101.651884][ T7917] relay_open+0x7b9/0xa00 [ 101.651902][ T7917] blk_trace_setup_prepare+0x35c/0x6c0 [ 101.651936][ T7917] blk_trace_setup2+0x1a1/0x350 [ 101.651958][ T7917] ? __pfx_blk_trace_setup2+0x10/0x10 [ 101.651987][ T7917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.652007][ T7917] ? do_vfs_ioctl+0x226/0x13e0 [ 101.652034][ T7917] blk_trace_ioctl+0x1db/0x320 [ 101.652051][ T7917] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 101.652074][ T7917] ? __fget_files+0x215/0x3d0 [ 101.652091][ T7917] ? hook_file_ioctl_common+0x140/0x440 [ 101.652117][ T7917] blkdev_ioctl+0x17c/0x6f0 [ 101.652142][ T7917] ? __pfx_blkdev_ioctl+0x10/0x10 [ 101.652164][ T7917] ? selinux_file_ioctl+0x13b/0x290 [ 101.652187][ T7917] ? selinux_file_ioctl+0xb6/0x290 [ 101.652212][ T7917] ? __pfx_blkdev_ioctl+0x10/0x10 [ 101.652238][ T7917] __x64_sys_ioctl+0x18e/0x210 [ 101.652267][ T7917] do_syscall_64+0x115/0x870 [ 101.652288][ T7917] ? clear_bhb_loop+0x40/0x90 [ 101.652308][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.652325][ T7917] RIP: 0033:0x7ff9f1b9e019 [ 101.652339][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.652353][ T7917] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.652370][ T7917] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 101.652380][ T7917] RDX: 0000200000000140 RSI: 00000000c0c0128e RDI: 0000000000000003 [ 101.652392][ T7917] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.652403][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.652414][ T7917] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 101.652439][ T7917] [ 101.756127][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 101.759357][ T847] dw2102: command 0x0e transfer failed. [ 101.761854][ T847] dvb-usb: bulk message failed: -22 (3/0) [ 101.764428][ T847] dw2102: command 0x0e transfer failed. [ 101.767154][ T847] dvb-usb: bulk message failed: -22 (1/0) [ 101.769875][ T847] dw2102: command 0x51 transfer failed. [ 101.774108][ T7892] dvb-usb: bulk message failed: -22 (5/0) [ 101.777303][ T7892] dw2102: i2c transfer failed. [ 101.797766][ T847] DVB: Unable to find symbol ds3000_attach() [ 101.800572][ T847] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 101.866533][ T847] rc_core: IR keymap rc-su3000 not found [ 101.868452][ T847] Registered IR keymap rc-empty [ 101.873318][ T847] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 101.886681][ T847] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input10 [ 101.900329][ T847] dvb-usb: schedule remote query interval to 150 msecs. [ 101.902657][ T847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 101.904626][ T847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 101.910098][ T847] usb 8-1: USB disconnect, device number 5 [ 101.912732][ T42] audit: type=1400 audit(1785539461.136:581): avc: denied { write } for pid=7924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.917208][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.939121][ T29] usb 5-1: device descriptor read/8, error -71 [ 101.962110][ T847] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 102.034312][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.038840][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.041135][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.044273][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.048442][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.050875][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.053163][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.055492][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.057998][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.060521][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.065632][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.105774][ T7939] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.196596][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.218372][ T29] usb 5-1: device descriptor read/8, error -71 [ 102.288654][ T5890] usb 6-1: USB disconnect, device number 4 [ 102.325934][ T7945] netlink: 'syz.3.780': attribute type 34 has an invalid length. [ 102.337170][ T29] usb usb5-port1: unable to enumerate USB device [ 102.390245][ T7951] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 102.443558][ T7955] FAULT_INJECTION: forcing a failure. [ 102.443558][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 102.447935][ T7955] CPU: 3 UID: 0 PID: 7955 Comm: syz.2.783 Not tainted syzkaller #0 PREEMPT(full) [ 102.447950][ T7955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.447957][ T7955] Call Trace: [ 102.447961][ T7955] [ 102.447966][ T7955] dump_stack_lvl+0x100/0x190 [ 102.447984][ T7955] should_fail_ex.cold+0x5/0xa [ 102.447998][ T7955] should_failslab+0xc2/0x120 [ 102.448012][ T7955] __kmalloc_noprof+0xfc/0x820 [ 102.448024][ T7955] ? trace_kmem_cache_alloc+0xdd/0x100 [ 102.448038][ T7955] ? __kasan_slab_alloc+0x89/0x90 [ 102.448051][ T7955] ? p9_fcall_init+0x101/0x420 [ 102.448081][ T7955] p9_fcall_init+0x101/0x420 [ 102.448096][ T7955] p9_tag_alloc+0x16c/0x860 [ 102.448111][ T7955] ? __pfx_p9_tag_alloc+0x10/0x10 [ 102.448126][ T7955] ? __kasan_kmalloc+0xaa/0xb0 [ 102.448137][ T7955] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 102.448153][ T7955] ? p9_client_getattr_dotl+0x4c/0x1e0 [ 102.448168][ T7955] ? v9fs_vfs_getattr_dotl+0x15f/0x430 [ 102.448179][ T7955] ? vfs_getattr_nosec+0x2d4/0x430 [ 102.448190][ T7955] ? ima_detect_file_change+0x99/0x280 [ 102.448200][ T7955] ? ima_file_free+0x2cb/0x340 [ 102.448210][ T7955] ? security_file_release+0x10e/0x120 [ 102.448222][ T7955] p9_client_prepare_req+0x19b/0x4d0 [ 102.448237][ T7955] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 102.448258][ T7955] p9_client_rpc+0x1c4/0xd60 [ 102.448274][ T7955] ? __pfx_p9_client_rpc+0x10/0x10 [ 102.448292][ T7955] ? __kasan_kmalloc+0xaa/0xb0 [ 102.448305][ T7955] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 102.448322][ T7955] ? p9_client_getattr_dotl+0x4c/0x1e0 [ 102.448339][ T7955] p9_client_getattr_dotl+0xba/0x1e0 [ 102.448355][ T7955] v9fs_vfs_getattr_dotl+0x15f/0x430 [ 102.448368][ T7955] vfs_getattr_nosec+0x2d4/0x430 [ 102.448380][ T7955] ? __pfx_v9fs_vfs_getattr_dotl+0x10/0x10 [ 102.448392][ T7955] ima_detect_file_change+0x99/0x280 [ 102.448403][ T7955] ? __pfx_ima_detect_file_change+0x10/0x10 [ 102.448426][ T7955] ? find_held_lock+0x2b/0x80 [ 102.448437][ T7955] ? locks_remove_file+0xd1/0x600 [ 102.448454][ T7955] ima_file_free+0x2cb/0x340 [ 102.448465][ T7955] security_file_release+0x10e/0x120 [ 102.448476][ T7955] __fput+0x359/0xb50 [ 102.448491][ T7955] fput_close_sync+0x118/0x250 [ 102.448505][ T7955] ? __pfx_fput_close_sync+0x10/0x10 [ 102.448523][ T7955] __x64_sys_close+0x8b/0x120 [ 102.448536][ T7955] do_syscall_64+0x115/0x870 [ 102.448549][ T7955] ? clear_bhb_loop+0x40/0x90 [ 102.448562][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.448573][ T7955] RIP: 0033:0x7ff9f1b9e019 [ 102.448583][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.448593][ T7955] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 102.448605][ T7955] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 102.448612][ T7955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 102.448618][ T7955] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.448624][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.448630][ T7955] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 102.448644][ T7955] [ 102.831792][ T7968] netlink: 'syz.3.789': attribute type 34 has an invalid length. [ 103.148409][ T7987] netlink: 'syz.2.799': attribute type 34 has an invalid length. [ 103.268928][ T7990] __nla_validate_parse: 15 callbacks suppressed [ 103.268942][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 103.477059][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 103.483462][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 103.739865][ T8008] FAULT_INJECTION: forcing a failure. [ 103.739865][ T8008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.750571][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.0.806 Not tainted syzkaller #0 PREEMPT(full) [ 103.750589][ T8008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.750596][ T8008] Call Trace: [ 103.750600][ T8008] [ 103.750604][ T8008] dump_stack_lvl+0x100/0x190 [ 103.750622][ T8008] should_fail_ex.cold+0x5/0xa [ 103.750637][ T8008] _copy_from_user+0x2e/0xd0 [ 103.750653][ T8008] input_event_from_user+0x123/0x310 [ 103.750681][ T8008] ? __pfx_input_event_from_user+0x10/0x10 [ 103.750697][ T8008] ? __pfx___might_resched+0x10/0x10 [ 103.750711][ T8008] ? input_inject_event+0x198/0x380 [ 103.750728][ T8008] evdev_write+0x342/0x610 [ 103.750766][ T8008] ? __pfx_evdev_write+0x10/0x10 [ 103.750783][ T8008] ? bpf_lsm_file_permission+0x9/0x10 [ 103.750800][ T8008] ? security_file_permission+0x76/0x210 [ 103.750811][ T8008] ? rw_verify_area+0xce/0x6d0 [ 103.750827][ T8008] vfs_write+0x2aa/0x1050 [ 103.750844][ T8008] ? __pfx_evdev_write+0x10/0x10 [ 103.750860][ T8008] ? __pfx_vfs_write+0x10/0x10 [ 103.750875][ T8008] ? find_held_lock+0x2b/0x80 [ 103.750884][ T8008] ? __fget_files+0x215/0x3d0 [ 103.750895][ T8008] ? __fget_files+0x215/0x3d0 [ 103.750908][ T8008] ? __fget_files+0x21f/0x3d0 [ 103.750922][ T8008] ksys_write+0x1f8/0x250 [ 103.750938][ T8008] ? __pfx_ksys_write+0x10/0x10 [ 103.750958][ T8008] do_syscall_64+0x115/0x870 [ 103.750971][ T8008] ? clear_bhb_loop+0x40/0x90 [ 103.750984][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.750995][ T8008] RIP: 0033:0x7f58a4b9e019 [ 103.751005][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.751016][ T8008] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.751028][ T8008] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 103.751035][ T8008] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.751041][ T8008] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 103.751047][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.751053][ T8008] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 103.751067][ T8008] [ 103.855963][ T8013] netlink: 'syz.0.808': attribute type 34 has an invalid length. [ 103.858578][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 103.927821][ T8011] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 