last executing test programs: 5.048236591s ago: executing program 2 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 4.788772506s ago: executing program 2 (id=1390): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.351603564s ago: executing program 1 (id=1412): read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001000)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000001280)={0x51, 0x0, 0x2, 0x3, &(0x7f0000001040)="9349ac", 0x1, 0x0, 0xfffffffd, 0x7, 0x60, &(0x7f0000001080), 0x0, 0x4d, 0x0, 0x0, &(0x7f0000001100)="a2433a6d574649d7e3f6f9f4ff3fd462841f129a1097d8a7996bb8ed5a9192ec06b30c22c08d6b50b287beedf02230fd7772f7b6a2cf1f6789035a40433d9dbea558f075d0b22d929ddfb1a521", &(0x7f0000001180), 0xfffffffc, 0x0, &(0x7f00000011c0)="5f043de02cc7c3db34e5a49df335da909c17468c7028ef56285a389e04589d05a6a1860bd12bbdb84bc2b6cf60c2eb72431a16140c5b03294d399dbf3b64745d36fca2925f40f9d16846d7008a15b040355d9c7c97081df41e1ceda99b070908f177c80c1240adebf5a3435a34b7a7416d818590dc4116ae4f6e8a7f0ce9a391303cbd409c7bb60d491ac63d183a8f61216c93f3c641be5e52dd29c5f46443fd3ab25ee7", 0x2}) read(r0, &(0x7f0000001340)=""/177, 0xb1) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000001400)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000014c0), 0x201, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500), 0x240843, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000001540)=0x2) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001580)={0x4}, 0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000015c0)={0x0, @bt={0x5, 0x6, 0x0, 0x2, 0x7, 0x6c, 0x8, 0x3, 0x7, 0x2, 0xffffff00, 0x0, 0x2, 0x80, 0x31, 0x10, {0x7fff, 0x7f}, 0x5, 0x2}}) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001900)={&(0x7f0000001680)="de120e1f576d56ec3a9a92a9a7f72c8bfa6f7d32f407b34a9d99f52ba6000f3f33fb51cce2b49340f11d897ba5e04bd05dd35b19a241fca26c2e521aeed26af444a6f0455e557ca730e8aa65a1a7ed93adacc00ecf3b14cac79befb6de92", &(0x7f0000001700)=""/211, &(0x7f0000001800)="75e601390c137f59aecf304925413f428c5333d19ff709dfc019d6673977df79c80cd1c7393f1f83149b9bf6d9915e44a09603f4e08ef3fea7d0183141853dc1374d8c6c9ccadb2427d3a44f1c5b0c0e63bd93de6ec94d0cd4666b63ab533f09bfa36bf5654485747b2cfd71fddfa96240b070b1cebc091ce5e0573d7d861f3c74c98201a9299823e8fb533de7c8a80662b321fd66da", &(0x7f00000018c0)="b4bc88a14fe982b32a9938eb4c7a020799212fac17b0cd5bbbe1b422373c2408e8f1fdf441477ebc09b7f380fb3671c2ae1e035d4fe8fb67e9be9b3269e596", 0x81}, 0x38) (rerun: 64) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001940)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000001980), 0x4) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000019c0)) r3 = syz_io_uring_complete(0x0, 0x0) write$vhost_msg(r3, &(0x7f0000001b40)={0x1, {&(0x7f0000001a00)=""/44, 0x2c, &(0x7f0000001a40)=""/228, 0x3, 0x3}}, 0x48) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000001cc0)={r0, &(0x7f0000001bc0)='-\x00', 0x802, &(0x7f0000001c00)={@align=0x401, {0x6, 0x6, 0x5729b72e, 0x2}}, 0x1, &(0x7f0000001c40)={@_ha_fsid}, &(0x7f0000001c80)=0x6}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000001f40)={0x2, 0x0, {&(0x7f0000001d40)=""/247, 0xf7, &(0x7f0000001e40)=""/212, 0x3, 0x2}}, 0x48) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000001fc0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5a}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20, {0xfff, 0x52, 0x7fff, 0xf0b}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x4c}}, 0x20008804) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x9) (rerun: 64) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000002180)) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000021c0), &(0x7f0000002200)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000002240)={{0x1, 0x1, 0x18, r2}, '\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000002440)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x120, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x65}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1db213050a7f9d43cfb4b0bf32c6fe88c7a4347cf1118f9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4a82fc0f3df3b5b0429e654551dcd10f8a05c0fd1639317"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63465422840290bdd4b55ee43401b94c850293c7fcd6b571"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11306c2c2d52c09d09f7698a6c93b6fe1b90fe01dbeffd6e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af9c77e84762ca3b4559964ada9864c31bc8154df213588a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000d8c4}, 0x10) (async) connect$802154_dgram(r3, &(0x7f0000002480)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002540)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000002640)=0xe8) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x1000001, &(0x7f0000002680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@directio}, {@cache_readahead}, {@mmap}, {@cache_mmap}, {@fscache}, {@privport}], [{@measure}, {@uid_gt={'uid>', r7}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '\x03\x03\x03\x03\x03\x03'}}, {@dont_hash}, {@audit}]}}) 3.280740547s ago: executing program 1 (id=1413): mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x44000, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=virtio,posixacl,']) 3.280582348s ago: executing program 1 (id=1414): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="07ad25bd700000000000010000000000000002410000001000137564703a73797a3000000000"], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 2.979987586s ago: executing program 1 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd26, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 35) 2.979383224s ago: executing program 2 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x420, 0x1d0, 0x0, 0x148, 0x0, 0x148, 0x388, 0x240, 0x240, 0x388, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xff, 'ip6tnl0\x00', 'bond_slave_0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1d0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfc, 0x2, "0153b81818420d3b1402678c27c3c8973cfadb893972d9622cdf6047563c"}}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 2.979207818s ago: executing program 1 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7ff, 0x9, 0x1, 0xfa, 0x3, 0x7fff, 0x3, 0x7, 0xcc, 0x8, 0x0, 0xa, 0x4, 0x7423, 0x7fff}}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x1, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000008f40), 0x0, 0x0) ppoll(&(0x7f000000a200)=[{r8, 0x44a2}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000000c0), &(0x7f0000000200)=r8}, 0x20) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) sendto$packet(r6, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) 2.839100257s ago: executing program 2 (id=1423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000029000000040000008903000000000000c9100000000000000000000000000000000101090000000000000000f50000001800000000000000290000003b000000"], 0x50}, 0x0) 2.780390553s ago: executing program 2 (id=1425): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00'], 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2.360523688s ago: executing program 0 (id=1428): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2.074932974s ago: executing program 1 (id=1429): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x1, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xfffffffe, 0x228000, 0x0, 0x9, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000001580)="03a331d2", 0x4}], 0x1) syz_fuse_handle_req(r5, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x1dfc444d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xfffffffffffffffd, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="00044000", @ANYRES16=r9, @ANYBLOB="01082abd7000000000002a000000080058000000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000080)={0x20004, r4, 0x2}) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r12, r13, &(0x7f0000000780)={0x0, 0x280f, 0x1000, 0x2, 0x102, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b4c, 0x10000, 0x0, 0x10002de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf845, 0x1000, 0x0, 0x32b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5432, 0x4, 0x4, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8001be3, 0x4, 0x2, 0x70, 0x0, r12}}], 0x4, 0x0, 0x0) accept4(r12, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000003c0)=0x80, 0x100800) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r15, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000002800)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_fuse_handle_req(r15, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x10869943eab8d3a2, 0x0, {0x7, 0x29, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r15, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3, 0xb235333, 0x5, 0x0, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r12, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1c, r14, 0x800, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1.856997699s ago: executing program 2 (id=1430): syz_clone(0x48808111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023b00010101408009040007020206000205240600007b3358dc709c35028a05240007000d240f01ffffffff0700ff00060905820200040990010905030240187e002a0b08"], 0x0) close(0x3) 1.430897138s ago: executing program 3 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100003050000000000000000000000fe", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 1.230919944s ago: executing program 3 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd26, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (fail_nth: 37) 1.230467923s ago: executing program 3 (id=1435): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') readv(r1, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) (async) fchdir(r0) (async) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') (async) readv(r1, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) 1.100755877s ago: executing program 3 (id=1436): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640fffffffd05000500020000000500010006"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501000000100002800c000180080001000500110004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0xe000001d}) 988.592928ms ago: executing program 0 (id=1437): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000029000000040000008903000000000000c9100000000000000000000000000000000101090000000000000000000b00001800000000000000290000003b000000"], 0x50}, 0x0) 988.393209ms ago: executing program 0 (id=1438): mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=virtio,posixacl,']) (fail_nth: 38) 700.299796ms ago: executing program 0 (id=1439): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd26, 0x25cf9bff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) 699.923141ms ago: executing program 0 