last executing test programs: 3.295119015s ago: executing program 1 (id=534): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) poll(&(0x7f00000008c0)=[{}], 0x1, 0xc6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.863043105s ago: executing program 1 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac3c000104d2321014000000000000000f"], 0x4a) 2.575702096s ago: executing program 1 (id=536): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x5509, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x50) write$sysctl(r3, &(0x7f0000000100)='0\x00', 0x2) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 2.575008606s ago: executing program 3 (id=537): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208004}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_NAT_DST={0xb8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x400c4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) lsetxattr$security_evm(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x0, 0x17, 0x46}, 0x9, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 2.382047478s ago: executing program 3 (id=538): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) listen(r2, 0xf5f) unshare(0x36040800) accept(r2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) listen(r2, 0xf5f) (async) unshare(0x36040800) (async) accept(r2, 0x0, 0x0) (async) 2.177913912s ago: executing program 3 (id=539): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="48b8558fae39000000000f23c00f21f835000008000f23f80f20d835080000000f22d8412aed430f01df0f212f64440f0094b2000000000f013d75000000650f797a08f30fd6d366400f643b", 0x4c}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r1, r2, 0x0) 1.684363132s ago: executing program 2 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/131, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r6}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 1.684076226s ago: executing program 0 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@l={0x92, 0x1, 0xb0, 0x6, 0x7, 0x2, 0x7}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='.\x00', 0x0, 0x111401, 0x0) (async) write(r0, &(0x7f00000001c0)='1', 0x1) 1.575646877s ago: executing program 0 (id=543): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) poll(&(0x7f00000008c0)=[{}], 0x1, 0xc6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.575183739s ago: executing program 2 (id=544): r0 = socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="08001b0a4edb6d2c81ccb56bad1249c357e6aa21e8f5ddc19030c09b44781ceae73dd8d9224581b45b", 0x29}, {&(0x7f0000000100)="920ca227df655bdfeaa33c83a31a86df2f0ba08c698ca3ea30a4e356cc07d8b1dbb0e1d6bc156f74df9e7d28563af759ff266d0baa7a5bd6119602750d4152e1aae7cace03d58aaeeb9f642e3ced8d103fa34f221b6877595adc59805135cddcdc765e36db7f20c03a095c4b59fc8efa8b8ab09d43f9dbb618a42eeca98d6df92f523ef1fa2631a1944b0feda40378aad0b1066017995079570c79b82a6fef91510920158bd4477c5fe83e8650", 0xad}], 0x2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x20}, 0x20000890) 1.482802197s ago: executing program 3 (id=545): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000040)={@val={0x4000, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 1.375471396s ago: executing program 2 (id=546): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208004}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_NAT_DST={0xb8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x400c4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) lsetxattr$security_evm(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x0, 0x17, 0x46}, 0x9, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 1.156043555s ago: executing program 0 (id=547): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="48e2f560304da87c214dc276edfa001f49da96b5d14221c79ba807026d48ff7edb7e1449ac3c870b7161ecd180843520f191a3052328207550f1", 0x3a}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_GET_THP_DISABLE(0x2a) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x4000, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.053264103s ago: executing program 2 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x2b, 0x107, 0x70bd2b, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/100, 0x64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) r2 = socket(0x8, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0x5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000300)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\p\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\x00E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97v\x9c\xbd%fN1\xd4[\xa0\x0f\xdd.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5U|+K*\x9f\x01u\xb0\xe4\x98_o\xb5\xdcN\xe3C\x15\x1f\xa91g\x89v\\^\x107N\'r\xa4\xb1tVv\bej\xf8\xa0\xe0\a\xd1\xfb\xa6\x80s\xd5L\x87f\"\xaf\xd2\xe1qc\xde\x03\xd1\xf6\x12\x9c\x11\xe58\xa6&\xa1I\x93\xfa\xed\xe0w\x9eM\xa3\xf2\xe0\xaa\x9d\xbf\xa9\xda|\xaa\xc3\x86$\x835\xca\x88V\x1e\xeb\xda\xe4pW#', 0xfeffffff00000000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) 854.544754ms ago: executing program 2 (id=549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c043333895aece33ff72f6bd0abc14bcfb340cfd7891ecf601421b795eb664019bf74add4c1481f1e4755a3764d21765640433f", 0xf4}, {&(0x7f0000000480)="cf4a1e93489489671fe50f83a397f0db2f33d454d616b2009ba858", 0x1b}, {&(0x7f0000000500)="872daa3013c515f04108fccef6f8f95e34015799685768823dca2ad088b3ff94ac7a5b77d7a5ed5e211205d068ca80bbe0665722ea82c167da66003a5ffec59b519614c05893c08c12c3", 0x4a}, {&(0x7f0000000640)="265f3720bf9d330a79e6a47e5460b17d0cd0321a", 0x14}], 0x4, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bb", 0x6e}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5f49c64823fa5472ce8f93627cf3e8e24e23437c78443fdbf5127970b5b11290ccf407f1ebc06f0fe54a6770bfd5c806f22b890b75e2844cc77696eb115f1be20312044be6b0a", 0x116}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a80)="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", 0xfc, 0x10008095, 0x0, 0x0) 695.477445ms ago: executing program 3 (id=550): lseek(0xffffffffffffffff, 0xae7e, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}}], 0x1, 0x4008440) connect$unix(r1, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0x37}, 0x28) r5 = syz_io_uring_setup(0x7463, &(0x7f0000000240)={0x0, 0xd127, 0x8000, 0x3, 0x2082, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000940)=""/65, 0x41}, {&(0x7f00000009c0)=""/1, 0x1}, {&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000b40)=""/212, 0xd4}, {&(0x7f0000000c40)=""/165, 0xa5}], 0x7) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_EPOLL_WAIT={0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x40002000}, {}, {0x15}, {0x40000000}, {0xc0000012}, {0x2000}, {0xd0002000}, {0x2000}], 0x8}) io_uring_enter(r5, 0x4, 0x1, 0x43, 0x0, 0xffffffffffffff66) fcntl$addseals(r4, 0x409, 0x8) fallocate(r4, 0x3, 0x9100, 0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) 644.52132ms ago: executing program 2 (id=551): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 443.654063ms ago: executing program 1 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x3bd98cae, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x7f}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWSETELEM={0x784, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x470, 0x3, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "7c1349943a07c14247ea0a3ee75ab4c235d93e8a9d83c41ee1baa5b1dc4807a47e87d83f0b099431fbe7cc84d9d9b9b4c7834db4d9cbc5247491c840cd5120fe6fe4fd63a35a5db0c479853df619ec3cd12aa6c577599ea33f3d25a3a62e1129cfe60dce00f57dc9f7deb22bb6dd70b030c311a7b03947d8c6e9c82374574d2c0bf745c2eb4b872980e6fe50e68b911cd1f9ed5c12e5c51ff410763e86d60de9e9d6cd12a558bba8357d9795142014665fbf7895ee5f92d22593dd80701db89e7be2bb597c92682174e0dc7c11"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0xf9, 0x6, 0x1, 0x0, "dc174fc67a6b4236a5065d34af9c994c53a9b8f8ffebbc27cbbfe00a1d002776b08d35e6cb1e1e19581b4240743a70b40a065265a4f82aaf569c87a39c848f9264080685736f32f6049260bced9f033e156340126f1fe14e10a9fd870957dc561bad53e7a219adb93096f8bad86cec467a7701fe0ddb0379f3e2fcd0cfc2b55757a5be8f7d0696b485bef71b163a81ec632fdd43b4fa2f1013c9cce44bbca298e22df694e3d61f0817295d18beef8b3319240687ba5b3f6f6744ef4a5f0fec651649966a3130647178a581c28952a49de2c7debbcb6b362e71884d9eda6dfa9174c24844258d02715cf9fda76330407b60dc897d03"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4b, 0x1, "bee3007c0588d862690f7255b429c4b8732a23a60e7780fbfc301e8f86b2f25ee3e190b63dde02850815e416dc949a85c12de5c2ba405da167b7d63d6dd26aad2df100002b2a63"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x85, 0x1, "c52404488d4d68a4488e78e707dc1097d09d35614e0209dddfbb1db650d45952751063019fe3ddfd765e11379f36c977a4b550b17493dfb387ab214dff887baf4ce71016ff1718faec0ee0b09e1657dc486efa7ac1a079c22c6b06a0143a0877665952a727fab9dd4e0aa7d1ddb00c8c058d6becf2a374f761083040b697a8629f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7b9b2912a3d5b2e9}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f0, 0x3, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xc8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x44, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_SREG_QNUM={0x8}]}}}, {0xffffff20, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "23d874a4dfd19344b065f8792b6529ee029beb8cc7797255708b719ec20a83684de75b14faa8b60445e3a5c59bd3defcc2c8154e11583999159dd3afe3ccf000b1aa0b794b65ee1115e6adb89c05ac6451c9ad37487f713a7249c56743eb"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x70a0ee23b63bebec}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80c}}, 0x0) 442.088587ms ago: executing program 0 (id=553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/131, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r6}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 440.5354ms ago: executing program 3 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil, 0x0, r5}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r7, @ANYBLOB="010028bd7000fcdbe8250f00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x7004c014}, 0x4) 366.373785ms ago: executing program 1 (id=555): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) poll(&(0x7f00000008c0)=[{}], 0x1, 0xc6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 217.055741ms ago: executing program 0 (id=556): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x208004}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_NAT_DST={0xb8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x400c4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) lsetxattr$security_evm(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x0, 0x17, 0x46}, 0x9, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 35.034459ms ago: executing program 0 (id=557): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x10, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x491, 0x0, 0xcd}]}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000000c0)={0x1, 0x0, '\x00', {0x0, @bt={0x9, 0x9, 0x1, 0x2, 0xcdd3, 0x9dff087, 0x4, 0x9, 0x573f, 0x5, 0x1, 0xc, 0x6, 0x2, 0x10, 0x0, {0xb, 0x2}, 0x3}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') preadv(r5, &(0x7f0000001c00)=[{&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000002c80)=""/4113, 0x1011}], 0x2, 0x12, 0x2aba) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) 0s ago: executing program 1 (id=558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 0s ago: executing program 1 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000009002e000008001e000002"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4898) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1e, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000001040000000000000800000018150000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000006bc5030062f000000103080006000000652620000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183000000200000000000000000000000d990600ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000efe800007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28f3ff00", @ANYRES16=r5, @ANYBLOB="00022bbd7000fddbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x7bc2403a2000c783}, 0x800) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000080)=0x7) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x26, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0xb, 0xb, 0x0, 0xe0e4c687c5514101, 0x9}, @ldst={0x1, 0x0, 0x2, 0x1, 0x3, 0xfffffffffffffed4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x86}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xe19}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, @ldst={0x0, 0x3, 0x0, 0x6, 0x2, 0x6, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0xffffff00, 0x1e, &(0x7f00000009c0)=""/30, 0x41000, 0x16, '\x00', 0x0, @fallback=0x2e, r6, 0x8, &(0x7f0000000a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x1, 0x8c3d, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000b00)=[r2, r6, r6, r2, r2], &(0x7f0000000b40)=[{0x2, 0x3, 0xa, 0x8}, {0x2, 0x4, 0xd, 0x5}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x4, 0xd}, {0x0, 0x3, 0x10, 0xa}, {0x1, 0x3, 0x7, 0x2}, {0x4, 0x4, 0xe, 0xb}, {0x0, 0x2, 0x1, 0x8}, {0x6d6, 0x4, 0x3, 0x3}], 0x10, 0x6e581e24}, 0x94) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x220}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): r 4 using dummy_hcd [ 142.346519][ T5846] usb 5-1: device descriptor read/8, error -71 [ 142.352176][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.405317][ T6119] FAULT_INJECTION: forcing a failure. [ 142.405317][ T6119] name failslab, interval 1, probability 0, space 0, times 0 [ 142.424827][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 142.424853][ T6119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.424862][ T6119] Call Trace: [ 142.424909][ T6119] [ 142.424918][ T6119] dump_stack_lvl+0x100/0x190 [ 142.425121][ T6119] should_fail_ex.cold+0x5/0xa [ 142.425144][ T6119] should_failslab+0xc2/0x120 [ 142.425353][ T6119] __kmalloc_cache_noprof+0x91/0x6c0 [ 142.425445][ T6119] ? vhost_iotlb_add_range_ctx+0x69d/0xb70 [ 142.425588][ T6119] ? vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 142.425612][ T6119] vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 142.425794][ T6119] vhost_dev_ioctl+0x942/0xe70 [ 142.425817][ T6119] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 142.425978][ T6119] vhost_net_ioctl+0x75f/0x1910 [ 142.425995][ T6119] ? do_vfs_ioctl+0x226/0x13e0 [ 142.426136][ T6119] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 142.426160][ T6119] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 142.426175][ T6119] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.426227][ T6119] ? __fget_files+0x215/0x3d0 [ 142.426246][ T6119] ? hook_file_ioctl_common+0x140/0x440 [ 142.426271][ T6119] ? selinux_file_ioctl+0xb6/0x290 [ 142.426296][ T6119] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 142.426314][ T6119] __x64_sys_ioctl+0x18e/0x210 [ 142.426339][ T6119] do_syscall_64+0x115/0x870 [ 142.426361][ T6119] ? clear_bhb_loop+0x70/0xc0 [ 142.426381][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.426397][ T6119] RIP: 0033:0x7f60d5d9e0d9 [ 142.426413][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.426427][ T6119] RSP: 002b:00007f60d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.426444][ T6119] RAX: ffffffffffffffda RBX: 00007f60d6025fa0 RCX: 00007f60d5d9e0d9 [ 142.426454][ T6119] RDX: 0000200000000000 RSI: 000000004008af03 RDI: 0000000000000003 [ 142.426464][ T6119] RBP: 00007f60d3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.426473][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.426482][ T6119] R13: 00007f60d6026038 R14: 00007f60d6025fa0 R15: 00007ffc99c20f08 [ 142.426504][ T6119] [ 142.632128][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 142.635433][ T5890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.640532][ T5890] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 142.646110][ T5890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.652968][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.658400][ T5890] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.664363][ T5890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.671562][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.772082][ T5846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.803373][ T5846] usb 5-1: device descriptor read/8, error -71 [ 142.843226][ T6125] FAULT_INJECTION: forcing a failure. [ 142.843226][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 142.853368][ T6125] CPU: 3 UID: 0 PID: 6125 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) [ 142.853394][ T6125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.853404][ T6125] Call Trace: [ 142.853410][ T6125] [ 142.853434][ T6125] dump_stack_lvl+0x100/0x190 [ 142.853464][ T6125] should_fail_ex.cold+0x5/0xa [ 142.853489][ T6125] should_failslab+0xc2/0x120 [ 142.853514][ T6125] __kmalloc_cache_noprof+0x91/0x6c0 [ 142.853532][ T6125] ? kmem_cache_alloc_lru_noprof+0x2d3/0x6a0 [ 142.853553][ T6125] ? v9fs_dentry_init+0x3f/0xd0 [ 142.853576][ T6125] ? __pfx_v9fs_dentry_init+0x10/0x10 [ 142.853594][ T6125] v9fs_dentry_init+0x3f/0xd0 [ 142.853610][ T6125] ? __pfx_v9fs_dentry_init+0x10/0x10 [ 142.853751][ T6125] __d_alloc+0x5fb/0xa50 [ 142.853777][ T6125] d_alloc+0x4a/0x1e0 [ 142.853798][ T6125] lookup_one_qstr_excl+0x171/0x250 [ 142.853822][ T6125] ? mnt_get_write_access+0x52/0x2f0 [ 142.853849][ T6125] __start_renaming+0x16d/0x520 [ 142.853875][ T6125] filename_renameat2+0x538/0xa60 [ 142.853904][ T6125] ? __pfx_filename_renameat2+0x10/0x10 [ 142.853934][ T6125] ? strncpy_from_user+0xa6/0x2d0 [ 142.853966][ T6125] ? do_getname+0x191/0x390 [ 142.853989][ T6125] __x64_sys_renameat+0xca/0x110 [ 142.854012][ T6125] do_syscall_64+0x115/0x870 [ 142.854035][ T6125] ? clear_bhb_loop+0x70/0xc0 [ 142.854057][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.854074][ T6125] RIP: 0033:0x7f60d5d9e0d9 [ 142.854090][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.854104][ T6125] RSP: 002b:00007f60d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 142.854127][ T6125] RAX: ffffffffffffffda RBX: 00007f60d6025fa0 RCX: 00007f60d5d9e0d9 [ 142.854138][ T6125] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 142.854147][ T6125] RBP: 00007f60d3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.854157][ T6125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.854167][ T6125] R13: 00007f60d6026038 R14: 00007f60d6025fa0 R15: 00007ffc99c20f08 [ 142.854190][ T6125] [ 142.855451][ T6125] block nbd3: NBD_DISCONNECT [ 142.902529][ T5846] usb usb5-port1: unable to enumerate USB device [ 142.908441][ T5890] usb 6-1: usb_control_msg returned -32 [ 142.999780][ T5890] usbtmc 6-1:16.0: can't read capabilities [ 143.986404][ T6143] FAULT_INJECTION: forcing a failure. [ 143.986404][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 143.991982][ T6143] CPU: 2 UID: 0 PID: 6143 Comm: syz.0.89 Not tainted syzkaller #0 PREEMPT(full) [ 143.992005][ T6143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.992017][ T6143] Call Trace: [ 143.992023][ T6143] [ 143.992030][ T6143] dump_stack_lvl+0x100/0x190 [ 143.992061][ T6143] should_fail_ex.cold+0x5/0xa [ 143.992103][ T6143] should_failslab+0xc2/0x120 [ 143.992129][ T6143] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 143.992154][ T6143] ? __alloc_skb+0x140/0x710 [ 143.992177][ T6143] __alloc_skb+0x140/0x710 [ 143.992195][ T6143] ? __alloc_skb+0x5b7/0x710 [ 143.992214][ T6143] ? __pfx___alloc_skb+0x10/0x10 [ 143.992235][ T6143] ? genl_rcv_msg+0x4be/0x800 [ 143.992261][ T6143] netlink_ack+0x117/0xb80 [ 143.992280][ T6143] ? __lock_acquire+0x49f/0x1a40 [ 143.992305][ T6143] netlink_rcv_skb+0x333/0x420 [ 143.992320][ T6143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.992339][ T6143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.992363][ T6143] ? netlink_deliver_tap+0x1ae/0xcc0 [ 143.992381][ T6143] genl_rcv+0x28/0x40 [ 143.992400][ T6143] netlink_unicast+0x585/0x850 [ 143.992418][ T6143] ? __pfx_netlink_unicast+0x10/0x10 [ 143.992440][ T6143] netlink_sendmsg+0x8b0/0xda0 [ 143.992461][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.992482][ T6143] ? selinux_socket_sendmsg+0x198/0x2f0 [ 143.992513][ T6143] ____sys_sendmsg+0xa4d/0xbe0 [ 143.992539][ T6143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.992558][ T6143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.992610][ T6143] ___sys_sendmsg+0x190/0x1e0 [ 143.992630][ T6143] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.992644][ T6143] ? __lock_acquire+0x49f/0x1a40 [ 143.992664][ T6143] ? get_pid_task+0x106/0x250 [ 143.992698][ T6143] __sys_sendmsg+0x160/0x210 [ 143.992714][ T6143] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.992736][ T6143] do_syscall_64+0x115/0x870 [ 143.992752][ T6143] ? clear_bhb_loop+0x70/0xc0 [ 143.992766][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.992778][ T6143] RIP: 0033:0x7fa5a1b9e0d9 [ 143.992789][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.992799][ T6143] RSP: 002b:00007fa5a29eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.992812][ T6143] RAX: ffffffffffffffda RBX: 00007fa5a1e25fa0 RCX: 00007fa5a1b9e0d9 [ 143.992819][ T6143] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 143.992825][ T6143] RBP: 00007fa5a29eb090 R08: 0000000000000000 R09: 0000000000000000 [ 143.992831][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.992856][ T6143] R13: 00007fa5a1e26038 R14: 00007fa5a1e25fa0 R15: 00007ffe669c5948 [ 143.992870][ T6143] [ 144.636249][ T6026] usb 7-1: 1:1: usb_set_interface failed (-110) [ 144.648139][ T6026] snd-usb-audio 7-1:1.0: Runtime PM usage count underflow! [ 144.655052][ T6026] snd-usb-audio 7-1:1.2: Runtime PM usage count underflow! [ 144.664480][ T5867] usb 7-1: USB disconnect, device number 3 [ 144.984147][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 144.984880][ T42] audit: type=1400 audit(1786573372.903:310): avc: denied { setopt } for pid=6155 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.111167][ T5867] usb 6-1: USB disconnect, device number 3 [ 145.116081][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.152053][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.362263][ T6167] FAULT_INJECTION: forcing a failure. [ 145.362263][ T6167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.412095][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT(full) [ 145.412121][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.412131][ T6167] Call Trace: [ 145.412144][ T6167] [ 145.412151][ T6167] dump_stack_lvl+0x100/0x190 [ 145.412182][ T6167] should_fail_ex.cold+0x5/0xa [ 145.412204][ T6167] _copy_from_user+0x2e/0xd0 [ 145.412232][ T6167] copy_msghdr_from_user+0x9f/0x4c0 [ 145.412251][ T6167] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 145.412276][ T6167] ___sys_sendmsg+0x106/0x1e0 [ 145.412293][ T6167] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.412307][ T6167] ? __lock_acquire+0x49f/0x1a40 [ 145.412329][ T6167] ? get_pid_task+0x106/0x250 [ 145.412368][ T6167] __sys_sendmsg+0x160/0x210 [ 145.412390][ T6167] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.412420][ T6167] do_syscall_64+0x115/0x870 [ 145.412442][ T6167] ? clear_bhb_loop+0x70/0xc0 [ 145.412461][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.412478][ T6167] RIP: 0033:0x7fa7c2b9e0d9 [ 145.412493][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.412508][ T6167] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.412525][ T6167] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 145.412535][ T6167] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.412545][ T6167] RBP: 00007fa7c3ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 145.412555][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.412564][ T6167] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 145.412584][ T6167] [ 145.533114][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 145.670325][ T6175] FAULT_INJECTION: forcing a failure. [ 145.670325][ T6175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.676886][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.1.101 Not tainted syzkaller #0 PREEMPT(full) [ 145.676909][ T6175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.676919][ T6175] Call Trace: [ 145.676926][ T6175] [ 145.676933][ T6175] dump_stack_lvl+0x100/0x190 [ 145.676964][ T6175] should_fail_ex.cold+0x5/0xa [ 145.676988][ T6175] _copy_from_iter+0x1f4/0x1690 [ 145.677014][ T6175] ? __asan_memset+0x23/0x50 [ 145.677033][ T6175] ? __pfx__copy_from_iter+0x10/0x10 [ 145.677055][ T6175] ? __pfx___alloc_skb+0x10/0x10 [ 145.677086][ T6175] netlink_sendmsg+0x808/0xda0 [ 145.677108][ T6175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.677126][ T6175] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.677153][ T6175] ____sys_sendmsg+0xa4d/0xbe0 [ 145.677177][ T6175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.677196][ T6175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.677229][ T6175] ___sys_sendmsg+0x190/0x1e0 [ 145.677246][ T6175] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.677260][ T6175] ? __lock_acquire+0x49f/0x1a40 [ 145.677282][ T6175] ? get_pid_task+0x106/0x250 [ 145.677322][ T6175] __sys_sendmsg+0x160/0x210 [ 145.677343][ T6175] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.677375][ T6175] do_syscall_64+0x115/0x870 [ 145.677397][ T6175] ? clear_bhb_loop+0x70/0xc0 [ 145.677417][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.677435][ T6175] RIP: 0033:0x7fa7c2b9e0d9 [ 145.677450][ T6175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.677465][ T6175] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.677484][ T6175] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 145.677494][ T6175] RDX: 0000000004000080 RSI: 0000200000000440 RDI: 0000000000000006 [ 145.677503][ T6175] RBP: 00007fa7c3ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 145.677513][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.677523][ T6175] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 145.677546][ T6175] [ 145.732187][ T6170] bond0: entered promiscuous mode [ 145.942554][ T6170] bond_slave_0: entered promiscuous mode [ 145.945716][ T6170] bond_slave_1: entered promiscuous mode [ 145.953064][ T6170] gretap0: entered promiscuous mode [ 145.994433][ T6170] hsr1: entered promiscuous mode [ 146.024240][ T6179] syzkaller0: entered promiscuous mode [ 146.034837][ T6179] syzkaller0: entered allmulticast mode [ 146.072907][ T6179] tipc: Started in network mode [ 146.075445][ T6179] tipc: Node identity de0f176f7217, cluster identity 4711 [ 146.078530][ T6179] tipc: Disabling bearer [ 146.362426][ T6179] tipc: Enabling of bearer rejected, failed to create discoverer [ 146.403834][ T42] audit: type=1400 audit(1786573374.273:311): avc: denied { name_bind } for pid=6183 comm="syz.3.103" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.414465][ T42] audit: type=1400 audit(1786573374.273:312): avc: denied { write } for pid=6183 comm="syz.3.103" name="kcm" dev="proc" ino=4026533139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.504429][ T6184] capability: warning: `syz.3.103' uses deprecated v2 capabilities in a way that may be insecure [ 146.507373][ T42] audit: type=1400 audit(1786573374.403:313): avc: denied { create } for pid=6183 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.581068][ T42] audit: type=1400 audit(1786573374.403:314): avc: denied { setopt } for pid=6183 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.822152][ T5867] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 146.868314][ T42] audit: type=1400 audit(1786573374.783:315): avc: denied { create } for pid=6195 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.884847][ T42] audit: type=1400 audit(1786573374.783:316): avc: denied { write } for pid=6195 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.902226][ T42] audit: type=1400 audit(1786573374.783:317): avc: denied { nlmsg_write } for pid=6195 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.983356][ T5867] usb 7-1: Using ep0 maxpacket: 8 [ 146.989300][ T5867] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.003654][ T5867] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 147.008492][ T5867] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.015678][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.021628][ T5867] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.028837][ T5867] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.037501][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.101750][ T6198] syzkaller0: entered promiscuous mode [ 147.115476][ T6198] syzkaller0: entered allmulticast mode [ 147.134360][ T6198] tipc: Enabled bearer , priority 0 [ 147.144944][ T6197] tipc: Resetting bearer [ 147.255958][ T6197] tipc: Disabling bearer [ 147.281441][ T5867] usb 7-1: usb_control_msg returned -32 [ 147.292924][ T5867] usbtmc 7-1:16.0: can't read capabilities [ 147.647898][ T6212] jffs2: notice: (6212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.914496][ T6221] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 148.224174][ T6229] x_tables: duplicate underflow at hook 3 [ 148.748803][ T6236] FAULT_INJECTION: forcing a failure. [ 148.748803][ T6236] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.769907][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 148.769936][ T6236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.769947][ T6236] Call Trace: [ 148.769955][ T6236] [ 148.769964][ T6236] dump_stack_lvl+0x100/0x190 [ 148.769997][ T6236] should_fail_ex.cold+0x5/0xa [ 148.770018][ T6236] ? prepare_alloc_pages+0x16d/0x5f0 [ 148.770048][ T6236] should_fail_alloc_page+0xeb/0x140 [ 148.770076][ T6236] prepare_alloc_pages+0x1f0/0x5f0 [ 148.770101][ T6236] ? bpf_ksym_find+0x128/0x1c0 [ 148.770134][ T6236] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 148.770155][ T6236] ? kernel_text_address+0x8d/0x100 [ 148.770178][ T6236] ? __kernel_text_address+0xd/0x30 [ 148.770198][ T6236] ? unwind_get_return_address+0x59/0xa0 [ 148.770220][ T6236] ? arch_stack_walk+0xa6/0xf0 [ 148.770238][ T6236] ? __bfs+0x150/0x2a0 [ 148.770270][ T6236] ? check_irq_usage+0xe5/0x810 [ 148.770292][ T6236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.770321][ T6236] ? check_noncircular+0x97/0x160 [ 148.770344][ T6236] ? add_lock_to_list+0x99/0x110 [ 148.770366][ T6236] ? check_prev_add+0x354/0xe60 [ 148.770386][ T6236] ? __page_table_check_zero+0x27f/0x410 [ 148.770413][ T6236] ? lockdep_unlock+0x5a/0xc0 [ 148.770430][ T6236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.770458][ T6236] ? policy_nodemask+0xed/0x4f0 [ 148.770488][ T6236] alloc_pages_mpol+0x1fb/0x540 [ 148.770514][ T6236] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.770557][ T6236] ? do_raw_spin_lock+0x128/0x260 [ 148.770585][ T6236] ? find_held_lock+0x2b/0x80 [ 148.770601][ T6236] ? swap_cache_alloc_folio+0x374/0xc50 [ 148.770626][ T6236] folio_alloc_mpol_noprof+0x36/0x260 [ 148.770656][ T6236] swap_cache_alloc_folio+0x3d7/0xc50 [ 148.770682][ T6236] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 148.770702][ T6236] ? swap_cache_get_folio+0x28d/0x360 [ 148.770722][ T6236] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 148.770743][ T6236] ? find_held_lock+0x2b/0x80 [ 148.770760][ T6236] ? is_bpf_text_address+0x8a/0x1a0 [ 148.770790][ T6236] swap_cache_read_folio+0x47/0x140 [ 148.770813][ T6236] swap_cluster_readahead+0x387/0x5f0 [ 148.770840][ T6236] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 148.770874][ T6236] ? __lock_acquire+0x49f/0x1a40 [ 148.770896][ T6236] ? get_vma_policy+0x23d/0x3b0 [ 148.771155][ T6236] swapin_readahead+0x159/0x1200 [ 148.771185][ T6236] ? __pfx_swapin_readahead+0x10/0x10 [ 148.771211][ T6236] ? swap_table_get+0x10d/0x2c0 [ 148.771229][ T6236] ? swap_cache_get_folio+0x28d/0x360 [ 148.771253][ T6236] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 148.771272][ T6236] ? __pfx_softleaf_type+0x10/0x10 [ 148.771298][ T6236] ? do_swap_page+0xf98/0x5780 [ 148.771323][ T6236] do_swap_page+0xf98/0x5780 [ 148.771379][ T6236] ? __pfx_do_swap_page+0x10/0x10 [ 148.771416][ T6236] ? rcu_is_watching+0x12/0xc0 [ 148.771444][ T6236] ? __pte_offset_map+0x179/0x310 [ 148.771471][ T6236] __handle_mm_fault+0x192f/0x2a00 [ 148.771494][ T6236] ? mt_find+0x45e/0x8e0 [ 148.771522][ T6236] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.771537][ T6236] ? __pfx_mt_find+0x10/0x10 [ 148.771578][ T6236] ? find_vma+0xbf/0x140 [ 148.771599][ T6236] ? __pfx_find_vma+0x10/0x10 [ 148.771622][ T6236] handle_mm_fault+0x37b/0xa30 [ 148.771645][ T6236] do_user_addr_fault+0x74c/0x12f0 [ 148.771683][ T6236] exc_page_fault+0x6f/0xd0 [ 148.771709][ T6236] asm_exc_page_fault+0x26/0x30 [ 148.771727][ T6236] RIP: 0010:_copy_from_iter+0x350/0x1690 [ 148.771755][ T6236] Code: 89 f5 44 89 f6 48 89 df 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c5 48 0f 47 e8 e8 9c d4 5e fd 0f 01 cb 4c 89 f1 48 89 df 48 89 ee a4 0f 1f 00 48 89 cd 0f 01 ca 4d 89 f7 49 29 cf e9 a9 fe ff ff [ 148.771770][ T6236] RSP: 0018:ffffc900057c7ba0 EFLAGS: 00050246 [ 148.771787][ T6236] RAX: 0000000000000001 RBX: ffff88802a33c100 RCX: 0000000000000020 [ 148.771798][ T6236] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffff88802a33c100 [ 148.771809][ T6236] RBP: 0000200000000000 R08: 0000000000000001 R09: ffffed1005467823 [ 148.771820][ T6236] R10: ffff88802a33c11f R11: 0000000000000000 R12: ffffc900057c7d80 [ 148.771831][ T6236] R13: 0000000000000000 R14: 0000000000000020 R15: 0000000000000000 [ 148.771862][ T6236] ? __pfx__copy_from_iter+0x10/0x10 [ 148.771885][ T6236] ? trace_kmalloc+0xeb/0x110 [ 148.771908][ T6236] ? __kasan_kmalloc+0xaa/0xb0 [ 148.771930][ T6236] ? __kmalloc_noprof+0x343/0x820 [ 148.771952][ T6236] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 148.771984][ T6236] kernfs_fop_write_iter+0x186/0x5f0 [ 148.772013][ T6236] vfs_write+0x6ac/0x1050 [ 148.772033][ T6236] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 148.772060][ T6236] ? __pfx_vfs_write+0x10/0x10 [ 148.772094][ T6236] ksys_write+0x12a/0x250 [ 148.772111][ T6236] ? __pfx_ksys_write+0x10/0x10 [ 148.772136][ T6236] do_syscall_64+0x115/0x870 [ 148.772159][ T6236] ? clear_bhb_loop+0x70/0xc0 [ 148.772181][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.772199][ T6236] RIP: 0033:0x7fa7c2b9e0d9 [ 148.772217][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.772233][ T6236] RSP: 002b:00007fa7c3ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.772254][ T6236] RAX: ffffffffffffffda RBX: 00007fa7c2e26090 RCX: 00007fa7c2b9e0d9 [ 148.772266][ T6236] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000007 [ 148.772276][ T6236] RBP: 00007fa7c3ac3090 R08: 0000000000000000 R09: 0000000000000000 [ 148.772287][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.772297][ T6236] R13: 00007fa7c2e26128 R14: 00007fa7c2e26090 R15: 00007ffc5fbb97a8 [ 148.772323][ T6236] [ 149.638943][ T5856] usb 7-1: USB disconnect, device number 4 [ 149.995503][ T42] audit: type=1400 audit(1786573377.863:318): avc: denied { read write } for pid=6253 comm="syz.2.127" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.006681][ T42] audit: type=1400 audit(1786573377.863:319): avc: denied { open } for pid=6253 comm="syz.2.127" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.030200][ T42] audit: type=1400 audit(1786573377.863:320): avc: denied { map } for pid=6253 comm="syz.2.127" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.162255][ T6257] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 150.169944][ T6261] netlink: 484 bytes leftover after parsing attributes in process `syz.0.128'. [ 150.254788][ T42] audit: type=1400 audit(1786573378.123:321): avc: denied { setopt } for pid=6256 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.281184][ T42] audit: type=1400 audit(1786573378.123:322): avc: denied { bind } for pid=6256 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.338050][ T42] audit: type=1400 audit(1786573378.253:323): avc: denied { setopt } for pid=6256 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.352837][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'. [ 150.454500][ T6259] netlink: NAT attribute has 5 unknown bytes [ 150.460712][ T42] audit: type=1400 audit(1786573378.373:324): avc: denied { create } for pid=6269 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.518381][ T6259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.579237][ T42] audit: type=1400 audit(1786573378.413:325): avc: denied { write } for pid=6269 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.173290][ T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.396538][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 151.448568][ T44] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.493680][ T44] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 151.497662][ T44] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.525193][ T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.537924][ T6289] jffs2: notice: (6289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.560365][ T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.571753][ T44] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.583032][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.680770][ T42] audit: type=1400 audit(1786573379.583:326): avc: denied { write } for pid=6288 comm="syz.2.140" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.716417][ T42] audit: type=1400 audit(1786573379.583:327): avc: denied { add_name } for pid=6288 comm="syz.2.140" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.839346][ T44] usb 6-1: usb_control_msg returned -32 [ 151.850508][ T44] usbtmc 6-1:16.0: can't read capabilities qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 153.071169][ T6323] ima: policy update failed [ 153.768563][ T6350] mtrr: base(0x10000000) is not aligned on a size(0x10007000) boundary [ 153.906221][ T5097] usb 6-1: USB disconnect, device number 4 [ 154.068071][ T106] Bluetooth: (null): Invalid header checksum [ 154.095573][ T6356] Bluetooth: (null): Non-link packet received in non-active state [ 154.109852][ T6362] MTD: Couldn't look up './dev/mtdblock0': -2 [ 154.132928][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 154.179741][ T228] Bluetooth: (null): Invalid header checksum [ 154.871315][ T6367] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 155.558411][ T6398] FAULT_INJECTION: forcing a failure. [ 155.558411][ T6398] name failslab, interval 1, probability 0, space 0, times 0 [ 155.563987][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 155.564007][ T42] audit: type=1400 audit(1786573383.473:357): avc: denied { append } for pid=6399 comm="syz.3.176" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.568597][ T6398] CPU: 1 UID: 0 PID: 6398 Comm: syz.2.175 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.568631][ T6398] Tainted: [L]=SOFTLOCKUP [ 155.568638][ T6398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.568650][ T6398] Call Trace: [ 155.568659][ T6398] [ 155.568667][ T6398] dump_stack_lvl+0x100/0x190 [ 155.568710][ T6398] should_fail_ex.cold+0x5/0xa [ 155.568738][ T6398] should_failslab+0xc2/0x120 [ 155.568762][ T6398] kmem_cache_alloc_noprof+0x91/0x6a0 [ 155.568788][ T6398] ? hashtab_duplicate+0x225/0x5c0 [ 155.568824][ T6398] hashtab_duplicate+0x225/0x5c0 [ 155.568853][ T6398] ? __pfx_cond_bools_copy+0x10/0x10 [ 155.568880][ T6398] ? __pfx_cond_bools_destroy+0x10/0x10 [ 155.568906][ T6398] cond_policydb_dup+0x155/0x750 [ 155.568931][ T6398] ? security_set_bools+0x115/0x6c0 [ 155.568954][ T6398] ? __asan_memcpy+0x3c/0x60 [ 155.568976][ T6398] security_set_bools+0x13f/0x6c0 [ 155.569004][ T6398] ? sel_commit_bools_write+0x25b/0x420 [ 155.569032][ T6398] sel_commit_bools_write+0x36d/0x420 [ 155.569058][ T6398] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 155.569092][ T6398] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 155.569116][ T6398] vfs_writev+0x5ed/0xdd0 [ 155.569155][ T6398] ? __pfx_vfs_writev+0x10/0x10 [ 155.569184][ T6398] ? rcu_read_lock_any_held+0x6a/0xa0 [ 155.569222][ T6398] ? __fget_files+0x21f/0x3d0 [ 155.569251][ T6398] ? do_writev+0x13e/0x340 [ 155.569276][ T6398] do_writev+0x13e/0x340 [ 155.569302][ T6398] ? __pfx_do_writev+0x10/0x10 [ 155.569337][ T6398] do_syscall_64+0x115/0x870 [ 155.569364][ T6398] ? clear_bhb_loop+0x70/0xc0 [ 155.569429][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.569453][ T6398] RIP: 0033:0x7fa09b59e0d9 [ 155.569470][ T6398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.569487][ T6398] RSP: 002b:00007fa09c4e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 155.569507][ T6398] RAX: ffffffffffffffda RBX: 00007fa09b825fa0 RCX: 00007fa09b59e0d9 [ 155.569519][ T6398] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 155.569530][ T6398] RBP: 00007fa09c4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 155.569558][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.569570][ T6398] R13: 00007fa09b826038 R14: 00007fa09b825fa0 R15: 00007fff50e4b7c8 [ 155.569597][ T6398] [ 155.647158][ T6402] jffs2: notice: (6402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 155.651030][ T5097] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.720399][ T42] audit: type=1400 audit(1786573383.633:358): avc: denied { map } for pid=6399 comm="syz.3.176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.932419][ T5097] usb 5-1: Using ep0 maxpacket: 8 [ 155.949744][ T42] audit: type=1400 audit(1786573383.633:359): avc: denied { read write } for pid=6399 comm="syz.3.176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.965228][ T5097] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.065011][ T5097] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 156.071399][ T5097] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.110144][ T5097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.114456][ T5097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.119239][ T5097] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.145803][ T5097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.270503][ T6418] IPVS: set_ctl: invalid protocol: 29 172.30.1.3:20000 [ 156.274584][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 156.383860][ T42] audit: type=1400 audit(1786573384.293:360): avc: denied { mount } for pid=6421 comm="syz.3.184" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.427775][ T42] audit: type=1400 audit(1786573384.293:361): avc: denied { read } for pid=6421 comm="syz.3.184" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.473362][ T6420] sd 0:0:0:0: PR command failed: 1026 [ 156.475526][ T6420] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 156.476018][ T5097] usb 5-1: usb_control_msg returned -32 [ 156.477970][ T6420] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 156.482302][ T5097] usbtmc 5-1:16.0: can't read capabilities [ 156.498433][ T6420] jffs2: notice: (6420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 156.509984][ T42] audit: type=1400 audit(1786573384.293:362): avc: denied { open } for pid=6421 comm="syz.3.184" path="/56/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.510020][ T42] audit: type=1400 audit(1786573384.293:363): avc: denied { ioctl } for pid=6421 comm="syz.3.184" path="/56/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 156.510055][ T42] audit: type=1400 audit(1786573384.393:364): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.649492][ T42] audit: type=1400 audit(1786573384.553:365): avc: denied { watch_mount watch_reads } for pid=6419 comm="syz.1.179" path="/48" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 156.681201][ T42] audit: type=1400 audit(1786573384.553:366): avc: denied { read } for pid=6429 comm="syz.2.187" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.700183][ T6430] ======================================================= [ 156.700183][ T6430] WARNING: The mand mount option has been deprecated and [ 156.700183][ T6430] and is ignored by this kernel. Remove the mand [ 156.700183][ T6430] option from the mount to silence this warning. [ 156.700183][ T6430] ======================================================= [ 156.770296][ T6432] syzkaller0: entered promiscuous mode [ 156.783288][ T6432] syzkaller0: entered allmulticast mode [ 156.809503][ T6430] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.817395][ T6432] tipc: Enabled bearer , priority 0 [ 156.819339][ T6437] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 156.884803][ T6431] tipc: Resetting bearer [ 156.902168][ T44] usb 5-1: USB disconnect, device number 6 [ 156.969638][ T6431] tipc: Disabling bearer [ 157.920225][ T6451] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 157.997541][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 158.023634][ T6451] bond1: entered promiscuous mode [ 158.056923][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.092409][ T6453] bond1: entered allmulticast mode [ 158.211117][ T6456] fuse: Bad value for 'fd' [ 158.310041][ T6456] fuse: Bad value for 'fd' [ 158.381410][ T6451] bond1: (slave bridge1): making interface the new active one [ 158.395239][ T6451] bridge1: entered promiscuous mode [ 158.397476][ T6451] bridge1: entered allmulticast mode [ 158.440739][ T6451] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 159.363269][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.557613][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 159.619649][ T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.650519][ T41] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 159.671971][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.681947][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.700852][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.707509][ T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.720111][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.045044][ T6489] syz_tun: entered allmulticast mode [ 160.092316][ T41] usb 5-1: usb_control_msg returned -32 [ 160.107404][ T6488] syz_tun: left allmulticast mode [ 160.130261][ T41] usbtmc 5-1:16.0: can't read capabilities [ 160.457277][ T6495] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.508527][ T6494] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 160.527690][ T6495] input: syz0 as /devices/virtual/input/input6 [ 160.529017][ T29] usb 5-1: USB disconnect, device number 7 [ 160.690220][ T6495] comedi comedi0: board detection failed [ 160.720762][ T6495] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 161.423875][ T6506] FAULT_INJECTION: forcing a failure. [ 161.423875][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.435061][ T6506] CPU: 3 UID: 0 PID: 6506 Comm: syz.1.207 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.435092][ T6506] Tainted: [L]=SOFTLOCKUP [ 161.435097][ T6506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.435106][ T6506] Call Trace: [ 161.435113][ T6506] [ 161.435120][ T6506] dump_stack_lvl+0x100/0x190 [ 161.435150][ T6506] should_fail_ex.cold+0x5/0xa [ 161.435171][ T6506] _copy_from_iter+0x1f4/0x1690 [ 161.435196][ T6506] ? __asan_memset+0x23/0x50 [ 161.435215][ T6506] ? __pfx__copy_from_iter+0x10/0x10 [ 161.435236][ T6506] ? __pfx___alloc_skb+0x10/0x10 [ 161.435255][ T6506] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 161.435279][ T6506] ? sock_has_perm+0x25a/0x2f0 [ 161.435299][ T6506] ? __pfx_sock_has_perm+0x10/0x10 [ 161.435324][ T6506] netlink_sendmsg+0x808/0xda0 [ 161.435346][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.435365][ T6506] ? selinux_socket_sendmsg+0x198/0x2f0 [ 161.435390][ T6506] ____sys_sendmsg+0xa4d/0xbe0 [ 161.435436][ T6506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.435455][ T6506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.435489][ T6506] ___sys_sendmsg+0x190/0x1e0 [ 161.435507][ T6506] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.435520][ T6506] ? __lock_acquire+0x49f/0x1a40 [ 161.435541][ T6506] ? get_pid_task+0x106/0x250 [ 161.435579][ T6506] __sys_sendmsg+0x160/0x210 [ 161.435601][ T6506] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.435632][ T6506] do_syscall_64+0x115/0x870 [ 161.435653][ T6506] ? clear_bhb_loop+0x70/0xc0 [ 161.435674][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.435690][ T6506] RIP: 0033:0x7fa7c2b9e0d9 [ 161.435712][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.435799][ T6506] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.435817][ T6506] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 161.435827][ T6506] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 161.435836][ T6506] RBP: 00007fa7c3ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.435846][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.435855][ T6506] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 161.435876][ T6506] [ 161.736699][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 161.736720][ T42] audit: type=1400 audit(1786573389.633:387): avc: denied { remount } for pid=6507 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 162.045150][ T6508] overlayfs: statfs failed on './file0' [ 162.177094][ T42] audit: type=1400 audit(1786573390.093:388): avc: denied { read write } for pid=6519 comm="syz.1.213" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.221574][ T42] audit: type=1400 audit(1786573390.113:389): avc: denied { open } for pid=6519 comm="syz.1.213" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 162.235251][ T42] audit: type=1400 audit(1786573390.123:390): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.282138][ T42] audit: type=1400 audit(1786573390.183:391): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 162.439220][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.447264][ T6526] jffs2: notice: (6526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 162.466320][ T42] audit: type=1400 audit(1786573390.363:392): avc: denied { write } for pid=6525 comm="syz.1.216" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.515508][ T6526] FAULT_INJECTION: forcing a failure. [ 162.515508][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 162.532087][ T6526] CPU: 2 UID: 0 PID: 6526 Comm: syz.1.