103.930328][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 104.055568][ T8011] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 104.332578][ T8036] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 104.340771][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 104.405384][ T8036] bridge3: port 1(veth3) entered blocking state [ 104.407759][ T8036] bridge3: port 1(veth3) entered disabled state [ 104.410003][ T8036] veth3: entered allmulticast mode [ 104.412811][ T8036] veth3: entered promiscuous mode [ 104.431589][ T8044] bridge3: port 2(veth0_to_bond) entered blocking state [ 104.440538][ T8044] bridge3: port 2(veth0_to_bond) entered disabled state [ 104.444078][ T8044] veth0_to_bond: entered allmulticast mode [ 104.447944][ T8044] veth0_to_bond: entered promiscuous mode [ 104.530196][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 104.537413][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 106.277794][ T1478] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 110.068771][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 110.068791][ T42] audit: type=1400 audit(1785539469.296:605): avc: denied { write } for pid=8072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.125886][ T42] audit: type=1400 audit(1785539469.346:606): avc: denied { write } for pid=8075 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.948366][ T42] audit: type=1400 audit(1785539473.176:607): avc: denied { write } for pid=8078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.016249][ T42] audit: type=1400 audit(1785539473.236:608): avc: denied { write } for pid=8081 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.362852][ T42] audit: type=1400 audit(1785539474.586:609): avc: denied { write } for pid=8084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.410101][ T42] audit: type=1400 audit(1785539474.636:610): avc: denied { write } for pid=8087 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.995202][ T8096] FAULT_INJECTION: forcing a failure. [ 117.995202][ T8096] name failslab, interval 1, probability 0, space 0, times 0 [ 117.997976][ T8095] netlink: 'syz.3.819': attribute type 34 has an invalid length. [ 117.999564][ T8096] CPU: 3 UID: 0 PID: 8096 Comm: syz.2.818 Not tainted syzkaller #0 PREEMPT(full) [ 117.999583][ T8096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.999591][ T8096] Call Trace: [ 117.999596][ T8096] [ 117.999602][ T8096] dump_stack_lvl+0x100/0x190 [ 117.999626][ T8096] should_fail_ex.cold+0x5/0xa [ 117.999645][ T8096] should_failslab+0xc2/0x120 [ 117.999663][ T8096] __kvmalloc_node_noprof+0x116/0x970 [ 117.999682][ T8096] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 117.999716][ T8096] alloc_netdev_mqs+0xf5f/0x15c0 [ 117.999738][ T8096] rtnl_create_link+0xc13/0xf80 [ 117.999767][ T8096] rtnl_newlink+0x13bd/0x2380 [ 117.999792][ T8096] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.999808][ T8096] ? find_held_lock+0x2b/0x80 [ 117.999821][ T8096] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 117.999837][ T8096] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 117.999857][ T8096] ? avc_has_perm_noaudit+0x145/0x3b0 [ 117.999894][ T8096] ? find_held_lock+0x2b/0x80 [ 117.999906][ T8096] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 117.999923][ T8096] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 117.999942][ T8096] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.999960][ T8096] rtnetlink_rcv_msg+0x95e/0xe90 [ 117.999980][ T8096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.000004][ T8096] ? ref_tracker_free+0x37e/0x6c0 [ 118.000026][ T8096] netlink_rcv_skb+0x159/0x420 [ 118.000048][ T8096] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 118.000067][ T8096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.000088][ T8096] ? netlink_deliver_tap+0x1ae/0xcc0 [ 118.000115][ T8096] netlink_unicast+0x585/0x850 [ 118.000131][ T8096] ? __pfx_netlink_unicast+0x10/0x10 [ 118.000151][ T8096] netlink_sendmsg+0x8b0/0xda0 [ 118.000167][ T8096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.000183][ T8096] ? selinux_socket_sendmsg+0x198/0x2f0 [ 118.000207][ T8096] ____sys_sendmsg+0xa4d/0xbe0 [ 118.000228][ T8096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.000243][ T8096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.000273][ T8096] ___sys_sendmsg+0x190/0x1e0 [ 118.000296][ T8096] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.000315][ T8096] ? __lock_acquire+0x49f/0x1a40 [ 118.000332][ T8096] ? get_pid_task+0x106/0x250 [ 118.000366][ T8096] __sys_sendmsg+0x160/0x210 [ 118.000384][ T8096] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.000412][ T8096] do_syscall_64+0x115/0x870 [ 118.000429][ T8096] ? clear_bhb_loop+0x40/0x90 [ 118.000446][ T8096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.000460][ T8096] RIP: 0033:0x7ff9f1b9e019 [ 118.000473][ T8096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.000487][ T8096] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.000502][ T8096] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 118.000511][ T8096] RDX: 0000000000004050 RSI: 0000200000000080 RDI: 0000000000000003 [ 118.000520][ T8096] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.000528][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.000536][ T8096] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 118.000555][ T8096] [ 118.101660][ T8107] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 118.102422][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 118.241790][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 118.255010][ T1478] IPVS: starting estimator thread 0... [ 118.260989][ T8122] FAULT_INJECTION: forcing a failure. [ 118.260989][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.276534][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.1.827 Not tainted syzkaller #0 PREEMPT(full) [ 118.276555][ T8122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.276579][ T8122] Call Trace: [ 118.276585][ T8122] [ 118.276590][ T8122] dump_stack_lvl+0x100/0x190 [ 118.276613][ T8122] should_fail_ex.cold+0x5/0xa [ 118.276631][ T8122] _copy_from_user+0x2e/0xd0 [ 118.276651][ T8122] input_event_from_user+0x123/0x310 [ 118.276673][ T8122] ? __pfx_input_event_from_user+0x10/0x10 [ 118.276692][ T8122] ? __pfx___might_resched+0x10/0x10 [ 118.276709][ T8122] ? input_inject_event+0x198/0x380 [ 118.276730][ T8122] evdev_write+0x342/0x610 [ 118.276753][ T8122] ? __pfx_evdev_write+0x10/0x10 [ 118.276773][ T8122] ? bpf_lsm_file_permission+0x9/0x10 [ 118.276793][ T8122] ? security_file_permission+0x76/0x210 [ 118.276808][ T8122] ? rw_verify_area+0xce/0x6d0 [ 118.276828][ T8122] vfs_write+0x2aa/0x1050 [ 118.276849][ T8122] ? __pfx_evdev_write+0x10/0x10 [ 118.276869][ T8122] ? __pfx_vfs_write+0x10/0x10 [ 118.276888][ T8122] ? find_held_lock+0x2b/0x80 [ 118.276900][ T8122] ? __fget_files+0x215/0x3d0 [ 118.276914][ T8122] ? __fget_files+0x215/0x3d0 [ 118.276935][ T8122] ? __fget_files+0x21f/0x3d0 [ 118.276954][ T8122] ksys_write+0x1f8/0x250 [ 118.276974][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 118.277000][ T8122] do_syscall_64+0x115/0x870 [ 118.277016][ T8122] ? clear_bhb_loop+0x40/0x90 [ 118.277033][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.277046][ T8122] RIP: 0033:0x7fcc9519e019 [ 118.277059][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.277072][ T8122] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.277088][ T8122] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 118.277097][ T8122] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 118.277105][ T8122] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.277113][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.277121][ T8122] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 118.277139][ T8122] [ 118.346568][ T8121] IPVS: using max 44 ests per chain, 105600 per kthread [ 118.374451][ T8128] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 118.386302][ T8127] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 118.453526][ T8137] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 118.494030][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 118.539374][ T42] audit: type=1400 audit(1785539477.766:611): avc: denied { create } for pid=8138 comm="syz.3.831" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.556598][ T42] audit: type=1400 audit(1785539477.766:612): avc: denied { link } for pid=8138 comm="syz.3.831" name="#9" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.568277][ T42] audit: type=1400 audit(1785539477.766:613): avc: denied { rename } for pid=8138 comm="syz.3.831" name="#a" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.652565][ T1478] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 118.655125][ T42] audit: type=1400 audit(1785539477.876:614): avc: denied { search } for pid=8150 comm="syz.0.837" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.663873][ T42] audit: type=1400 audit(1785539477.876:615): avc: denied { search } for pid=8150 comm="syz.0.837" name="per_cpu" dev="tracefs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.672389][ T42] audit: type=1400 audit(1785539477.876:616): avc: denied { search } for pid=8150 comm="syz.0.837" name="cpu0" dev="tracefs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.793734][ T42] audit: type=1400 audit(1785539478.016:617): avc: denied { write } for pid=8155 comm="syz.2.839" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 118.795364][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 118.807458][ T1478] usb 6-1: Using ep0 maxpacket: 8 [ 118.812727][ T1478] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.816625][ T1478] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.819877][ T1478] usb 6-1: config 0 interface 0 has no altsetting 0 [ 118.822214][ T1478] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.825791][ T1478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.837237][ T1478] usb 6-1: config 0 descriptor?? [ 118.857086][ T8162] FAULT_INJECTION: forcing a failure. [ 118.857086][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 118.865966][ T8162] CPU: 3 UID: 0 PID: 8162 Comm: syz.0.842 Not tainted syzkaller #0 PREEMPT(full) [ 118.865992][ T8162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.866013][ T8162] Call Trace: [ 118.866026][ T8162] [ 