last executing test programs: 42.474569689s ago: executing program 3 (id=817): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46d2180f", @ANYBLOB="ac63f642"], 0xa78) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 42.389615023s ago: executing program 3 (id=819): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x7e, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800, 0xffffffff) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200f419d40aa60697bbe4da23444bbefd4bcfe6a04ce9ef7e97026219fe9f5e577faf86b18419e01daaa6ea8eb964f98ddc898774f98b216c598b0537c15aa6ffb15aa9d34be6e8c79a76dd5b693a28e0328a5a6620b7ff9a8a7c24080b1d", @ANYRES64, @ANYBLOB="08000100", @ANYRES16=r2, @ANYBLOB="43dd2d1cc1fc177779bc73a9dfb446e79d5835969c4ef02926c58e2881e5260b1c5bd64c900d45efc94908a8fcd3a5b0a093d5578f478819d9afc3aeb0c543c6c854ca48f73e8c65f740360afa1293f82ad4057638fa053e5051ab9416c99911e1391dcf4fb19a20861f01453d56842021143f0ea5565acdab949770d216d530fa5e9de502fa4c9342"], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) mmap(&(0x7f00000ae000/0x1000)=nil, 0x1000, 0x2, 0x20010, r1, 0xb8fff000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x5, 0x1002, 0x4160}, 0x8, 0x10008005, 0x80, 0x0, 0x1, 0x101, 0x0}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001400), 0x40000, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r5, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a00000c000000000800050031904d74a0468b9da821a0f435cb6b1eaec70179aeca7c2f1bc71a7f46c8654cb930e1064ed32e90bd618ee38f1414a2414fdce243fffea5cde8786e93d4304b4b97430af2dbc00c01c471004bd520237c21", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x18, 0x68, 0x1, 0x102003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400000000000000d20e888300", @ANYRES32=r9, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000380)}, 0xc0) close(0x3) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0xe24bb234f0c5bc8, 0x0) dup3(r4, r12, 0x80000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 42.272223755s ago: executing program 3 (id=820): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xa7a0e57946b3961) 42.270593619s ago: executing program 3 (id=821): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 42.207892061s ago: executing program 3 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)=""/124, 0x7c}], 0x2}, 0xca7f}], 0x1, 0x41, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000680)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/7, 0x7}], 0x6, &(0x7f0000000640)=""/27, 0x1b}, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB=',rfdno=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00']) 41.54530538s ago: executing program 3 (id=826): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x70, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x8, "789607675ca6"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 41.468797096s ago: executing program 32 (id=826): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x70, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x8, "789607675ca6"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 2.716660527s ago: executing program 1 (id=1462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) syz_open_dev$sg(&(0x7f0000000240), 0x6fe0ecec, 0x42081) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)=@sha1={0x1, "893298ef45d8940be2be253346c45fc53c1f6de2"}, 0x15, 0x3) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2) 2.631053691s ago: executing program 1 (id=1463): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) timer_create(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000001000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e0000", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.424792162s ago: executing program 1 (id=1464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x5}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000440)=@arm64) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x11) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x10000, 0xf, 0x81, 0x2, 0x4, "02a5e6aaa52f87540c49eb781075432e8bf74d", 0x9, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x5}) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000440)=@arm64) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x11) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x10000, 0xf, 0x81, 0x2, 0x4, "02a5e6aaa52f87540c49eb781075432e8bf74d", 0x9, 0x5}) (async) 2.043175325s ago: executing program 1 (id=1470): r0 = socket$inet6(0xa, 0x2, 0x7ff) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2.041897422s ago: executing program 1 (id=1471): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r4, 0xfff, 0x10}, 0xc) fcntl$setstatus(r2, 0x4, 0x2000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) 1.48718326s ago: executing program 0 (id=1487): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="14010000340001000000001f00000000010100800c0001"], 0x114}], 0x1}, 0x0) 1.486817057s ago: executing program 4 (id=1488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) syz_open_dev$sg(&(0x7f0000000240), 0x6fe0ecec, 0x42081) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)=@sha1={0x1, "893298ef45d8940be2be253346c45fc53c1f6de2"}, 0x15, 0x3) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2) 1.484524593s ago: executing program 0 (id=1489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 1.482030579s ago: executing program 4 (id=1490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x3, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x100, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x6, @mcast1, 0x402}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 1.337598469s ago: executing program 0 (id=1491): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002540)='/dev/bsg/0:0:0:0\x00', 0x68780, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000000000090000040"]) ioctl$BSG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000002580)) r4 = semget$private(0x0, 0x4000000009, 0x228) semop(r4, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) r5 = semget$private(0x0, 0x4000000009, 0x228) semop(r5, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r5, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semtimedop(r5, &(0x7f0000000200)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xfffb}, {0x1, 0x0, 0x2000}], 0x2) semtimedop(r4, &(0x7f0000000200)=[{0x0, 0x7, 0x1000}], 0x1, 0x0) 1.067992072s ago: executing program 1 (id=1492): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004440), 0x228400, 0x0) syz_fuse_handle_req(r0, &(0x7f000000b0c0)="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", 0x2000, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x101, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, r2, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000100)=@rnullb, r2, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@verity_on}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000001c0)={0x28, 0x4, 0x4, 0x8, 0x10001, 0xc7}) mknodat$loop(r7, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 524.38179ms ago: executing program 4 (id=1495): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbb, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x7a, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xb, "7434954373561de584"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x12, "cfa11cab1aede40b1a545202000008c2"}, {0x0, 0x10, "c600"/14}, {0x0, 0xd, "dbc2000030f96f00000086"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xa, "c8f46976e79e56c7"}]}]}}, "16"}}}}}, 0x0) 523.704136ms ago: executing program 2 (id=1496): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r1, 0x80000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, 0x0, &(0x7f0000ffa000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x2, 0xd0, 0xfffffffe, 0x1000, 0xfff, 0x3ff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x4004000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffc63, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0x6}, {0x1, 0x10}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44044}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) r9 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r9, 0x4}) write$eventfd(r9, &(0x7f0000000040)=0x3, 0x8) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000005cacf297e538cf2394226c9e8da509eb1ccb49d30e7b11d662a9d7540550f999e1eed5c5178eb6125cb3838cd2626c5a9189833148846cf84a4e9b9940ade02b9069c79121ee9d21045cc7ad9cfb1c5ccd7f7dc71f10cc1743e4371a90cf79fb3d4ca745f0e9e1121deae1bd5962b94295e5e0a1f1735ff9aa8fc03b1e0f2cfce3d0506c2e9800dfc58727631d10d9c883d54ac9b7f0074d54876a0df26413e749952ed7d14993bc4a9dd4b600d6efc3f1e0a2295c5c0b2245606fe62e789f6c1a01ee8895943614ae1c5da77378b663", @ANYRES16=r10, @ANYBLOB="010000004000ffdbdf2501000000080008007f00000108000700ac14142a05000100000000000800020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x404c080}, 0x0) 465.039502ms ago: executing program 4 (id=1497): r0 = socket(0x40000000015, 0x5, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup2(r1, r1) write$vhost_msg_v2(r2, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x5}}, 0x48) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 464.749476ms ago: executing program 4 (id=1498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) syz_open_dev$sg(&(0x7f0000000240), 0x6fe0ecec, 0x42081) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)=@sha1={0x1, "893298ef45d8940be2be253346c45fc53c1f6de2"}, 0x15, 0x3) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000000)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2) 343.376001ms ago: executing program 4 (id=1499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x58ac2700) 342.611101ms ago: executing program 2 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 342.40477ms ago: executing program 2 (id=1501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000300)="26f2a566baf80cb8591e1186ef66bafc0cec263da0da00000f35f2f23665260f090f01d1fe8600680000b9800000c00f3235001000000f30660f3a212183c4c17817b7c0ffffff", 0x47}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40}, {0x4}, {0xfffffffffffffd2c}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84000}, 0x4080) 268.705779ms ago: executing program 0 (id=1502): socket$inet6(0xa, 0x2, 0x7ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 116.699257ms ago: executing program 0 (id=1503): syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xfe, 0x1}}}}, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x279, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_io_uring_setup(0x1ed3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0xf87aaaa555b78bf8, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000000c0)=0x4, 0x4) close(r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x1000}) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280)) 116.224742ms ago: executing program 2 (id=1504): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000001540)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403af6fb020000000000000000000000000000ff02000000000000000000000000000104009078000000006097436700001100fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000133000000000000"], 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="2900ed0006000000000000000000000006000000000000000300"/41], 0x29) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r4, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)={0x114, 0x24, 0x1, 0x70bd2a, 0x25dfd3fe, {0x44}, [@nested={0x100, 0xe, 0x0, 0x1, [@nested={0xfc, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="cbe8b52bd450bb0590606f975e62abe7c2ad9bed6d0243c17221ce768223c9fa64abf616dd1ba344f55ecbbca761bbeb15e49ac5e4960b08a30fbff2cdc6ca49b001b337601bc6e5cc595dc75dc59be49f852b36e373a258fdf39a7bf84ef5470beec82b701278437d319e2b96b97278f53134e17c094474a97f0631b37404db3041e00c2c86b65edb9dc87928b649bc34c275d8ff84e0cc48931a993a61ecce275e18b2f2323eb21877b11250267ac976ccf198c5cbcaabf091cab7ce4e605de9", @generic="d5938376f408f47c06aa365b797aafe2660b18ee45e48284a3b4ef398bc2fb7185b7604d553c3361c77428"]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TCXONC(r1, 0x540a, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000001540)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCXONC(r1, 0x540a, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403af6fb020000000000000000000000000000ff02000000000000000000000000000104009078000000006097436700001100fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000133000000000000"], 0x0) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) (async) read$FUSE(r2, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="2900ed0006000000000000000000000006000000000000000300"/41], 0x29) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r4, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}]}]}, 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)={0x114, 0x24, 0x1, 0x70bd2a, 0x25dfd3fe, {0x44}, [@nested={0x100, 0xe, 0x0, 0x1, [@nested={0xfc, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="cbe8b52bd450bb0590606f975e62abe7c2ad9bed6d0243c17221ce768223c9fa64abf616dd1ba344f55ecbbca761bbeb15e49ac5e4960b08a30fbff2cdc6ca49b001b337601bc6e5cc595dc75dc59be49f852b36e373a258fdf39a7bf84ef5470beec82b701278437d319e2b96b97278f53134e17c094474a97f0631b37404db3041e00c2c86b65edb9dc87928b649bc34c275d8ff84e0cc48931a993a61ecce275e18b2f2323eb21877b11250267ac976ccf198c5cbcaabf091cab7ce4e605de9", @generic="d5938376f408f47c06aa365b797aafe2660b18ee45e48284a3b4ef398bc2fb7185b7604d553c3361c77428"]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$TCXONC(r1, 0x540a, 0x1) (async) 11.507123ms ago: executing program 2 (id=1505): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 10.855548ms ago: executing program 0 (id=1506): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x10000, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 58) 0s ago: executing program 2 (id=1507): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "06b72e2dde239a83", "6e0f1b84fa6caf6b5f4821e21a97e82abd6b94a49c5238fc7892dfde28ec6095", "6e3cebd7", "b9ed6dc3992aaa32"}, 0x38) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x10, 0xffff, 0x2, {{0x9, 0x4, 0x2, 0x15, 0x24, 0x66, 0x0, 0x8, 0x4, 0x0, @local, @local, {[@cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "5fbc4d82b5860e"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x29, 0xf, 0x1, 0x63, 0x4d, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x8, 0xf6, 0x3}}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00000d5000/0x4000)=nil, &(0x7f0000566000/0x2000)=nil, &(0x7f0000785000/0x1000)=nil, &(0x7f0000686000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000067000/0x3000)=nil, &(0x7f000068c000/0x3000)=nil, &(0x7f0000235000/0x3000)=nil, &(0x7f00002e1000/0x4000)=nil, &(0x7f000034a000/0x1000)=nil, &(0x7f0000000280)="3e9604164cc9f4f3d64b16dfe2422d3a18aa11baff8eccb84093a3e8c3c4", 0x1e, r3}, 0x68) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) kernel console output (not intermixed with test programs): T8410] could not allocate digest TFM handle cryptd(blake2b-160) [ 101.355445][ T8431] __nla_validate_parse: 15 callbacks suppressed [ 101.355460][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 101.364749][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 101.720388][ T8442] random: crng reseeded on system resumption [ 101.730833][ T8442] PM: hibernation: Image mismatch: memory size [ 102.028642][ T8467] overlayfs: conflicting options: nfs_export=on,index=off [ 102.083036][ T8473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.809'. [ 102.144310][ T8478] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.185156][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 102.188944][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 102.460733][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 102.467598][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.471090][ T8497] batadv_slave_0: entered promiscuous mode [ 102.566167][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'. [ 102.746183][ T54] usb 7-1: USB disconnect, device number 6 [ 102.782102][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 102.782120][ T40] audit: type=1400 audit(1759907443.625:5785): avc: denied { ioctl } for pid=8507 comm="syz.2.824" path="socket:[23817]" dev="sockfs" ino=23817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.787294][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 102.828187][ T40] audit: type=1400 audit(1759907443.663:5786): avc: denied { setopt } for pid=8511 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.834395][ T40] audit: type=1400 audit(1759907443.663:5787): avc: denied { read } for pid=8511 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.887538][ T40] audit: type=1400 audit(1759907443.709:5788): avc: denied { setopt } for pid=8511 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.963625][ T841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 