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.532117][ T6526] Tainted: [L]=SOFTLOCKUP [ 162.532123][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.532133][ T6526] Call Trace: [ 162.532140][ T6526] [ 162.532148][ T6526] dump_stack_lvl+0x100/0x190 [ 162.532185][ T6526] should_fail_ex.cold+0x5/0xa [ 162.532208][ T6526] should_failslab+0xc2/0x120 [ 162.532254][ T6526] __kmalloc_noprof+0xfc/0x820 [ 162.532273][ T6526] ? jffs2_write_inode_range+0x299/0xb80 [ 162.532300][ T6526] ? jffs2_selected_compress+0x5d/0x5a0 [ 162.532321][ T6526] jffs2_selected_compress+0x5d/0x5a0 [ 162.532340][ T6526] ? __pfx_jffs2_reserve_space+0x10/0x10 [ 162.532363][ T6526] jffs2_compress+0x7f/0xa20 [ 162.532386][ T6526] jffs2_write_inode_range+0x2fb/0xb80 [ 162.532414][ T6526] ? __pfx_jffs2_write_inode_range+0x10/0x10 [ 162.532441][ T6526] ? from_kgid+0x8f/0xd0 [ 162.532462][ T6526] ? __pfx_from_kgid+0x10/0x10 [ 162.532486][ T6526] jffs2_write_end+0x72c/0xea0 [ 162.532509][ T6526] ? __pfx_jffs2_write_end+0x10/0x10 [ 162.532526][ T6526] ? inode_to_bdi+0x9e/0x160 [ 162.532548][ T6526] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 162.532573][ T6526] generic_perform_write+0x513/0xa40 [ 162.532606][ T6526] ? __pfx_generic_perform_write+0x10/0x10 [ 162.532628][ T6526] ? __mark_inode_dirty+0x55c/0x16e0 [ 162.532656][ T6526] ? mnt_put_write_access_file+0x4e/0x100 [ 162.532676][ T6526] ? file_update_time_flags+0x373/0x500 [ 162.532701][ T6526] __generic_file_write_iter+0x1f7/0x240 [ 162.532721][ T6526] generic_file_write_iter+0xe1/0x390 [ 162.532742][ T6526] vfs_write+0x6ac/0x1050 [ 162.532772][ T6526] ? __pfx_generic_file_write_iter+0x10/0x10 [ 162.532793][ T6526] ? __pfx_vfs_write+0x10/0x10 [ 162.532824][ T6526] ksys_write+0x12a/0x250 [ 162.532839][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 162.532860][ T6526] do_syscall_64+0x115/0x870 [ 162.532882][ T6526] ? clear_bhb_loop+0x70/0xc0 [ 162.532902][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.532920][ T6526] RIP: 0033:0x7fa7c2b9e0d9 [ 162.532935][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.532951][ T6526] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.532967][ T6526] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 162.532978][ T6526] RDX: 0000000000000112 RSI: 0000200000001500 RDI: 0000000000000004 [ 162.532987][ T6526] RBP: 00007fa7c3ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 162.532996][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.533005][ T6526] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 162.533028][ T6526] [ 162.533048][ T6526] jffs2: No memory for compressor allocation. Compression failed. [ 162.628150][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 162.633534][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.931530][ T29] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 162.937074][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.949237][ T5097] IPVS: starting estimator thread 0... [ 162.951608][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.981275][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.993797][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.011244][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.099208][ T6539] IPVS: using max 27 ests per chain, 64800 per kthread [ 163.224465][ T6547] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 163.276775][ T6547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.222'. [ 163.388126][ T29] usb 5-1: usb_control_msg returned -32 [ 163.390362][ T29] usbtmc 5-1:16.0: can't read capabilities [ 163.397778][ T29] usb 5-1: USB disconnect, device number 8 [ 163.421537][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 163.660079][ T42] audit: type=1400 audit(1786573391.563:393): avc: denied { create } for pid=6553 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.605661][ T42] audit: type=1400 audit(1786573392.503:394): avc: denied { mount } for pid=6575 comm="syz.0.231" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.664208][ T6581] netlink: 'syz.2.233': attribute type 21 has an invalid length. [ 164.674015][ T6581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.233'. [ 164.684835][ T6581] netlink: 'syz.2.233': attribute type 5 has an invalid length. [ 164.702099][ T6581] netlink: 'syz.2.233': attribute type 6 has an invalid length. [ 164.705734][ T6581] netlink: 3 bytes leftover after parsing attributes in process `syz.2.233'. [ 164.725750][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 164.727398][ T6581] netlink: 'syz.2.233': attribute type 21 has an invalid length. [ 164.756221][ T6581] netlink: 128 bytes leftover after parsing attributes in process `syz.2.233'. [ 164.898263][ T6581] netlink: 'syz.2.233': attribute type 5 has an invalid length. [ 164.911152][ T6581] netlink: 'syz.2.233': attribute type 6 has an invalid length. [ 164.916519][ T6581] netlink: 3 bytes leftover after parsing attributes in process `syz.2.233'. [ 164.962381][ T5097] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 165.132154][ T5097] usb 8-1: Using ep0 maxpacket: 8 [ 165.157214][ T5097] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.165324][ T5097] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 165.170627][ T5097] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.179949][ T5097] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.186367][ T5097] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.196871][ T6604] gadgetfs: bound to dummy_udc driver [ 165.203011][ T5097] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.203066][ T5097] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.431150][ T42] audit: type=1400 audit(1786573393.323:395): avc: denied { read } for pid=6608 comm="syz.1.243" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.455090][ T5097] usb 8-1: usb_control_msg returned -32 [ 165.492252][ T42] audit: type=1400 audit(1786573393.323:396): avc: denied { open } for pid=6608 comm="syz.1.243" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.498364][ T5097] usbtmc 8-1:16.0: can't read capabilities [ 165.521309][ T6613] binder_alloc: 6610: binder_alloc_buf size 805306392 failed, no address space [ 165.545017][ T6613] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 165.556502][ T5097] usb 8-1: USB disconnect, device number 2 [ 165.639528][ T6609] comedi comedi2: comedi_config --init_data is deprecated [ 165.758730][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 165.787517][ T6619] evm: overlay not supported [ 166.125847][ T6630] netlink: 'syz.3.250': attribute type 21 has an invalid length. [ 166.136463][ T6630] netlink: 128 bytes leftover after parsing attributes in process `syz.3.250'. [ 166.154567][ T6630] netlink: 'syz.3.250': attribute type 5 has an invalid length. [ 166.158321][ T6630] netlink: 'syz.3.250': attribute type 6 has an invalid length. [ 166.175237][ T6630] netlink: 3 bytes leftover after parsing attributes in process `syz.3.250'. [ 166.684114][ T6640] bridge1: entered promiscuous mode [ 166.694426][ T6640] bridge1: entered allmulticast mode [ 166.764427][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 166.764456][ T42] audit: type=1400 audit(1786573394.673:409): avc: denied { read } for pid=6644 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.968736][ T42] audit: type=1326 audit(1786573394.873:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.3.257" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60d5d9e0d9 code=0x0 [ 167.114420][ T42] audit: type=1400 audit(1786573395.023:411): avc: denied { unlink } for pid=6660 comm="syz.0.260" name="#3" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.252382][ T5825] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.413590][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 167.418184][ T5825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.443832][ T5825] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 167.484905][ T5825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.516038][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.522990][ T5825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.539971][ T5825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.557770][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.837496][ T5825] usb 6-1: usb_control_msg returned -32 [ 167.852282][ T5825] usbtmc 6-1:16.0: can't read capabilities [ 167.885469][ T5825] usb 6-1: USB disconnect, device number 5 [ 167.955339][ T42] audit: type=1400 audit(1786573395.853:412): avc: denied { recv } for pid=5719 comm="syz-executor" saddr=127.0.0.1 src=60812 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 167.994324][ T42] audit: type=1400 audit(1786573395.913:413): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=60812 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 168.087087][ T42] audit: type=1400 audit(1786573395.983:414): avc: denied { create } for pid=6691 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 168.141624][ T42] audit: type=1400 audit(1786573396.013:415): avc: denied { bind } for pid=6691 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 168.274179][ T6696] gadgetfs: bound to dummy_udc driver [ 168.641585][ T6708] FAULT_INJECTION: forcing a failure. [ 168.641585][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 168.659065][ T6709] batman_adv: batadv0: Adding interface: macvtap1 [ 168.668097][ T6708] CPU: 0 UID: 0 PID: 6708 Comm: syz.0.275 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.668132][ T6708] Tainted: [L]=SOFTLOCKUP [ 168.668140][ T6708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.668173][ T6708] Call Trace: [ 168.668190][ T6708] [ 168.668199][ T6708] dump_stack_lvl+0x100/0x190 [ 168.668506][ T6708] should_fail_ex.cold+0x5/0xa [ 168.668559][ T6708] should_failslab+0xc2/0x120 [ 168.668629][ T6708] __kmalloc_noprof+0xfc/0x820 [ 168.668655][ T6708] ? __memcg_list_lru_alloc+0x418/0x680 [ 168.668696][ T6708] __memcg_list_lru_alloc+0x418/0x680 [ 168.668716][ T6708] ? xa_load+0x149/0x2c0 [ 168.668786][ T6708] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 168.668812][ T6708] ? rcu_read_unlock+0x17/0x60 [ 168.668846][ T6708] memcg_list_lru_alloc+0xd3/0x100 [ 168.668868][ T6708] __memcg_slab_post_alloc_hook+0x28b/0x1160 [ 168.668906][ T6708] ? kasan_save_track+0x14/0x30 [ 168.668932][ T6708] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 168.668957][ T6708] ? alloc_inode+0x183/0x250 [ 168.668998][ T6708] alloc_inode+0x183/0x250 [ 168.669023][ T6708] new_inode+0x22/0x1c0 [ 168.669051][ T6708] gadgetfs_make_inode+0x23/0x1c0 [ 168.669114][ T6708] gadgetfs_create_file+0x34/0xd0 [ 168.669139][ T6708] gadgetfs_bind+0x42b/0x890 [ 168.669174][ T6708] gadget_bind_driver+0x28c/0xbf0 [ 168.669205][ T6708] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 168.669230][ T6708] ? __pfx_gadget_bind_driver+0x10/0x10 [ 168.669248][ T6708] really_probe+0x241/0xa60 [ 168.669306][ T6708] __driver_probe_device+0x20e/0x450 [ 168.669328][ T6708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.669378][ T6708] driver_probe_device+0x4a/0x140 [ 168.669400][ T6708] __driver_attach+0x21f/0x5b0 [ 168.669419][ T6708] ? __pfx___driver_attach+0x10/0x10 [ 168.669438][ T6708] bus_for_each_dev+0x13e/0x1d0 [ 168.669454][ T6708] ? __pfx_bus_for_each_dev+0x10/0x10 [ 168.669471][ T6708] ? bus_add_driver+0x2b5/0x5b0 [ 168.669495][ T6708] bus_add_driver+0x305/0x5b0 [ 168.669517][ T6708] driver_register+0x1e2/0x360 [ 168.669541][ T6708] usb_gadget_register_driver_owner+0x132/0x210 [ 168.669574][ T6708] dev_config+0xdce/0x1610 [ 168.669599][ T6708] ? __pfx_dev_config+0x10/0x10 [ 168.669630][ T6708] vfs_write+0x2aa/0x1050 [ 168.669761][ T6708] ? __pfx_dev_config+0x10/0x10 [ 168.669788][ T6708] ? __pfx_vfs_write+0x10/0x10 [ 168.669804][ T6708] ? __fget_files+0x215/0x3d0 [ 168.669828][ T6708] ? __fget_files+0x21f/0x3d0 [ 168.669853][ T6708] ksys_write+0x12a/0x250 [ 168.669869][ T6708] ? __pfx_ksys_write+0x10/0x10 [ 168.669892][ T6708] do_syscall_64+0x115/0x870 [ 168.669913][ T6708] ? clear_bhb_loop+0x70/0xc0 [ 168.669935][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.669954][ T6708] RIP: 0033:0x7fa5a1b9e0d9 [ 168.669971][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.669987][ T6708] RSP: 002b:00007fa5a29eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.670016][ T6708] RAX: ffffffffffffffda RBX: 00007fa5a1e25fa0 RCX: 00007fa5a1b9e0d9 [ 168.670028][ T6708] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 168.670038][ T6708] RBP: 00007fa5a29eb090 R08: 0000000000000000 R09: 0000000000000000 [ 168.670047][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.670056][ T6708] R13: 00007fa5a1e26038 R14: 00007fa5a1e25fa0 R15: 00007ffe669c5948 [ 168.670080][ T6708] [ 168.673337][ T6708] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 168.689091][ T6709] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.699042][ T6708] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 168.727272][ T6709] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 168.761286][ T6708] gadgetfs: bound to dummy_udc driver [ 168.949928][ T6710] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 169.486193][ T42] audit: type=1400 audit(1786573397.403:416): avc: denied { mount } for pid=6729 comm="syz.3.283" name="/" dev="autofs" ino=12200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 169.495926][ T42] audit: type=1400 audit(1786573397.403:417): avc: denied { accept } for pid=6729 comm="syz.3.283" lport=34871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.308845][ T42] audit: type=1400 audit(1786573398.213:418): avc: denied { write } for pid=6745 comm="syz.1.291" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 170.491411][ T5755] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 170.504271][ T5755] Bluetooth: hci3: Injecting HCI hardware error event [ 170.511223][ T5755] Bluetooth: hci3: hardware error 0x00 [ 170.981271][ T5846] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 171.160558][ T5846] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 171.202254][ T5846] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.229414][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.283822][ T5846] as10x_usb: device has been detected [ 171.305845][ T5846] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 171.390187][ T5846] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 171.481701][ T5846] as10x_usb: error during firmware upload part1 [ 171.487604][ T5846] Registered device Abilis Systems DVB-Titan [ 171.652947][ T6781] validate_nla: 3 callbacks suppressed [ 171.652977][ T6781] netlink: 'syz.1.302': attribute type 15 has an invalid length. [ 171.666252][ T6781] __nla_validate_parse: 2 callbacks suppressed [ 171.666271][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 171.741627][ T6781] netlink: 'syz.1.302': attribute type 15 has an invalid length. [ 171.747179][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 171.757372][ T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 171.809266][ T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 171.852132][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 171.859274][ T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 171.874317][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 171.874335][ T42] audit: type=1400 audit(1786573399.793:430): avc: denied { mount } for pid=6753 comm="syz.3.294" name="/" dev="hugetlbfs" ino=14833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 171.925852][ T42] audit: type=1400 audit(1786573399.793:431): avc: denied { remount } for pid=6753 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.970021][ T42] audit: type=1400 audit(1786573399.863:432): avc: denied { mount } for pid=6785 comm="syz.2.306" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.016036][ T6786] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4160749572.0.0), cmd(14) [ 172.056772][ T6788] /dev/nullb0: Can't open blockdev [ 172.077641][ T42] audit: type=1400 audit(1786573399.993:433): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.279772][ T42] audit: type=1400 audit(1786573400.183:434): avc: denied { mount } for pid=6789 comm="syz.2.308" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 172.300079][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'. [ 172.331667][ T6791] netlink: 92 bytes leftover after parsing attributes in process `syz.2.308'. [ 172.359329][ T42] audit: type=1400 audit(1786573400.273:435): avc: denied { load_policy } for pid=6794 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.359488][ T6795] SELinux: security policydb version 18 (MLS) not backwards compatible [ 172.374143][ T6795] SELinux: failed to load policy [ 172.480575][ T42] audit: type=1400 audit(1786573400.393:436): avc: denied { read } for pid=6798 comm="syz.0.311" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.622113][ T42] audit: type=1400 audit(1786573400.503:437): avc: denied { create } for pid=6789 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.629754][ T42] audit: type=1400 audit(1786573400.503:438): avc: denied { write } for pid=6789 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.635867][ T5755] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 173.172105][ T42] audit: type=1400 audit(1786573401.083:439): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.557445][ T6816] netlink: 'syz.2.316': attribute type 15 has an invalid length. [ 173.560642][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 173.605553][ T6816] netlink: 'syz.2.316': attribute type 15 has an invalid length. [ 173.624978][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 173.635727][ T14] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.640867][ T14] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.647675][ T14] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.687370][ T14] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 173.805620][ T5825] usb 8-1: USB disconnect, device number 3 [ 173.858256][ T5825] Unregistered device Abilis Systems DVB-Titan [ 173.859766][ T5825] as10x_usb: device has been disconnected [ 174.125532][ T6833] syzkaller0: entered promiscuous mode [ 174.128782][ T6833] syzkaller0: entered allmulticast mode [ 174.761668][ T6854] syzkaller0: entered promiscuous mode [ 174.774627][ T6854] syzkaller0: entered allmulticast mode [ 174.795380][ T6852] syzkaller0: entered promiscuous mode [ 174.799288][ T6852] syzkaller0: entered allmulticast mode [ 174.836006][ T6852] FAULT_INJECTION: forcing a failure. [ 174.836006][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.849400][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.0.330 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.849435][ T6852] Tainted: [L]=SOFTLOCKUP [ 174.849441][ T6852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.849473][ T6852] Call Trace: [ 174.849483][ T6852] [ 174.849491][ T6852] dump_stack_lvl+0x100/0x190 [ 174.849602][ T6852] should_fail_ex.cold+0x5/0xa [ 174.849644][ T6852] _copy_from_user+0x2e/0xd0 [ 174.849717][ T6852] move_addr_to_kernel+0x65/0x170 [ 174.849759][ T6852] copy_msghdr_from_user+0x3f0/0x4c0 [ 174.849779][ T6852] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 174.849808][ T6852] ___sys_sendmsg+0x106/0x1e0 [ 174.849828][ T6852] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.849844][ T6852] ? __lock_acquire+0x49f/0x1a40 [ 174.849983][ T6852] ? get_pid_task+0x106/0x250 [ 174.850034][ T6852] __sys_sendmsg+0x160/0x210 [ 174.850058][ T6852] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.850091][ T6852] do_syscall_64+0x115/0x870 [ 174.850125][ T6852] ? clear_bhb_loop+0x70/0xc0 [ 174.850148][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.850167][ T6852] RIP: 0033:0x7fa5a1b9e0d9 [ 174.850185][ T6852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.850202][ T6852] RSP: 002b:00007fa5a29eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.850221][ T6852] RAX: ffffffffffffffda RBX: 00007fa5a1e25fa0 RCX: 00007fa5a1b9e0d9 [ 174.850234][ T6852] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 174.850245][ T6852] RBP: 00007fa5a29eb090 R08: 0000000000000000 R09: 0000000000000000 [ 174.850256][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.850267][ T6852] R13: 00007fa5a1e26038 R14: 00007fa5a1e25fa0 R15: 00007ffe669c5948 [ 174.850291][ T6852] [ 175.312918][ T6862] syzkaller0: entered promiscuous mode [ 175.315529][ T6862] syzkaller0: entered allmulticast mode [ 175.913142][ T6887] block nbd1: NBD_DISCONNECT [ 176.101346][ T6895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 176.157744][ T6895] CIFS mount error: No usable UNC path provided in device string! [ 176.157744][ T6895] [ 176.163453][ T6895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.574402][ T5846] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 176.777459][ T5846] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 176.800907][ T5846] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 176.805369][ T5846] usb 8-1: config 0 has no interface number 0 [ 176.808770][ T5846] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 176.816125][ T5846] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.825406][ T5846] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.833811][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 176.838584][ T5846] usb 8-1: Product: syz [ 176.841346][ T5846] usb 8-1: SerialNumber: syz [ 176.867577][ T5846] usb 8-1: config 0 descriptor?? [ 176.876238][ T5846] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 176.895532][ T5846] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input8 [ 177.049143][ T5867] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 177.225139][ T6899] FAULT_INJECTION: forcing a failure. [ 177.225139][ T6899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.227865][ T5867] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 177.254649][ T6899] CPU: 1 UID: 0 PID: 6899 Comm: syz.3.344 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.254681][ T6899] Tainted: [L]=SOFTLOCKUP [ 177.254686][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.254716][ T6899] Call Trace: [ 177.254723][ T6899] [ 177.254730][ T6899] dump_stack_lvl+0x100/0x190 [ 177.254759][ T6899] should_fail_ex.cold+0x5/0xa [ 177.254801][ T6899] _copy_from_iter+0x1f4/0x1690 [ 177.254832][ T6899] ? __pfx__copy_from_iter+0x10/0x10 [ 177.254856][ T6899] ? __pfx___might_resched+0x10/0x10 [ 177.254878][ T6899] ? kfree+0x1e5/0x6c0 [ 177.254927][ T6899] file_tty_write.isra.0+0x45b/0x890 [ 177.254996][ T6899] vfs_write+0x6ac/0x1050 [ 177.255021][ T6899] ? __pfx_tty_write+0x10/0x10 [ 177.255043][ T6899] ? __pfx_vfs_write+0x10/0x10 [ 177.255057][ T6899] ? find_held_lock+0x2b/0x80 [ 177.255088][ T6899] ksys_write+0x12a/0x250 [ 177.255104][ T6899] ? __pfx_ksys_write+0x10/0x10 [ 177.255127][ T6899] do_syscall_64+0x115/0x870 [ 177.255150][ T6899] ? clear_bhb_loop+0x70/0xc0 [ 177.255251][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.255269][ T6899] RIP: 0033:0x7f60d5d9e0d9 [ 177.255285][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.255301][ T6899] RSP: 002b:00007f60d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.255319][ T6899] RAX: ffffffffffffffda RBX: 00007f60d6025fa0 RCX: 00007f60d5d9e0d9 [ 177.255331][ T6899] RDX: 0000000000001006 RSI: 00002000000005c0 RDI: 0000000000000005 [ 177.255342][ T6899] RBP: 00007f60d3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.255353][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.255363][ T6899] R13: 00007f60d6026038 R14: 00007f60d6025fa0 R15: 00007ffc99c20f08 [ 177.255388][ T6899] [ 177.373027][ T6925] syzkaller0: entered promiscuous mode [ 177.385771][ T5867] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 177.396422][ T6925] syzkaller0: entered allmulticast mode [ 177.399690][ T5867] usb 6-1: config 0 has no interface number 0 [ 177.450078][ T6923] tipc: Started in network mode [ 177.465316][ T5867] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 177.465351][ T5867] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.465375][ T5867] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.468440][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 177.484121][ T6923] tipc: Node identity ca3849f2e4a8, cluster identity 4711 [ 177.484372][ T6923] tipc: Enabled bearer , priority 0 [ 177.510155][ T6923] tipc: Resetting bearer [ 177.525743][ T5867] usb 6-1: Product: syz [ 177.525768][ T5867] usb 6-1: SerialNumber: syz [ 177.528888][ T5867] usb 6-1: config 0 descriptor?? [ 177.692888][ T5825] usb 8-1: USB disconnect, device number 4 [ 177.699410][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.703072][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 177.741117][ T5825] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 177.741683][ T5867] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 177.780982][ T5867] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input9 [ 177.868058][ T6922] tipc: Resetting bearer [ 177.990933][ T6922] tipc: Disabling bearer [ 178.142968][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.164956][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.178394][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.191337][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.208433][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.222829][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.225798][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.250930][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.263760][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 178.282625][ T44] usb 6-1: USB disconnect, device number 6 [ 178.290307][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 178.314920][ T44] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 178.365729][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 178.365748][ T42] audit: type=1400 audit(1786573406.283:453): avc: denied { write } for pid=6933 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.378768][ T6937] syzkaller0: entered promiscuous mode [ 178.405516][ T42] audit: type=1400 audit(1786573406.303:454): avc: denied { setattr } for pid=6933 comm="syz.3.356" path="socket:[14948]" dev="sockfs" ino=14948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.467707][ T6937] syzkaller0: entered allmulticast mode [ 178.486887][ T6939] tipc: Started in network mode [ 178.489448][ T6939] tipc: Node identity ac141441, cluster identity 4711 [ 178.504908][ T6939] tipc: Enabled bearer , priority 10 [ 178.544087][ T6937] tipc: Enabled bearer , priority 0 [ 178.549687][ T6937] syzkaller0: mtu less than device minimum [ 178.586469][ T6936] tipc: Resetting bearer [ 178.664837][ T6936] tipc: Disabling bearer [ 179.033866][ T6956] IPVS: Unknown mcast interface: pim6reg1 [ 179.189756][ T6963] 9p: Could not find request transport: on=9p 000.u [ 179.257093][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 179.372317][ T62] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 179.413803][ T44] usb 6-1: device descriptor read/64, error -71 [ 179.547359][ T5097] tipc: Node number set to 2886997057 [ 179.558496][ T6978] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.370'. [ 179.584820][ T42] audit: type=1400 audit(1786573407.493:455): avc: denied { mounton } for pid=6975 comm="syz.2.371" path="/84/file0" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 179.587597][ T62] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 179.631564][ T62] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 179.638666][ T62] usb 5-1: config 0 has no interface number 0 [ 179.642881][ T62] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 179.651722][ T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 179.660700][ T62] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.671600][ T62] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 179.683458][ T62] usb 5-1: Product: syz [ 179.688384][ T62] usb 5-1: SerialNumber: syz [ 179.715690][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 179.729624][ T62] usb 5-1: config 0 descriptor?? [ 179.737424][ T62] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 179.751660][ T62] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input10 [ 179.864094][ T6986] FAULT_INJECTION: forcing a failure. [ 179.864094][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 179.876566][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.2.