118.866034][ T8162] dump_stack_lvl+0x100/0x190 [ 118.866081][ T8162] should_fail_ex.cold+0x5/0xa [ 118.866107][ T8162] should_failslab+0xc2/0x120 [ 118.866133][ T8162] __kmalloc_noprof+0xfc/0x820 [ 118.866156][ T8162] ? __trace_eprobe_create+0xa7f/0x1d10 [ 118.866192][ T8162] __trace_eprobe_create+0xa7f/0x1d10 [ 118.866229][ T8162] ? __pfx___trace_eprobe_create+0x10/0x10 [ 118.866262][ T8162] ? __kmalloc_noprof+0x343/0x820 [ 118.866284][ T8162] ? argv_split+0x173/0x420 [ 118.866322][ T8162] ? argv_split+0x359/0x420 [ 118.866366][ T8162] ? __pfx___trace_eprobe_create+0x10/0x10 [ 118.866404][ T8162] trace_probe_create+0xef/0x100 [ 118.866428][ T8162] ? __pfx_trace_probe_create+0x10/0x10 [ 118.866457][ T8162] create_dyn_event+0xee/0x1d0 [ 118.866488][ T8162] trace_parse_run_command+0x1ab/0x3b0 [ 118.866510][ T8162] ? __pfx_create_dyn_event+0x10/0x10 [ 118.866543][ T8162] vfs_write+0x2aa/0x1050 [ 118.866573][ T8162] ? __pfx_dyn_event_write+0x10/0x10 [ 118.866604][ T8162] ? __pfx_vfs_write+0x10/0x10 [ 118.866631][ T8162] ? __fget_files+0x215/0x3d0 [ 118.866663][ T8162] ? __fget_files+0x21f/0x3d0 [ 118.866717][ T8162] ksys_write+0x12a/0x250 [ 118.866744][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 118.866774][ T8162] do_syscall_64+0x115/0x870 [ 118.866803][ T8162] ? clear_bhb_loop+0x40/0x90 [ 118.866827][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.866846][ T8162] RIP: 0033:0x7f58a4b9e019 [ 118.866864][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.866881][ T8162] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.866905][ T8162] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 118.866917][ T8162] RDX: 000000000000001b RSI: 0000200000000140 RDI: 0000000000000003 [ 118.866929][ T8162] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 118.866940][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.866950][ T8162] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 118.866976][ T8162] [ 118.974593][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 119.100932][ T8173] comedi comedi3: comedi_config --init_data is deprecated [ 119.139912][ T8177] FAULT_INJECTION: forcing a failure. [ 119.139912][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 119.144112][ T8177] CPU: 1 UID: 0 PID: 8177 Comm: syz.2.849 Not tainted syzkaller #0 PREEMPT(full) [ 119.144134][ T8177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.144141][ T8177] Call Trace: [ 119.144145][ T8177] [ 119.144149][ T8177] dump_stack_lvl+0x100/0x190 [ 119.144167][ T8177] should_fail_ex.cold+0x5/0xa [ 119.144182][ T8177] should_failslab+0xc2/0x120 [ 119.144196][ T8177] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 119.144209][ T8177] ? __alloc_skb+0x5b7/0x710 [ 119.144232][ T8177] ? __alloc_skb+0x140/0x710 [ 119.144246][ T8177] __alloc_skb+0x140/0x710 [ 119.144257][ T8177] ? __alloc_skb+0x5b7/0x710 [ 119.144268][ T8177] ? __pfx___alloc_skb+0x10/0x10 [ 119.144284][ T8177] alloc_skb_with_frags+0xdd/0x760 [ 119.144298][ T8177] ? __might_fault+0xc5/0x140 [ 119.144309][ T8177] ? __might_fault+0xc5/0x140 [ 119.144321][ T8177] sock_alloc_send_pskb+0x801/0x980 [ 119.144333][ T8177] ? _copy_from_iter+0x270/0x1690 [ 119.144352][ T8177] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 119.144363][ T8177] ? _parse_integer_limit+0x1ac/0x220 [ 119.144375][ T8177] ? _kstrtoull+0x13c/0x1f0 [ 119.144385][ T8177] ? iov_iter_advance+0xac/0x6d0 [ 119.144397][ T8177] ? __pfx__kstrtoull+0x10/0x10 [ 119.144409][ T8177] tun_get_user+0x904/0x3c20 [ 119.144430][ T8177] ? __pfx_tun_get_user+0x10/0x10 [ 119.144442][ T8177] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.144462][ T8177] ? find_held_lock+0x2b/0x80 [ 119.144472][ T8177] ? tun_get+0x191/0x370 [ 119.144487][ T8177] ? tun_get+0x191/0x370 [ 119.144506][ T8177] tun_chr_write_iter+0xdc/0x200 [ 119.144518][ T8177] vfs_write+0x6ac/0x1050 [ 119.144534][ T8177] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 119.144546][ T8177] ? __pfx_vfs_write+0x10/0x10 [ 119.144561][ T8177] ? find_held_lock+0x2b/0x80 [ 119.144579][ T8177] ksys_write+0x12a/0x250 [ 119.144595][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 119.144615][ T8177] do_syscall_64+0x115/0x870 [ 119.144628][ T8177] ? clear_bhb_loop+0x40/0x90 [ 119.144640][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.144651][ T8177] RIP: 0033:0x7ff9f1b9e019 [ 119.144661][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.144671][ T8177] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.144682][ T8177] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 119.144689][ T8177] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003 [ 119.144695][ T8177] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.144701][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.144707][ T8177] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 119.144720][ T8177] [ 119.255353][ T1478] hid_parser_main: 28 callbacks suppressed [ 119.255377][ T1478] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 119.260734][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.260858][ T1478] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 119.264092][ T8182] batadv_slave_0: entered promiscuous mode [ 119.266189][ T1478] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 119.268730][ T8182] batadv_slave_0: entered allmulticast mode [ 119.273705][ T1478] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 119.278072][ T1478] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 119.281599][ T1478] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 119.452614][ T847] usb 6-1: USB disconnect, device number 5 [ 119.466911][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 119.501877][ T8193] vhci_hcd: not connected 4 [ 119.550550][ T42] audit: type=1400 audit(1785539478.776:618): avc: denied { bind } for pid=8198 comm="syz.3.858" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.597379][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 119.692752][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 119.695874][ T8216] netlink: 'syz.0.864': attribute type 8 has an invalid length. [ 119.781187][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 119.814842][ T8226] SET target dimension over the limit! [ 119.940084][ T8234] bond29: Removing last arp target with arp_interval on [ 119.940625][ T8237] overlayfs: conflicting options: userxattr,redirect_dir=on [ 119.990283][ T8237] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 120.011078][ T8239] FAULT_INJECTION: forcing a failure. [ 120.011078][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 120.017661][ T8239] CPU: 2 UID: 0 PID: 8239 Comm: syz.1.873 Not tainted syzkaller #0 PREEMPT(full) [ 120.017678][ T8239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.017685][ T8239] Call Trace: [ 120.017689][ T8239] [ 120.017694][ T8239] dump_stack_lvl+0x100/0x190 [ 120.017712][ T8239] should_fail_ex.cold+0x5/0xa [ 120.017727][ T8239] should_failslab+0xc2/0x120 [ 120.017743][ T8239] kmem_cache_alloc_noprof+0x91/0x6a0 [ 120.017756][ T8239] ? __alloc_skb+0x4e9/0x710 [ 120.017775][ T8239] ? __alloc_skb+0x5b7/0x710 [ 120.017793][ T8239] ? sctp_chunkify+0x51/0x2f0 [ 120.017832][ T8239] sctp_chunkify+0x51/0x2f0 [ 120.017853][ T8239] _sctp_make_chunk+0x148/0x270 [ 120.017869][ T8239] sctp_make_datafrag_empty+0x14e/0x230 [ 120.017884][ T8239] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 120.017900][ T8239] ? sctp_datamsg_from_user+0x8e/0x1360 [ 120.017916][ T8239] sctp_datamsg_from_user+0x5ea/0x1360 [ 120.017936][ T8239] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 120.017958][ T8239] ? __lock_acquire+0x4b0/0x1a40 [ 120.017990][ T8239] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 120.018009][ T8239] ? do_raw_spin_lock+0x128/0x260 [ 120.018025][ T8239] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.018044][ T8239] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 120.018062][ T8239] sctp_sendmsg+0x1144/0x22e0 [ 120.018077][ T8239] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.018087][ T8239] ? sock_has_perm+0x25a/0x2f0 [ 120.018102][ T8239] ? __pfx_sock_has_perm+0x10/0x10 [ 120.018126][ T8239] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.018138][ T8239] inet_sendmsg+0x11c/0x140 [ 120.018164][ T8239] sock_write_iter+0x4ea/0x5b0 [ 120.018190][ T8239] ? __pfx_inet_sendmsg+0x10/0x10 [ 120.018211][ T8239] ? __pfx_sock_write_iter+0x10/0x10 [ 120.018243][ T8239] ? bpf_lsm_file_permission+0x9/0x10 [ 120.018267][ T8239] ? security_file_permission+0x76/0x210 [ 120.018284][ T8239] ? rw_verify_area+0xce/0x6d0 [ 120.018309][ T8239] vfs_write+0x6ac/0x1050 [ 120.018336][ T8239] ? __pfx_sock_write_iter+0x10/0x10 [ 120.018364][ T8239] ? __pfx_vfs_write+0x10/0x10 [ 120.018387][ T8239] ? find_held_lock+0x2b/0x80 [ 120.018415][ T8239] ksys_write+0x1f8/0x250 [ 120.018440][ T8239] ? __pfx_ksys_write+0x10/0x10 [ 120.018473][ T8239] do_syscall_64+0x115/0x870 [ 120.018493][ T8239] ? clear_bhb_loop+0x40/0x90 [ 120.018513][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.018529][ T8239] RIP: 0033:0x7fcc9519e019 [ 120.018545][ T8239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.018563][ T8239] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.018580][ T8239] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 120.018592][ T8239] RDX: 00000000000011b0 RSI: 0000200000000100 RDI: 0000000000000006 [ 120.018602][ T8239] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.018612][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.018622][ T8239] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 120.018647][ T8239] [ 120.027542][ T8237] binder: 8236:8237 ioctl 40046205 0 returned -22 [ 120.036348][ T8239] bond17: Removing last arp target with arp_interval on [ 120.207866][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 120.289767][ T8253] bond30: Removing last arp target with arp_interval on [ 120.403622][ T8259] program syz.0.