103.125778][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.129945][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.133257][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.137648][ T841] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.141122][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.145741][ T841] usb 6-1: config 0 descriptor?? [ 103.257926][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.357626][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.406766][ T40] audit: type=1400 audit(1759907444.205:5789): avc: denied { execute } for pid=8514 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 103.415406][ T40] audit: type=1400 audit(1759907444.205:5790): avc: denied { execute_no_trans } for pid=8514 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 103.434881][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.513300][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.538433][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.543289][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.547378][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.551653][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.557716][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.589492][ T841] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 103.592961][ T841] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.606628][ T841] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 103.692646][ T12] netpci0: left allmulticast mode [ 103.694721][ T12] netpci0: left promiscuous mode [ 103.697950][ T12] bridge0: port 1(netpci0) entered disabled state [ 103.868078][ T841] usb 6-1: USB disconnect, device number 9 [ 104.202712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.208416][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.213382][ T12] bond0 (unregistering): Released all slaves [ 104.221734][ T12] bond1 (unregistering): Released all slaves [ 104.289641][ T12] bond2 (unregistering): Released all slaves [ 104.297460][ T12] bond3 (unregistering): Released all slaves [ 104.345748][ T40] audit: type=1400 audit(1759907445.084:5791): avc: denied { read write } for pid=8527 comm="syz.2.830" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.356954][ T40] audit: type=1400 audit(1759907445.084:5792): avc: denied { open } for pid=8527 comm="syz.2.830" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.397882][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 104.469897][ T40] audit: type=1400 audit(1759907445.187:5793): avc: denied { relabelfrom } for pid=8535 comm="syz.2.833" name="PPPOE" dev="sockfs" ino=22172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.470095][ T8536] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 104.491325][ T40] audit: type=1400 audit(1759907445.215:5794): avc: denied { relabelto } for pid=8535 comm="syz.2.833" name="PPPOE" dev="sockfs" ino=22172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:auditd_initrc_exec_t:s0" [ 104.575420][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.582098][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.586386][ T8515] bridge_slave_0: entered allmulticast mode [ 104.591673][ T8515] bridge_slave_0: entered promiscuous mode [ 104.603866][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.606921][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.609756][ T8515] bridge_slave_1: entered allmulticast mode [ 104.612505][ T8515] bridge_slave_1: entered promiscuous mode [ 104.660636][ T8549] random: crng reseeded on system resumption [ 104.663884][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.685392][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.788672][ T8515] team0: Port device team_slave_0 added [ 104.804963][ T8515] team0: Port device team_slave_1 added [ 104.862968][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.838'. [ 104.907526][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.910745][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.923417][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.930063][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.933184][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.944114][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.040817][ T8515] hsr_slave_0: entered promiscuous mode [ 105.044056][ T8515] hsr_slave_1: entered promiscuous mode [ 105.047427][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 105.050141][ T8515] Cannot create hsr debugfs directory [ 105.057611][ T12] hsr_slave_0: left promiscuous mode [ 105.063981][ T12] hsr_slave_1: left promiscuous mode [ 105.067060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.072789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.075620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.110926][ T12] veth1_macvtap: left promiscuous mode [ 105.113694][ T12] veth0_macvtap: left promiscuous mode [ 105.116402][ T12] veth1_vlan: left promiscuous mode [ 105.119136][ T12] veth0_vlan: left promiscuous mode [ 105.756225][ T5946] Bluetooth: hci3: command tx timeout [ 105.989622][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.055736][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.526310][ T8586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.844'. [ 106.698347][ T8600] netlink: 'syz.0.848': attribute type 4 has an invalid length. [ 106.731926][ T8603] __nla_validate_parse: 1 callbacks suppressed [ 106.731938][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 106.741047][ T8603] xfrm1: entered promiscuous mode [ 106.743005][ T8603] xfrm1: entered allmulticast mode [ 106.840894][ T8515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.855658][ T8515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.869386][ T8515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.879578][ T8515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.987587][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.006530][ T12] IPVS: stop unused estimator thread 0... [ 107.017241][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.027840][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.030303][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.038941][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.042475][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.075896][ T8515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.079924][ T8515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.218941][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.224443][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 107.331390][ T8659] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 107.445905][ T8515] veth0_vlan: entered promiscuous mode [ 107.453204][ T8515] veth1_vlan: entered promiscuous mode [ 107.493988][ T8515] veth0_macvtap: entered promiscuous mode [ 107.498809][ T8515] veth1_macvtap: entered promiscuous mode [ 107.504126][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 107.512900][ T8682] xfrm1: entered promiscuous mode [ 107.515138][ T8682] xfrm1: entered allmulticast mode [ 107.521994][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.533040][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.551651][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.556154][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.560294][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565646][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.607078][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 107.613231][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 107.665363][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.669070][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.693943][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.697325][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.775715][ T8706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=854 sclass=netlink_route_socket pid=8706 comm=syz.4.827 [ 107.780335][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=854 sclass=netlink_route_socket pid=8707 comm=syz.4.827 [ 107.835940][ T8709] netlink: 92 bytes leftover after parsing attributes in process `syz.0.880'. [ 107.980226][ T5946] Bluetooth: hci3: command tx timeout [ 108.031987][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 108.034946][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 108.100732][ T8726] program syz.4.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.106044][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 108.123247][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 108.126029][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 108.134628][ T8733] x_tables: duplicate underflow at hook 1 [ 108.138086][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 108.138100][ T40] audit: type=1400 audit(1759907448.629:5804): avc: denied { create } for pid=8732 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.140519][ T8733] overlayfs: failed to resolve './file1': -2 [ 108.146990][ T40] audit: type=1400 audit(1759907448.629:5805): avc: denied { write } for pid=8732 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.157125][ T40] audit: type=1400 audit(1759907448.629:5806): avc: denied { nlmsg_write } for pid=8732 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.158210][ T8733] overlayfs: failed to resolve './file1/file0': -2 [ 108.253845][ T8736] syzkaller1: entered promiscuous mode [ 108.256040][ T8736] syzkaller1: entered allmulticast mode [ 108.259086][ T8736] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 41 [ 108.266577][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 108.270470][ T53] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 108.273213][ T53] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.276319][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.281045][ T53] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.285863][ T53] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.291332][ T53] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.294633][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.417236][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 108.419384][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 108.514390][ T53] usb 7-1: GET_CAPABILITIES returned 0 [ 108.516316][ T53] usbtmc 7-1:16.0: can't read capabilities [ 108.730259][ T8712] tmpfs: Bad value for 'mpol' [ 108.730296][ T8711] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 108.735771][ T55] usb 7-1: USB disconnect, device number 7 [ 108.971978][ T53] libceph: connect (1)[c::]:6789 error -101 [ 108.974977][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 108.989958][ T8729] ceph: No mds server is up or the cluster is laggy [ 109.161395][ T40] audit: type=1400 audit(1759907449.584:5807): avc: denied { shutdown } for pid=8752 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.197720][ T8749] sch_tbf: burst 19872 is lower than device lo mtu (243901315) ! [ 109.202395][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 109.206271][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 109.774352][ T8779] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 109.815392][ T8779] veth3: entered promiscuous mode [ 109.898210][ T8783] sctp: [Deprecated]: syz.2.908 (pid 8783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.898210][ T8783] Use struct sctp_sack_info instead [ 109.908411][ T40] audit: type=1400 audit(1759907450.285:5808): avc: denied { bind } for pid=8782 comm="syz.2.908" lport=34342 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 109.920173][ T40] audit: type=1400 audit(1759907450.295:5809): avc: denied { getattr } for pid=8782 comm="syz.2.908" lport=34342 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 110.167014][ T8801] loop4: detected capacity change from 0 to 2560 [ 110.191079][ T8801] buffer_io_error: 28 callbacks suppressed [ 110.191104][ T8801] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 110.197975][ T8801] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 110.201720][ T8801] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 110.205137][ T8801] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 110.208294][ T8801] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 110.211444][ T8801] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 110.216366][ T8801] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 110.220068][ T8801] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 110.224429][ T8801] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 110.228741][ T8801] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 110.258312][ T8803] could not allocate digest TFM handle hmac(sha1-avx2) [ 110.457813][ T5946] Bluetooth: hci3: command tx timeout [ 110.638990][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.646124][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.652852][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.658405][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.663103][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.668397][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8836 comm=syz.4.927 [ 110.678367][ T8836] trusted_key: syz.4.927 sent an empty control message without MSG_MORE. [ 110.824214][ T8852] netlink: 'syz.0.930': attribute type 4 has an invalid length. [ 111.082206][ T8864] xfrm1: entered promiscuous mode [ 111.085024][ T8864] xfrm1: entered allmulticast mode [ 111.187336][ T40] audit: type=1400 audit(1759907451.482:5810): avc: denied { append } for pid=8871 comm="syz.4.937" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 111.197964][ T40] audit: type=1400 audit(1759907451.482:5811): avc: denied { bind } for pid=8871 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.207312][ T40] audit: type=1400 audit(1759907451.482:5812): avc: denied { watch watch_reads } for pid=8871 comm="syz.4.937" path="/11/file1" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.448631][ T8881] vlan0: entered promiscuous mode [ 111.461928][ T8881] team0: Port device vlan0 added [ 111.773997][ T40] audit: type=1400 audit(1759907452.034:5813): avc: denied { getopt } for pid=8900 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.097798][ T8924] __nla_validate_parse: 13 callbacks suppressed [ 112.097817][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 112.313346][ T8942] hpfs: Bad magic ... probably not HPFS [ 112.361289][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 112.465514][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 112.537826][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 112.601566][ T8968] tipc: Enabling of bearer rejected, already enabled [ 112.608210][ T8968] tipc: Resetting bearer [ 112.629067][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 112.673364][ T8976] FAULT_INJECTION: forcing a failure. [ 112.673364][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 112.678158][ T8976] CPU: 0 UID: 0 PID: 8976 Comm: syz.0.977 Not tainted syzkaller #0 PREEMPT(full) [ 112.678176][ T8976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.678183][ T8976] Call Trace: [ 112.678190][ T8976] [ 112.678197][ T8976] dump_stack_lvl+0x16c/0x1f0 [ 112.678252][ T8976] should_fail_ex+0x512/0x640 [ 112.678280][ T8976] ? __kmalloc_noprof+0xca/0x880 [ 112.678298][ T8976] should_failslab+0xc2/0x120 [ 112.678311][ T8976] __kmalloc_noprof+0xdd/0x880 [ 112.678326][ T8976] ? io_cache_alloc_new+0x45/0xf0 [ 112.678340][ T8976] ? io_cache_alloc_new+0x45/0xf0 [ 112.678349][ T8976] io_cache_alloc_new+0x45/0xf0 [ 112.678360][ T8976] __io_prep_rw+0x21d/0x1090 [ 112.678427][ T8976] ? find_held_lock+0x2b/0x80 [ 112.678454][ T8976] ? __pfx___io_prep_rw+0x10/0x10 [ 112.678470][ T8976] ? __io_alloc_req_refill+0x18f/0x5e0 [ 112.678491][ T8976] ? __io_alloc_req_refill+0x33a/0x5e0 [ 112.678508][ T8976] io_prep_rw+0x76/0x2c0 [ 112.678523][ T8976] ? __pfx_io_prep_rw+0x10/0x10 [ 112.678542][ T8976] io_prep_readv+0x20/0xa0 [ 112.678559][ T8976] io_submit_sqes+0x852/0x2710 [ 112.678585][ T8976] __do_sys_io_uring_enter+0xd69/0x1630 [ 112.678606][ T8976] ? __fget_files+0x20e/0x3c0 [ 112.678618][ T8976] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 112.678641][ T8976] ? fput+0x9b/0xd0 [ 112.678656][ T8976] ? ksys_write+0x1ac/0x250 [ 112.678666][ T8976] ? __pfx_ksys_write+0x10/0x10 [ 112.678682][ T8976] do_syscall_64+0xcd/0xfa0 [ 112.678704][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.678718][ T8976] RIP: 0033:0x7f7eea38eec9 [ 112.678733][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.678745][ T8976] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 112.678757][ T8976] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 112.678765][ T8976] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 112.678772][ T8976] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 112.678779][ T8976] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 112.678786][ T8976] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 112.678804][ T8976] [ 112.905863][ T841] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 113.066329][ T53] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 113.079315][ T841] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.084720][ T841] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.088728][ T841] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 113.092645][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.098723][ T841] usb 9-1: config 0 descriptor?? [ 113.104477][ T841] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 113.108106][ T841] dvb-usb: bulk message failed: -22 (3/0) [ 113.115986][ T841] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 113.120391][ T841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 113.124197][ T841] usb 9-1: media controller created [ 113.130604][ T841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.140528][ T841] dvb-usb: bulk message failed: -22 (6/0) [ 113.143630][ T841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 113.149202][ T841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input8 [ 113.158237][ T841] dvb-usb: schedule remote query interval to 150 msecs. [ 113.161318][ T841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 113.250191][ T53] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.254618][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.258428][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 113.263557][ T53] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.268371][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.275396][ T8979] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.280153][ T53] hub 7-1:1.0: bad descriptor, ignoring hub [ 113.283035][ T53] hub 7-1:1.0: probe with driver hub failed with error -5 [ 113.287653][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 113.290316][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 113.298836][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 113.302620][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 113.317159][ T841] usb 9-1: USB disconnect, device number 2 [ 113.333944][ T841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.494455][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 113.494475][ T40] audit: type=1400 audit(1759907453.643:5835): avc: denied { read write } for pid=8977 comm="syz.2.979" name="cdc-wdm0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.508096][ T40] audit: type=1400 audit(1759907453.643:5836): avc: denied { open } for pid=8977 comm="syz.2.979" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.784013][ T40] audit: type=1400 audit(1759907453.915:5837): avc: denied { ioctl } for pid=8985 comm="syz.0.981" path="socket:[25402]" dev="sockfs" ino=25402 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.793257][ T40] audit: type=1400 audit(1759907453.915:5838): avc: denied { accept } for pid=8985 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.896669][ T40] audit: type=1400 audit(1759907454.008:5839): avc: denied { create } for pid=8989 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.905438][ T40] audit: type=1400 audit(1759907454.008:5840): avc: denied { ioctl } for pid=8989 comm="syz.4.983" path="socket:[25407]" dev="sockfs" ino=25407 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.045748][ T40] audit: type=1400 audit(1759907454.148:5841): avc: denied { listen } for pid=8997 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 114.246196][ T8979] usb 7-1: reset full-speed USB device number 8 using dummy_hcd [ 114.334055][ T40] audit: type=1400 audit(1759907454.420:5842): avc: denied { append } for pid=9013 comm="syz.0.989" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 114.436923][ T8979] usb 7-1: device firmware changed [ 114.441797][ T8979] cdc_wdm 7-1:1.0: Error autopm - -16 [ 114.443006][ T841] usb 7-1: USB disconnect, device number 8 [ 114.584336][ T841] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 114.590071][ T9018] veth1_to_batadv: entered promiscuous mode [ 114.755408][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.991'. [ 114.758824][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 114.767986][ T841] usb 7-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 114.772756][ T841] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.776713][ T841] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.782173][ T841] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.786377][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.798214][ T8984] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.808210][ T841] hub 7-1:1.0: bad descriptor, ignoring hub [ 114.811780][ T841] hub 7-1:1.0: probe with driver hub failed with error -5 [ 114.815248][ T841] cdc_wdm 7-1:1.0: skipping garbage [ 114.817505][ T841] cdc_wdm 7-1:1.0: skipping garbage [ 114.819253][ T841] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 114.872947][ T5946] Bluetooth: hci2: adv larger than maximum supported [ 114.872987][ T5946] Bluetooth: hci2: Unknown advertising packet type: 0x7c [ 114.875720][ T5946] Bluetooth: hci2: Malformed LE Event: 0x0d [ 114.977912][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 115.029568][ T9050] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 115.031530][ T9049] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 115.032513][ T9050] netlink: 'syz.4.1002': attribute type 3 has an invalid length. [ 115.039334][ T9050] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1002'. [ 115.070929][ T9049] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 115.073868][ T9049] overlayfs: missing 'lowerdir' [ 115.161708][ T53] usb 7-1: USB disconnect, device number 9 [ 115.222733][ T9065] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 115.262334][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 115.453846][ T9079] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 115.456833][ T9079] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 115.516031][ T5946] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 115.518905][ T5946] Bluetooth: hci0: Injecting HCI hardware error event [ 115.521648][ T5946] Bluetooth: hci0: hardware error 0x00 [ 115.744288][ T40] audit: type=1400 audit(1759907455.739:5843): avc: denied { listen } for pid=9105 comm="syz.1.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 115.811640][ T9110] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 115.814495][ T9110] netlink: 'syz.0.1024': attribute type 3 has an invalid length. [ 115.878424][ T9117] FAULT_INJECTION: forcing a failure. [ 115.878424][ T9117] name failslab, interval 1, probability 0, space 0, times 0 [ 115.882629][ T9117] CPU: 3 UID: 0 PID: 9117 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT(full) [ 115.882644][ T9117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.882652][ T9117] Call Trace: [ 115.882656][ T9117] [ 115.882661][ T9117] dump_stack_lvl+0x16c/0x1f0 [ 115.882681][ T9117] should_fail_ex+0x512/0x640 [ 115.882698][ T9117] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 115.882718][ T9117] should_failslab+0xc2/0x120 [ 115.882731][ T9117] kmem_cache_alloc_node_noprof+0x78/0x770 [ 115.882747][ T9117] ? __alloc_skb+0x2b2/0x380 [ 115.882777][ T9117] ? __alloc_skb+0x2b2/0x380 [ 115.882816][ T9117] __alloc_skb+0x2b2/0x380 [ 115.882837][ T9117] ? __pfx___alloc_skb+0x10/0x10 [ 115.882850][ T9117] ? find_held_lock+0x2b/0x80 [ 115.882869][ T9117] alloc_skb_with_frags+0xe0/0x860 [ 115.882890][ T9117] sock_alloc_send_pskb+0x7f9/0x980 [ 115.882904][ T9117] ? avc_has_perm+0x144/0x1f0 [ 115.882918][ T9117] ? __pfx_avc_has_perm+0x10/0x10 [ 115.882933][ T9117] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 115.882950][ T9117] ? sock_has_perm+0x259/0x2f0 [ 115.882965][ T9117] ? __pfx_sock_has_perm+0x10/0x10 [ 115.882981][ T9117] hci_sock_sendmsg+0x1c7/0x25f0 [ 115.883000][ T9117] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 115.883019][ T9117] sock_write_iter+0x563/0x610 [ 115.883035][ T9117] ? __pfx_sock_write_iter+0x10/0x10 [ 115.883051][ T9117] ? bpf_lsm_file_permission+0x9/0x10 [ 115.883062][ T9117] ? security_file_permission+0x71/0x210 [ 115.883074][ T9117] ? rw_verify_area+0xcf/0x6c0 [ 115.883090][ T9117] vfs_write+0x7d0/0x11d0 [ 115.883100][ T9117] ? __pfx_sock_write_iter+0x10/0x10 [ 115.883113][ T9117] ? __pfx_vfs_write+0x10/0x10 [ 115.883131][ T9117] ? find_held_lock+0x2b/0x80 [ 115.883152][ T9117] ksys_write+0x1f8/0x250 [ 115.883161][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 115.883171][ T9117] ? fdget+0x187/0x210 [ 115.883183][ T9117] do_syscall_64+0xcd/0xfa0 [ 115.883205][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.883216][ T9117] RIP: 0033:0x7f7eea38eec9 [ 115.883226][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.883236][ T9117] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.883247][ T9117] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 115.883254][ T9117] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 115.883260][ T9117] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 115.883266][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.883272][ T9117] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 115.883286][ T9117] [ 116.167916][ T9137] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 116.170517][ T9137] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 116.233642][ T40] audit: type=1400 audit(1759907456.197:5844): avc: denied { ioctl } for pid=9144 comm="syz.4.1039" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.285762][ T55] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.444389][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 116.448753][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 116.452838][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.457195][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.460986][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.465372][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.472077][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.476728][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.562558][ T6031] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 116.604757][ T1338] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 116.701008][ T55] usb 5-1: usb_control_msg returned -32 [ 116.703385][ T55] usbtmc 5-1:16.0: can't read capabilities [ 116.723139][ T6031] usb 9-1: Using ep0 maxpacket: 32 [ 116.729128][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.733624][ T6031] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 116.738430][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.743030][ T6031] usb 9-1: config 0 descriptor?? [ 116.766806][ T1338] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 116.772253][ T1338] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.776274][ T1338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.779335][ T1338] usb 7-1: Product: syz [ 116.780992][ T1338] usb 7-1: Manufacturer: syz [ 116.782742][ T1338] usb 7-1: SerialNumber: syz [ 116.788388][ T1338] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.808304][ T54] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.872860][ T5939] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 116.877062][ T5939] Bluetooth: hci1: Injecting HCI hardware error event [ 116.881993][ T5949] Bluetooth: hci1: hardware error 0x00 [ 117.034792][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.038440][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.043517][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.047569][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.052270][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.056092][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.063282][ T55] usb 7-1: USB disconnect, device number 10 [ 117.078396][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.082524][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.171540][ T1338] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 117.186497][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.190579][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.355638][ T1338] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 117.359590][ T1338] usb 6-1: config 0 has no interface number 0 [ 117.363062][ T1338] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 117.368238][ T1338] usb 6-1: config 0 interface 214 has no altsetting 0 [ 117.374688][ T1338] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 117.378559][ T1338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.381894][ T1338] usb 6-1: Product: syz [ 117.383819][ T1338] usb 6-1: Manufacturer: syz [ 117.385991][ T1338] usb 6-1: SerialNumber: syz [ 117.391681][ T1338] usb 6-1: config 0 descriptor?? [ 117.395317][ T9155] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 117.417104][ T6031] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 117.420540][ T6031] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 117.423572][ T6031] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 117.426622][ T6031] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 117.429921][ T6031] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 117.435686][ T6031] koneplus 0003:1E7D:2D51.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 117.617953][ T9155] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 117.688847][ T6031] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 117.692381][ T6031] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 117.698300][ T6031] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 117.705004][ T6031] usb 9-1: USB disconnect, device number 3 [ 117.727323][ T5946] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 117.909022][ T54] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 117.911797][ T54] ath9k_htc: Failed to initialize the device [ 117.914307][ T55] usb 7-1: ath9k_htc: USB layer deinitialized [ 118.229883][ T55] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 118.402240][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 118.406961][ T55] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 118.410436][ T55] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 118.415323][ T55] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 118.419383][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.424961][ T55] usb 7-1: config 0 descriptor?? [ 118.430993][ T55] mos7840 7-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 118.818383][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 119.106360][ T5949] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 119.235286][ T53] usb 5-1: USB disconnect, device number 4 [ 119.405756][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 119.523381][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.566042][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 119.572042][ T10] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 119.575030][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.577773][ T10] usb 9-1: Product: syz [ 119.579269][ T10] usb 9-1: Manufacturer: syz [ 119.580875][ T10] usb 9-1: SerialNumber: syz [ 119.584152][ T10] usb 9-1: config 0 descriptor?? [ 119.588407][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 119.680896][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.685590][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.689633][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.694019][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 119.698207][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.701819][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 119.705167][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.705413][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 119.712535][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 119.717381][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.721022][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 119.725596][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 119.729593][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 119.734284][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.739614][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.743890][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.748433][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 119.752217][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.756624][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.761252][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.764917][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.768555][ T1338] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.778289][ T1338] ax88179_178a 6-1:0.214 eth6: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, e4:5a:e7:68:60:89 [ 119.785330][ T1338] usb 6-1: USB disconnect, device number 10 [ 119.788090][ T1338] ax88179_178a 6-1:0.214 eth6: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 119.880653][ T53] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.883681][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.886214][ T53] usb 5-1: Product: syz [ 119.887765][ T53] usb 5-1: Manufacturer: syz [ 119.889586][ T53] usb 5-1: SerialNumber: syz [ 119.897576][ T53] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.913422][ T5838] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.146933][ T55] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 120.151780][ T55] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 120.159057][ T55] usb 7-1: USB disconnect, device number 11 [ 120.166965][ T55] mos7840 7-1:0.0: device disconnected [ 120.451174][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 120.453835][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.455835][ T10] gspca_stk1135: Sensor write failed [ 120.457709][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.459762][ T10] gspca_stk1135: Sensor write failed [ 120.461538][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.463444][ T10] gspca_stk1135: Sensor read failed [ 120.465658][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.467721][ T10] gspca_stk1135: Sensor read failed [ 120.469393][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 120.471402][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.473524][ T10] gspca_stk1135: Sensor read failed [ 120.475376][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.477378][ T10] gspca_stk1135: Sensor read failed [ 120.479128][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.481197][ T10] gspca_stk1135: Sensor write failed [ 120.483007][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 120.485063][ T10] gspca_stk1135: Sensor write failed [ 120.487100][ T10] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 120.490733][ T10] usb 9-1: USB disconnect, device number 4 [ 120.529453][ T841] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.688551][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 120.691817][ T841] usb 6-1: descriptor type invalid, skip [ 120.693578][ T841] usb 6-1: descriptor type invalid, skip [ 120.699317][ T841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.703525][ T841] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 120.707878][ T841] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.712445][ T841] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 120.721951][ T841] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.724762][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.727314][ T841] usb 6-1: Product: syz [ 120.729004][ T841] usb 6-1: Manufacturer: syz [ 120.730782][ T841] usb 6-1: SerialNumber: syz [ 120.954462][ T841] cdc_ncm 6-1:1.0: bind() failure [ 120.959304][ T841] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 120.961609][ T841] cdc_ncm 6-1:1.1: bind() failure [ 120.965088][ T841] usb 6-1: USB disconnect, device number 11 [ 120.998772][ T55] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.064582][ T5838] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 121.068772][ T5986] usb 5-1: USB disconnect, device number 5 [ 121.075732][ T5838] ath9k_htc: Failed to initialize the device [ 121.078322][ T5986] usb 5-1: ath9k_htc: USB layer deinitialized [ 121.160731][ T55] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.165089][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.170103][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.174295][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.179820][ T55] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.183862][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.189351][ T55] usb 7-1: config 0 descriptor?? [ 121.624875][ T55] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 121.627968][ T55] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 121.631559][ T55] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 121.634705][ T55] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 121.637971][ T55] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 121.648239][ T55] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.666640][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 121.666650][ T40] audit: type=1400 audit(1759907461.285:5846): avc: denied { append } for pid=9192 comm="syz.0.1057" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.779247][ T54] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 121.899289][ T1338] usb 7-1: USB disconnect, device number 12 [ 121.951132][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 121.955277][ T54] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.959255][ T54] usb 6-1: config 0 has no interface number 0 [ 121.962304][ T54] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 121.966380][ T54] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 121.970286][ T54] usb 6-1: config 0 interface 41 has no altsetting 0 [ 121.975559][ T54] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 121.979355][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.982115][ T5986] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.982357][ T54] usb 6-1: Product: syz [ 121.987949][ T54] usb 6-1: Manufacturer: syz [ 121.990715][ T54] usb 6-1: SerialNumber: syz [ 121.996719][ T54] usb 6-1: config 0 descriptor?? [ 121.999682][ T9189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.002838][ T9189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.155162][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.160513][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.164771][ T5986] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.169681][ T5986] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.173363][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.178665][ T5986] usb 5-1: config 0 descriptor?? [ 122.296187][ T54] dm9601 6-1:0.41: probe with driver dm9601 failed with error -71 [ 122.302953][ T54] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 122.308474][ T54] usb 6-1: USB disconnect, device number 12 [ 122.628753][ T5986] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 122.783553][ T9235] tmpfs: Unknown parameter 'hug’I¥¼iUap' [ 122.902688][ T841] usb 5-1: USB disconnect, device number 6 [ 122.947443][ T40] audit: type=1400 audit(1759907462.480:5847): avc: denied { watch watch_reads } for pid=9245 comm="syz.2.1074" path="pipe:[28426]" dev="pipefs" ino=28426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.215865][ T40] audit: type=1400 audit(1759907462.732:5848): avc: denied { bind } for pid=9260 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.246301][ T40] audit: type=1400 audit(1759907462.760:5849): avc: denied { getopt } for pid=9260 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.331528][ T9266] netlink: 'syz.1.1083': attribute type 13 has an invalid length. [ 123.334839][ T9266] netlink: 'syz.1.1083': attribute type 17 has an invalid length. [ 123.487423][ T40] audit: type=1400 audit(1759907462.985:5850): avc: denied { create } for pid=9280 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 123.488531][ T9281] autofs4:pid:9281:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 123.496419][ T9282] __nla_validate_parse: 5 callbacks suppressed [ 123.496437][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1086'. [ 123.505782][ T9281] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1087'. [ 123.509779][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 123.519611][ T9281] xt_cgroup: path and classid specified [ 123.656053][ T9296] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 123.661656][ T9296] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1093'. [ 123.665807][ T9296] team0: entered promiscuous mode [ 123.668137][ T9296] team_slave_0: entered promiscuous mode [ 123.671531][ T9296] team_slave_1: entered promiscuous mode [ 123.675320][ T9296] bridge0: port 3(team0) entered blocking state [ 123.678036][ T9296] bridge0: port 3(team0) entered disabled state [ 123.680843][ T9296] team0: entered allmulticast mode [ 123.682917][ T9296] team_slave_0: entered allmulticast mode [ 123.684774][ T9296] team_slave_1: entered allmulticast mode [ 123.688212][ T9296] bridge0: port 3(team0) entered blocking state [ 123.690221][ T9296] bridge0: port 3(team0) entered forwarding state [ 123.692391][ T40] audit: type=1400 audit(1759907463.172:5851): avc: denied { read } for pid=9292 comm="syz.0.1092" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 123.703457][ T9301] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1089'. [ 123.703738][ T9300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.703817][ T40] audit: type=1400 audit(1759907463.172:5852): avc: denied { open } for pid=9292 comm="syz.0.1092" path="/265/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 123.717628][ T9300] block device autoloading is deprecated and will be removed. [ 123.722484][ T40] audit: type=1400 audit(1759907463.200:5853): avc: denied { ioctl } for pid=9292 comm="syz.0.1092" path="/265/file0/file0" dev="fuse" ino=64 ioctlcmd=0x929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 123.731844][ T9294] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 123.739230][ T40] audit: type=1400 audit(1759907463.219:5854): avc: denied { shutdown } for pid=9292 comm="syz.0.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 123.802491][ T9305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9305 comm=syz.4.1097 [ 123.808606][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 123.923289][ T9324] FAULT_INJECTION: forcing a failure. [ 123.923289][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.928835][ T9324] CPU: 1 UID: 0 PID: 9324 Comm: syz.2.1103 Not tainted syzkaller #0 PREEMPT(full) [ 123.928852][ T9324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.928860][ T9324] Call Trace: [ 123.928864][ T9324] [ 123.928869][ T9324] dump_stack_lvl+0x16c/0x1f0 [ 123.928906][ T9324] should_fail_ex+0x512/0x640 [ 123.928928][ T9324] _copy_from_user+0x2e/0xd0 [ 123.928948][ T9324] copy_msghdr_from_user+0x98/0x160 [ 123.928967][ T9324] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.928993][ T9324] ___sys_sendmsg+0xfe/0x1d0 [ 123.929012][ T9324] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.929050][ T9324] __sys_sendmsg+0x16d/0x220 [ 123.929067][ T9324] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.929096][ T9324] do_syscall_64+0xcd/0xfa0 [ 123.929115][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.929127][ T9324] RIP: 0033:0x7fce7c18eec9 [ 123.929138][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.929150][ T9324] RSP: 002b:00007fce7cfed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.929166][ T9324] RAX: ffffffffffffffda RBX: 00007fce7c3e5fa0 RCX: 00007fce7c18eec9 [ 123.929174][ T9324] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 123.929181][ T9324] RBP: 00007fce7cfed090 R08: 0000000000000000 R09: 0000000000000000 [ 123.929188][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.929194][ T9324] R13: 00007fce7c3e6038 R14: 00007fce7c3e5fa0 R15: 00007ffdb218c328 [ 123.929225][ T9324] [ 124.012873][ T9328] max out of range [ 124.012886][ T40] audit: type=1400 audit(1759907463.471:5855): avc: denied { remount } for pid=9327 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 124.084408][ T9332] FAULT_INJECTION: forcing a failure. [ 124.084408][ T9332] name failslab, interval 1, probability 0, space 0, times 0 [ 124.089209][ T9332] CPU: 1 UID: 0 PID: 9332 Comm: syz.0.1107 Not tainted syzkaller #0 PREEMPT(full) [ 124.089225][ T9332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.089232][ T9332] Call Trace: [ 124.089236][ T9332] [ 124.089240][ T9332] dump_stack_lvl+0x16c/0x1f0 [ 124.089260][ T9332] should_fail_ex+0x512/0x640 [ 124.089292][ T9332] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 124.089311][ T9332] should_failslab+0xc2/0x120 [ 124.089324][ T9332] kmem_cache_alloc_node_noprof+0x78/0x770 [ 124.089339][ T9332] ? __alloc_skb+0x2b2/0x380 [ 124.089358][ T9332] ? __alloc_skb+0x2b2/0x380 [ 124.089371][ T9332] __alloc_skb+0x2b2/0x380 [ 124.089389][ T9332] ? __pfx___alloc_skb+0x10/0x10 [ 124.089406][ T9332] ? lock_acquire+0x179/0x350 [ 124.089418][ T9332] mgmt_cmd_status+0x42/0x510 [ 124.089436][ T9332] get_connections+0x49a/0x610 [ 124.089447][ T9332] ? _raw_read_unlock+0x28/0x50 [ 124.089462][ T9332] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 124.089479][ T9332] hci_sock_sendmsg+0x1522/0x25f0 [ 124.089497][ T9332] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 124.089517][ T9332] sock_write_iter+0x563/0x610 [ 124.089529][ T9332] ? __pfx_sock_write_iter+0x10/0x10 [ 124.089546][ T9332] ? bpf_lsm_file_permission+0x9/0x10 [ 124.089557][ T9332] ? security_file_permission+0x71/0x210 [ 124.089570][ T9332] ? rw_verify_area+0xcf/0x6c0 [ 124.089587][ T9332] vfs_write+0x7d0/0x11d0 [ 124.089596][ T9332] ? __pfx_sock_write_iter+0x10/0x10 [ 124.089609][ T9332] ? __pfx_vfs_write+0x10/0x10 [ 124.089624][ T9332] ? find_held_lock+0x2b/0x80 [ 124.089648][ T9332] ksys_write+0x1f8/0x250 [ 124.089657][ T9332] ? __pfx_ksys_write+0x10/0x10 [ 124.089667][ T9332] ? fdget+0x187/0x210 [ 124.089680][ T9332] do_syscall_64+0xcd/0xfa0 [ 124.089696][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.089707][ T9332] RIP: 0033:0x7f7eea38eec9 [ 124.089717][ T9332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.089727][ T9332] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.089737][ T9332] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 124.089744][ T9332] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 124.089750][ T9332] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 124.089756][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.089762][ T9332] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 124.089777][ T9332] [ 124.237094][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'. [ 124.241759][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 124.302475][ T9344] 9pnet_virtio: no channels available for device syz [ 124.422366][ T9355] vivid-001: ================= START STATUS ================= [ 124.425765][ T9355] vivid-001: Radio HW Seek Mode: Bounded [ 124.429546][ T9355] vivid-001: Radio Programmable HW Seek: false [ 124.431914][ T9355] vivid-001: RDS Rx I/O Mode: Block I/O [ 124.434200][ T9355] vivid-001: Generate RBDS Instead of RDS: false [ 124.436880][ T9355] vivid-001: RDS Reception: true [ 124.439198][ T9355] vivid-001: RDS Program Type: 0 inactive [ 124.441249][ T9355] vivid-001: RDS PS Name: inactive [ 124.443260][ T9355] vivid-001: RDS Radio Text: inactive [ 124.445066][ T9355] vivid-001: RDS Traffic Announcement: false inactive [ 124.447268][ T9355] vivid-001: RDS Traffic Program: false inactive [ 124.449323][ T9355] vivid-001: RDS Music: false inactive [ 124.451118][ T9355] vivid-001: ================== END STATUS ================== [ 124.455844][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 124.497383][ T9360] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 124.522913][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 124.684579][ T9374] pim6reg: entered allmulticast mode [ 124.853751][ T9382] 9pnet_fd: p9_fd_create_tcp (9382): problem binding to privport [ 124.948407][ T9389] FAULT_INJECTION: forcing a failure. [ 124.948407][ T9389] name failslab, interval 1, probability 0, space 0, times 0 [ 124.955263][ T9389] CPU: 2 UID: 0 PID: 9389 Comm: syz.0.1127 Not tainted syzkaller #0 PREEMPT(full) [ 124.955282][ T9389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.955293][ T9389] Call Trace: [ 124.955296][ T9389] [ 124.955301][ T9389] dump_stack_lvl+0x16c/0x1f0 [ 124.955321][ T9389] should_fail_ex+0x512/0x640 [ 124.955338][ T9389] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 124.955357][ T9389] should_failslab+0xc2/0x120 [ 124.955370][ T9389] kmem_cache_alloc_node_noprof+0x78/0x770 [ 124.955386][ T9389] ? __alloc_skb+0x2b2/0x380 [ 124.955404][ T9389] ? __alloc_skb+0x2b2/0x380 [ 124.955440][ T9389] __alloc_skb+0x2b2/0x380 [ 124.955456][ T9389] ? __pfx___alloc_skb+0x10/0x10 [ 124.955474][ T9389] ? lock_acquire+0x179/0x350 [ 124.955486][ T9389] mgmt_cmd_status+0x42/0x510 [ 124.955503][ T9389] get_connections+0x49a/0x610 [ 124.955514][ T9389] ? _raw_read_unlock+0x28/0x50 [ 124.955530][ T9389] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 124.955547][ T9389] hci_sock_sendmsg+0x1522/0x25f0 [ 124.955566][ T9389] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 124.955586][ T9389] sock_write_iter+0x563/0x610 [ 124.955599][ T9389] ? __pfx_sock_write_iter+0x10/0x10 [ 124.955615][ T9389] ? bpf_lsm_file_permission+0x9/0x10 [ 124.955626][ T9389] ? security_file_permission+0x71/0x210 [ 124.955638][ T9389] ? rw_verify_area+0xcf/0x6c0 [ 124.955655][ T9389] vfs_write+0x7d0/0x11d0 [ 124.955665][ T9389] ? __pfx_sock_write_iter+0x10/0x10 [ 124.955678][ T9389] ? __pfx_vfs_write+0x10/0x10 [ 124.955693][ T9389] ? find_held_lock+0x2b/0x80 [ 124.955716][ T9389] ksys_write+0x1f8/0x250 [ 124.955725][ T9389] ? __pfx_ksys_write+0x10/0x10 [ 124.955739][ T9389] do_syscall_64+0xcd/0xfa0 [ 