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) setuid(0xee01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="38add851c9df9a547eb26af398017132699a080a196567f18bde3b8048413699ed52a8bccb7bb23b1394857ff228edad324ac4a2e393ad6ca73595406d379bfce31e42cb1120519627d182e83a30c535e3301cfc97586d5468f1866913fcdf1b4df8321a4c8212da6b6959950f74b6ce418509b48cde707d06efd0ae904db45359e43807c0546b4244186d2bacc5936b3b591455339e3b29ebcbf22d172aebe5840eeb6f1973c66e2cc7acf70c388f3a46e55739fca35935a6e393b6fb", @ANYRES16=r1, @ANYBLOB="bbb671e9ffa0f9ca2dc81f636df0f789259fb72b45d615b0f3eb858da7321966b60ab873dad23fced4117f2d2a4fb8fdf388149b48f08671fc7579cd08c756b3ea8c9a4103d3653bc04578b69cbe5a712e72138df66250dccf7f1db15b778079b67e90693e00eb8e87f10285ec1803927e6f30bb77606f9f2a1e93dfe0bd8bda9a7e5d3a9f7d0666042752bffbb06538859878494f4d4a2ebe4c61b126f73d278409e9b99f574ad041721117", @ANYRES8=r2], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r6}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r7, &(0x7f00000005c0)}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80984120, &(0x7f00000003c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_GET_SREGS2(r11, 0x8140aecc, &(0x7f0000000b80)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000001ff1b00786d00000008000300", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20040084) 438.938881ms ago: executing program 0 (id=1441): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "da36bb1b42ff4b"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x8880) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@dont_appraise}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'upperdir'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$*'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@appraise_type}]}) 230.238895ms ago: executing program 3 (id=1442): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x4c082) (fail_nth: 9) 0s ago: executing program 3 (id=1443): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980), 0x0, 0x20002040) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0xa, 0x4e27, 0x80000, @empty, 0x12}, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000240)='hfsplus\x00', 0x201000c, &(0x7f00000002c0)='r\x80 \xc8\xb5\x89L\xf4\x1c\xe2\xadwA\x1b\x15\\\xb6\x80\xa2\x83+\xa7\xd8x\x11\xb4\xe9\x1b\"\fR\x8a[\x8a$\az\xc5\x84\xa6\x1eN?\xbch\xfd\xa9\xb0mA\x85\x8b\x97p\xc2[\x17\x89N\xec\xa90\xf5\xdf@+\x17\xd2\xd7\x98\x17\"\x05`\xfd\xef\xb6\x93\x8d.\r\xd7h2C') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r6 = fsopen(&(0x7f0000000180)='securityfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001050000000800630600002eb939c30c4f6c5b76d1c63ddfb320b35db4ca8c440362a1999d5ca77c3c7213443542b38cd66f7697fe415deefb8fba344f467722614f9ed2be1a72c02f2c51dba51292adb672d27d688cf2b8c133932b8f9f65d40136cc35bd9ab15381cff14718b2c43d619be7085124dd244b059d9cecbea6a394712a8a05fc0d"], 0x0, 0x2a}, 0x20) r7 = fsmount(r6, 0x1, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0x1, r8, 0x0, 0x10000, 0x5}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): p 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.457110][ T42] audit: type=1400 audit(1784149407.415:557): avc: denied { map } for pid=8263 comm="syz.2.750" path="socket:[21871]" dev="sockfs" ino=21871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.473901][ T42] audit: type=1400 audit(1784149407.415:558): avc: denied { read } for pid=8263 comm="syz.2.750" path="socket:[21871]" dev="sockfs" ino=21871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.493187][ T42] audit: type=1400 audit(1784149407.435:559): avc: denied { connect } for pid=8280 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.504785][ T8283] xt_hashlimit: size too large, truncated to 1048576 [ 110.814517][ T8304] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 110.854586][ T8304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.871051][ T8304] bond5: (slave geneve5): making interface the new active one [ 110.880108][ T8304] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 110.956836][ T8314] binder: 8312:8314 ioctl 5457 200000000000 returned -22 [ 110.985332][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 111.188953][ T5144] ldm_validate_partition_table(): Disk read failed. [ 111.191847][ T5144] Dev loop5: unable to read RDB block 0 [ 111.195925][ T5144] loop5: unable to read partition table [ 111.198825][ T5144] loop5: partition table beyond EOD, truncated [ 111.663538][ T8311] overlayfs: statfs failed on './file0' [ 111.676108][ T8288] syz.2.750 (8288) used greatest stack depth: 19704 bytes left [ 111.682817][ T8336] i2c i2c-1: dtv_property_process_set: SET cmd 0x772e656c undefined [ 111.721571][ T8341] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 111.739708][ T8341] 8021q: adding VLAN 0 to HW filter on device bond8 [ 111.749080][ T8341] bond8: (slave geneve9): making interface the new active one [ 111.752403][ T8341] bond8: (slave geneve9): Enslaving as an active interface with an up link [ 111.756858][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 111.756868][ T42] audit: type=1400 audit(1784149408.715:563): avc: denied { map } for pid=8340 comm="syz.0.774" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 111.885519][ T42] audit: type=1400 audit(1784149408.845:564): avc: denied { map } for pid=8340 comm="syz.0.774" path="/proc/609/net/netlink" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.945601][ T8351] nbd: must specify a device to reconfigure [ 112.059170][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 112.258546][ T42] audit: type=1400 audit(1784149409.215:565): avc: denied { ioctl } for pid=8364 comm="syz.0.782" path="socket:[21905]" dev="sockfs" ino=21905 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.386553][ T8376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8376 comm=syz.3.786 [ 112.394906][ T42] audit: type=1400 audit(1784149409.355:566): avc: denied { ioctl } for pid=8375 comm="syz.3.786" path="socket:[21074]" dev="sockfs" ino=21074 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.406978][ T42] audit: type=1400 audit(1784149409.355:567): avc: denied { ioctl } for pid=8375 comm="syz.3.786" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.447189][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 112.497050][ T42] audit: type=1400 audit(1784149409.455:568): avc: denied { egress } for pid=1171 comm="kworker/u33:9" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 112.499346][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 112.509013][ T42] audit: type=1400 audit(1784149409.455:569): avc: denied { sendto } for pid=1171 comm="kworker/u33:9" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 112.719604][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 113.345160][ T5837] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 113.352176][ T8427] xt_hashlimit: size too large, truncated to 1048576 [ 113.493189][ T5837] usb 8-1: Using ep0 maxpacket: 8 [ 113.498918][ T5837] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.510086][ T5837] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.527195][ T5837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.541876][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.564053][ T5837] usbtmc 8-1:16.0: bulk endpoints not found [ 114.095993][ T42] audit: type=1400 audit(1784149411.055:570): avc: denied { read } for pid=8443 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.113305][ T42] audit: type=1400 audit(1784149411.055:571): avc: denied { ioctl } for pid=8443 comm="syz.2.811" path="socket:[22021]" dev="sockfs" ino=22021 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.141741][ T42] audit: type=1400 audit(1784149411.085:572): avc: denied { listen } for pid=8417 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.189840][ T8447] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 114.228270][ T8447] 8021q: adding VLAN 0 to HW filter on device bond8 [ 114.248922][ T8447] bond8: (slave geneve7): making interface the new active one [ 114.254718][ T8447] bond8: (slave geneve7): Enslaving as an active interface with an up link [ 114.348973][ T8451] cgroup: none used incorrectly [ 114.582963][ T8457] xt_hashlimit: size too large, truncated to 1048576 [ 115.165984][ T8472] xt_hashlimit: size too large, truncated to 1048576 [ 115.336914][ T8476] IPVS: length: 33 != 8 [ 115.458505][ T8482] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 115.488794][ T8482] 8021q: adding VLAN 0 to HW filter on device bond9 [ 115.510035][ T8482] bond9: (slave geneve10): making interface the new active one [ 115.515090][ T8482] bond9: (slave geneve10): Enslaving as an active interface with an up link [ 115.564659][ T8485] FAULT_INJECTION: forcing a failure. [ 115.564659][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.570075][ T8485] CPU: 2 UID: 0 PID: 8485 Comm: syz.1.826 Not tainted syzkaller #0 PREEMPT(full) [ 115.570099][ T8485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.570110][ T8485] Call Trace: [ 115.570117][ T8485] [ 115.570124][ T8485] dump_stack_lvl+0x100/0x190 [ 115.570153][ T8485] should_fail_ex.cold+0x5/0xa [ 115.570175][ T8485] _copy_from_user+0x2e/0xd0 [ 115.570199][ T8485] copy_msghdr_from_user+0x9f/0x4c0 [ 115.570358][ T8485] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.570393][ T8485] ___sys_sendmsg+0x106/0x1e0 [ 115.570419][ T8485] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.570441][ T8485] ? __lock_acquire+0x49f/0x1a40 [ 115.570463][ T8485] ? get_pid_task+0x106/0x250 [ 115.570515][ T8485] __sys_sendmsg+0x160/0x210 [ 115.570536][ T8485] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.570566][ T8485] do_syscall_64+0x115/0x870 [ 115.570593][ T8485] ? clear_bhb_loop+0x40/0x90 [ 115.570616][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.570634][ T8485] RIP: 0033:0x7f07af39de59 [ 115.570650][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.570667][ T8485] RSP: 002b:00007f07b02fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.570686][ T8485] RAX: ffffffffffffffda RBX: 00007f07af625fa0 RCX: 00007f07af39de59 [ 115.570697][ T8485] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 115.570707][ T8485] RBP: 00007f07b02fc090 R08: 0000000000000000 R09: 0000000000000000 [ 115.570718][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.570736][ T8485] R13: 00007f07af626038 R14: 00007f07af625fa0 R15: 00007fff40b40a98 [ 115.570762][ T8485] [ 115.683241][ T5838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 115.833586][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 115.839744][ T5838] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.843624][ T5838] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.847205][ T5838] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.850741][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.855394][ T5838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.859670][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.865840][ T5838] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.869466][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.877890][ T5838] usb 5-1: config 0 descriptor?? [ 115.904967][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 