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.408007][ T8259] ata1.00: invalid command format 67 [ 120.468086][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 120.468103][ T42] audit: type=1400 audit(1785539479.696:625): avc: denied { read } for pid=8258 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.540169][ T8264] bond22: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 120.548199][ T8264] bond22 (unregistering): Released all slaves [ 120.583201][ T8267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 120.585383][ T8267] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.589520][ T8267] vhci_hcd vhci_hcd.0: Device attached [ 120.599985][ T8269] usbip_core: unknown command [ 120.601575][ T8269] vhci_hcd: unknown pdu 0 [ 120.603071][ T8269] usbip_core: unknown command [ 120.607338][ T5817] vhci_hcd vhci_hcd.3: stop threads [ 120.609081][ T5817] vhci_hcd vhci_hcd.3: release socket [ 120.609134][ T42] audit: type=1400 audit(1785539479.836:626): avc: denied { read } for pid=8266 comm="syz.3.883" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.611552][ T5817] vhci_hcd vhci_hcd.3: disconnect device [ 120.616625][ T8267] 9p: Bad value for 'rfdno' [ 120.624884][ T42] audit: type=1400 audit(1785539479.836:627): avc: denied { open } for pid=8266 comm="syz.3.883" path="/dev/ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.636622][ T42] audit: type=1400 audit(1785539479.836:628): avc: denied { ioctl } for pid=8266 comm="syz.3.883" path="/dev/ptp1" dev="devtmpfs" ino=1289 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.702860][ T42] audit: type=1400 audit(1785539479.926:629): avc: denied { map } for pid=8276 comm="syz.0.886" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.714943][ T42] audit: type=1400 audit(1785539479.926:630): avc: denied { execute } for pid=8276 comm="syz.0.886" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.812186][ T42] audit: type=1400 audit(1785539480.036:631): avc: denied { ioctl } for pid=8286 comm="syz.0.891" path="socket:[24141]" dev="sockfs" ino=24141 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.849012][ T8290] FAULT_INJECTION: forcing a failure. [ 120.849012][ T8290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.854609][ T8290] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.892 Not tainted syzkaller #0 PREEMPT(full) [ 120.854625][ T8290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.854632][ T8290] Call Trace: [ 120.854636][ T8290] [ 120.854642][ T8290] dump_stack_lvl+0x100/0x190 [ 120.854681][ T8290] should_fail_ex.cold+0x5/0xa [ 120.854698][ T8290] _copy_to_user+0x32/0xd0 [ 120.854714][ T8290] simple_read_from_buffer+0xcb/0x170 [ 120.854728][ T8290] proc_fail_nth_read+0x1af/0x230 [ 120.854745][ T8290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.854762][ T8290] ? rw_verify_area+0xce/0x6d0 [ 120.854777][ T8290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.854793][ T8290] vfs_read+0x1e4/0xb40 [ 120.854811][ T8290] ? __pfx_vfs_read+0x10/0x10 [ 120.854826][ T8290] ? __fget_files+0x215/0x3d0 [ 120.854840][ T8290] ? __fget_files+0x21f/0x3d0 [ 120.854854][ T8290] ksys_read+0x12a/0x250 [ 120.854871][ T8290] ? __pfx_ksys_read+0x10/0x10 [ 120.854890][ T8290] do_syscall_64+0x115/0x870 [ 120.854903][ T8290] ? clear_bhb_loop+0x40/0x90 [ 120.854916][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.854928][ T8290] RIP: 0033:0x7f58a4b5e84e [ 120.854937][ T8290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.854948][ T8290] RSP: 002b:00007f58a5a76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.854959][ T8290] RAX: ffffffffffffffda RBX: 00007f58a5a776c0 RCX: 00007f58a4b5e84e [ 120.854966][ T8290] RDX: 000000000000000f RSI: 00007f58a5a770a0 RDI: 0000000000000005 [ 120.854972][ T8290] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 120.854978][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.854984][ T8290] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 120.854998][ T8290] [ 121.302458][ T8329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=8329 comm=syz.3.910 [ 121.403966][ T8329] kvm: MONITOR instruction emulated as NOP! [ 121.456568][ T8327] mmap: syz.2.908 (8327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.468172][ T8339] FAULT_INJECTION: forcing a failure. [ 121.468172][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 121.472370][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz.0.912 Not tainted syzkaller #0 PREEMPT(full) [ 121.472386][ T8339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.472392][ T8339] Call Trace: [ 121.472396][ T8339] [ 121.472402][ T8339] dump_stack_lvl+0x100/0x190 [ 121.472419][ T8339] should_fail_ex.cold+0x5/0xa [ 121.472434][ T8339] should_failslab+0xc2/0x120 [ 121.472449][ T8339] __kmalloc_cache_noprof+0x91/0x6c0 [ 121.472465][ T8339] ? find_held_lock+0x2b/0x80 [ 121.472475][ T8339] ? gadget_bind_driver+0x100/0xbf0 [ 121.472508][ T8339] ? dummy_alloc_request+0xa9/0x1b0 [ 121.472531][ T8339] dummy_alloc_request+0xa9/0x1b0 [ 121.472547][ T8339] usb_ep_alloc_request+0x6e/0x2e0 [ 121.472563][ T8339] gadgetfs_bind+0x154/0x890 [ 121.472585][ T8339] ? kernfs_create_link+0x1bd/0x240 [ 121.472603][ T8339] gadget_bind_driver+0x28c/0xbf0 [ 121.472620][ T8339] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 121.472635][ T8339] ? __pfx_gadget_bind_driver+0x10/0x10 [ 121.472653][ T8339] really_probe+0x241/0xa60 [ 121.472669][ T8339] __driver_probe_device+0x20e/0x450 [ 121.472682][ T8339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.472696][ T8339] driver_probe_device+0x4a/0x140 [ 121.472709][ T8339] __driver_attach+0x21f/0x5b0 [ 121.472723][ T8339] ? __pfx___driver_attach+0x10/0x10 [ 121.472735][ T8339] bus_for_each_dev+0x13e/0x1d0 [ 121.472746][ T8339] ? __pfx_bus_for_each_dev+0x10/0x10 [ 121.472756][ T8339] ? bus_add_driver+0x2b5/0x5b0 [ 121.472771][ T8339] bus_add_driver+0x305/0x5b0 [ 121.472784][ T8339] driver_register+0x1e2/0x360 [ 121.472799][ T8339] usb_gadget_register_driver_owner+0x132/0x210 [ 121.472818][ T8339] dev_config+0xdce/0x1610 [ 121.472835][ T8339] ? __pfx_dev_config+0x10/0x10 [ 121.472861][ T8339] vfs_write+0x2aa/0x1050 [ 121.472879][ T8339] ? __pfx_dev_config+0x10/0x10 [ 121.472895][ T8339] ? __pfx_vfs_write+0x10/0x10 [ 121.472911][ T8339] ? __fget_files+0x215/0x3d0 [ 121.472926][ T8339] ? __fget_files+0x21f/0x3d0 [ 121.472941][ T8339] ksys_write+0x12a/0x250 [ 121.472957][ T8339] ? __pfx_ksys_write+0x10/0x10 [ 121.472980][ T8339] do_syscall_64+0x115/0x870 [ 121.472999][ T8339] ? clear_bhb_loop+0x40/0x90 [ 121.473019][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.473037][ T8339] RIP: 0033:0x7f58a4b9e019 [ 121.473055][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.473070][ T8339] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.473081][ T8339] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 121.473088][ T8339] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 121.473095][ T8339] RBP: 00007f58a5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 121.473101][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.473107][ T8339] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 121.473127][ T8339] [ 121.473143][ T8339] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 121.485951][ T8342] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 121.487669][ T8339] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 121.525448][ T42] audit: type=1326 audit(1785539480.746:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.1.914" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9519e019 code=0x0 [ 121.536090][ T8339] gadgetfs: bound to dummy_udc driver [ 121.885655][ T42] audit: type=1400 audit(1785539481.106:633): avc: denied { write } for pid=8355 comm="syz.0.918" name="/" dev="9p" ino=78395255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.892849][ T42] audit: type=1400 audit(1785539481.116:634): avc: denied { append } for pid=8355 comm="syz.0.918" path="/261/file0/blkio.bfq.io_merged_recursive" dev="9p" ino=78395327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.384180][ T8361] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 122.469346][ T8372] cifs: Unknown parameter '' [ 122.515664][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.610843][ T8384] syzkaller1: entered promiscuous mode [ 122.617236][ T8384] syzkaller1: entered allmulticast mode [ 122.629017][ T8384] syzkaller1: left promiscuous mode [ 122.634425][ T8384] syzkaller1: left allmulticast mode [ 122.923832][ T8411] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 122.934370][ T8411] CIFS mount error: No usable UNC path provided in device string! [ 122.934370][ T8411] [ 122.938880][ T8411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.085297][ T8419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8419 comm=syz.0.944 [ 123.144250][ T8426] __nla_validate_parse: 14 callbacks suppressed [ 123.144264][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 123.156366][ T8428] netlink: 156 bytes leftover after parsing attributes in process `syz.3.948'. [ 123.366860][ T1483] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.496597][ T1483] usb 5-1: device descriptor read/64, error -71 [ 123.518647][ T8441] team0: Device vlan2 is already an upper device of the team interface [ 123.540249][ T8442] team0: Device vlan2 is already an upper device of the team interface [ 123.737548][ T1483] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.756206][ T8444] FAULT_INJECTION: forcing a failure. [ 123.756206][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 123.760726][ T8444] CPU: 2 UID: 0 PID: 8444 Comm: syz.1.954 Not tainted syzkaller #0 PREEMPT(full) [ 123.760741][ T8444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.760748][ T8444] Call Trace: [ 123.760752][ T8444] [ 123.760757][ T8444] dump_stack_lvl+0x100/0x190 [ 123.760776][ T8444] should_fail_ex.cold+0x5/0xa [ 123.760790][ T8444] should_failslab+0xc2/0x120 [ 123.760805][ T8444] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 123.760820][ T8444] ? __get_vm_area_node+0x101/0x330 [ 123.760840][ T8444] __get_vm_area_node+0x101/0x330 [ 123.760856][ T8444] __vmalloc_node_range_noprof+0x228/0x1630 [ 123.760872][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.760884][ T8444] ? rcu_is_watching+0x12/0xc0 [ 123.760904][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.760918][ T8444] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 123.760935][ T8444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.760954][ T8444] ? trace_kmem_cache_alloc+0xdd/0x100 [ 123.760970][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.760982][ T8444] __vmalloc_node_noprof+0xad/0xf0 [ 