124.955756][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.955767][ T9389] RIP: 0033:0x7f7eea38eec9 [ 124.955776][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.955786][ T9389] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.955797][ T9389] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 124.955804][ T9389] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 124.955810][ T9389] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 124.955816][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.955822][ T9389] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 124.955854][ T9389] [ 125.070351][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9393 comm=syz.1.1129 [ 125.076535][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9393 comm=syz.1.1129 [ 125.354587][ T9415] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.371181][ T1338] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.533868][ T1338] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 125.537412][ T1338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.542175][ T1338] usb 5-1: config 0 descriptor?? [ 125.545538][ T1338] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 125.574244][ T1347] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 125.735785][ T1347] usb 7-1: Using ep0 maxpacket: 16 [ 125.739305][ T1347] usb 7-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 125.742361][ T1347] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 125.747193][ T1347] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.750121][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.756498][ T1347] usb 7-1: config 0 descriptor?? [ 125.763813][ T1338] gp8psk: usb in 128 operation failed. [ 125.763986][ T1347] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 125.765673][ T9396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.774017][ T9396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.001937][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 126.162118][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 126.165678][ T10] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 126.168517][ T10] usb 9-1: config 0 has no interface number 0 [ 126.169765][ T1347] usb 7-1: USB disconnect, device number 13 [ 126.171039][ T10] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 126.176573][ T10] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.179909][ T10] usb 9-1: config 0 interface 41 has no altsetting 0 [ 126.185018][ T10] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 126.188576][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.191714][ T10] usb 9-1: Product: syz [ 126.193150][ T10] usb 9-1: Manufacturer: syz [ 126.195585][ T10] usb 9-1: SerialNumber: syz [ 126.200826][ T10] usb 9-1: config 0 descriptor?? [ 126.203061][ T9431] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 126.205572][ T9431] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 126.427062][ T1338] gp8psk: FW Version = 152.150.59 (0x98963b) Build 2067/190/164 [ 126.488096][ T10] dm9601 9-1:0.41: probe with driver dm9601 failed with error -71 [ 126.491359][ T10] sr9700 9-1:0.41: probe with driver sr9700 failed with error -71 [ 126.496733][ T10] usb 9-1: USB disconnect, device number 5 [ 126.643415][ T1338] gp8psk: usb in 149 operation failed. [ 126.645546][ T1338] gp8psk: failed to get FPGA version [ 126.648590][ T1338] gp8psk: usb in 138 operation failed. [ 126.650328][ T1338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.653674][ T1338] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 126.656621][ T1338] usb 5-1: media controller created [ 126.668570][ T1338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.681079][ T1338] gp8psk_fe: Frontend attached [ 126.684262][ T1338] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 126.689068][ T1338] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 126.721666][ T1338] gp8psk: usb in 138 operation failed. [ 126.723737][ T1338] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 126.726872][ T1338] gp8psk: found Genpix USB device pID = 203 (hex) [ 126.733508][ T1338] usb 5-1: USB disconnect, device number 7 [ 126.778290][ T1338] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 127.367216][ T9467] FAULT_INJECTION: forcing a failure. [ 127.367216][ T9467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.373426][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.0.1156 Not tainted syzkaller #0 PREEMPT(full) [ 127.373447][ T9467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.373457][ T9467] Call Trace: [ 127.373461][ T9467] [ 127.373467][ T9467] dump_stack_lvl+0x16c/0x1f0 [ 127.373493][ T9467] should_fail_ex+0x512/0x640 [ 127.373519][ T9467] _copy_from_iter+0x29f/0x1720 [ 127.373545][ T9467] ? __alloc_skb+0x200/0x380 [ 127.373566][ T9467] ? __pfx__copy_from_iter+0x10/0x10 [ 127.373588][ T9467] ? netlink_autobind.isra.0+0x158/0x370 [ 127.373618][ T9467] netlink_sendmsg+0x820/0xdd0 [ 127.373635][ T9467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.373655][ T9467] ____sys_sendmsg+0xa98/0xc70 [ 127.373672][ T9467] ? copy_msghdr_from_user+0x10a/0x160 [ 127.373693][ T9467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.373717][ T9467] ___sys_sendmsg+0x134/0x1d0 [ 127.373739][ T9467] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.373783][ T9467] __sys_sendmsg+0x16d/0x220 [ 127.373805][ T9467] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.373837][ T9467] do_syscall_64+0xcd/0xfa0 [ 127.373860][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.373875][ T9467] RIP: 0033:0x7f7eea38eec9 [ 127.373887][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.373901][ T9467] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.373915][ T9467] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 127.373924][ T9467] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 127.373932][ T9467] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 127.373940][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.373949][ T9467] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 127.373968][ T9467] [ 127.447859][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.450178][ T841] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 127.507567][ T9472] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 127.544128][ T68] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 127.562014][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 127.562031][ T40] audit: type=1400 audit(1759907466.792:5865): avc: denied { getopt } for pid=9478 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.607579][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.612516][ T841] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.618916][ T841] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 127.623018][ T841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.629654][ T841] usb 9-1: config 0 descriptor?? [ 127.671816][ T9490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=9490 comm=syz.2.1165 [ 127.685598][ T9493] FAULT_INJECTION: forcing a failure. [ 127.685598][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 127.690042][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.1.1166 Not tainted syzkaller #0 PREEMPT(full) [ 127.690057][ T9493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.690064][ T9493] Call Trace: [ 127.690068][ T9493] [ 127.690073][ T9493] dump_stack_lvl+0x16c/0x1f0 [ 127.690093][ T9493] should_fail_ex+0x512/0x640 [ 127.690110][ T9493] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 127.690135][ T9493] should_failslab+0xc2/0x120 [ 127.690148][ T9493] kmem_cache_alloc_noprof+0x75/0x6e0 [ 127.690164][ T9493] ? skb_clone+0x190/0x3f0 [ 127.690183][ T9493] ? skb_clone+0x190/0x3f0 [ 127.690197][ T9493] skb_clone+0x190/0x3f0 [ 127.690213][ T9493] netlink_deliver_tap+0xabd/0xd30 [ 127.690233][ T9493] netlink_unicast+0x64c/0x870 [ 127.690245][ T9493] ? __pfx_netlink_unicast+0x10/0x10 [ 127.690267][ T9493] netlink_sendmsg+0x8c8/0xdd0 [ 127.690280][ T9493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.690295][ T9493] ____sys_sendmsg+0xa98/0xc70 [ 127.690308][ T9493] ? copy_msghdr_from_user+0x10a/0x160 [ 127.690323][ T9493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.690344][ T9493] ___sys_sendmsg+0x134/0x1d0 [ 127.690366][ T9493] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.690400][ T9493] __sys_sendmsg+0x16d/0x220 [ 127.690416][ T9493] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.690442][ T9493] do_syscall_64+0xcd/0xfa0 [ 127.690459][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.690470][ T9493] RIP: 0033:0x7f53f8b8eec9 [ 127.690480][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.690491][ T9493] RSP: 002b:00007f53f6df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.690501][ T9493] RAX: ffffffffffffffda RBX: 00007f53f8de5fa0 RCX: 00007f53f8b8eec9 [ 127.690508][ T9493] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 127.690514][ T9493] RBP: 00007f53f6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.690521][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.690527][ T9493] R13: 00007f53f8de6038 R14: 00007f53f8de5fa0 R15: 00007ffdf6c98f68 [ 127.690542][ T9493] [ 127.723110][ T5838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.724192][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.766235][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.861922][ T40] audit: type=1400 audit(1759907467.072:5866): avc: denied { append } for pid=9503 comm="syz.1.1170" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.908693][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 127.915965][ T5838] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 127.920362][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.924649][ T5838] usb 5-1: Product: syz [ 127.927758][ T5838] usb 5-1: Manufacturer: syz [ 127.929858][ T5838] usb 5-1: SerialNumber: syz [ 127.937517][ T5838] usb 5-1: config 0 descriptor?? [ 127.942749][ T5838] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 128.046900][ T9515] netlink: 'syz.1.1173': attribute type 21 has an invalid length. [ 128.050420][ T9515] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 128.055008][ T40] audit: type=1400 audit(1759907467.250:5867): avc: denied { map } for pid=9511 comm="syz.1.1173" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.062411][ T40] audit: type=1400 audit(1759907467.250:5868): avc: denied { write execute } for pid=9511 comm="syz.1.1173" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.128654][ T40] audit: type=1400 audit(1759907467.325:5869): avc: denied { unlink } for pid=9521 comm="syz.2.1177" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.228740][ T9519] XFS (nbd1): SB validate failed with error -5. [ 128.301155][ T841] hid_parser_main: 5 callbacks suppressed [ 128.301174][ T841] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 128.306036][ T841] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 128.308663][ T841] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 128.311817][ T841] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 128.315013][ T841] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 128.324405][ T841] cm6533_jd 0003:0D8C:0022.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 128.393016][ T9540] bond0: entered promiscuous mode [ 128.395070][ T9540] bond_slave_0: entered promiscuous mode [ 128.398485][ T9540] bond_slave_1: entered promiscuous mode [ 128.402645][ T9540] bond0: left promiscuous mode [ 128.404259][ T9540] bond_slave_0: left promiscuous mode [ 128.406157][ T9540] bond_slave_1: left promiscuous mode [ 128.571106][ T1347] usb 9-1: USB disconnect, device number 6 [ 128.810139][ T5838] gspca_stk1135: reg_w 0x5 err -71 [ 128.813511][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.816215][ T5838] gspca_stk1135: Sensor write failed [ 128.818480][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.821403][ T5838] gspca_stk1135: Sensor write failed [ 128.824066][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.826708][ T5838] gspca_stk1135: Sensor read failed [ 128.829395][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.833074][ T5838] gspca_stk1135: Sensor read failed [ 128.835806][ T5838] gspca_stk1135: Detected sensor type unknown (0x0) [ 128.838454][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.841124][ T5838] gspca_stk1135: Sensor read failed [ 128.843255][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.846240][ T5838] gspca_stk1135: Sensor read failed [ 128.848550][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.851226][ T5838] gspca_stk1135: Sensor write failed [ 128.853927][ T5838] gspca_stk1135: serial bus timeout: status=0x00 [ 128.857487][ T5838] gspca_stk1135: Sensor write failed [ 128.859684][ T5838] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 128.865600][ T5838] usb 5-1: USB disconnect, device number 8 [ 129.059008][ T9545] __nla_validate_parse: 11 callbacks suppressed [ 129.059022][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'. [ 129.065465][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 129.237203][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 129.281169][ T9559] FAULT_INJECTION: forcing a failure. [ 129.281169][ T9559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.287204][ T9559] CPU: 0 UID: 0 PID: 9559 Comm: syz.2.1188 Not tainted syzkaller #0 PREEMPT(full) [ 129.287229][ T9559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.287239][ T9559] Call Trace: [ 129.287245][ T9559] [ 129.287252][ T9559] dump_stack_lvl+0x16c/0x1f0 [ 129.287283][ T9559] should_fail_ex+0x512/0x640 [ 129.287312][ T9559] _copy_to_user+0x32/0xd0 [ 129.287331][ T9559] simple_read_from_buffer+0xcb/0x170 [ 129.287349][ T9559] proc_fail_nth_read+0x197/0x240 [ 129.287362][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.287375][ T9559] ? rw_verify_area+0xcf/0x6c0 [ 129.287390][ T9559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.287402][ T9559] vfs_read+0x1e4/0xcf0 [ 129.287421][ T9559] ? __pfx___mutex_lock+0x10/0x10 [ 129.287437][ T9559] ? __pfx_vfs_read+0x10/0x10 [ 129.287457][ T9559] ? __fget_files+0x20e/0x3c0 [ 129.287472][ T9559] ksys_read+0x12a/0x250 [ 129.287481][ T9559] ? __pfx_ksys_read+0x10/0x10 [ 129.287494][ T9559] do_syscall_64+0xcd/0xfa0 [ 129.287511][ T9559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.287522][ T9559] RIP: 0033:0x7fce7c18d8dc [ 129.287532][ T9559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.287543][ T9559] RSP: 002b:00007fce7cfed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.287553][ T9559] RAX: ffffffffffffffda RBX: 00007fce7c3e5fa0 RCX: 00007fce7c18d8dc [ 129.287560][ T9559] RDX: 000000000000000f RSI: 00007fce7cfed0a0 RDI: 0000000000000005 [ 129.287566][ T9559] RBP: 00007fce7cfed090 R08: 0000000000000000 R09: 0000000000000000 [ 129.287572][ T9559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.287578][ T9559] R13: 00007fce7c3e6038 R14: 00007fce7c3e5fa0 R15: 00007ffdb218c328 [ 129.287593][ T9559] [ 129.361043][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.442075][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1191'. [ 129.445280][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 129.561463][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 129.667502][ T40] audit: type=1400 audit(1759907468.766:5870): avc: denied { ioctl } for pid=9584 comm="syz.0.1198" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 129.732849][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 129.798912][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 129.802850][ T9595] nbd: illegal input index 1879048192 [ 129.879626][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1203'. [ 129.884409][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 129.915869][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.919778][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.925262][ T54] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 129.928516][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.935480][ T54] usb 6-1: config 0 descriptor?? [ 129.990528][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'. [ 130.167291][ T9615] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 130.198580][ T9615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.234354][ T9615] bond1: (slave veth5): Enslaving as an active interface with a down link [ 130.244907][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.248366][ T9615] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 130.295095][ T40] audit: type=1400 audit(1759907469.355:5871): avc: denied { setattr } for pid=9614 comm="syz.2.1209" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.400860][ T55] hid-generic 0362:07FF:7FFFFFFF.000A: item fetching failed at offset 0/2 [ 130.404452][ T55] hid-generic 0362:07FF:7FFFFFFF.000A: probe with driver hid-generic failed with error -22 [ 130.684832][ T54] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 