115.973726][ T8488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.827'. [ 116.027398][ T5824] usb 8-1: USB disconnect, device number 8 [ 116.094054][ T5838] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.300922][ T5838] usb 5-1: USB disconnect, device number 8 [ 116.307163][ T5838] usblp0: removed [ 116.427044][ T8499] xt_hashlimit: size too large, truncated to 1048576 [ 116.654070][ T8509] xt_hashlimit: size too large, truncated to 1048576 [ 116.708209][ T5817] IPVS: starting estimator thread 0... [ 116.711370][ T8480] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 116.803195][ T8512] IPVS: using max 44 ests per chain, 105600 per kthread [ 116.986916][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.989068][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 117.021917][ T8519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8519 comm=syz.1.835 [ 117.192358][ T8536] xt_hashlimit: size too large, truncated to 1048576 [ 117.226907][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 117.226924][ T42] audit: type=1400 audit(1784149414.185:583): avc: denied { create } for pid=8538 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 117.238243][ T42] audit: type=1400 audit(1784149414.195:584): avc: denied { sys_admin } for pid=8538 comm="syz.3.843" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 117.246287][ T8539] sctp: [Deprecated]: syz.3.843 (pid 8539) Use of int in maxseg socket option. [ 117.246287][ T8539] Use struct sctp_assoc_value instead [ 117.310560][ T8545] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 117.317562][ T8545] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 117.320912][ T8550] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 117.419955][ T42] audit: type=1400 audit(1784149414.375:585): avc: denied { bind } for pid=8546 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.490144][ T42] audit: type=1400 audit(1784149414.445:586): avc: denied { ioctl } for pid=8558 comm="syz.1.850" path="socket:[21194]" dev="sockfs" ino=21194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.803910][ T8572] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 117.964651][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 117.971712][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.019451][ T8580] macvtap0: entered allmulticast mode [ 118.021786][ T8580] veth0_macvtap: entered allmulticast mode [ 118.052361][ T8582] xt_hashlimit: size too large, truncated to 1048576 [ 118.316381][ T42] audit: type=1400 audit(1784149415.275:587): avc: denied { read } for pid=8591 comm="syz.2.861" lport=52359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.343239][ T55] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 118.516144][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.523708][ T55] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.536181][ T55] usb 6-1: string descriptor 0 read error: -22 [ 118.539136][ T55] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 118.545079][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.578162][ T8613] FAULT_INJECTION: forcing a failure. [ 118.578162][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 118.583401][ T8613] CPU: 2 UID: 0 PID: 8613 Comm: syz.2.870 Not tainted syzkaller #0 PREEMPT(full) [ 118.583423][ T8613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.583434][ T8613] Call Trace: [ 118.583441][ T8613] [ 118.583449][ T8613] dump_stack_lvl+0x100/0x190 [ 118.583476][ T8613] should_fail_ex.cold+0x5/0xa [ 118.583494][ T8613] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 118.583520][ T8613] should_failslab+0xc2/0x120 [ 118.583542][ T8613] kmem_cache_alloc_noprof+0x91/0x6a0 [ 118.583562][ T8613] ? skb_clone+0x190/0x400 [ 118.583616][ T8613] skb_clone+0x190/0x400 [ 118.583635][ T8613] netlink_deliver_tap+0xaed/0xcc0 [ 118.583715][ T8613] netlink_unicast+0x62b/0x850 [ 118.583742][ T8613] ? __pfx_netlink_unicast+0x10/0x10 [ 118.583774][ T8613] netlink_sendmsg+0x8b0/0xda0 [ 118.583804][ T8613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.583830][ T8613] ? selinux_socket_sendmsg+0x198/0x2f0 [ 118.583858][ T8613] ____sys_sendmsg+0xa4d/0xbe0 [ 118.583880][ T8613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.583907][ T8613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.583935][ T8613] ___sys_sendmsg+0x190/0x1e0 [ 118.583960][ T8613] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.583982][ T8613] ? __lock_acquire+0x49f/0x1a40 [ 118.584003][ T8613] ? get_pid_task+0x106/0x250 [ 118.584057][ T8613] __sys_sendmsg+0x160/0x210 [ 118.584076][ T8613] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.584109][ T8613] do_syscall_64+0x115/0x870 [ 118.584135][ T8613] ? clear_bhb_loop+0x40/0x90 [ 118.584158][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.584176][ T8613] RIP: 0033:0x7fc628b9de59 [ 118.584191][ T8613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.584207][ T8613] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.584230][ T8613] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 118.584242][ T8613] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 118.584253][ T8613] RBP: 00007fc626df6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.584263][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.584273][ T8613] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 118.584298][ T8613] [ 118.623220][ T5838] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.833211][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 118.837656][ T5838] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 118.840500][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.842986][ T5838] usb 5-1: Product: syz [ 118.844481][ T5838] usb 5-1: Manufacturer: syz [ 118.846170][ T5838] usb 5-1: SerialNumber: syz [ 118.849096][ T5838] usb 5-1: config 0 descriptor?? [ 118.853290][ T5838] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 118.856024][ T5838] pctv452e: pctv452e_power_ctrl: 1 [ 118.856024][ T5838] [ 118.858442][ T5838] usb 5-1: selecting invalid altsetting 3 [ 118.860309][ T5838] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 118.860309][ T5838] [ 118.863770][ T5838] dvb-usb: bulk message failed: -22 (5/0) [ 118.871063][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.875018][ T5838] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 118.877730][ T5838] usb 5-1: media controller created [ 118.879643][ T5838] dvb-usb: bulk message failed: -22 (8/0) [ 118.881455][ T5838] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 118.885328][ T5838] dvb-usb: MAC address reading failed. [ 118.892683][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.920777][ T5838] DVB: Unable to find symbol stb0899_attach() [ 118.922677][ T5838] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 118.984299][ T5838] rc_core: IR keymap rc-tt-1500 not found [ 118.986160][ T5838] Registered IR keymap rc-empty [ 118.989453][ T5838] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 118.993400][ T5838] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input10 [ 118.999987][ T5838] dvb-usb: schedule remote query interval to 100 msecs. [ 119.002161][ T5838] pctv452e: pctv452e_power_ctrl: 0 [ 119.002161][ T5838] [ 119.004489][ T5838] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 119.052857][ T8602] dvb-usb: bulk message failed: -22 (7/0) [ 119.055472][ T8602] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 119.059521][ T5837] usb 5-1: USB disconnect, device number 9 [ 119.083043][ T5837] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 119.580316][ T8628] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!`lü1&›b¯Þ0xUÐÏ”ÎÜr$åG—•µ [ 119.616556][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 119.620248][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'. [ 119.671740][ T42] audit: type=1800 audit(1784149416.625:588): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.877" name="file0" dev="tmpfs" ino=1121 res=0 errno=0 [ 119.699819][ T8632] syzkaller0: entered promiscuous mode [ 119.702167][ T8632] syzkaller0: entered allmulticast mode [ 119.719032][ T8632] 0: reclassify loop, rule prio 0, protocol 800 [ 119.737158][ T8634] xt_hashlimit: size too large, truncated to 1048576 [ 120.101258][ T8656] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 120.116978][ T42] audit: type=1400 audit(1784149417.075:589): avc: denied { mount } for pid=8653 comm="syz.0.883" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 120.152858][ T8656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.159299][ T42] audit: type=1400 audit(1784149417.125:590): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 120.175794][ T8665] bond6: (slave geneve6): making interface the new active one [ 120.179873][ T8665] bond6: (slave geneve6): Enslaving as an active interface with an up link [ 120.235146][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.248186][ T8672] syzkaller1: entered promiscuous mode [ 120.250552][ T8672] syzkaller1: entered allmulticast mode [ 120.260351][ T8672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.388305][ T8676] xt_hashlimit: size too large, truncated to 1048576 [ 120.637994][ T8692] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 120.670265][ T8692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 120.683620][ T8692] bond8: (slave geneve8): making interface the new active one [ 120.687668][ T8692] bond8: (slave geneve8): Enslaving as an active interface with an up link [ 120.740375][ T8699] tmpfs: Unknown parameter 'nr_inkdes' [ 120.749269][ T42] audit: type=1400 audit(1784149417.705:591): avc: denied { load_policy } for pid=8698 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.749469][ T8699] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 120.759264][ T8699] SELinux: failed to load policy [ 120.765662][ T42] audit: type=1400 audit(1784149417.725:592): avc: denied { watch watch_with_perm } for pid=8698 comm="syz.0.897" path="/254/bus" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.091142][ T8718] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 121.106773][ T8718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.128045][ T8718] bond7: (slave geneve7): making interface the new active one [ 121.132051][ T8718] bond7: (slave geneve7): Enslaving as an active interface with an up link [ 121.415844][ T8735] FAULT_INJECTION: forcing a failure. [ 121.415844][ T8735] name failslab, interval 1, probability 0, space 0, times 0 [ 121.420380][ T8735] CPU: 0 UID: 0 PID: 8735 Comm: syz.3.909 Not tainted syzkaller #0 PREEMPT(full) [ 121.420395][ T8735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.420402][ T8735] Call Trace: [ 121.420407][ T8735] [ 121.420411][ T8735] dump_stack_lvl+0x100/0x190 [ 121.420430][ T8735] should_fail_ex.cold+0x5/0xa [ 121.420441][ T8735] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 121.420457][ T8735] should_failslab+0xc2/0x120 [ 121.420470][ T8735] kmem_cache_alloc_noprof+0x91/0x6a0 [ 