123.760997][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.761010][ T8444] copy_process+0x7fb/0x8030 [ 123.761033][ T8444] ? __pfx_copy_process+0x10/0x10 [ 123.761047][ T8444] ? __kasan_kmalloc+0xaa/0xb0 [ 123.761060][ T8444] ? lockdep_init_map_type+0x5c/0x250 [ 123.761075][ T8444] ? lockdep_init_map_type+0x5c/0x250 [ 123.761089][ T8444] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.761103][ T8444] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.761121][ T8444] vhost_task_create+0x1db/0x370 [ 123.761134][ T8444] ? __pfx_vhost_task_create+0x10/0x10 [ 123.761150][ T8444] ? __pfx_vhost_task_fn+0x10/0x10 [ 123.761163][ T8444] ? __pfx___mutex_lock+0x10/0x10 [ 123.761177][ T8444] ? kasan_quarantine_put+0x104/0x240 [ 123.761192][ T8444] kvm_mmu_post_init_vm+0x1b3/0x360 [ 123.761209][ T8444] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 123.761225][ T8444] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 123.761239][ T8444] kvm_vcpu_ioctl+0x730/0x1700 [ 123.761252][ T8444] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.761264][ T8444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.761278][ T8444] ? do_vfs_ioctl+0x226/0x13e0 [ 123.761294][ T8444] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.761310][ T8444] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.761337][ T8444] ? __fget_files+0x215/0x3d0 [ 123.761347][ T8444] ? hook_file_ioctl_common+0x140/0x440 [ 123.761363][ T8444] ? selinux_file_ioctl+0x13b/0x290 [ 123.761379][ T8444] ? selinux_file_ioctl+0xb6/0x290 [ 123.761395][ T8444] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.761408][ T8444] __x64_sys_ioctl+0x18e/0x210 [ 123.761425][ T8444] do_syscall_64+0x115/0x870 [ 123.761437][ T8444] ? clear_bhb_loop+0x40/0x90 [ 123.761450][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.761461][ T8444] RIP: 0033:0x7fcc9519e019 [ 123.761470][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.761480][ T8444] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.761492][ T8444] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 123.761499][ T8444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.761505][ T8444] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.761511][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.761517][ T8444] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 123.761531][ T8444] [ 123.761757][ T8444] syz.1.954: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.903146][ T8444] CPU: 3 UID: 0 PID: 8444 Comm: syz.1.954 Not tainted syzkaller #0 PREEMPT(full) [ 123.903161][ T8444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.903168][ T8444] Call Trace: [ 123.903172][ T8444] [ 123.903177][ T8444] dump_stack_lvl+0x100/0x190 [ 123.903195][ T8444] warn_alloc.cold+0x94/0xa8 [ 123.903206][ T8444] ? __pfx_warn_alloc+0x10/0x10 [ 123.903217][ T8444] ? __kasan_kmalloc+0x8a/0xb0 [ 123.903235][ T8444] ? __get_vm_area_node+0x208/0x330 [ 123.903252][ T8444] __vmalloc_node_range_noprof+0xccd/0x1630 [ 123.903267][ T8444] ? rcu_is_watching+0x12/0xc0 [ 123.903287][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.903303][ T8444] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 123.903320][ T8444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.903339][ T8444] ? trace_kmem_cache_alloc+0xdd/0x100 [ 123.903355][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.903366][ T8444] __vmalloc_node_noprof+0xad/0xf0 [ 123.903382][ T8444] ? vhost_task_create+0x1db/0x370 [ 123.903395][ T8444] copy_process+0x7fb/0x8030 [ 123.903425][ T8444] ? __pfx_copy_process+0x10/0x10 [ 123.903440][ T8444] ? __kasan_kmalloc+0xaa/0xb0 [ 123.903453][ T8444] ? lockdep_init_map_type+0x5c/0x250 [ 123.903467][ T8444] ? lockdep_init_map_type+0x5c/0x250 [ 123.903481][ T8444] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 123.903495][ T8444] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 123.903513][ T8444] vhost_task_create+0x1db/0x370 [ 123.903526][ T8444] ? __pfx_vhost_task_create+0x10/0x10 [ 123.903542][ T8444] ? __pfx_vhost_task_fn+0x10/0x10 [ 123.903556][ T8444] ? __pfx___mutex_lock+0x10/0x10 [ 123.903572][ T8444] ? kasan_quarantine_put+0x104/0x240 [ 123.903587][ T8444] kvm_mmu_post_init_vm+0x1b3/0x360 [ 123.903604][ T8444] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 123.903620][ T8444] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 123.903635][ T8444] kvm_vcpu_ioctl+0x730/0x1700 [ 123.903649][ T8444] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.903661][ T8444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.903675][ T8444] ? do_vfs_ioctl+0x226/0x13e0 [ 123.903691][ T8444] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.903706][ T8444] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.903729][ T8444] ? __fget_files+0x215/0x3d0 [ 123.903739][ T8444] ? hook_file_ioctl_common+0x140/0x440 [ 123.903755][ T8444] ? selinux_file_ioctl+0x13b/0x290 [ 123.903770][ T8444] ? selinux_file_ioctl+0xb6/0x290 [ 123.903787][ T8444] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.903800][ T8444] __x64_sys_ioctl+0x18e/0x210 [ 123.903816][ T8444] do_syscall_64+0x115/0x870 [ 123.903829][ T8444] ? clear_bhb_loop+0x40/0x90 [ 123.903841][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.903853][ T8444] RIP: 0033:0x7fcc9519e019 [ 123.903862][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.903872][ T8444] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.903883][ T8444] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 123.903890][ T8444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 123.903897][ T8444] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.903903][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.903910][ T8444] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 123.903926][ T8444] [ 123.903940][ T8444] Mem-Info: [ 123.929940][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 123.945175][ T8444] active_anon:4438 inactive_anon:2179 isolated_anon:0 [ 123.945175][ T8444] active_file:2963 inactive_file:12831 isolated_file:0 [ 123.945175][ T8444] unevictable:1768 dirty:95 writeback:0 [ 123.945175][ T8444] slab_reclaimable:7925 slab_unreclaimable:73882 [ 123.945175][ T8444] mapped:23346 shmem:1920 pagetables:5936 [ 123.945175][ T8444] sec_pagetables:302 bounce:0 [ 123.945175][ T8444] kernel_misc_reclaimable:0 [ 123.945175][ T8444] free:406191 free_pcp:15685 free_cma:0 [ 123.956590][ T1483] usb 5-1: device descriptor read/64, error -71 [ 124.048843][ T8444] Node 0 active_anon:17408kB inactive_anon:8592kB active_file:11852kB inactive_file:45552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93384kB dirty:380kB writeback:0kB shmem:4144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15712kB pagetables:10680kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.060405][ T8444] Node 1 active_anon:468kB inactive_anon:124kB active_file:0kB inactive_file:5772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:288kB pagetables:13064kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 124.071194][ T1483] usb usb5-port1: attempt power cycle [ 124.073823][ T8444] Node 0 DMA free:5276kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:8kB free_cma:0kB [ 124.083332][ T8444] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 124.085340][ T8444] Node 0 DMA32 free:29812kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17408kB inactive_anon:8592kB active_file:11852kB inactive_file:45552kB unevictable:3536kB writepending:380kB zspages:0kB present:2080628kB managed:1255192kB mlocked:0kB bounce:0kB free_pcp:39056kB local_pcp:8268kB free_cma:0kB [ 124.095864][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 124.097645][ T8444] Node 1 Normal free:1510524kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:468kB inactive_anon:124kB active_file:0kB inactive_file:5772kB unevictable:3536kB writepending:0kB zspages:4288kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:28752kB local_pcp:2504kB free_cma:0kB [ 124.109261][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 124.111303][ T8444] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 2*16kB (UE) 2*32kB (ME) 2*64kB (ME) 3*128kB (UME) 2*256kB (ME) 2*512kB (ME) 3*1024kB (UME) 0*2048kB 0*4096kB = 5252kB [ 124.117377][ T8444] Node 0 DMA32: 205*4kB (M) 221*8kB (UME) 35*16kB (UME) 74*32kB (UME) 35*64kB (UME) 16*128kB (ME) 6*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 31308kB [ 124.124369][ T8444] Node 1 Normal: 42*4kB (UM) 12*8kB (UME) 9*16kB (UME) 12*32kB (UME) 7*64kB (UME) 94*128kB (UME) 257*256kB (UE) 100*512kB (UME) 102*1024kB (UME) 3*2048kB (U) 308*4096kB (UM) = 1502424kB [ 124.131210][ T8444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.134462][ T8444] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 124.138290][ T8444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.142182][ T8444] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 124.145938][ T8444] 18279 total pagecache pages [ 124.148013][ T8444] 567 pages in swap cache [ 124.149808][ T8444] Free swap = 111840kB [ 124.151530][ T8444] Total swap = 124996kB [ 124.153240][ T8444] 1048443 pages RAM [ 124.154850][ T8444] 0 pages HighMem/MovableOnly [ 124.156926][ T8444] 285334 pages reserved [ 124.158701][ T8444] 0 pages cma reserved [ 124.337595][ T8461] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 124.343404][ T8461] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 124.349143][ T8461] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 124.399014][ T8463] netlink: 104 bytes leftover after parsing attributes in process `syz.1.963'. [ 124.402372][ T8463] syzkaller1: entered promiscuous mode [ 124.404233][ T8463] syzkaller1: entered allmulticast mode [ 124.406905][ T1483] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.428326][ T1483] usb 5-1: device descriptor read/8, error -71 [ 124.462671][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 124.627615][ T8488] xt_ipcomp: unknown flags 1D [ 124.666898][ T1483] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.687856][ T1483] usb 5-1: device descriptor read/8, error -71 [ 124.778790][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 124.797518][ T1483] usb usb5-port1: unable to enumerate USB device [ 124.966210][ T8514] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 124.972499][ T8514] bridge0: port 3(netdevsim0) entered disabled state [ 124.974198][ T8509] netlink: 'syz.3.981': attribute type 64 has an invalid length. [ 124.975049][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.983228][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.990146][ T8514] bridge0: entered allmulticast mode [ 125.711921][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 125.871269][ T8531] netlink: 'syz.3.990': attribute type 7 has an invalid length. [ 126.289503][ T8543] team0: Device vlan2 is already an upper device of the team interface [ 126.290900][ T8541] binder: 8540:8541 unknown command 0 [ 126.306534][ T8541] binder: 8540:8541 ioctl c0306201 200000004a40 returned -22 [ 126.460618][ T8550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.531865][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 126.531883][ T42] audit: type=1400 audit(1785539485.756:643): avc: denied { name_connect } for pid=8549 comm="syz.3.