130.687686][ T54] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 130.690131][ T54] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 130.692447][ T54] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 130.893107][ T40] audit: type=1400 audit(1759907469.916:5872): avc: denied { ioctl } for pid=9650 comm="syz.2.1220" path="socket:[32082]" dev="sockfs" ino=32082 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.117963][ T54] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 131.125984][ T54] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 131.131753][ T54] usb 6-1: USB disconnect, device number 13 [ 131.166583][ T9653] fido_id[9653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 131.242791][ T40] audit: type=1400 audit(1759907470.243:5873): avc: denied { bind } for pid=9665 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.253481][ T40] audit: type=1400 audit(1759907470.253:5874): avc: denied { ioctl } for pid=9665 comm="syz.0.1225" path="pid:[4026532875]" dev="nsfs" ino=4026532875 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.817535][ T6642] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 131.990149][ T6642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.994200][ T6642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.997817][ T6642] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 132.001095][ T6642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.005174][ T6642] usb 7-1: config 0 descriptor?? [ 132.432259][ T9736] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 132.668871][ T6642] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 132.883979][ T9762] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 132.891471][ T9762] dlm: no local IP address has been set [ 132.895303][ T9762] dlm: cannot start dlm midcomms -107 [ 132.900117][ T9762] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 132.942150][ T5838] usb 7-1: USB disconnect, device number 14 [ 133.044604][ T9767] binder: 9766:9767 ioctl 3b85 200000000000 returned -22 [ 133.240686][ T9779] FAULT_INJECTION: forcing a failure. [ 133.240686][ T9779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.244790][ T9779] CPU: 0 UID: 0 PID: 9779 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 133.244805][ T9779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.244812][ T9779] Call Trace: [ 133.244817][ T9779] [ 133.244822][ T9779] dump_stack_lvl+0x16c/0x1f0 [ 133.244860][ T9779] should_fail_ex+0x512/0x640 [ 133.244886][ T9779] _copy_to_user+0x32/0xd0 [ 133.244905][ T9779] simple_read_from_buffer+0xcb/0x170 [ 133.244923][ T9779] proc_fail_nth_read+0x197/0x240 [ 133.244936][ T9779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.244949][ T9779] ? rw_verify_area+0xcf/0x6c0 [ 133.244963][ T9779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.244975][ T9779] vfs_read+0x1e4/0xcf0 [ 133.244994][ T9779] ? __pfx___mutex_lock+0x10/0x10 [ 133.245010][ T9779] ? __pfx_vfs_read+0x10/0x10 [ 133.245030][ T9779] ? __fget_files+0x20e/0x3c0 [ 133.245045][ T9779] ksys_read+0x12a/0x250 [ 133.245054][ T9779] ? __pfx_ksys_read+0x10/0x10 [ 133.245073][ T9779] do_syscall_64+0xcd/0xfa0 [ 133.245090][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.245101][ T9779] RIP: 0033:0x7ff601f8d8dc [ 133.245111][ T9779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.245122][ T9779] RSP: 002b:00007ff602e42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.245133][ T9779] RAX: ffffffffffffffda RBX: 00007ff6021e5fa0 RCX: 00007ff601f8d8dc [ 133.245140][ T9779] RDX: 000000000000000f RSI: 00007ff602e420a0 RDI: 0000000000000005 [ 133.245146][ T9779] RBP: 00007ff602e42090 R08: 0000000000000000 R09: 0000000000000000 [ 133.245152][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.245158][ T9779] R13: 00007ff6021e6038 R14: 00007ff6021e5fa0 R15: 00007fff69ba10c8 [ 133.245181][ T9779] [ 133.515908][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 133.515921][ T40] audit: type=1400 audit(1759907472.357:5877): avc: denied { mounton } for pid=9798 comm="syz.4.1272" path="/file0" dev="ramfs" ino=33013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 133.530519][ T9799] tipc: Started in network mode [ 133.532179][ T9799] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 133.537480][ T9799] tipc: Enabled bearer , priority 10 [ 133.541600][ T40] audit: type=1400 audit(1759907472.395:5878): avc: denied { remount } for pid=9798 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.632597][ T40] audit: type=1400 audit(1759907472.470:5879): avc: denied { append } for pid=9806 comm="syz.2.1276" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 133.651173][ T40] audit: type=1400 audit(1759907472.488:5880): avc: denied { setattr } for pid=9806 comm="syz.2.1276" name="/" dev="9p" ino=71827739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.654503][ T9807] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 133.673423][ T40] audit: type=1400 audit(1759907472.507:5881): avc: denied { getattr } for pid=9806 comm="syz.2.1276" name="/" dev="9p" ino=71827739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.674190][ T9807] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.700082][ T40] audit: type=1400 audit(1759907472.545:5882): avc: denied { link } for pid=9806 comm="syz.2.1276" name="file1" dev="9p" ino=71827743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.710265][ T40] audit: type=1400 audit(1759907472.545:5883): avc: denied { read } for pid=9806 comm="syz.2.1276" name="bus" dev="9p" ino=71827917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.718545][ T40] audit: type=1400 audit(1759907472.545:5884): avc: denied { read write } for pid=9806 comm="syz.2.1276" name="bus" dev="overlay" ino=71827917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.729290][ T40] audit: type=1400 audit(1759907472.545:5885): avc: denied { open } for pid=9806 comm="syz.2.1276" path="/303/bus/bus" dev="overlay" ino=71827917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.739322][ T40] audit: type=1400 audit(1759907472.554:5886): avc: denied { setattr } for pid=9806 comm="syz.2.1276" name="#1635" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.615218][ T9882] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.620254][ T9882] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 134.670207][ T9887] vxlan0: entered promiscuous mode [ 134.673543][ T9887] vxlan0: entered allmulticast mode [ 134.676924][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.680955][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.685152][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.688908][ T46] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.725379][ T1347] tipc: Node number set to 4269801488 [ 134.746136][ T9889] __nla_validate_parse: 24 callbacks suppressed [ 134.746150][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 134.758025][ T6031] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 134.760361][ T9889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=9889 comm=syz.0.1308 [ 134.867376][ T9898] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 134.870153][ T9898] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1311'. [ 134.921736][ T6031] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.925868][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 134.931000][ T6031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.934459][ T6031] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.938977][ T6031] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.943590][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.943940][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 134.949353][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 134.950312][ T6031] usb 9-1: config 0 descriptor?? [ 135.313771][ T53] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.393405][ T6031] hid_parser_main: 5 callbacks suppressed [ 135.393417][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.399159][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.402190][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.405177][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.407604][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.410183][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.412495][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.414911][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.417396][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.420209][ T6031] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 135.439427][ T6031] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.450293][ T9926] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 135.453342][ T9926] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1321'. [ 135.492368][ T53] usb 5-1: config index 0 descriptor too short (expected 8228, got 36) [ 135.496548][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.500595][ T53] usb 5-1: config 0 has no interfaces? [ 135.502370][ T53] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.505244][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.510448][ T53] usb 5-1: config 0 descriptor?? [ 135.615974][ T6031] usb 9-1: USB disconnect, device number 7 [ 135.730453][ T53] usb 5-1: USB disconnect, device number 9 [ 135.935236][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1324'. [ 135.938992][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 136.053285][ T9945] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 136.185796][ T9952] FAULT_INJECTION: forcing a failure. [ 136.185796][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 136.191788][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.4.1330 Not tainted syzkaller #0 PREEMPT(full) [ 136.191810][ T9952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.191819][ T9952] Call Trace: [ 136.191824][ T9952] [ 136.191829][ T9952] dump_stack_lvl+0x16c/0x1f0 [ 136.191857][ T9952] should_fail_ex+0x512/0x640 [ 136.191883][ T9952] should_failslab+0xc2/0x120 [ 136.191901][ T9952] __kmalloc_noprof+0xdd/0x880 [ 136.191923][ T9952] ? io_alloc_ocqe+0xd2/0x660 [ 136.191943][ T9952] ? io_alloc_ocqe+0xd2/0x660 [ 136.191957][ T9952] io_alloc_ocqe+0xd2/0x660 [ 136.191976][ T9952] __io_submit_flush_completions+0x1049/0x1980 [ 136.192000][ T9952] ? io_issue_sqe+0xb6/0x1000 [ 136.192023][ T9952] io_submit_sqes+0xa0e/0x2710 [ 136.192054][ T9952] __do_sys_io_uring_enter+0xd69/0x1630 [ 136.192078][ T9952] ? __fget_files+0x20e/0x3c0 [ 136.192092][ T9952] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 136.192116][ T9952] ? fput+0x9b/0xd0 [ 136.192133][ T9952] ? ksys_write+0x1ac/0x250 [ 136.192146][ T9952] ? __pfx_ksys_write+0x10/0x10 [ 136.192165][ T9952] do_syscall_64+0xcd/0xfa0 [ 136.192188][ T9952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.192204][ T9952] RIP: 0033:0x7ff601f8eec9 [ 136.192217][ T9952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.192239][ T9952] RSP: 002b:00007ff602e42038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 136.192254][ T9952] RAX: ffffffffffffffda RBX: 00007ff6021e5fa0 RCX: 00007ff601f8eec9 [ 136.192263][ T9952] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 136.192272][ T9952] RBP: 00007ff602e42090 R08: 0000000000000000 R09: 0000000000000000 [ 136.192280][ T9952] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 136.192289][ T9952] R13: 00007ff6021e6038 R14: 00007ff6021e5fa0 R15: 00007fff69ba10c8 [ 136.192327][ T9952] [ 136.348713][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'. [ 136.354013][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 136.463336][ T9980] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1337'. [ 136.545676][ T9988] Invalid source name [ 136.547048][ T9988] UBIFS error (pid: 9988): cannot open "./file0", error -22 [ 136.640246][ T9998] tipc: Invalid UDP bearer configuration [ 136.643273][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 136.776314][T10009] binder: 10002:10009 ioctl 4008af30 200000000140 returned -22 [ 136.812169][T10014] program syz.0.1348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.910256][ T1193] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8 [ 137.184206][T10038] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 137.187265][T10038] netlink: 'syz.2.1356': attribute type 2 has an invalid length. [ 137.237647][ T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 137.242361][T10042] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 137.412055][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.416307][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.421060][ T10] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 137.424026][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.428707][ T10] usb 9-1: config 0 descriptor?? [ 137.501355][T10061] kvm: emulating exchange as write [ 137.668512][T10078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.680022][T10080] FAULT_INJECTION: forcing a failure. [ 137.680022][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 137.684194][T10080] CPU: 3 UID: 0 PID: 10080 Comm: syz.2.1374 Not tainted syzkaller #0 PREEMPT(full) [ 137.684211][T10080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.684219][T10080] Call Trace: [ 137.684223][T10080] [ 137.684228][T10080] dump_stack_lvl+0x16c/0x1f0 [ 137.684273][T10080] should_fail_ex+0x512/0x640 [ 137.684304][T10080] should_failslab+0xc2/0x120 [ 137.684318][T10080] __kmalloc_noprof+0xdd/0x880 [ 137.684334][T10080] ? io_alloc_ocqe+0xd2/0x660 [ 137.684350][T10080] ? io_alloc_ocqe+0xd2/0x660 [ 137.684374][T10080] io_alloc_ocqe+0xd2/0x660 [ 137.684390][T10080] __io_submit_flush_completions+0x1049/0x1980 [ 137.684411][T10080] ? io_issue_sqe+0xb6/0x1000 [ 137.684429][T10080] io_submit_sqes+0xa0e/0x2710 [ 137.684462][T10080] __do_sys_io_uring_enter+0xd69/0x1630 [ 137.684493][T10080] ? __fget_files+0x20e/0x3c0 [ 137.684511][T10080] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 137.684542][T10080] ? fput+0x9b/0xd0 [ 137.684561][T10080] ? ksys_write+0x1ac/0x250 [ 137.684571][T10080] ? __pfx_ksys_write+0x10/0x10 [ 137.684586][T10080] do_syscall_64+0xcd/0xfa0 [ 137.684605][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.684617][T10080] RIP: 0033:0x7fce7c18eec9 [ 137.684649][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.684669][T10080] RSP: 002b:00007fce7cfed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 137.684687][T10080] RAX: ffffffffffffffda RBX: 00007fce7c3e5fa0 RCX: 00007fce7c18eec9 [ 137.684701][T10080] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 137.684712][T10080] RBP: 00007fce7cfed090 R08: 0000000000000000 R09: 0000000000000000 [ 137.684721][T10080] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 137.684731][T10080] R13: 00007fce7c3e6038 R14: 00007fce7c3e5fa0 R15: 00007ffdb218c328 [ 137.684752][T10080] [ 137.940371][T10087] xt_bpf: check failed: parse error [ 137.947954][T10087] xt_bpf: check failed: parse error [ 137.951916][T10087] xt_bpf: check failed: parse error [ 137.957847][T10087] xt_bpf: check failed: parse error [ 137.961429][T10087] xt_bpf: check failed: parse error [ 137.964066][T10087] xt_bpf: check failed: parse error [ 137.967153][T10087] xt_bpf: check failed: parse error [ 137.970107][T10087] xt_bpf: check failed: parse error [ 137.973270][T10087] xt_bpf: check failed: parse error [ 137.979147][T10087] xt_bpf: check failed: parse error [ 138.104230][ T10] cm6533_jd 0003:0D8C:0022.