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.876601][ T6986] Tainted: [L]=SOFTLOCKUP [ 179.876606][ T6986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.876616][ T6986] Call Trace: [ 179.876625][ T6986] [ 179.876804][ T44] usb 6-1: device descriptor read/64, error -71 [ 179.876632][ T6986] dump_stack_lvl+0x100/0x190 [ 179.877124][ T6986] should_fail_ex.cold+0x5/0xa [ 179.877145][ T6986] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 179.878556][ T6986] should_failslab+0xc2/0x120 [ 179.878625][ T6986] kmem_cache_alloc_noprof+0x91/0x6a0 [ 179.878647][ T6986] ? skb_clone+0x190/0x400 [ 179.878681][ T6986] skb_clone+0x190/0x400 [ 179.878704][ T6986] netlink_deliver_tap+0xaed/0xcc0 [ 179.878737][ T6986] netlink_unicast+0x62b/0x850 [ 179.878759][ T6986] ? __pfx_netlink_unicast+0x10/0x10 [ 179.878803][ T6986] netlink_sendmsg+0x8b0/0xda0 [ 179.878825][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.878846][ T6986] ? selinux_socket_sendmsg+0x198/0x2f0 [ 179.878886][ T6986] ____sys_sendmsg+0xa4d/0xbe0 [ 179.878911][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.878929][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.878957][ T6986] ? lock_acquire+0x1b9/0x370 [ 179.878978][ T6986] ? find_held_lock+0x2b/0x80 [ 179.878992][ T6986] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 179.879016][ T6986] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 179.879042][ T6986] ___sys_sendmsg+0x190/0x1e0 [ 179.879061][ T6986] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.879075][ T6986] ? __lock_acquire+0x49f/0x1a40 [ 179.879094][ T6986] ? rcu_is_watching+0x12/0xc0 [ 179.879156][ T6986] __sys_sendmsg+0x160/0x210 [ 179.879178][ T6986] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.879209][ T6986] do_syscall_64+0x115/0x870 [ 179.879230][ T6986] ? clear_bhb_loop+0x70/0xc0 [ 179.879252][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.879269][ T6986] RIP: 0033:0x7fa09b59e0d9 [ 179.879473][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.879490][ T6986] RSP: 002b:00007fa09c4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.879507][ T6986] RAX: ffffffffffffffda RBX: 00007fa09b825fa0 RCX: 00007fa09b59e0d9 [ 179.879518][ T6986] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 179.879527][ T6986] RBP: 00007fa09c4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 179.879556][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.879567][ T6986] R13: 00007fa09b826038 R14: 00007fa09b825fa0 R15: 00007fff50e4b7c8 [ 179.879596][ T6986] [ 180.035342][ T42] audit: type=1400 audit(1786573407.933:456): avc: denied { create } for pid=6960 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.184680][ T6992] tmpfs: Bad value for 'mpol' [ 180.234492][ T44] usb usb6-port1: attempt power cycle [ 180.245588][ T42] audit: type=1400 audit(1786573408.073:457): avc: denied { write } for pid=6960 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.245631][ T42] audit: type=1400 audit(1786573408.103:458): avc: denied { setopt } for pid=6960 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.245661][ T42] audit: type=1400 audit(1786573408.103:459): avc: denied { connect } for pid=6960 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.378191][ T5825] usb 5-1: USB disconnect, device number 10 [ 180.379606][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 180.423672][ T5825] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 180.644874][ T42] audit: type=1400 audit(1786573408.563:460): avc: denied { read } for pid=6999 comm="syz.3.377" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.669776][ T42] audit: type=1400 audit(1786573408.563:461): avc: denied { open } for pid=6999 comm="syz.3.377" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.682036][ T42] audit: type=1400 audit(1786573408.563:462): avc: denied { ioctl } for pid=6999 comm="syz.3.377" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.715184][ T44] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 180.733104][ T44] usb 6-1: device descriptor read/8, error -71 [ 181.004475][ T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 181.033141][ T44] usb 6-1: device descriptor read/8, error -71 [ 181.115415][ T7004] binder_alloc: 7003: binder_alloc_buf size 12312 failed, no address space [ 181.123375][ T7004] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 181.152304][ T44] usb usb6-port1: unable to enumerate USB device [ 181.290217][ T7011] bond1: Unable to set up delay as MII monitoring is disabled [ 181.320268][ T7011] bond1 (unregistering): Released all slaves [ 181.384142][ T7020] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.732774][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 181.835180][ T7032] netlink: 'syz.0.387': attribute type 14 has an invalid length. [ 181.929860][ T7036] FAULT_INJECTION: forcing a failure. [ 181.929860][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.936390][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.2.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.936420][ T7036] Tainted: [L]=SOFTLOCKUP [ 181.936427][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.936439][ T7036] Call Trace: [ 181.936445][ T7036] [ 181.936452][ T7036] dump_stack_lvl+0x100/0x190 [ 181.936735][ T7036] should_fail_ex.cold+0x5/0xa [ 181.936764][ T7036] _copy_from_user+0x2e/0xd0 [ 181.936791][ T7036] move_addr_to_kernel+0x65/0x170 [ 181.936811][ T7036] copy_msghdr_from_user+0x3f0/0x4c0 [ 181.936830][ T7036] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 181.936860][ T7036] ___sys_sendmsg+0x106/0x1e0 [ 181.936880][ T7036] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.936897][ T7036] ? __lock_acquire+0x49f/0x1a40 [ 181.936922][ T7036] ? get_pid_task+0x106/0x250 [ 181.936966][ T7036] __sys_sendmsg+0x160/0x210 [ 181.936990][ T7036] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.937026][ T7036] do_syscall_64+0x115/0x870 [ 181.937054][ T7036] ? clear_bhb_loop+0x70/0xc0 [ 181.937076][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.937095][ T7036] RIP: 0033:0x7fa09b59e0d9 [ 181.937111][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.937131][ T7036] RSP: 002b:00007fa09c4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.937149][ T7036] RAX: ffffffffffffffda RBX: 00007fa09b825fa0 RCX: 00007fa09b59e0d9 [ 181.937167][ T7036] RDX: 0000000020000885 RSI: 0000200000002900 RDI: 0000000000000007 [ 181.937178][ T7036] RBP: 00007fa09c4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 181.937190][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.937201][ T7036] R13: 00007fa09b826038 R14: 00007fa09b825fa0 R15: 00007fff50e4b7c8 [ 181.937226][ T7036] [ 183.080206][ T7066] binder: Bad value for 'max' [ 183.089077][ T7070] 9pnet: Found fid 0 not clunked [ 183.136590][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 183.223107][ T7073] xt_CT: No such helper "snmp_trap" [ 183.673841][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 183.819511][ T29] usb 6-1: device descriptor read/64, error -71 [ 184.092187][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 184.262736][ T29] usb 6-1: device descriptor read/64, error -71 [ 184.295160][ T7107] mount: server 127.0.0.1 not responding, timed out [ 184.372593][ T29] usb usb6-port1: attempt power cycle [ 184.466389][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 184.466410][ T42] audit: type=1400 audit(1786573412.373:468): avc: denied { write } for pid=7117 comm="syz.0.409" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.479152][ T7118] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 184.594412][ T42] audit: type=1400 audit(1786573412.513:469): avc: denied { create } for pid=7115 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.614023][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.408'. [ 184.614240][ T42] audit: type=1400 audit(1786573412.533:470): avc: denied { write } for pid=7115 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.722251][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 184.742868][ T29] usb 6-1: device descriptor read/8, error -71 [ 184.794191][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 185.052277][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 185.073979][ T29] usb 6-1: device descriptor read/8, error -71 [ 185.111702][ T7132] syzkaller0: entered promiscuous mode [ 185.132064][ T7132] syzkaller0: entered allmulticast mode [ 185.208615][ T29] usb usb6-port1: unable to enumerate USB device [ 185.553925][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 185.723386][ T7137] mount: server .27.0.0.1 not responding, timed out [ 185.910866][ T42] audit: type=1400 audit(1786573413.823:471): avc: denied { shutdown } for pid=7153 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 185.994842][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 186.575071][ T7174] FAULT_INJECTION: forcing a failure. [ 186.575071][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 186.593413][ T7174] CPU: 2 UID: 0 PID: 7174 Comm: syz.3.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.593443][ T7174] Tainted: [L]=SOFTLOCKUP [ 186.593449][ T7174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.593459][ T7174] Call Trace: [ 186.593465][ T7174] [ 186.593472][ T7174] dump_stack_lvl+0x100/0x190 [ 186.593503][ T7174] should_fail_ex.cold+0x5/0xa [ 186.593532][ T7174] should_failslab+0xc2/0x120 [ 186.593557][ T7174] __kmalloc_noprof+0xfc/0x820 [ 186.593579][ T7174] ? tomoyo_encode2+0xfb/0x3c0 [ 186.593603][ T7174] tomoyo_encode2+0xfb/0x3c0 [ 186.593622][ T7174] tomoyo_encode+0x29/0x50 [ 186.593637][ T7174] tomoyo_realpath_from_path+0x18c/0x690 [ 186.593662][ T7174] tomoyo_path_number_perm+0x23c/0x580 [ 186.593831][ T7174] ? tomoyo_path_number_perm+0x22e/0x580 [ 186.593857][ T7174] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.593976][ T7174] ? find_held_lock+0x2b/0x80 [ 186.593994][ T7174] ? __fget_files+0x215/0x3d0 [ 186.594013][ T7174] ? hook_file_ioctl_common+0x140/0x440 [ 186.594099][ T7174] ? __fget_files+0x215/0x3d0 [ 186.594494][ T7174] ? __fget_files+0x21f/0x3d0 [ 186.594781][ T7174] security_file_ioctl+0xd3/0x230 [ 186.595008][ T7174] __x64_sys_ioctl+0xb7/0x210 [ 186.595038][ T7174] do_syscall_64+0x115/0x870 [ 186.595151][ T7174] ? clear_bhb_loop+0x70/0xc0 [ 186.595240][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.595447][ T7174] RIP: 0033:0x7f60d5d9e0d9 [ 186.595529][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.595797][ T7174] RSP: 002b:00007f60d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.596189][ T7174] RAX: ffffffffffffffda RBX: 00007f60d6025fa0 RCX: 00007f60d5d9e0d9 [ 186.596201][ T7174] RDX: 0000200000022a00 RSI: 000000008028640c RDI: 0000000000000003 [ 186.596212][ T7174] RBP: 00007f60d3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.596223][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.596233][ T7174] R13: 00007f60d6026038 R14: 00007f60d6025fa0 R15: 00007ffc99c20f08 [ 186.596256][ T7174] [ 186.596322][ T7174] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.921612][ T7189] kAFS: Can only specify source 'none' with -o dyn [ 186.989034][ T7194] FAULT_INJECTION: forcing a failure. [ 186.989034][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 187.018461][ T7194] CPU: 3 UID: 0 PID: 7194 Comm: syz.1.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.018492][ T7194] Tainted: [L]=SOFTLOCKUP [ 187.018498][ T7194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.018508][ T7194] Call Trace: [ 187.018514][ T7194] [ 187.018520][ T7194] dump_stack_lvl+0x100/0x190 [ 187.018550][ T7194] should_fail_ex.cold+0x5/0xa [ 187.018572][ T7194] should_failslab+0xc2/0x120 [ 187.018595][ T7194] __kmalloc_cache_noprof+0x91/0x6c0 [ 187.018613][ T7194] ? copy_mount_options+0x55/0x190 [ 187.018640][ T7194] copy_mount_options+0x55/0x190 [ 187.018665][ T7194] __x64_sys_mount+0x1ab/0x310 [ 187.018686][ T7194] ? __pfx___x64_sys_mount+0x10/0x10 [ 187.018713][ T7194] do_syscall_64+0x115/0x870 [ 187.018771][ T7194] ? clear_bhb_loop+0x70/0xc0 [ 187.018797][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.018814][ T7194] RIP: 0033:0x7fa7c2b9e0d9 [ 187.018830][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.018847][ T7194] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.018867][ T7194] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 187.018878][ T7194] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 187.018890][ T7194] RBP: 00007fa7c3ae4090 R08: 0000200000000140 R09: 0000000000000000 [ 187.018902][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.018913][ T7194] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 187.018945][ T7194] [ 187.391007][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.499659][ T7206] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 187.583678][ T44] usb 5-1: device descriptor read/64, error -71 [ 187.735806][ T42] audit: type=1400 audit(1786573415.653:472): avc: denied { search } for pid=5438 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.771223][ T42] audit: type=1400 audit(1786573415.663:473): avc: denied { search } for pid=5438 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.797529][ T42] audit: type=1400 audit(1786573415.663:474): avc: denied { search } for pid=5438 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.892123][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.922252][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 187.928901][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 188.008644][ T42] audit: type=1400 audit(1786573415.923:475): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 188.032438][ T44] usb 5-1: device descriptor read/64, error -71 [ 188.037707][ T42] audit: type=1400 audit(1786573415.923:476): avc: denied { sendto } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 188.102213][ T42] audit: type=1400 audit(1786573415.973:477): avc: denied { write } for pid=7226 comm="syz.1.443" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.152287][ T44] usb usb5-port1: attempt power cycle [ 188.522329][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.561088][ T44] usb 5-1: device descriptor read/8, error -71 [ 188.651589][ T7252] base or size exceeds the MTRR width [ 188.843004][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.886648][ T44] usb 5-1: device descriptor read/8, error -71 [ 189.014808][ T44] usb usb5-port1: unable to enumerate USB device [ 189.096181][ T7273] SET target dimension over the limit! [ 189.412098][ T44] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 189.538822][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 189.538842][ T42] audit: type=1400 audit(1786573417.453:480): avc: denied { getopt } for pid=7280 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 189.585948][ T44] usb 8-1: not running at top speed; connect to a high speed hub [ 189.603075][ T44] usb 8-1: New USB device found, idVendor=1199, idProduct=90d2, bcdDevice=c5.eb [ 189.653502][ T44] usb 8-1: config 7 has an invalid interface number: 99 but max is 2 [ 189.669830][ T44] usb 8-1: config 7 has an invalid interface number: 37 but max is 2 [ 189.676868][ T44] usb 8-1: config 7 has an invalid interface number: 23 but max is 2 [ 189.686137][ T44] usb 8-1: config 7 has no interface number 0 [ 189.693583][ T44] usb 8-1: config 7 has no interface number 1 [ 189.697881][ T44] usb 8-1: config 7 has no interface number 2 [ 189.702318][ T44] usb 8-1: config 7 interface 99 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 189.709812][ T44] usb 8-1: config 7 interface 37 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 189.716132][ T44] usb 8-1: config 7 interface 37 altsetting 8 endpoint 0xD has invalid maxpacket 16743, setting to 64 [ 189.723932][ T44] usb 8-1: config 7 interface 37 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 189.751118][ T44] usb 8-1: config 7 interface 37 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 189.759376][ T44] usb 8-1: config 7 interface 37 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 189.768584][ T7289] program syz.1.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.775197][ T42] audit: type=1400 audit(1786573417.683:481): avc: denied { read } for pid=7288 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.778481][ T44] usb 8-1: config 7 interface 37 altsetting 8 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 189.778518][ T44] usb 8-1: config 7 interface 37 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 189.778543][ T44] usb 8-1: config 7 interface 37 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 189.778575][ T44] usb 8-1: config 7 interface 37 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 189.778617][ T44] usb 8-1: config 7 interface 23 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 189.778637][ T44] usb 8-1: config 7 interface 23 altsetting 8 has an endpoint descriptor with address 0x15, changing to 0x5 [ 189.778661][ T44] usb 8-1: config 7 interface 23 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 189.778683][ T44] usb 8-1: config 7 interface 99 has no altsetting 0 [ 189.778702][ T44] usb 8-1: config 7 interface 37 has no altsetting 0 [ 189.778721][ T44] usb 8-1: config 7 interface 23 has no altsetting 0 [ 189.781168][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.781194][ T44] usb 8-1: Product: Ь [ 189.781208][ T44] usb 8-1: Manufacturer: Ї [ 189.781223][ T44] usb 8-1: SerialNumber: 샢 [ 190.132164][ T44] usb 8-1: USB disconnect, device number 5 [ 190.231630][ T7299] FAULT_INJECTION: forcing a failure. [ 190.231630][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 190.241722][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.0.