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 126.916649][ T847] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.919447][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 127.022143][ T42] audit: type=1400 audit(1785539486.246:644): avc: denied { write } for pid=8580 comm="iou-wrk-8581" name="/" dev="9p" ino=78395255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.039042][ T8581] FAULT_INJECTION: forcing a failure. [ 127.039042][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 127.048410][ T42] audit: type=1400 audit(1785539486.256:645): avc: denied { connect } for pid=8583 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.060833][ T8581] CPU: 3 UID: 0 PID: 8581 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) [ 127.060859][ T8581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.060871][ T8581] Call Trace: [ 127.060879][ T8581] [ 127.060887][ T8581] dump_stack_lvl+0x100/0x190 [ 127.060919][ T8581] should_fail_ex.cold+0x5/0xa [ 127.060945][ T8581] should_failslab+0xc2/0x120 [ 127.060970][ T8581] __kmalloc_noprof+0xfc/0x820 [ 127.060991][ T8581] ? trace_kmem_cache_alloc+0xdd/0x100 [ 127.061015][ T8581] ? __kasan_slab_alloc+0x89/0x90 [ 127.061038][ T8581] ? p9_fcall_init+0x101/0x420 [ 127.061080][ T8581] p9_fcall_init+0x101/0x420 [ 127.061105][ T8581] p9_tag_alloc+0x20d/0x860 [ 127.061131][ T8581] ? __pfx_p9_tag_alloc+0x10/0x10 [ 127.061156][ T8581] ? __kasan_kmalloc+0xaa/0xb0 [ 127.061176][ T8581] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 127.061204][ T8581] ? p9_client_getattr_dotl+0x4c/0x1e0 [ 127.061228][ T8581] ? v9fs_vfs_getattr_dotl+0x15f/0x430 [ 127.061244][ T8581] ? vfs_getattr_nosec+0x2d4/0x430 [ 127.061267][ T8581] ? ima_detect_file_change+0x99/0x280 [ 127.061287][ T8581] ? ima_file_free+0x2cb/0x340 [ 127.061311][ T8581] ? security_file_release+0x10e/0x120 [ 127.061334][ T8581] p9_client_prepare_req+0x19b/0x4d0 [ 127.061361][ T8581] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 127.061394][ T8581] p9_client_rpc+0x1c4/0xd60 [ 127.061423][ T8581] ? __pfx_p9_client_rpc+0x10/0x10 [ 127.061456][ T8581] ? __kasan_kmalloc+0xaa/0xb0 [ 127.061479][ T8581] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 127.061507][ T8581] ? p9_client_getattr_dotl+0x4c/0x1e0 [ 127.061539][ T8581] p9_client_getattr_dotl+0xba/0x1e0 [ 127.061567][ T8581] v9fs_vfs_getattr_dotl+0x15f/0x430 [ 127.061592][ T8581] vfs_getattr_nosec+0x2d4/0x430 [ 127.061614][ T8581] ? __pfx_v9fs_vfs_getattr_dotl+0x10/0x10 [ 127.061638][ T8581] ima_detect_file_change+0x99/0x280 [ 127.061658][ T8581] ? __pfx_ima_detect_file_change+0x10/0x10 [ 127.061707][ T8581] ? find_held_lock+0x2b/0x80 [ 127.061728][ T8581] ? locks_remove_file+0xd1/0x600 [ 127.061757][ T8581] ima_file_free+0x2cb/0x340 [ 127.061780][ T8581] security_file_release+0x10e/0x120 [ 127.061799][ T8581] __fput+0x359/0xb50 [ 127.061826][ T8581] fput_close_sync+0x118/0x250 [ 127.061851][ T8581] ? __pfx_fput_close_sync+0x10/0x10 [ 127.061881][ T8581] __x64_sys_close+0x8b/0x120 [ 127.061906][ T8581] do_syscall_64+0x115/0x870 [ 127.061927][ T8581] ? clear_bhb_loop+0x40/0x90 [ 127.061961][ T42] audit: type=1400 audit(1785539486.256:646): avc: denied { write } for pid=8583 comm="syz.2.1011" laddr=fe80::646a:33ff:febb:2a50 lport=19997 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.061966][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.061986][ T8581] RIP: 0033:0x7fcc9519e019 [ 127.062003][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.062020][ T8581] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 127.062040][ T8581] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 127.062053][ T8581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 127.062064][ T8581] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.062073][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.062082][ T8581] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 127.062107][ T8581] [ 127.176653][ T847] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.180099][ T847] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.183221][ T847] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.186060][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.190721][ T8561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.198670][ T847] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.296594][ T3271] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 127.408326][ T29] usb 5-1: USB disconnect, device number 11 [ 127.449442][ T3271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.456764][ T3271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.459939][ T3271] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.463911][ T3271] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.467449][ T3271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.487693][ T3271] usb 7-1: config 0 descriptor?? [ 127.503996][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 127.856594][ T60] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 127.896915][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.899359][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.901802][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.904318][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.907040][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.909550][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.911912][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.914580][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.917174][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.919844][ T3271] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 127.925907][ T3271] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 127.979625][ T8618] FAULT_INJECTION: forcing a failure. [ 127.979625][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.983657][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 127.983672][ T8618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.983679][ T8618] Call Trace: [ 127.983683][ T8618] [ 127.983687][ T8618] dump_stack_lvl+0x100/0x190 [ 127.983706][ T8618] should_fail_ex.cold+0x5/0xa [ 127.983720][ T8618] _copy_from_user+0x2e/0xd0 [ 127.983736][ T8618] input_event_from_user+0x123/0x310 [ 127.983764][ T8618] ? __pfx_input_event_from_user+0x10/0x10 [ 127.983780][ T8618] ? __pfx___might_resched+0x10/0x10 [ 127.983793][ T8618] ? input_inject_event+0x198/0x380 [ 127.983810][ T8618] evdev_write+0x342/0x610 [ 127.983828][ T8618] ? __pfx_evdev_write+0x10/0x10 [ 127.983844][ T8618] ? bpf_lsm_file_permission+0x9/0x10 [ 127.983861][ T8618] ? security_file_permission+0x76/0x210 [ 127.983872][ T8618] ? rw_verify_area+0xce/0x6d0 [ 127.983888][ T8618] vfs_write+0x2aa/0x1050 [ 127.983908][ T8618] ? __pfx_evdev_write+0x10/0x10 [ 127.983924][ T8618] ? __pfx_vfs_write+0x10/0x10 [ 127.983939][ T8618] ? find_held_lock+0x2b/0x80 [ 127.983948][ T8618] ? __fget_files+0x215/0x3d0 [ 127.983959][ T8618] ? __fget_files+0x215/0x3d0 [ 127.983972][ T8618] ? __fget_files+0x21f/0x3d0 [ 127.983986][ T8618] ksys_write+0x1f8/0x250 [ 127.984002][ T8618] ? __pfx_ksys_write+0x10/0x10 [ 127.984022][ T8618] do_syscall_64+0x115/0x870 [ 127.984035][ T8618] ? clear_bhb_loop+0x40/0x90 [ 127.984048][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.984059][ T8618] RIP: 0033:0x7fcc9519e019 [ 127.984069][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.984079][ T8618] RSP: 002b:00007fcc933f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.984090][ T8618] RAX: ffffffffffffffda RBX: 00007fcc95425fa0 RCX: 00007fcc9519e019 [ 127.984097][ T8618] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 127.984103][ T8618] RBP: 00007fcc933f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.984109][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.984115][ T8618] R13: 00007fcc95426038 R14: 00007fcc95425fa0 R15: 00007ffdcf3a2338 [ 127.984128][ T8618] [ 128.007473][ T60] usb 8-1: not running at top speed; connect to a high speed hub [ 128.040595][ T42] audit: type=1400 audit(1785539487.266:647): avc: denied { listen } for pid=8619 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.043754][ T60] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 128.049242][ T42] audit: type=1400 audit(1785539487.276:648): avc: denied { write } for pid=8619 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.052953][ T60] usb 8-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 128.092715][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.095877][ T60] usb 8-1: Product: 㠁 [ 128.097614][ T60] usb 8-1: SerialNumber: 㠁 [ 128.153086][ T3271] usb 7-1: USB disconnect, device number 11 [ 128.207928][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 128.250206][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1031'. [ 128.314189][ T60] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.317221][ T60] usb 8-1: MIDIStreaming interface descriptor not found [ 128.346947][ T60] usb 8-1: USB disconnect, device number 6 [ 128.372215][ T8639] binder: 8634:8639 unknown command 0 [ 128.373958][ T8639] binder: 8634:8639 ioctl c0306201 200000004a40 returned -22 [ 128.380073][ T8103] udevd[8103]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.754812][ T8647] FAULT_INJECTION: forcing a failure. [ 128.754812][ T8647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.761026][ T8647] CPU: 2 UID: 0 PID: 8647 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(full) [ 