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 138.116022][T10117] FAULT_INJECTION: forcing a failure. [ 138.116022][T10117] name failslab, interval 1, probability 0, space 0, times 0 [ 138.121606][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.2.1385 Not tainted syzkaller #0 PREEMPT(full) [ 138.121630][T10117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.121641][T10117] Call Trace: [ 138.121648][T10117] [ 138.121655][T10117] dump_stack_lvl+0x16c/0x1f0 [ 138.121686][T10117] should_fail_ex+0x512/0x640 [ 138.121716][T10117] should_failslab+0xc2/0x120 [ 138.121736][T10117] __kmalloc_noprof+0xdd/0x880 [ 138.121761][T10117] ? io_alloc_ocqe+0xd2/0x660 [ 138.121799][T10117] ? io_alloc_ocqe+0xd2/0x660 [ 138.121817][T10117] io_alloc_ocqe+0xd2/0x660 [ 138.121842][T10117] __io_submit_flush_completions+0x1049/0x1980 [ 138.121869][T10117] ? io_issue_sqe+0xb6/0x1000 [ 138.121898][T10117] io_submit_sqes+0xa0e/0x2710 [ 138.121940][T10117] __do_sys_io_uring_enter+0xd69/0x1630 [ 138.121970][T10117] ? __fget_files+0x20e/0x3c0 [ 138.121987][T10117] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 138.122019][T10117] ? fput+0x9b/0xd0 [ 138.122040][T10117] ? ksys_write+0x1ac/0x250 [ 138.122056][T10117] ? __pfx_ksys_write+0x10/0x10 [ 138.122080][T10117] do_syscall_64+0xcd/0xfa0 [ 138.122107][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.122125][T10117] RIP: 0033:0x7fce7c18eec9 [ 138.122139][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.122157][T10117] RSP: 002b:00007fce7cfed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.122175][T10117] RAX: ffffffffffffffda RBX: 00007fce7c3e5fa0 RCX: 00007fce7c18eec9 [ 138.122186][T10117] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 138.122196][T10117] RBP: 00007fce7cfed090 R08: 0000000000000000 R09: 0000000000000000 [ 138.122206][T10117] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 138.122216][T10117] R13: 00007fce7c3e6038 R14: 00007fce7c3e5fa0 R15: 00007ffdb218c328 [ 138.122243][T10117] [ 138.206936][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.304266][ T10] usb 9-1: USB disconnect, device number 8 [ 138.333817][T10126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.613384][T10148] FAULT_INJECTION: forcing a failure. [ 138.613384][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 138.622836][T10148] CPU: 3 UID: 0 PID: 10148 Comm: syz.0.1400 Not tainted syzkaller #0 PREEMPT(full) [ 138.622852][T10148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.622859][T10148] Call Trace: [ 138.622863][T10148] [ 138.622867][T10148] dump_stack_lvl+0x16c/0x1f0 [ 138.622888][T10148] should_fail_ex+0x512/0x640 [ 138.622904][T10148] ? __kmalloc_noprof+0xca/0x880 [ 138.622921][T10148] should_failslab+0xc2/0x120 [ 138.622933][T10148] __kmalloc_noprof+0xdd/0x880 [ 138.622947][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 138.622983][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 138.622995][T10148] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 138.623008][T10148] ? cred_has_capability.isra.0+0x190/0x310 [ 138.623022][T10148] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 138.623034][T10148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.623052][T10148] ? bpf_lsm_capable+0x9/0x10 [ 138.623064][T10148] ? security_capable+0x7e/0x260 [ 138.623082][T10148] genl_rcv_msg+0x55c/0x800 [ 138.623095][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.623107][T10148] ? __pfx_ioam6_genl_addns+0x10/0x10 [ 138.623120][T10148] ? __lock_acquire+0x62e/0x1ce0 [ 138.623141][T10148] netlink_rcv_skb+0x158/0x420 [ 138.623151][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.623163][T10148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.623178][T10148] ? netlink_deliver_tap+0x1ae/0xd30 [ 138.623197][T10148] genl_rcv+0x28/0x40 [ 138.623206][T10148] netlink_unicast+0x5a7/0x870 [ 138.623218][T10148] ? __pfx_netlink_unicast+0x10/0x10 [ 138.623243][T10148] netlink_sendmsg+0x8c8/0xdd0 [ 138.623255][T10148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.623270][T10148] ____sys_sendmsg+0xa98/0xc70 [ 138.623283][T10148] ? copy_msghdr_from_user+0x10a/0x160 [ 138.623298][T10148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.623317][T10148] ___sys_sendmsg+0x134/0x1d0 [ 138.623336][T10148] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.623393][T10148] __sys_sendmsg+0x16d/0x220 [ 138.623420][T10148] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.623462][T10148] do_syscall_64+0xcd/0xfa0 [ 138.623543][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.623571][T10148] RIP: 0033:0x7f7eea38eec9 [ 138.623586][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.623604][T10148] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.623621][T10148] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 138.623632][T10148] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 138.623642][T10148] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 138.623652][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.623662][T10148] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 138.623688][T10148] [ 138.899349][T10156] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 138.938333][T10158] random: crng reseeded on system resumption [ 138.941799][T10161] FAULT_INJECTION: forcing a failure. [ 138.941799][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 138.946359][T10161] CPU: 3 UID: 0 PID: 10161 Comm: syz.0.1407 Not tainted syzkaller #0 PREEMPT(full) [ 138.946377][T10161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.946386][T10161] Call Trace: [ 138.946391][T10161] [ 138.946396][T10161] dump_stack_lvl+0x16c/0x1f0 [ 138.946419][T10161] should_fail_ex+0x512/0x640 [ 138.946443][T10161] should_failslab+0xc2/0x120 [ 138.946457][T10161] __kmalloc_noprof+0xdd/0x880 [ 138.946475][T10161] ? io_alloc_ocqe+0xd2/0x660 [ 138.946491][T10161] ? io_alloc_ocqe+0xd2/0x660 [ 138.946503][T10161] io_alloc_ocqe+0xd2/0x660 [ 138.946518][T10161] __io_submit_flush_completions+0x1049/0x1980 [ 138.946537][T10161] ? io_issue_sqe+0xb6/0x1000 [ 138.946555][T10161] io_submit_sqes+0xa0e/0x2710 [ 138.946614][T10161] __do_sys_io_uring_enter+0xd69/0x1630 [ 138.946636][T10161] ? __fget_files+0x20e/0x3c0 [ 138.946649][T10161] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 138.946668][T10161] ? fput+0x9b/0xd0 [ 138.946682][T10161] ? ksys_write+0x1ac/0x250 [ 138.946693][T10161] ? __pfx_ksys_write+0x10/0x10 [ 138.946715][T10161] do_syscall_64+0xcd/0xfa0 [ 138.946743][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.946762][T10161] RIP: 0033:0x7f7eea38eec9 [ 138.946777][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.946795][T10161] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.946814][T10161] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 138.946826][T10161] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 138.946837][T10161] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 138.946845][T10161] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 138.946854][T10161] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 138.946881][T10161] [ 139.036495][T10173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10173 comm=syz.2.1411 [ 139.036582][T10172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10172 comm=syz.2.1411 [ 139.066543][T10167] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 139.077537][T10167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.201739][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 139.201756][ T40] audit: type=1400 audit(1759907477.680:5910): avc: denied { getopt } for pid=10180 comm="syz.4.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.206811][T10181] 9p: Unknown uid 00000000004294967295 [ 139.352755][ T40] audit: type=1326 audit(1759907477.820:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.1.1417" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53f8b8eec9 code=0x80000000 [ 139.521185][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 139.664430][ T10] usb 9-1: device descriptor read/64, error -71 [ 139.826882][ T40] audit: type=1400 audit(1759907478.269:5912): avc: denied { listen } for pid=10207 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.833817][ T40] audit: type=1400 audit(1759907478.269:5913): avc: denied { accept } for pid=10207 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.931733][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 140.102722][ T10] usb 9-1: device descriptor read/64, error -71 [ 140.184791][T10217] __nla_validate_parse: 30 callbacks suppressed [ 140.184808][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 140.193530][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 140.197464][T10217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1425'. [ 140.232695][ T10] usb usb9-port1: attempt power cycle [ 140.379137][T10226] geneve2: entered allmulticast mode [ 140.463980][T10230] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 140.483125][T10230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.496142][T10230] bond2: (slave geneve3): making interface the new active one [ 140.505091][T10230] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 140.556607][T10234] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 140.569296][T10234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.605474][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 140.627454][ T10] usb 9-1: device descriptor read/8, error -71 [ 140.737460][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.906885][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 140.915385][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 140.947937][ T10] usb 9-1: device descriptor read/8, error -71 [ 141.017681][ T40] audit: type=1400 audit(1759907479.382:5914): avc: denied { mounton } for pid=10266 comm="syz.1.1439" path="/277/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 141.017738][T10268] 9pnet_fd: Insufficient options for proto=fd [ 141.062049][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 141.067567][ T10] usb usb9-port1: unable to enumerate USB device [ 141.070917][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1445'. [ 141.074893][T10271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1445'. [ 141.076440][ T40] audit: type=1400 audit(1759907479.438:5915): avc: denied { module_load } for pid=10274 comm="syz.2.1446" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 141.077498][T10276] kernel read not supported for file /policy (pid: 10276 comm: syz.2.1446) [ 141.092758][ T40] audit: type=1400 audit(1759907479.438:5916): avc: denied { setopt } for pid=10274 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.125062][ T40] audit: type=1400 audit(1759907479.485:5917): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 141.151776][T10279] FAULT_INJECTION: forcing a failure. [ 141.151776][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 141.157008][T10279] CPU: 2 UID: 0 PID: 10279 Comm: syz.2.1447 Not tainted syzkaller #0 PREEMPT(full) [ 141.157032][T10279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.157043][T10279] Call Trace: [ 141.157050][T10279] [ 141.157058][T10279] dump_stack_lvl+0x16c/0x1f0 [ 141.157116][T10279] should_fail_ex+0x512/0x640 [ 141.157157][T10279] should_failslab+0xc2/0x120 [ 141.157177][T10279] __kmalloc_noprof+0xdd/0x880 [ 141.157202][T10279] ? io_alloc_ocqe+0xd2/0x660 [ 141.157226][T10279] ? io_alloc_ocqe+0xd2/0x660 [ 141.157243][T10279] io_alloc_ocqe+0xd2/0x660 [ 141.157269][T10279] __io_submit_flush_completions+0x1049/0x1980 [ 141.157301][T10279] ? io_issue_sqe+0xb6/0x1000 [ 141.157328][T10279] io_submit_sqes+0xa0e/0x2710 [ 141.157361][T10279] __do_sys_io_uring_enter+0xd69/0x1630 [ 141.157385][T10279] ? __fget_files+0x20e/0x3c0 [ 141.157402][T10279] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 141.157427][T10279] ? fput+0x9b/0xd0 [ 141.157446][T10279] ? ksys_write+0x1ac/0x250 [ 141.157462][T10279] ? __pfx_ksys_write+0x10/0x10 [ 141.157486][T10279] do_syscall_64+0xcd/0xfa0 [ 141.157514][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.157532][T10279] RIP: 0033:0x7fce7c18eec9 [ 141.157547][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.157564][T10279] RSP: 002b:00007fce7cfed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 141.157583][T10279] RAX: ffffffffffffffda RBX: 00007fce7c3e5fa0 RCX: 00007fce7c18eec9 [ 141.157594][T10279] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 141.157604][T10279] RBP: 00007fce7cfed090 R08: 0000000000000000 R09: 0000000000000000 [ 141.157614][T10279] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 141.157624][T10279] R13: 00007fce7c3e6038 R14: 00007fce7c3e5fa0 R15: 00007ffdb218c328 [ 141.157652][T10279] [ 141.298519][T10283] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 141.312267][T10283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.461278][ T40] audit: type=1400 audit(1759907479.803:5918): avc: denied { setattr } for pid=10291 comm="syz.1.1449" name="SCO" dev="sockfs" ino=37129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.520956][T10296] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 141.523297][T10296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.528096][T10296] vhci_hcd vhci_hcd.0: Device attached [ 141.543672][T10298] vhci_hcd: cannot find the pending unlink 1023 [ 141.599441][T10307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.603812][T10307] batadv_slave_0: entered promiscuous mode [ 141.605794][T10307] batadv_slave_0: entered allmulticast mode [ 141.640847][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1459'. [ 141.646974][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1459'. [ 141.650630][T10311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1459'. [ 141.715464][T10298] vhci_hcd: connection closed [ 141.717992][ T103] vhci_hcd: stop threads [ 141.725508][ T103] vhci_hcd: release socket [ 141.729291][ T103] vhci_hcd: disconnect device [ 141.802719][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 141.805971][ T10] usb 39-1: enqueue for inactive port 0 [ 141.877429][ T10] vhci_hcd: vhci_device speed not set [ 141.909639][ T1347] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 142.072140][ T1347] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.077057][ T1347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.082272][ T1347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.086127][ T1347] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.090422][ T1347] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.094323][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.100708][ T1347] usb 7-1: config 0 descriptor?? [ 142.128870][T10319] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 142.136194][T10319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.445641][T10324] can0: slcan on ttyprintk. [ 142.530954][T10324] can0 (unregistered): slcan off ttyprintk. [ 142.539882][ T1347] usbhid 7-1:0.0: can't add hid device: -71 [ 142.544220][ T1347] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 142.550613][ T1347] usb 7-1: USB disconnect, device number 15 [ 142.869074][ T40] audit: type=1400 audit(1759907481.113:5919): avc: denied { rename } for pid=10342 comm="syz.1.1471" name="file0" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.970705][T10351] fuse: Invalid rootmode [ 143.017081][T10354] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 143.041649][T10356] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 143.128208][ T5949] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 143.133246][ T5949] Bluetooth: hci2: Injecting HCI hardware error event [ 143.136219][ T5949] Bluetooth: hci2: hardware error 0x00 [ 143.212983][T10370] pimreg: entered allmulticast mode [ 143.338607][T10383] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 143.364727][T10385] 9pnet_virtio: no channels available for device syz [ 143.367499][T10385] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 144.197229][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 144.370247][T10407] netlink: 'syz.2.1496': attribute type 14 has an invalid length. [ 144.380119][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 144.385024][ T53] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 144.388749][ T53] usb 6-1: config 0 has no interface number 0 [ 144.391881][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 144.396403][ T53] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 144.412469][ T53] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 144.416635][ T53] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 144.426984][ T53] usb 6-1: Product: syz [ 144.428981][ T53] usb 6-1: SerialNumber: syz [ 144.434706][T10412] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 144.438769][ T53] usb 6-1: config 0 descriptor?? [ 144.442309][T10412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.445055][ T53] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 144.451041][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input10 [ 144.712743][ T5946] Bluetooth: hci2: unexpected event for opcode 0x080e [ 144.832075][T10433] FAULT_INJECTION: forcing a failure. [ 144.832075][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 144.837464][T10433] CPU: 0 UID: 0 PID: 10433 Comm: syz.0.1506 Not tainted syzkaller #0 PREEMPT(full) [ 144.837490][T10433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.837503][T10433] Call Trace: [ 144.837511][T10433] [ 144.837519][T10433] dump_stack_lvl+0x16c/0x1f0 [ 144.837580][T10433] should_fail_ex+0x512/0x640 [ 144.837622][T10433] should_failslab+0xc2/0x120 [ 144.837645][T10433] __kmalloc_noprof+0xdd/0x880 [ 144.837671][T10433] ? io_alloc_ocqe+0xd2/0x660 [ 144.837697][T10433] ? io_alloc_ocqe+0xd2/0x660 [ 144.837715][T10433] io_alloc_ocqe+0xd2/0x660 [ 144.837741][T10433] __io_submit_flush_completions+0x1049/0x1980 [ 144.837771][T10433] ? io_issue_sqe+0xb6/0x1000 [ 144.837799][T10433] io_submit_sqes+0xa0e/0x2710 [ 144.837838][T10433] __do_sys_io_uring_enter+0xd69/0x1630 [ 144.837881][T10433] ? __fget_files+0x20e/0x3c0 [ 144.837901][T10433] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 144.837929][T10433] ? fput+0x9b/0xd0 [ 144.837950][T10433] ? ksys_write+0x1ac/0x250 [ 144.837966][T10433] ? __pfx_ksys_write+0x10/0x10 [ 144.837991][T10433] do_syscall_64+0xcd/0xfa0 [ 144.838020][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.838039][T10433] RIP: 0033:0x7f7eea38eec9 [ 144.838052][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.838068][T10433] RSP: 