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.241757][ T7299] Tainted: [L]=SOFTLOCKUP [ 190.241763][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.241775][ T7299] Call Trace: [ 190.241782][ T7299] [ 190.241791][ T7299] dump_stack_lvl+0x100/0x190 [ 190.241826][ T7299] should_fail_ex.cold+0x5/0xa [ 190.241852][ T7299] should_failslab+0xc2/0x120 [ 190.241899][ T7299] __kmalloc_cache_noprof+0x91/0x6c0 [ 190.241919][ T7299] ? vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 190.241978][ T7299] vhost_iotlb_add_range_ctx+0x7b5/0xb70 [ 190.242012][ T7299] vhost_iotlb_add_range_ctx+0x89f/0xb70 [ 190.242042][ T7299] vhost_dev_ioctl+0x942/0xe70 [ 190.242071][ T7299] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 190.242103][ T7299] vhost_net_ioctl+0x75f/0x1910 [ 190.242123][ T7299] ? do_vfs_ioctl+0x226/0x13e0 [ 190.242154][ T7299] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.242183][ T7299] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 190.242202][ T7299] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.242241][ T7299] ? __fget_files+0x215/0x3d0 [ 190.242261][ T7299] ? hook_file_ioctl_common+0x140/0x440 [ 190.242290][ T7299] ? selinux_file_ioctl+0xb6/0x290 [ 190.242321][ T7299] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 190.242343][ T7299] __x64_sys_ioctl+0x18e/0x210 [ 190.242376][ T7299] do_syscall_64+0x115/0x870 [ 190.242402][ T7299] ? clear_bhb_loop+0x70/0xc0 [ 190.242427][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.242446][ T7299] RIP: 0033:0x7fa5a1b9e0d9 [ 190.242463][ T7299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.242480][ T7299] RSP: 002b:00007fa5a29eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.242500][ T7299] RAX: ffffffffffffffda RBX: 00007fa5a1e25fa0 RCX: 00007fa5a1b9e0d9 [ 190.242514][ T7299] RDX: 0000200000000000 RSI: 000000004008af03 RDI: 0000000000000003 [ 190.242531][ T7299] RBP: 00007fa5a29eb090 R08: 0000000000000000 R09: 0000000000000000 [ 190.242542][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.242553][ T7299] R13: 00007fa5a1e26038 R14: 00007fa5a1e25fa0 R15: 00007ffe669c5948 [ 190.242579][ T7299] [ 190.258791][ T7292] bridge_slave_0: left allmulticast mode [ 190.483749][ T7292] bridge_slave_0: left promiscuous mode [ 190.496694][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.518201][ T7292] bridge_slave_1: left allmulticast mode [ 190.525443][ T7292] bridge_slave_1: left promiscuous mode [ 190.540822][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.780373][ T7292] bond0: (slave bond_slave_0): Releasing backup interface [ 190.831160][ T7292] bond0: (slave bond_slave_1): Releasing backup interface [ 190.858800][ T7292] team0: Port device team_slave_0 removed [ 190.914028][ T7292] team0: Port device team_slave_1 removed [ 190.918364][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.923958][ T7292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.945444][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.955156][ T7292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.966918][ T7292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.025630][ T7308] netlink: 'syz.0.468': attribute type 15 has an invalid length. [ 191.042057][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 191.072566][ T7310] binder: 7309:7310 ioctl 80585882 200000000200 returned -22 [ 191.101840][ T7308] netlink: 'syz.0.468': attribute type 15 has an invalid length. [ 191.127286][ T5818] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.128014][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 191.133018][ T5818] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.144919][ T7312] FAULT_INJECTION: forcing a failure. [ 191.144919][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 191.144979][ T7312] CPU: 3 UID: 0 PID: 7312 Comm: syz.3.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.145005][ T7312] Tainted: [L]=SOFTLOCKUP [ 191.145011][ T7312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.145021][ T7312] Call Trace: [ 191.145027][ T7312] [ 191.145034][ T7312] dump_stack_lvl+0x100/0x190 [ 191.145063][ T7312] should_fail_ex.cold+0x5/0xa [ 191.145087][ T7312] should_failslab+0xc2/0x120 [ 191.145112][ T7312] __kmalloc_cache_noprof+0x91/0x6c0 [ 191.145130][ T7312] ? do_raw_spin_lock+0x128/0x260 [ 191.145155][ T7312] ? p9_fid_create+0x45/0x460 [ 191.145203][ T7312] p9_fid_create+0x45/0x460 [ 191.145228][ T7312] p9_client_attach+0x91/0x2b0 [ 191.145246][ T7312] ? __pfx_p9_client_attach+0x10/0x10 [ 191.145261][ T7312] ? v9fs_fid_lookup+0x500/0xf50 [ 191.145314][ T7312] v9fs_fid_lookup+0x9a4/0xf50 [ 191.145337][ T7312] v9fs_vfs_lookup+0x1a1/0x5c0 [ 191.145360][ T7312] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 191.145385][ T7312] ? do_raw_spin_unlock+0x145/0x1e0 [ 191.145409][ T7312] ? _raw_spin_unlock+0x28/0x50 [ 191.145439][ T7312] lookup_one_qstr_excl+0x1cd/0x250 [ 191.145463][ T7312] ? mnt_get_write_access+0x52/0x2f0 [ 191.145489][ T7312] __start_renaming+0x16d/0x520 [ 191.145516][ T7312] filename_renameat2+0x538/0xa60 [ 191.145544][ T7312] ? __pfx_filename_renameat2+0x10/0x10 [ 191.145571][ T7312] ? __might_fault+0xc5/0x140 [ 191.145611][ T7312] ? do_getname+0x191/0x390 [ 191.145634][ T7312] __x64_sys_renameat+0xca/0x110 [ 191.145657][ T7312] do_syscall_64+0x115/0x870 [ 191.145678][ T7312] ? clear_bhb_loop+0x70/0xc0 [ 191.145699][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.145717][ T7312] RIP: 0033:0x7f60d5d9e0d9 [ 191.145732][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.145747][ T7312] RSP: 002b:00007f60d3ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 191.145765][ T7312] RAX: ffffffffffffffda RBX: 00007f60d6025fa0 RCX: 00007f60d5d9e0d9 [ 191.145776][ T7312] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 191.145786][ T7312] RBP: 00007f60d3ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.145797][ T7312] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.145807][ T7312] R13: 00007f60d6026038 R14: 00007f60d6025fa0 R15: 00007ffc99c20f08 [ 191.145830][ T7312] [ 191.148371][ T7312] block nbd3: NBD_DISCONNECT [ 191.175067][ T5818] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.476791][ T5818] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.577293][ T42] audit: type=1400 audit(1786573419.493:482): avc: denied { read } for pid=7319 comm="syz.2.474" path="socket:[17079]" dev="sockfs" ino=17079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.591282][ T42] audit: type=1326 audit(1786573419.503:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.2.474" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa09b59e0d9 code=0x0 [ 191.738273][ T7329] hpfs: hpfs_map_sector(): read error [ 192.105725][ T5858] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.242420][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 192.242444][ T5858] usb 5-1: device descriptor read/64, error -71 [ 192.452323][ T29] usb 8-1: device descriptor read/64, error -71 [ 192.518874][ T42] audit: type=1400 audit(1786573420.433:484): avc: denied { shutdown } for pid=7340 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.522134][ T5858] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.571137][ T7343] netlink: 'syz.2.480': attribute type 15 has an invalid length. [ 192.575477][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 192.584981][ T7343] netlink: 'syz.2.480': attribute type 15 has an invalid length. [ 192.613172][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 192.660335][ T42] audit: type=1400 audit(1786573420.573:485): avc: denied { getopt } for pid=7340 comm="syz.1.479" lport=36014 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 192.661611][ T7341] netlink: 'syz.1.479': attribute type 21 has an invalid length. [ 192.758130][ T7341] netlink: 128 bytes leftover after parsing attributes in process `syz.1.479'. [ 192.764185][ T7341] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 192.768987][ T7341] netlink: 'syz.1.479': attribute type 5 has an invalid length. [ 192.772821][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 192.774196][ T5858] usb 5-1: device descriptor read/64, error -71 [ 192.774679][ T7341] netlink: 3 bytes leftover after parsing attributes in process `syz.1.479'. [ 192.883206][ T5858] usb usb5-port1: attempt power cycle [ 192.952702][ T29] usb 8-1: device descriptor read/64, error -71 [ 193.161208][ T29] usb usb8-port1: attempt power cycle [ 193.217820][ T7360] capability: warning: `syz.2.484' uses 32-bit capabilities (legacy support in use) [ 193.246941][ T5858] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 193.283617][ T5858] usb 5-1: device descriptor read/8, error -71 [ 193.531492][ T42] audit: type=1400 audit(1786573421.443:486): avc: denied { bind } for pid=7366 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.563136][ T5858] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 193.564174][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 193.589654][ T42] audit: type=1400 audit(1786573421.443:487): avc: denied { listen } for pid=7366 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.622762][ T5858] usb 5-1: device descriptor read/8, error -71 [ 193.679518][ T29] usb 8-1: device descriptor read/8, error -71 [ 193.766686][ T5858] usb usb5-port1: unable to enumerate USB device [ 193.824472][ T7373] netlink: 'syz.1.489': attribute type 15 has an invalid length. [ 193.831251][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 193.837829][ T7373] netlink: 'syz.1.489': attribute type 15 has an invalid length. [ 193.844379][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 194.042186][ T29] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 194.063822][ T29] usb 8-1: device descriptor read/8, error -71 [ 194.173843][ T29] usb usb8-port1: unable to enumerate USB device [ 194.285630][ T7386] FAULT_INJECTION: forcing a failure. [ 194.285630][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 194.291502][ T7386] CPU: 2 UID: 0 PID: 7386 Comm: syz.2.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.291534][ T7386] Tainted: [L]=SOFTLOCKUP [ 194.291539][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.291550][ T7386] Call Trace: [ 194.291560][ T7386] [ 194.291576][ T7386] dump_stack_lvl+0x100/0x190 [ 194.291608][ T7386] should_fail_ex.cold+0x5/0xa [ 194.291632][ T7386] should_failslab+0xc2/0x120 [ 194.291657][ T7386] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 194.291680][ T7386] ? __alloc_skb+0x5b7/0x710 [ 194.291702][ T7386] ? __alloc_skb+0x140/0x710 [ 194.291724][ T7386] __alloc_skb+0x140/0x710 [ 194.291743][ T7386] ? __alloc_skb+0x5b7/0x710 [ 194.291763][ T7386] ? __pfx___alloc_skb+0x10/0x10 [ 194.291791][ T7386] netlink_alloc_large_skb+0x69/0x150 [ 194.291814][ T7386] netlink_sendmsg+0x680/0xda0 [ 194.291837][ T7386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.291911][ T7386] ? selinux_socket_sendmsg+0x198/0x2f0 [ 194.291944][ T7386] ____sys_sendmsg+0xa4d/0xbe0 [ 194.291972][ T7386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.291994][ T7386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.292032][ T7386] ___sys_sendmsg+0x190/0x1e0 [ 194.292052][ T7386] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.292068][ T7386] ? __lock_acquire+0x49f/0x1a40 [ 194.292092][ T7386] ? get_pid_task+0x106/0x250 [ 194.292139][ T7386] __sys_sendmsg+0x160/0x210 [ 194.292162][ T7386] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.292196][ T7386] do_syscall_64+0x115/0x870 [ 194.292220][ T7386] ? clear_bhb_loop+0x70/0xc0 [ 194.292241][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.292260][ T7386] RIP: 0033:0x7fa09b59e0d9 [ 194.292278][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.292294][ T7386] RSP: 002b:00007fa09c4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.292313][ T7386] RAX: ffffffffffffffda RBX: 00007fa09b825fa0 RCX: 00007fa09b59e0d9 [ 194.292325][ T7386] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.292335][ T7386] RBP: 00007fa09c4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 194.292346][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.292357][ T7386] R13: 00007fa09b826038 R14: 00007fa09b825fa0 R15: 00007fff50e4b7c8 [ 194.292385][ T7386] [ 194.849913][ T7393] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 194.887352][ T7395] FAULT_INJECTION: forcing a failure. [ 194.887352][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 194.897598][ T7395] CPU: 2 UID: 0 PID: 7395 Comm: syz.1.496 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.897626][ T7395] Tainted: [L]=SOFTLOCKUP [ 194.897631][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.897641][ T7395] Call Trace: [ 194.897647][ T7395] [ 194.897653][ T7395] dump_stack_lvl+0x100/0x190 [ 194.897682][ T7395] should_fail_ex.cold+0x5/0xa [ 194.897703][ T7395] should_failslab+0xc2/0x120 [ 194.897725][ T7395] __kmalloc_noprof+0xfc/0x820 [ 194.897743][ T7395] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 194.897763][ T7395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 194.897789][ T7395] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 194.897813][ T7395] genl_family_rcv_msg_doit+0xc7/0x300 [ 194.897834][ T7395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 194.897859][ T7395] ? bpf_lsm_capable+0x9/0x10 [ 194.897893][ T7395] ? security_capable+0x80/0x260 [ 194.897917][ T7395] genl_rcv_msg+0x560/0x800 [ 194.897939][ T7395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.897963][ T7395] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 194.897988][ T7395] ? __lock_acquire+0x49f/0x1a40 [ 194.898012][ T7395] netlink_rcv_skb+0x159/0x420 [ 194.898028][ T7395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.898047][ T7395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.898071][ T7395] ? netlink_deliver_tap+0x1ae/0xcc0 [ 194.898090][ T7395] genl_rcv+0x28/0x40 [ 194.898105][ T7395] netlink_unicast+0x585/0x850 [ 194.898124][ T7395] ? __pfx_netlink_unicast+0x10/0x10 [ 194.898145][ T7395] netlink_sendmsg+0x8b0/0xda0 [ 194.898164][ T7395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.898183][ T7395] ? selinux_socket_sendmsg+0x198/0x2f0 [ 194.898208][ T7395] ____sys_sendmsg+0xa4d/0xbe0 [ 194.898232][ T7395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.898249][ T7395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.898282][ T7395] ___sys_sendmsg+0x190/0x1e0 [ 194.898298][ T7395] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.898312][ T7395] ? __lock_acquire+0x49f/0x1a40 [ 194.898331][ T7395] ? get_pid_task+0x106/0x250 [ 194.898370][ T7395] __sys_sendmsg+0x160/0x210 [ 194.898392][ T7395] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.898426][ T7395] do_syscall_64+0x115/0x870 [ 194.898448][ T7395] ? clear_bhb_loop+0x70/0xc0 [ 194.898467][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.898483][ T7395] RIP: 0033:0x7fa7c2b9e0d9 [ 194.898498][ T7395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.898513][ T7395] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.898530][ T7395] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 194.898540][ T7395] RDX: 0000000004000080 RSI: 0000200000000440 RDI: 0000000000000006 [ 194.898548][ T7395] RBP: 00007fa7c3ae4090 R08: 0000000000000000 R09: 0000000000000000 [ 194.898558][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.898567][ T7395] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 194.898588][ T7395] [ 195.091637][ T7397] syzkaller0: entered promiscuous mode [ 195.112368][ T7397] syzkaller0: entered allmulticast mode [ 195.118552][ T7397] FAULT_INJECTION: forcing a failure. [ 195.118552][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 195.125692][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.0.