128.761051][ T8647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.761061][ T8647] Call Trace: [ 128.761069][ T8647] [ 128.761076][ T8647] dump_stack_lvl+0x100/0x190 [ 128.761105][ T8647] should_fail_ex.cold+0x5/0xa [ 128.761129][ T8647] _copy_from_user+0x2e/0xd0 [ 128.761155][ T8647] input_event_from_user+0x123/0x310 [ 128.761182][ T8647] ? __pfx_input_event_from_user+0x10/0x10 [ 128.761209][ T8647] ? __pfx___might_resched+0x10/0x10 [ 128.761231][ T8647] ? input_inject_event+0x198/0x380 [ 128.761260][ T8647] evdev_write+0x342/0x610 [ 128.761290][ T8647] ? __pfx_evdev_write+0x10/0x10 [ 128.761317][ T8647] ? bpf_lsm_file_permission+0x9/0x10 [ 128.761344][ T8647] ? security_file_permission+0x76/0x210 [ 128.761364][ T8647] ? rw_verify_area+0xce/0x6d0 [ 128.761392][ T8647] vfs_write+0x2aa/0x1050 [ 128.761420][ T8647] ? __pfx_evdev_write+0x10/0x10 [ 128.761446][ T8647] ? __pfx_vfs_write+0x10/0x10 [ 128.761470][ T8647] ? find_held_lock+0x2b/0x80 [ 128.761487][ T8647] ? __fget_files+0x215/0x3d0 [ 128.761505][ T8647] ? __fget_files+0x215/0x3d0 [ 128.761528][ T8647] ? __fget_files+0x21f/0x3d0 [ 128.761553][ T8647] ksys_write+0x1f8/0x250 [ 128.761580][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 128.761614][ T8647] do_syscall_64+0x115/0x870 [ 128.761636][ T8647] ? clear_bhb_loop+0x40/0x90 [ 128.761658][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.761677][ T8647] RIP: 0033:0x7ff9f1b9e019 [ 128.761693][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.761710][ T8647] RSP: 002b:00007ff9efdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.761729][ T8647] RAX: ffffffffffffffda RBX: 00007ff9f1e25fa0 RCX: 00007ff9f1b9e019 [ 128.761741][ T8647] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.761751][ T8647] RBP: 00007ff9efdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.761761][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.761772][ T8647] R13: 00007ff9f1e26038 R14: 00007ff9f1e25fa0 R15: 00007ffca9248ec8 [ 128.761796][ T8647] [ 128.900081][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 129.186716][ T3271] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 129.326363][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 129.340448][ T3271] usb 8-1: unable to get BOS descriptor or descriptor too short [ 129.343719][ T3271] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 129.346364][ T3271] usb 8-1: config 8 has no interface number 0 [ 129.348695][ T3271] usb 8-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 129.356833][ T3271] usb 8-1: string descriptor 0 read error: -22 [ 129.359468][ T3271] usb 8-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 129.363706][ T3271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.374520][ T8655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.473861][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 129.585984][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.591546][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.596693][ T60] usb 8-1: USB disconnect, device number 7 [ 129.629888][ T42] audit: type=1400 audit(1785539488.856:649): avc: denied { accept } for pid=8696 comm="syz.1.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.703789][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 129.828447][ T42] audit: type=1400 audit(1785539489.056:650): avc: denied { read } for pid=8709 comm="syz.1.1063" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 129.844229][ T42] audit: type=1400 audit(1785539489.056:651): avc: denied { open } for pid=8709 comm="syz.1.1063" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 129.855217][ T42] audit: type=1400 audit(1785539489.056:652): avc: denied { module_request } for pid=8703 comm="syz.2.1061" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 129.958668][ T8721] bond18: Removing last arp target with arp_interval on [ 130.171945][ T8736] FAULT_INJECTION: forcing a failure. [ 130.171945][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 130.176621][ T8736] CPU: 2 UID: 0 PID: 8736 Comm: syz.3.1072 Not tainted syzkaller #0 PREEMPT(full) [ 130.176637][ T8736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.176645][ T8736] Call Trace: [ 130.176648][ T8736] [ 130.176653][ T8736] dump_stack_lvl+0x100/0x190 [ 130.176672][ T8736] should_fail_ex.cold+0x5/0xa [ 130.176684][ T8736] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.176701][ T8736] should_failslab+0xc2/0x120 [ 130.176715][ T8736] kmem_cache_alloc_noprof+0x91/0x6a0 [ 130.176728][ T8736] ? skb_clone+0x190/0x400 [ 130.176745][ T8736] skb_clone+0x190/0x400 [ 130.176758][ T8736] netlink_deliver_tap+0xaed/0xcc0 [ 130.176790][ T8736] netlink_unicast+0x6a5/0x850 [ 130.176805][ T8736] ? __pfx_netlink_unicast+0x10/0x10 [ 130.176819][ T8736] netlink_ack+0x655/0xb80 [ 130.176833][ T8736] netlink_rcv_skb+0x333/0x420 [ 130.176844][ T8736] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.176867][ T8736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.176882][ T8736] ? rcu_is_watching+0x12/0xc0 [ 130.176902][ T8736] netlink_unicast+0x585/0x850 [ 130.176914][ T8736] ? __pfx_netlink_unicast+0x10/0x10 [ 130.176929][ T8736] netlink_sendmsg+0x8b0/0xda0 [ 130.176941][ T8736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.176953][ T8736] ? selinux_socket_sendmsg+0x198/0x2f0 [ 130.176972][ T8736] ____sys_sendmsg+0xa4d/0xbe0 [ 130.176988][ T8736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.176999][ T8736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.177022][ T8736] ___sys_sendmsg+0x190/0x1e0 [ 130.177039][ T8736] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.177055][ T8736] ? __lock_acquire+0x49f/0x1a40 [ 130.177068][ T8736] ? get_pid_task+0x106/0x250 [ 130.177092][ T8736] __sys_sendmsg+0x160/0x210 [ 130.177106][ T8736] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.177126][ T8736] do_syscall_64+0x115/0x870 [ 130.177140][ T8736] ? clear_bhb_loop+0x40/0x90 [ 130.177153][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.177164][ T8736] RIP: 0033:0x7f839359e019 [ 130.177174][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.177185][ T8736] RSP: 002b:00007f8394530028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.177195][ T8736] RAX: ffffffffffffffda RBX: 00007f8393825fa0 RCX: 00007f839359e019 [ 130.177202][ T8736] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 000000000000000c [ 130.177208][ T8736] RBP: 00007f8394530090 R08: 0000000000000000 R09: 0000000000000000 [ 130.177214][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.177220][ T8736] R13: 00007f8393826038 R14: 00007f8393825fa0 R15: 00007ffc678b4a98 [ 130.177233][ T8736] [ 130.235256][ T8741] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 130.298220][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1075'. [ 130.302058][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1075'. [ 130.310887][ T8741] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 130.593000][ T8759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 130.595704][ T8759] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.599839][ T8759] vhci_hcd vhci_hcd.0: Device attached [ 130.604826][ T8760] vhci_hcd: connection closed [ 130.607553][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 130.611891][ T5817] vhci_hcd vhci_hcd.1: release socket [ 130.613693][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 130.954208][ T8774] ================================================================== [ 130.957392][ T8774] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 130.960642][ T8774] Read of size 1 at addr ffff88805882e018 by task syz.0.1086/8774 [ 130.965857][ T8774] [ 130.966979][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.0.1086 Not tainted syzkaller #0 PREEMPT(full) [ 130.967006][ T8774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.967016][ T8774] Call Trace: [ 130.967024][ T8774] [ 130.967032][ T8774] dump_stack_lvl+0x100/0x190 [ 130.967060][ T8774] print_report+0x13d/0x4b0 [ 130.967090][ T8774] ? __virt_addr_valid+0x239/0x430 [ 130.967117][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 130.967136][ T8774] kasan_report+0xdf/0x1c0 [ 130.967161][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 130.967181][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 130.967200][ T8774] __kasan_check_byte+0x36/0x50 [ 130.967224][ T8774] lock_acquire+0x132/0x370 [ 130.967249][ T8774] ? _raw_spin_lock_irq+0x45/0x50 [ 130.967267][ T8774] _raw_spin_lock_irq+0x36/0x50 [ 130.967285][ T8774] ? gadget_dev_open+0x44/0x1b0 [ 130.967311][ T8774] gadget_dev_open+0x44/0x1b0 [ 130.967337][ T8774] do_dentry_open+0x6ab/0x14d0 [ 130.967356][ T8774] ? __pfx_gadget_dev_open+0x10/0x10 [ 130.967384][ T8774] vfs_open+0x82/0x3f0 [ 130.967407][ T8774] path_openat+0x2873/0x4280 [ 130.967441][ T8774] ? __pfx_path_openat+0x10/0x10 [ 130.967466][ T8774] do_file_open+0x20e/0x430 [ 130.967489][ T8774] ? __pfx_do_file_open+0x10/0x10 [ 130.967518][ T8774] ? alloc_fd+0x471/0x7a0 [ 130.967542][ T8774] ? do_getname+0x191/0x390 [ 130.967567][ T8774] do_sys_openat2+0x10f/0x1e0 [ 130.967591][ T8774] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.967621][ T8774] __x64_sys_openat+0x12d/0x210 [ 130.967645][ T8774] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.967674][ T8774] do_syscall_64+0x115/0x870 [ 130.967697][ T8774] ? clear_bhb_loop+0x40/0x90 [ 130.967719][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.967740][ T8774] RIP: 0033:0x7f58a4b9e019 [ 130.967758][ T8774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.967777][ T8774] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.967798][ T8774] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 130.967811][ T8774] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 130.967823][ T8774] RBP: 00007f58a4c3500c R08: 0000000000000000 R09: 0000000000000000 [ 130.967835][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.967848][ T8774] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 130.967868][ T8774] [ 130.967876][ T8774] [ 131.065846][ T8774] Allocated by task 5737: [ 131.067622][ T8774] kasan_save_stack+0x30/0x50 [ 131.069569][ T8774] kasan_save_track+0x14/0x30 [ 131.071527][ T8774] __kasan_kmalloc+0xaa/0xb0 [ 131.073315][ T8774] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 131.075432][ T8774] gadgetfs_fill_super+0x1e2/0x440 [ 131.077551][ T8774] get_tree_single+0xe2/0x190 [ 131.079520][ T8774] vfs_get_tree+0x92/0x320 [ 131.081384][ T8774] path_mount+0x7d0/0x23d0 [ 131.083209][ T8774] __x64_sys_mount+0x293/0x310 [ 131.085167][ T8774] do_syscall_64+0x115/0x870 [ 131.087112][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.089572][ T8774] [ 131.090580][ T8774] Freed by task 8338: [ 131.092263][ T8774] kasan_save_stack+0x30/0x50 [ 131.094139][ T8774] kasan_save_track+0x14/0x30 [ 131.095851][ T8774] kasan_save_free_info+0x3b/0x70 [ 131.097456][ T8774] __kasan_slab_free+0x5f/0x80 [ 131.098994][ T8774] kfree+0x22b/0x6c0 [ 131.100223][ T8774] put_dev+0xb4/0xd0 [ 131.101451][ T8774] dev_release+0x116/0x1b0 [ 131.102938][ T8774] __fput+0x3ff/0xb50 [ 131.104311][ T8774] task_work_run+0x150/0x240 [ 131.105727][ T8774] exit_to_user_mode_loop+0x1d8/0x6f0 [ 131.107421][ T8774] do_syscall_64+0x666/0x870 [ 131.108871][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.110653][ T8774] [ 131.111399][ T8774] The buggy address belongs to the object at ffff88805882e000 [ 131.111399][ T8774] which belongs to the cache kmalloc-1k of size 1024 [ 131.115995][ T8774] The buggy address is located 24 bytes inside of [ 131.115995][ T8774] freed 1024-byte region [ffff88805882e000, ffff88805882e400) [ 131.120263][ T8774] [ 131.121007][ T8774] The buggy address belongs to the physical page: [ 131.123125][ T8774] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805882d800 pfn:0x58828 [ 131.126301][ T8774] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.128919][ T8774] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 131.131472][ T8774] page_type: f5(slab) [ 131.132845][ T8774] raw: 00fff00000000240 ffff88801bc42dc0 ffffea00016bce10 ffffea00009d7010 [ 131.135618][ T8774] raw: ffff88805882d800 000000080010000b 00000000f5000000 0000000000000000 [ 131.138261][ T8774] head: 00fff00000000240 ffff88801bc42dc0 ffffea00016bce10 ffffea00009d7010 [ 131.140846][ T8774] head: ffff88805882d800 000000080010000b 00000000f5000000 0000000000000000 [ 131.143738][ T8774] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 131.147040][ T8774] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 131.150566][ T8774] page dumped because: kasan: bad access detected [ 131.152729][ T8774] page_owner tracks the page as allocated [ 131.154644][ T8774] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5746, tgid 5746 (syz-executor), ts 56344486822, free_ts 0 [ 131.160708][ T8774] post_alloc_hook+0xfd/0x120 [ 131.162144][ T8774] get_page_from_freelist+0xf48/0x3530 [ 131.164088][ T8774] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 131.165916][ T8774] new_slab+0xa2/0x640 [ 131.167169][ T8774] refill_objects+0xe3/0x410 [ 131.168644][ T8774] __pcs_replace_empty_main+0x376/0x680 [ 131.170322][ T8774] __kmalloc_node_noprof+0x681/0x830 [ 131.171939][ T8774] qdisc_alloc+0xbb/0xb30 [ 131.173564][ T8774] qdisc_create_dflt+0x93/0x490 [ 131.175062][ T8774] dev_activate+0x64f/0xce0 [ 131.176527][ T8774] __dev_open+0x490/0x8f0 [ 131.177902][ T8774] __dev_change_flags+0x596/0x850 [ 131.179445][ T8774] netif_change_flags+0x8d/0x160 [ 131.180925][ T8774] do_setlink.isra.0+0x1ac4/0x3e60 [ 131.182481][ T8774] rtnl_newlink+0x11c2/0x2380 [ 131.184203][ T8774] rtnetlink_rcv_msg+0x95e/0xe90 [ 131.185810][ T8774] page_owner free stack trace missing [ 131.187559][ T8774] [ 131.188572][ T8774] Memory state around the buggy address: [ 131.190336][ T8774] ffff88805882df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.193078][ T8774] ffff88805882df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.195767][ T8774] >ffff88805882e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.198280][ T8774] ^ [ 131.199891][ T8774] ffff88805882e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.202508][ T8774] ffff88805882e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.205447][ T8774] ================================================================== [ 131.208105][ T8774] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.210407][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.0.1086 Not tainted syzkaller #0 PREEMPT(full) [ 131.213714][ T8774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.216853][ T8774] Call Trace: [ 131.217903][ T8774] [ 131.218896][ T8774] dump_stack_lvl+0x100/0x190 [ 131.220385][ T8774] vpanic+0x552/0x970 [ 131.221734][ T8774] ? __pfx_vpanic+0x10/0x10 [ 131.223560][ T8774] ? __pfx_vprintk_emit+0x10/0x10 [ 131.225340][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 131.226943][ T8774] panic+0xd1/0xe0 [ 131.228127][ T8774] ? __pfx_panic+0x10/0x10 [ 131.229545][ T8774] ? end_report.part.0+0x23/0x90 [ 131.231109][ T8774] ? rcu_is_watching+0x12/0xc0 [ 131.232838][ T8774] ? end_report.part.0+0x23/0x90 [ 131.234639][ T8774] check_panic_on_warn.cold+0x19/0x34 [ 131.236321][ T8774] end_report.part.0+0x3a/0x90 [ 131.237909][ T8774] kasan_report.cold+0xe/0x18 [ 131.239562][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 131.241246][ T8774] ? _raw_spin_lock_irq+0x36/0x50 [ 131.243039][ T8774] __kasan_check_byte+0x36/0x50 [ 131.244708][ T8774] lock_acquire+0x132/0x370 [ 131.246117][ T8774] ? _raw_spin_lock_irq+0x45/0x50 [ 131.247758][ T8774] _raw_spin_lock_irq+0x36/0x50 [ 131.249312][ T8774] ? gadget_dev_open+0x44/0x1b0 [ 131.250835][ T8774] gadget_dev_open+0x44/0x1b0 [ 131.252308][ T8774] do_dentry_open+0x6ab/0x14d0 [ 131.253793][ T8774] ? __pfx_gadget_dev_open+0x10/0x10 [ 131.255458][ T8774] vfs_open+0x82/0x3f0 [ 131.256762][ T8774] path_openat+0x2873/0x4280 [ 131.258188][ T8774] ? __pfx_path_openat+0x10/0x10 [ 131.259781][ T8774] do_file_open+0x20e/0x430 [ 131.261193][ T8774] ? __pfx_do_file_open+0x10/0x10 [ 131.262740][ T8774] ? alloc_fd+0x471/0x7a0 [ 131.264113][ T8774] ? do_getname+0x191/0x390 [ 131.265508][ T8774] do_sys_openat2+0x10f/0x1e0 [ 131.266965][ T8774] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.268594][ T8774] __x64_sys_openat+0x12d/0x210 [ 131.270087][ T8774] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.271746][ T8774] do_syscall_64+0x115/0x870 [ 131.273250][ T8774] ? clear_bhb_loop+0x40/0x90 [ 131.274744][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.276605][ T8774] RIP: 0033:0x7f58a4b9e019 [ 131.278036][ T8774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.283868][ T8774] RSP: 002b:00007f58a5a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.286369][ T8774] RAX: ffffffffffffffda RBX: 00007f58a4e25fa0 RCX: 00007f58a4b9e019 [ 131.288822][ T8774] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 131.291283][ T8774] RBP: 00007f58a4c3500c R08: 0000000000000000 R09: 0000000000000000 [ 131.293670][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.296091][ T8774] R13: 00007f58a4e26038 R14: 00007f58a4e25fa0 R15: 00007ffe58189a58 [ 131.298514][ T8774] [ 131.300114][ T8774] Kernel Offset: disabled [ 131.301442][ T8774] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:11:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a394b5 RDI=ffffffff9ba09b40 RBP=ffffffff9ba09b00 RSP=ffffc90003f6f310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b6fc210 R15=ffffffff85a39450 RIP=ffffffff85a394df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f58a5a776c0 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58a4d5c170 CR3=00000000133eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe58189f46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe58189f46 00007ffe58189f4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4df25f8 00007f58a4df25c8 00007f58a4df2600 00007f58a4df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff96735ad8 RBX=0000000000000130 RCX=ffffffff966c33c8 RDX=ffffffff96725840 RSI=ffffc90003ff6cf0 RDI=ffffffff980278f8 RBP=0000000000000030 RSP=ffffc90003ff6c48 R8 =ffffffff96725870 R9 =000000000000012b R10=ffffc90003ff6dd8 R11=0000000000000000 R12=ffffffff81e57da0 R13=ffffc90003ff6cf0 R14=ffffffff81e58bb0 R15=ffffffff980627c8 RIP=ffffffff81e595da RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff9efdf66c0 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000f13000 CR3=000000002231b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca92493b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca92493b6 00007ffca92493bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9f1c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9f1c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9f1c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9f1c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000010fa49 RBX=ffff88801eef4a80 RCX=ffffffff8bbbc2d5 RDX=0000000000000000 RSI=ffffffff8e1a7a5d RDI=ffffffff8c402680 RBP=ffffed1003dde950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbba89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39038d CR3=0000000037958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073746174735f68 7361682f6376612f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc678b4f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc678b4f86 00007ffc678b4f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83936355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f839363562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8393635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8393635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83937f2600 00007f83937f25e0 00007f83937f25e8 00007f83937f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83937f25f8 00007f83937f25c8 00007f83937f2600 00007f83937f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff925898c8 RDX=1ffff92000873db1 RSI=1ffff92000873db3 RDI=ffffc9000439ff00 RBP=ffffc9000439ed98 RSP=ffffc9000439ece0 R8 =ffffffff925898cc R9 =0000000000000007 R10=0000000000000200 R11=000000000008828b R12=ffffc9000439eda0 R13=ffffc9000439ed50 R14=ffffc9000439ff08 R15=ffffc9000439ed84 RIP=ffffffff81b87042 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83944ee6c0 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000015038 CR3=0000000037958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ff02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe58189f46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe58189f46 00007ffe58189f4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58a4c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000