002b:00007f7eeb314038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 144.838084][T10433] RAX: ffffffffffffffda RBX: 00007f7eea5e5fa0 RCX: 00007f7eea38eec9 [ 144.838094][T10433] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000004 [ 144.838104][T10433] RBP: 00007f7eeb314090 R08: 0000000000000000 R09: 0000000000000000 [ 144.838113][T10433] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000002 [ 144.838125][T10433] R13: 00007f7eea5e6038 R14: 00007f7eea5e5fa0 R15: 00007ffe26d2f0e8 [ 144.838166][T10433] [ 144.981572][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 144.982450][ T6031] usb 6-1: USB disconnect, device number 14 [ 144.984246][ C1] ------------[ cut here ]------------ [ 144.989676][ C1] URB ffff888105d00a00 submitted while active [ 144.992510][ C1] WARNING: CPU: 1 PID: 5947 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 [ 144.996098][ C1] Modules linked in: [ 144.998139][ C1] CPU: 1 UID: 0 PID: 5947 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 145.004413][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.008936][ C1] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 145.011034][ C1] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 a3 d0 ae fa c6 05 ad 0d 5e 09 01 90 48 c7 c7 e0 61 51 8c 48 89 de e8 2c 09 6d fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 145.018715][ C1] RSP: 0018:ffffc900006a0a90 EFLAGS: 00010082 [ 145.021269][ C1] RAX: 0000000000000000 RBX: ffff888105d00a00 RCX: ffffffff817aaee8 [ 145.024376][ C1] RDX: ffff888024c8c900 RSI: ffffffff817aaef5 RDI: 0000000000000001 [ 145.027412][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 145.030383][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 145.033425][ C1] R13: ffff88802bc3c857 R14: ffff88805422c200 R15: 000000000000000f [ 145.036619][ C1] FS: 000055558267d500(0000) GS:ffff8880d6adf000(0000) knlGS:0000000000000000 [ 145.041241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.044383][ C1] CR2: 00007f7eea5b4198 CR3: 000000005046c000 CR4: 0000000000352ef0 [ 145.047492][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 145.050464][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.053457][ C1] Call Trace: [ 145.054734][ C1] [ 145.055851][ C1] ? find_held_lock+0x2b/0x80 [ 145.057643][ C1] ? __pfx____ratelimit+0x10/0x10 [ 145.059680][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 145.061665][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.064006][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 145.066995][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 145.069548][ C1] dummy_timer+0x1809/0x3a00 [ 145.071494][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.073305][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 145.074958][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 145.076658][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 145.078837][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 145.081149][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.083069][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.084992][ C1] ? mark_held_locks+0x49/0x80 [ 145.087045][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.089796][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.092188][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 145.094372][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 145.096297][ C1] ? read_tsc+0x9/0x20 [ 145.097534][ C1] hrtimer_run_softirq+0x17d/0x350 [ 145.099030][ C1] handle_softirqs+0x216/0x8e0 [ 145.100641][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 145.102743][ C1] __irq_exit_rcu+0x109/0x170 [ 145.104545][ C1] irq_exit_rcu+0x9/0x30 [ 145.106148][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.108288][ C1] [ 145.109443][ C1] [ 145.110807][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.113965][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 145.116995][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 83 30 f6 48 89 df e8 6e d7 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 e2 20 f6 65 8b 05 5e 45 3c 08 85 c0 74 16 5b [ 145.124178][ C1] RSP: 0018:ffffc9000388f898 EFLAGS: 00000246 [ 145.126590][ C1] RAX: 0000000000000006 RBX: ffffffff9ad47fb0 RCX: 0000000000000006 [ 145.129673][ C1] RDX: 0000000000000000 RSI: ffffffff8db0265e RDI: ffffffff8bf1cfc0 [ 145.132652][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 145.135649][ C1] R10: ffffffff908323d7 R11: 0000000000000000 R12: dffffc0000000000 [ 145.138861][ C1] R13: 0000000000000003 R14: 0000000000000003 R15: ffff88803249d000 [ 145.142691][ C1] debug_check_no_obj_freed+0x31f/0x600 [ 145.145613][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 145.148080][ C1] __free_frozen_pages+0x31a/0x1160 [ 145.150112][ C1] ? ___free_pages+0xcd/0x220 [ 145.152000][ C1] vfree+0x1fd/0xb50 [ 145.153604][ C1] ? xt_data_to_user+0x9a/0x180 [ 145.155535][ C1] ? xt_target_to_user+0xc2/0x210 [ 145.157482][ C1] ? _copy_to_user+0x48/0xd0 [ 145.159299][ C1] do_ip6t_get_ctl+0x8e0/0xae0 [ 145.161152][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 145.163194][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 145.165598][ C1] nf_getsockopt+0x7c/0xe0 [ 145.167613][ C1] ipv6_getsockopt+0x1f7/0x280 [ 145.169703][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 145.172079][ C1] ? find_held_lock+0x2b/0x80 [ 145.173967][ C1] ? __might_fault+0xe3/0x190 [ 145.175839][ C1] ? __might_fault+0xe3/0x190 [ 145.177648][ C1] ? __might_fault+0x13b/0x190 [ 145.179483][ C1] tcp_getsockopt+0x9e/0x100 [ 145.181234][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 145.183476][ C1] do_sock_getsockopt+0x34a/0x440 [ 145.185417][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 145.187668][ C1] ? kfree+0x252/0x6d0 [ 145.189342][ C1] ? do_sock_setsockopt+0x101/0x1d0 [ 145.191468][ C1] __sys_getsockopt+0x12f/0x260 [ 145.193313][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 145.195143][ C1] ? do_syscall_64+0x91/0xfa0 [ 145.196795][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.198720][ C1] do_syscall_64+0xcd/0xfa0 [ 145.200339][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.202788][ C1] RIP: 0033:0x7f7eea390c0a [ 145.204739][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 145.212379][ C1] RSP: 002b:00007ffe26d2ed78 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 145.215468][ C1] RAX: ffffffffffffffda RBX: 00007ffe26d2ee00 RCX: 00007f7eea390c0a [ 145.218540][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 145.221531][ C1] RBP: 0000000000000003 R08: 00007ffe26d2ed9c R09: 0079746972756365 [ 145.224743][ C1] R10: 00007ffe26d2ee00 R11: 0000000000000212 R12: 00007f7eea5b47a0 [ 145.228361][ C1] R13: 00007ffe26d2ed9c R14: 0000000000000000 R15: 00007f7eea5b4e60 [ 145.231234][ C1] [ 145.232275][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.234846][ C1] CPU: 1 UID: 0 PID: 5947 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 145.238118][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.241513][ C1] Call Trace: [ 145.242601][ C1] [ 145.243530][ C1] dump_stack_lvl+0x3d/0x1f0 [ 145.245032][ C1] vpanic+0x640/0x6f0 [ 145.246345][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 145.248022][ C1] panic+0xca/0xd0 [ 145.249442][ C1] ? __pfx_panic+0x10/0x10 [ 145.251183][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 145.252992][ C1] check_panic_on_warn+0xab/0xb0 [ 145.254743][ C1] __warn+0xf6/0x3c0 [ 145.256059][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 145.257708][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 145.259338][ C1] report_bug+0x3c3/0x580 [ 145.260871][ C1] ? usb_submit_urb+0x16f5/0x1990 [ 145.262588][ C1] handle_bug+0x184/0x210 [ 145.263957][ C1] exc_invalid_op+0x17/0x50 [ 145.265364][ C1] asm_exc_invalid_op+0x1a/0x20 [ 145.266966][ C1] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 145.268726][ C1] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 a3 d0 ae fa c6 05 ad 0d 5e 09 01 90 48 c7 c7 e0 61 51 8c 48 89 de e8 2c 09 6d fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 145.275848][ C1] RSP: 0018:ffffc900006a0a90 EFLAGS: 00010082 [ 145.277945][ C1] RAX: 0000000000000000 RBX: ffff888105d00a00 RCX: ffffffff817aaee8 [ 145.280494][ C1] RDX: ffff888024c8c900 RSI: ffffffff817aaef5 RDI: 0000000000000001 [ 145.282997][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 145.285779][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 145.288430][ C1] R13: ffff88802bc3c857 R14: ffff88805422c200 R15: 000000000000000f [ 145.291780][ C1] ? __warn_printk+0x198/0x350 [ 145.293670][ C1] ? __warn_printk+0x1a5/0x350 [ 145.295223][ C1] ? find_held_lock+0x2b/0x80 [ 145.296710][ C1] ? __pfx____ratelimit+0x10/0x10 [ 145.298314][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 145.300033][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.301929][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 145.303906][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 145.305784][ C1] dummy_timer+0x1809/0x3a00 [ 145.307723][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 145.309491][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 145.311440][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 145.313672][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 145.315635][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 145.317574][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.319364][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.320948][ C1] ? mark_held_locks+0x49/0x80 [ 145.322499][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.324274][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 145.326307][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 145.328458][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 145.330658][ C1] ? read_tsc+0x9/0x20 [ 145.332179][ C1] hrtimer_run_softirq+0x17d/0x350 [ 145.333784][ C1] handle_softirqs+0x216/0x8e0 [ 145.335328][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 145.337028][ C1] __irq_exit_rcu+0x109/0x170 [ 145.338730][ C1] irq_exit_rcu+0x9/0x30 [ 145.340130][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.342006][ C1] [ 145.343014][ C1] [ 145.344034][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.346080][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 145.348653][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 83 30 f6 48 89 df e8 6e d7 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 e2 20 f6 65 8b 05 5e 45 3c 08 85 c0 74 16 5b [ 145.354987][ C1] RSP: 0018:ffffc9000388f898 EFLAGS: 00000246 [ 145.356958][ C1] RAX: 0000000000000006 RBX: ffffffff9ad47fb0 RCX: 0000000000000006 [ 145.359432][ C1] RDX: 0000000000000000 RSI: ffffffff8db0265e RDI: ffffffff8bf1cfc0 [ 145.362372][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 145.365421][ C1] R10: ffffffff908323d7 R11: 0000000000000000 R12: dffffc0000000000 [ 145.368757][ C1] R13: 0000000000000003 R14: 0000000000000003 R15: ffff88803249d000 [ 145.371394][ C1] debug_check_no_obj_freed+0x31f/0x600 [ 145.373155][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 145.375365][ C1] __free_frozen_pages+0x31a/0x1160 [ 145.377102][ C1] ? ___free_pages+0xcd/0x220 [ 145.378624][ C1] vfree+0x1fd/0xb50 [ 145.379877][ C1] ? xt_data_to_user+0x9a/0x180 [ 145.381420][ C1] ? xt_target_to_user+0xc2/0x210 [ 145.383020][ C1] ? _copy_to_user+0x48/0xd0 [ 145.384846][ C1] do_ip6t_get_ctl+0x8e0/0xae0 [ 145.386677][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 145.388709][ C1] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 145.390921][ C1] nf_getsockopt+0x7c/0xe0 [ 145.392497][ C1] ipv6_getsockopt+0x1f7/0x280 [ 145.394070][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 145.395782][ C1] ? find_held_lock+0x2b/0x80 [ 145.397344][ C1] ? __might_fault+0xe3/0x190 [ 145.398899][ C1] ? __might_fault+0xe3/0x190 [ 145.400432][ C1] ? __might_fault+0x13b/0x190 [ 145.402113][ C1] tcp_getsockopt+0x9e/0x100 [ 145.404055][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 145.406483][ C1] do_sock_getsockopt+0x34a/0x440 [ 145.408583][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 145.410347][ C1] ? kfree+0x252/0x6d0 [ 145.411802][ C1] ? do_sock_setsockopt+0x101/0x1d0 [ 145.413546][ C1] __sys_getsockopt+0x12f/0x260 [ 145.415325][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 145.417013][ C1] ? do_syscall_64+0x91/0xfa0 [ 145.418631][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.420474][ C1] do_syscall_64+0xcd/0xfa0 [ 145.422102][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.424188][ C1] RIP: 0033:0x7f7eea390c0a [ 145.425778][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 145.431800][ C1] RSP: 002b:00007ffe26d2ed78 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 145.434429][ C1] RAX: ffffffffffffffda RBX: 00007ffe26d2ee00 RCX: 00007f7eea390c0a [ 145.436951][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 145.439444][ C1] RBP: 0000000000000003 R08: 00007ffe26d2ed9c R09: 0079746972756365 [ 145.442254][ C1] R10: 00007ffe26d2ee00 R11: 0000000000000212 R12: 00007f7eea5b47a0 [ 145.445167][ C1] R13: 00007ffe26d2ed9c R14: 0000000000000000 R15: 00007f7eea5b4e60 [ 145.448120][ C1] [ 145.449906][ C1] Kernel Offset: disabled [ 145.451307][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:11:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a540320 RCX=ffffffff81b06821 RDX=ffff8880291bc900 RSI=ffffffff81b067fb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9002247f668 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4a8065 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81b06802 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555580e61500 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff602d156c0 CR3=000000002c5e2000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69ba1450 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff602012fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff602012fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff602012fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff602012fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff60201305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff60201313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff852f8b10 RDI=ffffffff9ae017e0 RBP=ffffffff9ae017a0 RSP=ffffc900006a03a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35c034e R15=dffffc0000000000 RIP=ffffffff852f8b37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558267d500 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7eea5b4198 CR3=000000005046c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe26d2f470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea412fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea412fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea412fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea412fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea41305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7eea41313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000035800000004 ffffffff000001a0 000000d000000000 ffffffffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffff000001a0 000000d000000000 ffffffff0000000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c4 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63b580 RCX=ffffffff81b07f73 RDX=ffff88801d6ec900 RSI=ffffffff81b07f4d RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e66 R12=1ffff9200002af7c R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4c76b1 RIP=ffffffff81b07f59 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce7c172b60 CR3=0000000033799000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055aee62f1600 000055aee62f1600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc407d3c20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69617420746f4e20 726f747563657865 2d7a7973203a6d6d 6f43203734393520 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203861203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000120441 RBX=0000000000000003 RCX=ffffffff8b6522d9 RDX=0000000000000000 RSI=ffffffff8db0265e RDI=ffffffff8bf1cfc0 RBP=ffffed1003bd8000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801dec0000 R14=ffffffff908323d0 R15=0000000000000000 RIP=ffffffff8b650d8f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce7c3b12f8 CR3=0000000032a58000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=00000000fffffffe Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558abe683140 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558abe6686d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326f9cd15f483 737326fc959b9e59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc09749097b9d7b5 737373762bd89500 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f366273752f312e 6463685f796d6d75 642f6d726f667461 6c702f7365636976 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f7a07e3e4caa4c6 0000558fe6cdadeb 00000000000001a1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000