121.420482][ T8735] ? skb_clone+0x190/0x400 [ 121.420496][ T8735] skb_clone+0x190/0x400 [ 121.420506][ T8735] netlink_deliver_tap+0xaed/0xcc0 [ 121.420525][ T8735] netlink_unicast+0x6a5/0x850 [ 121.420542][ T8735] ? __pfx_netlink_unicast+0x10/0x10 [ 121.420564][ T8735] netlink_ack+0x655/0xb80 [ 121.420583][ T8735] netlink_rcv_skb+0x333/0x420 [ 121.420598][ T8735] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 121.420611][ T8735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.420632][ T8735] ? ns_capable+0xd2/0xf0 [ 121.420645][ T8735] nfnetlink_rcv+0x1b3/0x440 [ 121.420656][ T8735] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 121.420667][ T8735] ? netlink_deliver_tap+0x1ae/0xcc0 [ 121.420683][ T8735] netlink_unicast+0x585/0x850 [ 121.420700][ T8735] ? __pfx_netlink_unicast+0x10/0x10 [ 121.420719][ T8735] netlink_sendmsg+0x8b0/0xda0 [ 121.420737][ T8735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.420754][ T8735] ? selinux_socket_sendmsg+0x198/0x2f0 [ 121.420771][ T8735] ____sys_sendmsg+0xa4d/0xbe0 [ 121.420784][ T8735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.420800][ T8735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.420823][ T8735] ___sys_sendmsg+0x190/0x1e0 [ 121.420838][ T8735] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.420852][ T8735] ? __lock_acquire+0x49f/0x1a40 [ 121.420864][ T8735] ? get_pid_task+0x106/0x250 [ 121.420893][ T8735] __sys_sendmsg+0x160/0x210 [ 121.420904][ T8735] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.420921][ T8735] do_syscall_64+0x115/0x870 [ 121.420937][ T8735] ? clear_bhb_loop+0x40/0x90 [ 121.420950][ T8735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.420961][ T8735] RIP: 0033:0x7fa92ab9de59 [ 121.420971][ T8735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.420981][ T8735] RSP: 002b:00007fa92b9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.420992][ T8735] RAX: ffffffffffffffda RBX: 00007fa92ae25fa0 RCX: 00007fa92ab9de59 [ 121.420999][ T8735] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.421006][ T8735] RBP: 00007fa92b9e5090 R08: 0000000000000000 R09: 0000000000000000 [ 121.421012][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.421018][ T8735] R13: 00007fa92ae26038 R14: 00007fa92ae25fa0 R15: 00007ffc53cfd588 [ 121.421031][ T8735] [ 121.542158][ T8737] netlink: 'syz.3.910': attribute type 21 has an invalid length. [ 121.544942][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 121.554308][ T5877] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.555120][ T8737] netlink: 'syz.3.910': attribute type 21 has an invalid length. [ 121.557076][ T5877] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.559247][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 121.561925][ T5877] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.561945][ T5877] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.641240][ T8746] tipc: Started in network mode [ 121.642731][ T8746] tipc: Node identity ac14140f, cluster identity 4711 [ 121.645347][ T8746] tipc: New replicast peer: 255.255.255.255 [ 121.647867][ T8746] tipc: Enabled bearer , priority 10 [ 122.064558][ T8761] netlink: 160 bytes leftover after parsing attributes in process `syz.0.920'. [ 122.185497][ T8763] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 122.242252][ T5144] buffer_io_error: 81 callbacks suppressed [ 122.242263][ T5144] Buffer I/O error on dev loop5, logical block 3, async page read [ 122.242306][ C0] blk_print_req_error: 38 callbacks suppressed [ 122.242322][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.254239][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 122.257444][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.261111][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 122.290098][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 122.290113][ T42] audit: type=1326 audit(1784149419.245:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.0.923" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd99ad9de59 code=0x0 [ 122.314792][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.314819][ T5144] Buffer I/O error on dev loop5, logical block 3, async page read [ 122.318583][ C2] Buffer I/O error on dev loop5, logical block 1, async page read [ 122.323438][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.327189][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 122.329853][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.329874][ T5144] Buffer I/O error on dev loop5, logical block 3, async page read [ 122.332975][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 122.332994][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.340922][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 122.343632][ T5144] Buffer I/O error on dev loop5, logical block 3, async page read [ 122.345084][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.349704][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.352997][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.356036][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.359617][ T5144] ldm_validate_partition_table(): Disk read failed. [ 122.363958][ T5144] Dev loop5: unable to read RDB block 0 [ 122.370228][ T5144] loop5: unable to read partition table [ 122.372659][ T5144] loop5: partition table beyond EOD, truncated [ 122.442332][ T8773] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 122.458894][ T8773] 8021q: adding VLAN 0 to HW filter on device bond9 [ 122.475717][ T8773] bond9: (slave geneve8): making interface the new active one [ 122.480149][ T8773] bond9: (slave geneve8): Enslaving as an active interface with an up link [ 122.522564][ T8776] xt_hashlimit: size too large, truncated to 1048576 [ 122.775710][ T5837] tipc: Node number set to 2886997007 [ 123.143673][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 123.635942][ T8796] xt_hashlimit: size too large, truncated to 1048576 [ 123.826957][ T42] audit: type=1400 audit(1784149420.785:597): avc: denied { setopt } for pid=8801 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.924162][ T8807] netlink: 76 bytes leftover after parsing attributes in process `syz.2.936'. [ 123.928311][ T8807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.936'. [ 123.941679][ T8807] bond10: Removing last arp target with arp_interval on [ 123.992370][ T42] audit: type=1326 audit(1784149420.945:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.3.934" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92ab9de59 code=0x0 [ 124.052845][ T6500] xfrm0 speed is unknown, defaulting to 1000 [ 124.413997][ T8586] usb 6-1: 1:1: usb_set_interface failed (-110) [ 124.422112][ T5824] usb 6-1: USB disconnect, device number 6 [ 124.433366][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.485036][ T8827] xt_hashlimit: size too large, truncated to 1048576 [ 124.603353][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 124.606554][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.610262][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.614224][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.616424][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.619369][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.624962][ T10] usb 5-1: config 0 descriptor?? [ 124.647872][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 124.652547][ T8834] block nbd0: Unsupported socket: should be TCP or UNIX. [ 124.740648][ T42] audit: type=1400 audit(1784149421.695:599): avc: denied { ioctl } for pid=8836 comm="syz.1.945" path="socket:[24370]" dev="sockfs" ino=24370 ioctlcmd=0x5873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.750332][ T42] audit: type=1400 audit(1784149421.705:600): avc: denied { execute } for pid=8836 comm="syz.1.945" path="/dev/vsock" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.761896][ T42] audit: type=1400 audit(1784149421.705:601): avc: denied { mmap_zero } for pid=8836 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 124.796274][ T8841] gfs2: not a GFS2 filesystem [ 125.039287][ T10] hid_parser_main: 6 callbacks suppressed [ 125.039301][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 125.043450][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 125.045623][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 125.047802][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 125.049958][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 125.052448][ T10] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 125.171719][ T42] audit: type=1400 audit(1784149422.125:602): avc: denied { bpf } for pid=8850 comm="syz.1.951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.180017][ T42] audit: type=1400 audit(1784149422.125:603): avc: denied { perfmon } for pid=8850 comm="syz.1.951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.235835][ T42] audit: type=1400 audit(1784149422.195:604): avc: denied { module_request } for pid=8818 comm="syz.0.941" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.278621][ T6500] usb 5-1: USB disconnect, device number 10 [ 125.427756][ T8867] xt_hashlimit: size too large, truncated to 1048576 [ 125.523337][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 125.626208][ T8871] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 125.638639][ T8871] 8021q: adding VLAN 0 to HW filter on device bond11 [ 125.649760][ T8871] bond11: (slave geneve9): making interface the new active one [ 125.653364][ T8871] bond11: (slave geneve9): Enslaving as an active interface with an up link [ 125.673190][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 125.679054][ T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.682834][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.686542][ T10] usb 6-1: Product: syz [ 125.688259][ T10] usb 6-1: Manufacturer: syz [ 125.690155][ T10] usb 6-1: SerialNumber: syz [ 125.695590][ T10] usb 6-1: config 0 descriptor?? [ 125.700711][ T10] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 125.704145][ T10] pctv452e: pctv452e_power_ctrl: 1 [ 125.704145][ T10] [ 125.707001][ T10] usb 6-1: selecting invalid altsetting 3 [ 125.709368][ T10] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 125.709368][ T10] [ 125.713384][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 125.724861][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.729121][ T10] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 125.732447][ T10] usb 6-1: media controller created [ 125.734736][ T10] dvb-usb: bulk message failed: -22 (8/0) [ 125.737026][ T10] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 125.740240][ T10] dvb-usb: MAC address reading failed. [ 125.749140][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.796645][ T10] DVB: Unable to find symbol stb0899_attach() [ 125.799190][ T10] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 125.817680][ T8880] fuse: Unknown parameter 'wd3÷ Fé’)œ¦îLéª@!”E(û¢I&Z…G×Vã7jnøÊ·ç.0x0000000000000006' [ 125.853827][ T10] rc_core: IR keymap rc-tt-1500 not found [ 