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.125721][ T7397] Tainted: [L]=SOFTLOCKUP [ 195.125729][ T7397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.125739][ T7397] Call Trace: [ 195.125750][ T7397] [ 195.125759][ T7397] dump_stack_lvl+0x100/0x190 [ 195.125791][ T7397] should_fail_ex.cold+0x5/0xa [ 195.125815][ T7397] should_failslab+0xc2/0x120 [ 195.125842][ T7397] __kmalloc_cache_noprof+0x91/0x6c0 [ 195.125860][ T7397] ? tipc_mon_create+0x129/0x5d0 [ 195.125908][ T7397] tipc_mon_create+0x129/0x5d0 [ 195.125934][ T7397] tipc_enable_bearer+0xaf8/0xe60 [ 195.125965][ T7397] ? __pfx_tipc_enable_bearer+0x10/0x10 [ 195.125988][ T7397] ? lock_acquire+0x1b9/0x370 [ 195.126014][ T7397] ? __nla_parse+0x40/0x60 [ 195.126039][ T7397] __tipc_nl_bearer_enable+0x332/0x420 [ 195.126066][ T7397] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 195.126094][ T7397] ? tipc_nl_compat_bearer_enable+0x58b/0x6e0 [ 195.126121][ T7397] ? __nla_parse+0x40/0x60 [ 195.126140][ T7397] __tipc_nl_compat_doit+0x330/0x3d0 [ 195.126155][ T7397] ? kmem_cache_free+0x127/0x6b0 [ 195.126174][ T7397] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 195.126191][ T7397] ? __dev_queue_xmit+0x1bbf/0x4970 [ 195.126209][ T7397] ? netlink_deliver_tap+0xa4d/0xcc0 [ 195.126226][ T7397] ? netlink_unicast+0x62b/0x850 [ 195.126253][ T7397] ? bpf_lsm_capable+0x9/0x10 [ 195.126271][ T7397] ? security_capable+0x80/0x260 [ 195.126297][ T7397] tipc_nl_compat_doit+0x11e/0x290 [ 195.126319][ T7397] tipc_nl_compat_recv+0x908/0xc40 [ 195.126338][ T7397] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 195.126357][ T7397] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 195.126379][ T7397] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 195.126408][ T7397] ? trace_contention_end+0x126/0x160 [ 195.126441][ T7397] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 195.126469][ T7397] genl_family_rcv_msg_doit+0x214/0x300 [ 195.126492][ T7397] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.126514][ T7397] ? genl_get_cmd+0x3e7/0x760 [ 195.126540][ T7397] ? __dev_queue_xmit+0xa33/0x4970 [ 195.126557][ T7397] ? __radix_tree_lookup+0x217/0x2b0 [ 195.126584][ T7397] genl_rcv_msg+0x560/0x800 [ 195.126608][ T7397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.126629][ T7397] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 195.126657][ T7397] netlink_rcv_skb+0x159/0x420 [ 195.126675][ T7397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.126725][ T7397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.126755][ T7397] ? netlink_deliver_tap+0x1ae/0xcc0 [ 195.126777][ T7397] genl_rcv+0x28/0x40 [ 195.126795][ T7397] netlink_unicast+0x585/0x850 [ 195.126816][ T7397] ? __pfx_netlink_unicast+0x10/0x10 [ 195.126834][ T7397] ? __pfx_sock_has_perm+0x10/0x10 [ 195.126862][ T7397] netlink_sendmsg+0x8b0/0xda0 [ 195.126884][ T7397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.126905][ T7397] ? selinux_socket_sendmsg+0x198/0x2f0 [ 195.126934][ T7397] ____sys_sendmsg+0xa4d/0xbe0 [ 195.126959][ T7397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.126980][ T7397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.127017][ T7397] ___sys_sendmsg+0x190/0x1e0 [ 195.127035][ T7397] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.127052][ T7397] ? __lock_acquire+0x49f/0x1a40 [ 195.127074][ T7397] ? get_pid_task+0x106/0x250 [ 195.127116][ T7397] __sys_sendmsg+0x160/0x210 [ 195.127140][ T7397] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.127175][ T7397] do_syscall_64+0x115/0x870 [ 195.127198][ T7397] ? clear_bhb_loop+0x70/0xc0 [ 195.127220][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.127238][ T7397] RIP: 0033:0x7fa5a1b9e0d9 [ 195.127254][ T7397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.127271][ T7397] RSP: 002b:00007fa5a29eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.127289][ T7397] RAX: ffffffffffffffda RBX: 00007fa5a1e25fa0 RCX: 00007fa5a1b9e0d9 [ 195.127302][ T7397] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 195.127311][ T7397] RBP: 00007fa5a29eb090 R08: 0000000000000000 R09: 0000000000000000 [ 195.127321][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.127331][ T7397] R13: 00007fa5a1e26038 R14: 00007fa5a1e25fa0 R15: 00007ffe669c5948 [ 195.127354][ T7397] [ 195.127563][ T7397] tipc: Disabling bearer [ 195.232139][ T42] audit: type=1400 audit(1786573423.143:488): avc: denied { mounton } for pid=7400 comm="syz.3.499" path="/123/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.294995][ T7401] XFS (mtdblock0): Invalid superblock magic number [ 195.567825][ T7404] netlink: 'syz.1.498': attribute type 15 has an invalid length. [ 195.574459][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 195.798861][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 196.007644][ T42] audit: type=1400 audit(1786573423.923:489): avc: denied { execute } for pid=7417 comm="syz.1.502" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=17766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 196.065431][ T7424] syzkaller0: entered promiscuous mode [ 196.073493][ T7424] syzkaller0: entered allmulticast mode [ 196.100855][ T7424] tipc: Enabled bearer , priority 0 [ 196.129318][ T7422] tipc: Resetting bearer [ 196.163752][ T7422] tipc: Disabling bearer [ 196.260934][ T7428] openvswitch: netlink: Unknown key attributes 1 [ 196.547044][ T5858] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 196.651638][ T7443] validate_nla: 1 callbacks suppressed [ 196.651659][ T7443] netlink: 'syz.3.510': attribute type 15 has an invalid length. [ 196.687526][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 196.700746][ T5858] usb 5-1: device descriptor read/64, error -71 [ 196.719471][ T7443] netlink: 'syz.3.510': attribute type 15 has an invalid length. [ 196.726678][ T5818] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 196.752155][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 196.763319][ T5818] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 196.766718][ T5818] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 196.807165][ T5818] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 196.994355][ T5858] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 197.002061][ T7454] overlayfs: failed to resolve './file1': -2 [ 197.135542][ T5858] usb 5-1: device descriptor read/64, error -71 [ 197.242405][ T5858] usb usb5-port1: attempt power cycle [ 197.538109][ T42] audit: type=1400 audit(1786573425.453:490): avc: denied { search } for pid=7471 comm="syz.1.523" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 197.632660][ T5858] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.683797][ T5858] usb 5-1: device descriptor read/8, error -71 [ 197.922981][ T5858] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 197.944629][ T5858] usb 5-1: device descriptor read/8, error -71 [ 198.125823][ T5858] usb usb5-port1: unable to enumerate USB device [ 198.302369][ T7487] overlayfs: failed to resolve './file1': -2 [ 198.682283][ T7483] syz.1.527 (7483) used greatest stack depth: 19120 bytes left [ 198.810848][ T7497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7497 comm=syz.1.532 [ 199.654726][ T7514] overlayfs: failed to resolve './file1': -2 [ 200.291731][ T7527] jffs2: notice: (7527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 200.317085][ T42] audit: type=1400 audit(1786573428.223:491): avc: denied { write } for pid=7526 comm="syz.2.540" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.635945][ T7540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.640701][ T7540] IPv6: NLM_F_CREATE should be set when creating new route [ 200.646513][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 200.944715][ T7547] overlayfs: failed to resolve './file0': -2 [ 201.180579][ T7554] nbd: couldn't find a device at index -2145452028 [ 201.676221][ T7565] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.679054][ T42] audit: type=1400 audit(1786573429.583:492): avc: denied { append } for pid=7564 comm="syz.1.552" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.701574][ T7565] netlink: 392 bytes leftover after parsing attributes in process `syz.1.552'. [ 201.701630][ T7565] netlink: 768 bytes leftover after parsing attributes in process `syz.1.552'. [ 201.776915][ T62] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 201.932045][ T62] usb 7-1: device descriptor read/64, error -71 [ 201.939128][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 201.975763][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 201.994307][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 202.000077][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'. [ 202.043262][ T7575] overlayfs: failed to resolve './file0': -2 [ 202.251195][ T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 202.271218][ T42] audit: type=1400 audit(1786573430.173:493): avc: denied { append } for pid=7579 comm="syz.0.557" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.364666][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 202.371416][ T42] audit: type=1400 audit(1786573430.283:494): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 202.372821][ T7584] BUG: unable to handle page fault for address: ffffffffa5c36e30 [ 202.404800][ T7584] #PF: supervisor read access in kernel mode [ 202.410626][ T42] audit: type=1400 audit(1786573430.283:495): avc: denied { connect } for pid=7583 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.412765][ T7584] #PF: error_code(0x0000) - not-present page [ 202.412788][ T7584] PGD e997067 P4D e997067 PUD e998063 PMD 0 [ 202.412819][ T7584] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 202.412870][ T7584] CPU: 0 UID: 0 PID: 7584 Comm: syz.1.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.412893][ T7584] Tainted: [L]=SOFTLOCKUP [ 202.412900][ T7584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.412912][ T7584] RIP: 0010:__lock_acquire+0x4b6/0x1a40 [ 202.412989][ T7584] Code: 03 00 00 ba 08 00 00 00 48 89 de 48 89 ef e8 f1 ee ff ff 85 c0 0f 84 e9 fe ff ff 44 8b 1d 62 c7 8c 19 45 85 db 75 11 4d 63 e4 <4c> 0f a3 25 32 1b 84 14 0f 83 69 0b 00 00 48 8b b5 90 0b 00 00 45 [ 202.413006][ T7584] RSP: 0018:ffffc900213ef848 EFLAGS: 00010046 [ 202.413022][ T7584] RAX: 0000000000000001 RBX: ffff8880285b30e0 RCX: 0000000000000100 [ 202.413034][ T7584] RDX: 0000000000000000 RSI: ffff8880285b30e0 RDI: ffff8880285b2540 [ 202.413046][ T7584] RBP: ffff8880285b2540 R08: 0000000000000001 R09: 0000000000000003 [ 202.413057][ T7584] R10: 0000000000000000 R11: 0000000000000000 R12: 000000007acb22ae [ 202.413068][ T7584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.413080][ T7584] FS: 00007fa7c3ae46c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 202.413116][ T7584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.413129][ T7584] CR2: ffffffffa5c36e30 CR3: 0000000033bdc000 CR4: 0000000000352ef0 [ 202.413141][ T7584] Call Trace: [ 202.413147][ T7584] [ 202.413159][ T7584] lock_acquire+0x1b9/0x370 [ 202.413179][ T7584] ? gadget_dev_open+0x44/0x1b0 [ 202.413233][ T7584] ? _raw_spin_lock_irq+0x45/0x50 [ 202.413277][ T7584] _raw_spin_lock_irq+0x36/0x50 [ 202.413295][ T7584] ? gadget_dev_open+0x44/0x1b0 [ 202.413317][ T7584] gadget_dev_open+0x44/0x1b0 [ 202.413341][ T7584] do_dentry_open+0x6ab/0x14d0 [ 202.413367][ T7584] ? __pfx_gadget_dev_open+0x10/0x10 [ 202.413392][ T7584] vfs_open+0x82/0x3f0 [ 202.413420][ T7584] path_openat+0x2873/0x4280 [ 202.413443][ T7584] ? __pfx_path_openat+0x10/0x10 [ 202.413464][ T7584] do_file_open+0x20e/0x430 [ 202.413484][ T7584] ? __pfx_do_file_open+0x10/0x10 [ 202.413507][ T7584] ? alloc_fd+0x471/0x7a0 [ 202.413527][ T7584] ? do_getname+0x191/0x390 [ 202.413549][ T7584] do_sys_openat2+0x10f/0x1e0 [ 202.413570][ T7584] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.413595][ T7584] __x64_sys_openat+0x12d/0x210 [ 202.413616][ T7584] ? __pfx___x64_sys_openat+0x10/0x10 [ 202.413641][ T7584] do_syscall_64+0x115/0x870 [ 202.413665][ T7584] ? clear_bhb_loop+0x70/0xc0 [ 202.413687][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.413705][ T7584] RIP: 0033:0x7fa7c2b9e0d9 [ 202.413720][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.413737][ T7584] RSP: 002b:00007fa7c3ae4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.413754][ T7584] RAX: ffffffffffffffda RBX: 00007fa7c2e25fa0 RCX: 00007fa7c2b9e0d9 [ 202.413767][ T7584] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 202.413777][ T7584] RBP: 00007fa7c2c35024 R08: 0000000000000000 R09: 0000000000000000 [ 202.413789][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.413800][ T7584] R13: 00007fa7c2e26038 R14: 00007fa7c2e25fa0 R15: 00007ffc5fbb97a8 [ 202.413816][ T7584] [ 202.413834][ T7584] Modules linked in: [ 202.413848][ T7584] CR2: ffffffffa5c36e30 [ 202.413859][ T7584] ---[ end trace 0000000000000000 ]--- [ 202.413867][ T7584] RIP: 0010:__lock_acquire+0x4b6/0x1a40 [ 202.413889][ T7584] Code: 03 00 00 ba 08 00 00 00 48 89 de 48 89 ef e8 f1 ee ff ff 85 c0 0f 84 e9 fe ff ff 44 8b 1d 62 c7 8c 19 45 85 db 75 11 4d 63 e4 <4c> 0f a3 25 32 1b 84 14 0f 83 69 0b 00 00 48 8b b5 90 0b 00 00 45 [ 202.413905][ T7584] RSP: 0018:ffffc900213ef848 EFLAGS: 00010046 [ 202.413918][ T7584] RAX: 0000000000000001 RBX: ffff8880285b30e0 RCX: 0000000000000100 [ 202.413928][ T7584] RDX: 0000000000000000 RSI: ffff8880285b30e0 RDI: ffff8880285b2540 [ 202.413939][ T7584] RBP: ffff8880285b2540 R08: 0000000000000001 R09: 0000000000000003 [ 202.413953][ T7584] R10: 0000000000000000 R11: 0000000000000000 R12: 000000007acb22ae [ 202.413963][ T7584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.413974][ T7584] FS: 00007fa7c3ae46c0(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 202.413990][ T7584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.414001][ T7584] CR2: ffffffffa5c36e30 CR3: 0000000033bdc000 CR4: 0000000000352ef0 [ 202.414014][ T7584] Kernel panic - not syncing: Fatal exception [ 202.427502][ T7584] Kernel Offset: disabled VM DIAGNOSIS: 22:23:51 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc900213ef0a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=616e75203a475542 R12=0000000000000000 R13=000000000000000a R14=ffffffff9b6ea235 R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa7c3ae46c0 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffa5c36e30 CR3=0000000033bdc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5fbb9c96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5fbb9c96 00007ffc5fbb9c9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c2c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c2c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c2c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c2c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa7c2df25f8 00007fa7c2df25c8 00007fa7c2df2600 00007fa7c2df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff88801f69ca80 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88801f69ca80 RBP=ffffc900006a0e30 RSP=ffffc900006a0d90 R8 =0000000000000000 R9 =ffffed10038fe950 R10=ffff88801c7f4a87 R11=0000000000000001 R12=0000000000000008 R13=ffff88801f69cab5 R14=ffff88801f69d4f8 R15=ffff88806a53b4c0 RIP=ffffffff81d55f30 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c420d69 CR3=0000000050955000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50e4bcb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff50e4bcb6 00007fff50e4bcbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa09b635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa09b635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa09b6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa09b635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffff88802b6e2540 RCX=ffffffff828599b2 RDX=0000000000000000 RSI=ffffffff8c400400 RDI=ffff88802b6e2a04 RBP=0000000000000000 RSP=ffffc900282af8e8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=000000000000759b R12=ffffea0001767580 R13=0000002f20500092 R14=0000000000000000 R15=00000000075c0358 RIP=ffffffff81ef6bdc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f60d5d89240 CR3=00000000604b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99c213f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99c213f6 00007ffc99c213fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5ff25f8 00007f60d5ff25c8 00007f60d5ff2600 00007f60d5ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fdd7e2 RDX=ffff88801cbdca80 RSI=ffffffff81fdd7bc RDI=ffff88801cbdca80 RBP=ffff88806a443540 RSP=ffffc90000a3f858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4886a9 R14=0000000000000001 R15=ffff88806a73c880 RIP=ffffffff81fdd7be RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c36548c CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99c213f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc99c213f6 00007ffc99c213fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f60d5e35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000