125.856293][ T10] Registered IR keymap rc-empty [ 125.860642][ T10] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 125.866225][ T10] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input11 [ 125.876899][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 125.879264][ T10] pctv452e: pctv452e_power_ctrl: 0 [ 125.879264][ T10] [ 125.881567][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 125.890464][ T8888] xt_hashlimit: size too large, truncated to 1048576 [ 125.904569][ T8857] dvb-usb: bulk message failed: -22 (7/0) [ 125.910114][ T8857] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 125.918834][ T7534] usb 6-1: USB disconnect, device number 7 [ 125.981240][ T7534] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 126.089934][ T8898] xt_hashlimit: size too large, truncated to 1048576 [ 126.561888][ T8908] xt_hashlimit: size too large, truncated to 1048576 [ 126.638532][ T5747] Bluetooth: hci1: unexpected event for opcode 0x100c [ 126.645839][ T42] audit: type=1400 audit(1784149423.595:605): avc: denied { set_context_mgr } for pid=8919 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 126.653296][ T8918] overlay: Bad value for 'metacopy' [ 126.660654][ T8920] binder: 8919:8920 ioctl c0306201 200000000080 returned -14 [ 126.668537][ T8920] binder: 8919:8920 ioctl c0306201 2000000003c0 returned -14 [ 126.864461][ T8940] xt_hashlimit: size too large, truncated to 1048576 [ 126.914657][ T8945] xt_l2tp: unknown flags: 51 [ 126.932097][ T8948] binder: 8947:8948 ioctl c0306201 200000000080 returned -14 [ 126.937194][ T8948] binder: 8947:8948 ioctl c0306201 2000000003c0 returned -14 [ 127.027600][ T8971] Set syz1 is full, maxelem 65536 reached [ 127.160230][ T8979] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 127.172212][ T8979] 8021q: adding VLAN 0 to HW filter on device bond9 [ 127.174814][ T8982] binder: 8981:8982 ioctl c0306201 200000000080 returned -14 [ 127.178582][ T8982] binder: 8981:8982 ioctl c0306201 2000000003c0 returned -14 [ 127.183029][ T8979] bond9: (slave geneve9): making interface the new active one [ 127.187486][ T8979] bond9: (slave geneve9): Enslaving as an active interface with an up link [ 127.260873][ T8988] xt_hashlimit: size too large, truncated to 1048576 [ 127.313401][ T6500] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 127.395316][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 127.463229][ T6500] usb 6-1: Using ep0 maxpacket: 8 [ 127.469981][ T6500] usb 6-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40 [ 127.476706][ T6500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.480154][ T6500] usb 6-1: Product: ê¥ì‹—炞똓ä¿â‹¨åƒâ­¹ç´¶ä¨³îº†è±»âŸ©êžïºâµ§î‡¾é»¨á¿ƒéˆ—ä¯î­¸â£•颭뀅ê½â³ˆá»à³ªï§šæ«µã›‰à§®ç—¶ä¥·è›¾á¥·áŸ¶ê—9姢嶻å³ï§…螆䨕υ黷巠졋ꃴ≥涣î¹é‰¸ç¯¥î¦î‰‘廮鋶㾕é‡ãƒ±äŽ´ï¯ë¶Œï´–ï§¶í‘醤鎗肈饾蹶긓㹦解ﺡâ‰ã¿†á®’íŽã‡ƒæµ¢è„€éŽ¶ë¢œä–䇉é”᳥炸ꗑᨃ쫤㛳킦 [ 127.492666][ T6500] usb 6-1: Manufacturer: ï½±àºä±°æ³ªæ›®ç¥¿æ¹šë»‘Ⲫ섅罇켴৅蘘쥚ê–⩟늪á‡è™¼çš›ë±™å ‰é·¬ãšœã‘¶È–멳캑⬆áä²íˆ…뵉謿䒽蹩涎괫굪졹鴂잡㺰âŸè´ƒë‘࿋æ”唚씛䛓밶⒨펊५íœá€žé‹¨íƒ¸ìµ´ë…›çŒ¼â¸“穃ㅣ邺ጰ㙮焞梋ᄉ맮纺엯ﺕ뛥쬕ݘ⤮┩⣘æ­äµ‚贌擱᪔鎞éºï‚“왹釒䃰抃뾣㩰⟯츉円쎢㘕 [ 127.506471][ T6500] usb 6-1: SerialNumber: ᆫ䜜뚱î°à±¹ì·•䴘⌰鸻⭞䄘쾞⬌åµâ“쌹喥ﱠ럤㾤论咓ä¥äƒ–➌ɷÇ婺朰ḷ䚅ìœê´™â¯ì•–å…䎨î ãŒƒì·“嶦识ǣ炄ï¥î²µà§«å·é¹°ì²ƒî‰ï¥®å™¢æ“Šëª“ꆫ逸 [ 127.532910][ T9012] binder: 9011:9012 ioctl c0306201 200000000080 returned -14 [ 127.538192][ T9012] binder: 9011:9012 ioctl c0306201 2000000003c0 returned -14 [ 127.548281][ T9005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.725363][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 127.725380][ T42] audit: type=1400 audit(1784149424.685:608): avc: denied { ioctl } for pid=9020 comm="syz.0.1009" path="socket:[24514]" dev="sockfs" ino=24514 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.890916][ T42] audit: type=1400 audit(1784149424.845:609): avc: denied { bind } for pid=9027 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.919848][ T42] audit: type=1400 audit(1784149424.875:610): avc: denied { validate_trans } for pid=8973 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.929793][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 127.947970][ T42] audit: type=1400 audit(1784149424.905:611): avc: denied { ioctl } for pid=9027 comm="syz.3.1008" path="socket:[24533]" dev="sockfs" ino=24533 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.960142][ T9040] binder: 9039:9040 ioctl c0306201 200000000080 returned -14 [ 127.964850][ T9040] binder: 9039:9040 ioctl c0306201 2000000003c0 returned -14 [ 127.966960][ T6500] usbhid 6-1:1.0: can't add hid device: -71 [ 127.972809][ T6500] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 127.979587][ T6500] usb 6-1: USB disconnect, device number 8 [ 128.020636][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 128.024741][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 128.069134][ T9053] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 128.086750][ T9053] 8021q: adding VLAN 0 to HW filter on device bond10 [ 128.133745][ T9053] bond10: (slave geneve11): making interface the new active one [ 128.138855][ T9053] bond10: (slave geneve11): Enslaving as an active interface with an up link [ 128.232386][ T9056] kvm_intel: kvm [9055]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x100000001 [ 128.249339][ T9061] vxcan0: tx address claim with dest, not broadcast [ 128.316998][ T9071] xt_hashlimit: size too large, truncated to 1048576 [ 128.329592][ T42] audit: type=1400 audit(1784149425.285:612): avc: denied { bind } for pid=9072 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.338746][ T42] audit: type=1400 audit(1784149425.285:613): avc: denied { write } for pid=9072 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.340714][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1018'. [ 128.382339][ T9079] binder: 9078:9079 ioctl c0306201 200000000080 returned -14 [ 128.486524][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 128.497767][ T42] audit: type=1400 audit(1784149425.455:614): avc: denied { module_load } for pid=9087 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.505049][ T9088] Invalid ELF header type: 3 != 1 [ 128.653889][ T9099] tipc: Started in network mode [ 128.656475][ T9099] tipc: Node identity 4, cluster identity 4711 [ 128.658887][ T9099] tipc: Node number set to 4 [ 128.662770][ T9099] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1033'. [ 128.668788][ T9099] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 128.671904][ T9099] openvswitch: netlink: Message has 4 unknown bytes. [ 128.684828][ T9101] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.694517][ T9101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1035'. [ 128.798063][ T9110] xt_hashlimit: size too large, truncated to 1048576 [ 128.852329][ T9108] overlay: ./file0 is not a directory [ 128.883232][ T5824] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.059510][ T5824] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.062261][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.065790][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.068801][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.072475][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.077674][ T5824] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.080548][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.083557][ T5824] usb 5-1: Product: syz [ 129.084897][ T5824] usb 5-1: Manufacturer: syz [ 129.088992][ T9097] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.094775][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 129.096776][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 129.102371][ T5824] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.105192][ T5824] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.297121][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.299333][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.301841][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.304529][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.306697][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.308879][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.310973][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.313139][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.313217][ T42] audit: type=1400 audit(1784149426.255:615): avc: denied { read write } for pid=9096 comm="syz.0.1034" name="cdc-wdm0" dev="devtmpfs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.315707][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.325582][ T42] audit: type=1400 audit(1784149426.255:616): avc: denied { open } for pid=9096 comm="syz.0.1034" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 129.327095][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.327293][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.340435][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.341582][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.341594][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.342587][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.342598][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.343277][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.343294][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.343484][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.343494][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.369495][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1034'. [ 129.424989][ T5824] usb 5-1: USB disconnect, device number 11 [ 129.425036][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 129.698897][ T42] audit: type=1400 audit(1784149426.655:617): avc: denied { getopt } for pid=9126 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.757757][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 129.761195][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.764565][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.771198][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.776701][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.086575][ T9142] syz.2.1051 (9142): drop_caches: 2 [ 130.271825][ T9155] binder: 9154:9155 ioctl c0306201 200000000640 returned -22 [ 130.288200][ T9155] ip6erspan0: entered allmulticast mode [ 130.343633][ T9160] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.362611][ T9162] xt_hashlimit: size too large, truncated to 1048576 [ 130.367531][ T9160] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 130.468386][ T9168] xt_hashlimit: size too large, truncated to 1048576 [ 130.526474][ T9170] netlink: 'syz.0.1060': attribute type 3 has an invalid length. [ 130.816032][ T9178] xt_hashlimit: size too large, truncated to 1048576 [ 130.816378][ T9176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 130.942925][ T9184] binder: 9183:9184 ioctl c0306201 200000000080 returned -14 [ 130.947400][ T9184] binder: 9183:9184 ioctl c0306201 2000000003c0 returned -14 [ 131.249592][ T9192] xt_hashlimit: size too large, truncated to 1048576 [ 131.480476][ T9198] netlink: 'syz.0.1071': attribute type 21 has an invalid length. [ 131.483974][ T9198] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 131.486650][ T9198] netlink: 'syz.0.1071': attribute type 5 has an invalid length. [ 131.498872][ T9198] overlayfs: unescaped trailing colons in lowerdir mount option. [ 131.557676][ T9202] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 131.574582][ T9202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 131.590079][ T9202] bond10: (slave geneve10): making interface the new active one [ 131.598060][ T9202] bond10: (slave geneve10): Enslaving as an active interface with an up link [ 131.904801][ T9219] xt_hashlimit: size too large, truncated to 1048576 [ 132.183626][ T9233] xt_hashlimit: size too large, truncated to 1048576 [ 132.396841][ T9242] binder: 9241:9242 ioctl c0306201 200000000080 returned -14 [ 132.401387][ T9242] binder: 9241:9242 ioctl c0306201 2000000003c0 returned -14 [ 132.405697][ T9242] binder_alloc: 9241: binder_alloc_buf, no vma [ 132.458115][ T9244] FAULT_INJECTION: forcing a failure. [ 132.458115][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 132.463533][ T9244] CPU: 2 UID: 0 PID: 9244 Comm: syz.2.1086 Not tainted syzkaller #0 PREEMPT(full) [ 132.463555][ T9244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.463565][ T9244] Call Trace: [ 132.463571][ T9244] [ 132.463578][ T9244] dump_stack_lvl+0x100/0x190 [ 132.463602][ T9244] should_fail_ex.cold+0x5/0xa [ 132.463621][ T9244] should_failslab+0xc2/0x120 [ 132.463640][ T9244] kmem_cache_alloc_noprof+0x91/0x6a0 [ 132.463664][ T9244] ? do_getname+0x35/0x390 [ 132.463685][ T9244] do_getname+0x35/0x390 [ 132.463705][ T9244] user_path_at+0x26/0x60 [ 132.463727][ T9244] __x64_sys_mount+0x1fb/0x310 [ 132.463747][ T9244] ? __pfx___x64_sys_mount+0x10/0x10 [ 132.463772][ T9244] do_syscall_64+0x115/0x870 [ 132.463791][ T9244] ? clear_bhb_loop+0x40/0x90 [ 132.463804][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.463816][ T9244] RIP: 0033:0x7fc628b9de59 [ 132.463825][ T9244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.463836][ T9244] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.463848][ T9244] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 132.463854][ T9244] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 132.463861][ T9244] RBP: 00007fc626df6090 R08: 0000200000000940 R09: 0000000000000000 [ 132.463867][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.463873][ T9244] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 132.463886][ T9244] [ 132.466517][ T9246] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.615101][ T9209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.974521][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.978666][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989902][ T9255] __nla_validate_parse: 5 callbacks suppressed [ 132.989913][ T9255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1090'. [ 133.280034][ T9261] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 133.298066][ T9261] 8021q: adding VLAN 0 to HW filter on device bond11 [ 133.358973][ T9262] 8021q: adding VLAN 0 to HW filter on device bond11 [ 133.361779][ T9262] bond11: (slave gre1): The slave device specified does not support setting the MAC address [ 133.367582][ T9262] bond11: (slave gre1): Error -95 calling set_mac_address [ 133.387509][ T9261] gretap1: entered promiscuous mode [ 133.395387][ T9261] bond11: (slave gretap1): making interface the new active one [ 133.399320][ T9261] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 133.461418][ T9269] binder: 9268:9269 ioctl c0306201 200000000080 returned -14 [ 133.471992][ T9269] binder: 9268:9269 ioctl c0306201 2000000003c0 returned -14 [ 133.475720][ T9269] binder_alloc: 9268: binder_alloc_buf, no vma [ 133.636780][ T9278] 9pnet_virtio: no channels available for device syz [ 133.933486][ T65] Bluetooth: hci4: command 0xfc11 tx timeout [ 133.941165][ T5747] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 134.237470][ T9293] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 134.267723][ T9293] 8021q: adding VLAN 0 to HW filter on device bond8 [ 134.280500][ T9293] bond8: (slave geneve8): making interface the new active one [ 134.284193][ T9296] xt_hashlimit: size too large, truncated to 1048576 [ 134.286498][ T9293] bond8: (slave geneve8): Enslaving as an active interface with an up link [ 134.382913][ T9300] binder: 9299:9300 ioctl c0306201 200000000080 returned -14 [ 134.388247][ T9300] binder: 9299:9300 ioctl c0306201 2000000003c0 returned -14 [ 134.418749][ T9302] xt_hashlimit: size too large, truncated to 1048576 [ 134.536733][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 134.722885][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 134.729743][ T9314] FAULT_INJECTION: forcing a failure. [ 134.729743][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 134.731156][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 134.736105][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.0.1112 Not tainted syzkaller #0 PREEMPT(full) [ 134.736127][ T9314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.736138][ T9314] Call Trace: [ 134.736145][ T9314] [ 134.736151][ T9314] dump_stack_lvl+0x100/0x190 [ 134.736177][ T9314] should_fail_ex.cold+0x5/0xa [ 134.736200][ T9314] should_failslab+0xc2/0x120 [ 134.736237][ T9314] __kmalloc_noprof+0xfc/0x820 [ 134.736254][ T9314] ? rcu_is_watching+0x12/0xc0 [ 134.736278][ T9314] ? tomoyo_realpath_from_path+0xb6/0x690 [ 134.736307][ T9314] tomoyo_realpath_from_path+0xb6/0x690 [ 134.736338][ T9314] tomoyo_mount_acl+0x1b6/0x8b0 [ 134.736360][ T9314] ? is_bpf_text_address+0x8a/0x1a0 [ 134.736380][ T9314] ? bpf_ksym_find+0x128/0x1c0 [ 134.736404][ T9314] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.736433][ T9314] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 134.736453][ T9314] ? kernel_text_address+0x8d/0x100 [ 134.736472][ T9314] ? unwind_get_return_address+0x59/0xa0 [ 134.736521][ T9314] ? tomoyo_domain+0xb2/0x150 [ 134.736537][ T9314] ? tomoyo_profile+0x47/0x60 [ 134.736556][ T9314] tomoyo_mount_permission+0x214/0x460 [ 134.736578][ T9314] ? tomoyo_mount_permission+0x1f6/0x460 [ 134.736608][ T9314] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 134.736646][ T9314] security_sb_mount+0xdd/0x270 [ 134.736669][ T9314] path_mount+0x158/0x23d0 [ 134.736694][ T9314] ? __pfx_path_mount+0x10/0x10 [ 134.736711][ T9314] ? lockdep_hardirqs_on+0x78/0x100 [ 134.736740][ T9314] ? putname+0xb1/0x110 [ 134.736756][ T9314] ? kmem_cache_free+0x127/0x6b0 [ 134.736789][ T9314] ? __x64_sys_mount+0x293/0x310 [ 134.736807][ T9314] __x64_sys_mount+0x293/0x310 [ 134.736827][ T9314] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.736854][ T9314] do_syscall_64+0x115/0x870 [ 134.736878][ T9314] ? clear_bhb_loop+0x40/0x90 [ 134.736899][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.736916][ T9314] RIP: 0033:0x7fd99ad9de59 [ 134.736932][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.736948][ T9314] RSP: 002b:00007fd99bb8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.736967][ T9314] RAX: ffffffffffffffda RBX: 00007fd99b025fa0 RCX: 00007fd99ad9de59 [ 134.736978][ T9314] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 134.736988][ T9314] RBP: 00007fd99bb8a090 R08: 0000200000000940 R09: 0000000000000000 [ 134.736998][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.737008][ T9314] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 134.737031][ T9314] [ 134.737082][ T9314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.900006][ T9319] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 134.927926][ T9319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 134.944925][ T9319] bond11: (slave geneve12): making interface the new active one [ 134.952663][ T9319] bond11: (slave geneve12): Enslaving as an active interface with an up link [ 134.984012][ T9324] xt_hashlimit: size too large, truncated to 1048576 [ 135.118405][ T9335] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1120'. [ 135.163743][ T9341] FAULT_INJECTION: forcing a failure. [ 135.163743][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 135.167865][ T9341] CPU: 3 UID: 0 PID: 9341 Comm: syz.0.1122 Not tainted syzkaller #0 PREEMPT(full) [ 135.167880][ T9341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.167886][ T9341] Call Trace: [ 135.167891][ T9341] [ 135.167896][ T9341] dump_stack_lvl+0x100/0x190 [ 135.167913][ T9341] should_fail_ex.cold+0x5/0xa [ 135.167927][ T9341] should_failslab+0xc2/0x120 [ 135.167940][ T9341] __kmalloc_noprof+0xfc/0x820 [ 135.167952][ T9341] ? tomoyo_encode2+0xfb/0x3c0 [ 135.167970][ T9341] tomoyo_encode2+0xfb/0x3c0 [ 135.167987][ T9341] tomoyo_encode+0x29/0x50 [ 135.168002][ T9341] tomoyo_realpath_from_path+0x18c/0x690 [ 135.168021][ T9341] tomoyo_mount_acl+0x1b6/0x8b0 [ 135.168035][ T9341] ? is_bpf_text_address+0x8a/0x1a0 [ 135.168049][ T9341] ? bpf_ksym_find+0x128/0x1c0 [ 135.168064][ T9341] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.168084][ T9341] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 135.168097][ T9341] ? kernel_text_address+0x8d/0x100 [ 135.168108][ T9341] ? unwind_get_return_address+0x59/0xa0 [ 135.168138][ T9341] ? tomoyo_domain+0xb2/0x150 [ 135.168150][ T9341] ? tomoyo_profile+0x47/0x60 [ 135.168161][ T9341] tomoyo_mount_permission+0x214/0x460 [ 135.168175][ T9341] ? tomoyo_mount_permission+0x1f6/0x460 [ 135.168191][ T9341] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 135.168213][ T9341] security_sb_mount+0xdd/0x270 [ 135.168227][ T9341] path_mount+0x158/0x23d0 [ 135.168242][ T9341] ? __pfx_path_mount+0x10/0x10 [ 135.168253][ T9341] ? lockdep_hardirqs_on+0x78/0x100 [ 135.168272][ T9341] ? putname+0xb1/0x110 [ 135.168281][ T9341] ? kmem_cache_free+0x127/0x6b0 [ 135.168302][ T9341] ? __x64_sys_mount+0x293/0x310 [ 135.168313][ T9341] __x64_sys_mount+0x293/0x310 [ 135.168326][ T9341] ? __pfx___x64_sys_mount+0x10/0x10 [ 135.168342][ T9341] do_syscall_64+0x115/0x870 [ 135.168358][ T9341] ? clear_bhb_loop+0x40/0x90 [ 135.168371][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.168382][ T9341] RIP: 0033:0x7fd99ad9de59 [ 135.168392][ T9341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.168402][ T9341] RSP: 002b:00007fd99bb8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.168413][ T9341] RAX: ffffffffffffffda RBX: 00007fd99b025fa0 RCX: 00007fd99ad9de59 [ 135.168420][ T9341] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 135.168426][ T9341] RBP: 00007fd99bb8a090 R08: 0000200000000940 R09: 0000000000000000 [ 135.168432][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.168438][ T9341] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 135.168452][ T9341] [ 135.168463][ T9341] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.620821][ T9351] FAULT_INJECTION: forcing a failure. [ 135.620821][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 135.629783][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.2.1125 Not tainted syzkaller #0 PREEMPT(full) [ 135.629800][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.629806][ T9351] Call Trace: [ 135.629810][ T9351] [ 135.629815][ T9351] dump_stack_lvl+0x100/0x190 [ 135.629832][ T9351] should_fail_ex.cold+0x5/0xa [ 135.629846][ T9351] should_failslab+0xc2/0x120 [ 135.629859][ T9351] __kmalloc_noprof+0xfc/0x820 [ 135.629869][ T9351] ? kasan_save_track+0x14/0x30 [ 135.629880][ T9351] ? ethnl_default_start+0x15a/0x3f0 [ 135.629899][ T9351] ethnl_default_start+0x15a/0x3f0 [ 135.629914][ T9351] ? __pfx_ethnl_default_start+0x10/0x10 [ 135.629927][ T9351] genl_start+0x601/0x970 [ 135.629946][ T9351] __netlink_dump_start+0x60e/0x990 [ 135.629962][ T9351] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 135.629993][ T9351] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 135.630015][ T9351] ? __pfx_genl_get_cmd+0x10/0x10 [ 135.630030][ T9351] ? __pfx_genl_start+0x10/0x10 [ 135.630045][ T9351] ? __pfx_genl_dumpit+0x10/0x10 [ 135.630060][ T9351] ? __pfx_genl_done+0x10/0x10 [ 135.630077][ T9351] ? __dev_queue_xmit+0xa11/0x4940 [ 135.630094][ T9351] ? __radix_tree_lookup+0x217/0x2b0 [ 135.630119][ T9351] genl_rcv_msg+0x471/0x800 [ 135.630137][ T9351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.630154][ T9351] ? __pfx_ethnl_default_start+0x10/0x10 [ 135.630167][ T9351] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 135.630180][ T9351] ? __pfx_ethnl_default_done+0x10/0x10 [ 135.630198][ T9351] netlink_rcv_skb+0x159/0x420 [ 135.630213][ T9351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.630230][ T9351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.630251][ T9351] ? netlink_deliver_tap+0x1ae/0xcc0 [ 135.630267][ T9351] genl_rcv+0x28/0x40 [ 135.630281][ T9351] netlink_unicast+0x585/0x850 [ 135.630298][ T9351] ? __pfx_netlink_unicast+0x10/0x10 [ 135.630317][ T9351] netlink_sendmsg+0x8b0/0xda0 [ 135.630334][ T9351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.630351][ T9351] ? selinux_socket_sendmsg+0x198/0x2f0 [ 135.630368][ T9351] ____sys_sendmsg+0xa4d/0xbe0 [ 135.630382][ T9351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.630397][ T9351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.630417][ T9351] ___sys_sendmsg+0x190/0x1e0 [ 135.630432][ T9351] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.630446][ T9351] ? __lock_acquire+0x49f/0x1a40 [ 135.630459][ T9351] ? get_pid_task+0x106/0x250 [ 135.630489][ T9351] __sys_sendmsg+0x160/0x210 [ 135.630500][ T9351] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.630519][ T9351] do_syscall_64+0x115/0x870 [ 135.630534][ T9351] ? clear_bhb_loop+0x40/0x90 [ 135.630546][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.630558][ T9351] RIP: 0033:0x7fc628b9de59 [ 135.630567][ T9351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.630577][ T9351] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.630589][ T9351] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 135.630595][ T9351] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 135.630603][ T9351] RBP: 00007fc626df6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.630610][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.630616][ T9351] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 135.630629][ T9351] [ 135.830880][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 135.830891][ T42] audit: type=1400 audit(1784149432.785:631): avc: denied { bind } for pid=9360 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 135.833509][ T9363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1130'. [ 135.840744][ T42] audit: type=1400 audit(1784149432.785:632): avc: denied { name_bind } for pid=9360 comm="syz.2.1128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 135.850963][ T42] audit: type=1400 audit(1784149432.785:633): avc: denied { node_bind } for pid=9360 comm="syz.2.1128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 135.865594][ T9365] MINIX-fs: unable to read superblock [ 135.995565][ T42] audit: type=1400 audit(1784149432.955:634): avc: denied { write } for pid=9381 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.022632][ T9385] FAULT_INJECTION: forcing a failure. [ 136.022632][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 136.027130][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.1.1138 Not tainted syzkaller #0 PREEMPT(full) [ 136.027145][ T9385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.027152][ T9385] Call Trace: [ 136.027156][ T9385] [ 136.027160][ T9385] dump_stack_lvl+0x100/0x190 [ 136.027178][ T9385] should_fail_ex.cold+0x5/0xa [ 136.027192][ T9385] should_failslab+0xc2/0x120 [ 136.027205][ T9385] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 136.027218][ T9385] ? __alloc_skb+0x140/0x710 [ 136.027231][ T9385] __alloc_skb+0x140/0x710 [ 136.027240][ T9385] ? __alloc_skb+0x5b7/0x710 [ 136.027249][ T9385] ? __pfx___alloc_skb+0x10/0x10 [ 136.027258][ T9385] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 136.027278][ T9385] netlink_dump+0x194/0xd00 [ 136.027291][ T9385] ? __kasan_kmalloc+0xaa/0xb0 [ 136.027304][ T9385] ? __pfx_netlink_dump+0x10/0x10 [ 136.027322][ T9385] ? __pfx_ethnl_default_start+0x10/0x10 [ 136.027336][ T9385] ? genl_start+0x67a/0x970 [ 136.027353][ T9385] __netlink_dump_start+0x6d6/0x990 [ 136.027369][ T9385] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 136.027388][ T9385] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 136.027408][ T9385] ? __pfx_genl_get_cmd+0x10/0x10 [ 136.027423][ T9385] ? __pfx_genl_start+0x10/0x10 [ 136.027437][ T9385] ? __pfx_genl_dumpit+0x10/0x10 [ 136.027453][ T9385] ? __pfx_genl_done+0x10/0x10 [ 136.027470][ T9385] ? __dev_queue_xmit+0xa11/0x4940 [ 136.027486][ T9385] ? __radix_tree_lookup+0x217/0x2b0 [ 136.027505][ T9385] genl_rcv_msg+0x471/0x800 [ 136.027522][ T9385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.027539][ T9385] ? __pfx_ethnl_default_start+0x10/0x10 [ 136.027552][ T9385] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 136.027565][ T9385] ? __pfx_ethnl_default_done+0x10/0x10 [ 136.027583][ T9385] netlink_rcv_skb+0x159/0x420 [ 136.027603][ T9385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.027621][ T9385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.027641][ T9385] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.027660][ T9385] genl_rcv+0x28/0x40 [ 136.027679][ T9385] netlink_unicast+0x585/0x850 [ 136.027702][ T9385] ? __pfx_netlink_unicast+0x10/0x10 [ 136.027723][ T9385] netlink_sendmsg+0x8b0/0xda0 [ 136.027740][ T9385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.027757][ T9385] ? selinux_socket_sendmsg+0x198/0x2f0 [ 136.027774][ T9385] ____sys_sendmsg+0xa4d/0xbe0 [ 136.027792][ T9385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.027816][ T9385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.027837][ T9385] ___sys_sendmsg+0x190/0x1e0 [ 136.027851][ T9385] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.027865][ T9385] ? __lock_acquire+0x49f/0x1a40 [ 136.027877][ T9385] ? get_pid_task+0x106/0x250 [ 136.027923][ T9385] __sys_sendmsg+0x160/0x210 [ 136.027935][ T9385] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.027953][ T9385] do_syscall_64+0x115/0x870 [ 136.027969][ T9385] ? clear_bhb_loop+0x40/0x90 [ 136.027982][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.027993][ T9385] RIP: 0033:0x7f07af39de59 [ 136.028003][ T9385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.028013][ T9385] RSP: 002b:00007f07b02fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.028024][ T9385] RAX: ffffffffffffffda RBX: 00007f07af625fa0 RCX: 00007f07af39de59 [ 136.028031][ T9385] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 136.028037][ T9385] RBP: 00007f07b02fc090 R08: 0000000000000000 R09: 0000000000000000 [ 136.028043][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.028049][ T9385] R13: 00007f07af626038 R14: 00007f07af625fa0 R15: 00007fff40b40a98 [ 136.028067][ T9385] [ 136.210555][ T9394] xt_socket: unknown flags 0x4c [ 136.568087][ T9420] binder: 9419:9420 ioctl c0306201 200000000080 returned -14 [ 136.571729][ T9420] binder: BINDER_SET_CONTEXT_MGR already set [ 136.574045][ T9420] binder: 9419:9420 ioctl 4018620d 200000000040 returned -16 [ 136.576905][ T9420] binder: 9419:9420 ioctl c0306201 2000000003c0 returned -14 [ 136.594840][ T9422] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.620260][ T9426] xt_hashlimit: size too large, truncated to 1048576 [ 136.627288][ T9428] fuse: fd is not a fuse device [ 136.672504][ T9433] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 136.676826][ T9433] netlink: 'syz.1.1157': attribute type 21 has an invalid length. [ 136.731640][ T9439] netlink: 'syz.1.1159': attribute type 64 has an invalid length. [ 136.739632][ T9439] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 136.743773][ T9439] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1159'. [ 136.764651][ T9444] FAULT_INJECTION: forcing a failure. [ 136.764651][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 136.768646][ T42] audit: type=1400 audit(1784149433.725:635): avc: denied { read } for pid=9440 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.768817][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.0.1160 Not tainted syzkaller #0 PREEMPT(full) [ 136.768831][ T9444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.768838][ T9444] Call Trace: [ 136.768842][ T9444] [ 136.768847][ T9444] dump_stack_lvl+0x100/0x190 [ 136.768864][ T9444] should_fail_ex.cold+0x5/0xa [ 136.768878][ T9444] should_failslab+0xc2/0x120 [ 136.768891][ T9444] __kmalloc_cache_noprof+0x91/0x6c0 [ 136.768907][ T9444] ? find_held_lock+0x2b/0x80 [ 136.768922][ T9444] ? alloc_fs_context+0x57/0xf40 [ 136.768938][ T9444] alloc_fs_context+0x57/0xf40 [ 136.768950][ T9444] ? __get_fs_type+0xe3/0x200 [ 136.768963][ T9444] path_mount+0xdbd/0x23d0 [ 136.768978][ T9444] ? __pfx_path_mount+0x10/0x10 [ 136.768989][ T9444] ? lockdep_hardirqs_on+0x78/0x100 [ 136.769007][ T9444] ? putname+0xb1/0x110 [ 136.769017][ T9444] ? kmem_cache_free+0x127/0x6b0 [ 136.769037][ T9444] ? __x64_sys_mount+0x293/0x310 [ 136.769048][ T9444] __x64_sys_mount+0x293/0x310 [ 136.769060][ T9444] ? __pfx___x64_sys_mount+0x10/0x10 [ 136.769076][ T9444] do_syscall_64+0x115/0x870 [ 136.769092][ T9444] ? clear_bhb_loop+0x40/0x90 [ 136.769105][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.769116][ T9444] RIP: 0033:0x7fd99ad9de59 [ 136.769125][ T9444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.769135][ T9444] RSP: 002b:00007fd99bb8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.769146][ T9444] RAX: ffffffffffffffda RBX: 00007fd99b025fa0 RCX: 00007fd99ad9de59 [ 136.769153][ T9444] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 136.769159][ T9444] RBP: 00007fd99bb8a090 R08: 0000200000000940 R09: 0000000000000000 [ 136.769166][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.769172][ T9444] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 136.769184][ T9444] [ 136.801510][ T9450] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 136.852865][ T9452] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 136.856110][ T9450] netlink: 'syz.0.1164': attribute type 4 has an invalid length. [ 136.858382][ T9452] netlink: 'syz.0.1164': attribute type 4 has an invalid length. [ 136.861225][ T9450] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1164'. [ 136.867211][ T9452] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1164'. [ 136.933536][ T9458] xt_hashlimit: size too large, truncated to 1048576 [ 137.105379][ T9474] FAULT_INJECTION: forcing a failure. [ 137.105379][ T9474] name failslab, interval 1, probability 0, space 0, times 0 [ 137.110405][ T9474] CPU: 2 UID: 0 PID: 9474 Comm: syz.2.1174 Not tainted syzkaller #0 PREEMPT(full) [ 137.110420][ T9474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.110426][ T9474] Call Trace: [ 137.110431][ T9474] [ 137.110436][ T9474] dump_stack_lvl+0x100/0x190 [ 137.110453][ T9474] should_fail_ex.cold+0x5/0xa [ 137.110466][ T9474] should_failslab+0xc2/0x120 [ 137.110480][ T9474] __kmalloc_cache_noprof+0x91/0x6c0 [ 137.110497][ T9474] ? v9fs_init_fs_context+0x47/0x5c0 [ 137.110514][ T9474] v9fs_init_fs_context+0x47/0x5c0 [ 137.110527][ T9474] alloc_fs_context+0x60c/0xf40 [ 137.110543][ T9474] path_mount+0xdbd/0x23d0 [ 137.110562][ T9474] ? __pfx_path_mount+0x10/0x10 [ 137.110573][ T9474] ? lockdep_hardirqs_on+0x78/0x100 [ 137.110591][ T9474] ? putname+0xb1/0x110 [ 137.110601][ T9474] ? kmem_cache_free+0x127/0x6b0 [ 137.110621][ T9474] ? __x64_sys_mount+0x293/0x310 [ 137.110632][ T9474] __x64_sys_mount+0x293/0x310 [ 137.110649][ T9474] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.110672][ T9474] do_syscall_64+0x115/0x870 [ 137.110694][ T9474] ? clear_bhb_loop+0x40/0x90 [ 137.110713][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.110729][ T9474] RIP: 0033:0x7fc628b9de59 [ 137.110743][ T9474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.110758][ T9474] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.110774][ T9474] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 137.110782][ T9474] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 137.110788][ T9474] RBP: 00007fc626df6090 R08: 0000200000000940 R09: 0000000000000000 [ 137.110794][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.110800][ T9474] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 137.110813][ T9474] [ 137.297485][ T5747] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 137.313767][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 137.380466][ T9495] xt_hashlimit: size too large, truncated to 1048576 [ 137.531508][ T9507] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 137.559059][ T9507] 8021q: adding VLAN 0 to HW filter on device bond12 [ 137.585883][ T9507] bond12: (slave geneve10): making interface the new active one [ 137.591340][ T9507] bond12: (slave geneve10): Enslaving as an active interface with an up link [ 137.647366][ T9516] sctp: [Deprecated]: syz.2.1188 (pid 9516) Use of int in maxseg socket option. [ 137.647366][ T9516] Use struct sctp_assoc_value instead [ 137.655565][ T42] audit: type=1400 audit(1784149434.615:636): avc: denied { ioctl } for pid=9515 comm="syz.2.1188" path="socket:[27424]" dev="sockfs" ino=27424 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.780261][ T9526] xt_hashlimit: size too large, truncated to 1048576 [ 137.863445][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 137.886206][ T42] audit: type=1400 audit(1784149434.845:637): avc: denied { block_suspend } for pid=9529 comm="syz.2.1194" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.920354][ T9530] vlan0: entered promiscuous mode [ 137.922573][ T9530] hsr0: entered promiscuous mode [ 137.925413][ T9530] vlan0: entered allmulticast mode [ 137.927300][ T9530] hsr0: entered allmulticast mode [ 137.929431][ T9530] hsr_slave_0: entered allmulticast mode [ 137.931390][ T9530] hsr_slave_1: entered allmulticast mode [ 137.970465][ T9536] FAULT_INJECTION: forcing a failure. [ 137.970465][ T9536] name failslab, interval 1, probability 0, space 0, times 0 [ 137.976324][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 137.976345][ T9536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.976356][ T9536] Call Trace: [ 137.976363][ T9536] [ 137.976370][ T9536] dump_stack_lvl+0x100/0x190 [ 137.976397][ T9536] should_fail_ex.cold+0x5/0xa [ 137.976420][ T9536] should_failslab+0xc2/0x120 [ 137.976441][ T9536] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 137.976466][ T9536] ? __pfx_kasan_disable_current+0x10/0x10 [ 137.976487][ T9536] ? v9fs_init_fs_context+0x17f/0x5c0 [ 137.976510][ T9536] kstrdup+0x51/0xe0 [ 137.976529][ T9536] v9fs_init_fs_context+0x17f/0x5c0 [ 137.976552][ T9536] alloc_fs_context+0x60c/0xf40 [ 137.976577][ T9536] path_mount+0xdbd/0x23d0 [ 137.976616][ T9536] ? __pfx_path_mount+0x10/0x10 [ 137.976636][ T9536] ? lockdep_hardirqs_on+0x78/0x100 [ 137.976663][ T9536] ? putname+0xb1/0x110 [ 137.976677][ T9536] ? kmem_cache_free+0x127/0x6b0 [ 137.976710][ T9536] ? __x64_sys_mount+0x293/0x310 [ 137.976729][ T9536] __x64_sys_mount+0x293/0x310 [ 137.976749][ T9536] ? __pfx___x64_sys_mount+0x10/0x10 [ 137.976777][ T9536] do_syscall_64+0x115/0x870 [ 137.976801][ T9536] ? clear_bhb_loop+0x40/0x90 [ 137.976822][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.976837][ T9536] RIP: 0033:0x7fc628b9de59 [ 137.976853][ T9536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.976870][ T9536] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.976889][ T9536] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 137.976900][ T9536] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 137.976911][ T9536] RBP: 00007fc626df6090 R08: 0000200000000940 R09: 0000000000000000 [ 137.976921][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.976931][ T9536] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 137.976955][ T9536] [ 138.058402][ T9538] netlink: 'syz.3.1197': attribute type 1 has an invalid length. [ 138.063605][ T10] usb 6-1: device descriptor read/64, error -71 [ 138.081885][ T9538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 138.108472][ T9538] bond9: (slave geneve9): making interface the new active one [ 138.115129][ T9538] bond9: (slave geneve9): Enslaving as an active interface with an up link [ 138.117605][ T9541] xt_hashlimit: size too large, truncated to 1048576 [ 138.315673][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 138.395163][ T9553] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 138.431965][ T42] audit: type=1400 audit(1784149435.385:638): avc: denied { name_bind } for pid=9554 comm="syz.3.1205" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.447138][ T9557] team0: Device xfrm0 is of different type [ 138.453300][ T10] usb 6-1: device descriptor read/64, error -71 [ 138.559418][ T9557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9557 comm=syz.2.1204 [ 138.563499][ T10] usb usb6-port1: attempt power cycle [ 138.611293][ T9565] binder: 9564:9565 ioctl c0306201 2000000003c0 returned -14 [ 138.702193][ T9570] xfrm0 speed is unknown, defaulting to 1000 [ 138.837790][ T9574] xt_hashlimit: size too large, truncated to 1048576 [ 138.903272][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.930542][ T10] usb 6-1: device descriptor read/8, error -71 [ 138.948540][ T9572] __nla_validate_parse: 67 callbacks suppressed [ 138.948556][ T9572] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1209'. [ 139.089987][ T9584] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 139.160425][ T42] audit: type=1326 audit(1784149436.115:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.3.1215" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92ab9de59 code=0x0 [ 139.173471][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 139.203652][ T10] usb 6-1: device descriptor read/8, error -71 [ 139.313543][ T10] usb usb6-port1: unable to enumerate USB device [ 139.388096][ T7436] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 139.825789][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 139.828944][ T9608] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1221'. [ 139.850092][ T9608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.858380][ T9608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.867397][ T9608] bond0 (unregistering): Released all slaves [ 139.883577][ T9607] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1221'. [ 140.022724][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.024132][ T9615] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 140.026591][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.045752][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.055790][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.058670][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.064679][ T9615] bond0: (slave geneve10): making interface the new active one [ 140.070213][ T9615] bond0: (slave geneve10): Enslaving as an active interface with an up link [ 140.075467][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.079207][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.147967][ T9620] xt_hashlimit: size too large, truncated to 1048576 [ 140.271838][ T42] audit: type=1400 audit(1784149437.225:640): avc: denied { connect } for pid=9624 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.288920][ T9625] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.466760][ T9632] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.472974][ T9632] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 140.479710][ T9632] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 140.489849][ T9632] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 140.655362][ T9639] FAULT_INJECTION: forcing a failure. [ 140.655362][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 140.659522][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT(full) [ 140.659537][ T9639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.659544][ T9639] Call Trace: [ 140.659548][ T9639] [ 140.659553][ T9639] dump_stack_lvl+0x100/0x190 [ 140.659570][ T9639] should_fail_ex.cold+0x5/0xa [ 140.659583][ T9639] should_failslab+0xc2/0x120 [ 140.659597][ T9639] __kmalloc_cache_noprof+0x91/0x6c0 [ 140.659613][ T9639] ? p9_client_create+0xaf/0xd40 [ 140.659720][ T9639] p9_client_create+0xaf/0xd40 [ 140.659733][ T9639] ? __pfx_p9_client_create+0x10/0x10 [ 140.659747][ T9639] ? lockdep_init_map_type+0x5c/0x250 [ 140.659760][ T9639] ? __raw_spin_lock_init+0x3a/0x110 [ 140.659776][ T9639] v9fs_session_init+0x3c/0xdd0 [ 140.659787][ T9639] ? v9fs_get_tree+0x9c/0xb50 [ 140.659802][ T9639] v9fs_get_tree+0xb8/0xb50 [ 140.659814][ T9639] ? rcu_is_watching+0x12/0xc0 [ 140.659829][ T9639] ? __pfx_v9fs_get_tree+0x10/0x10 [ 140.659844][ T9639] ? bpf_lsm_capable+0x9/0x10 [ 140.659853][ T9639] ? security_capable+0x80/0x260 [ 140.659866][ T9639] vfs_get_tree+0x92/0x320 [ 140.659881][ T9639] path_mount+0x7d0/0x23d0 [ 140.659895][ T9639] ? __pfx_path_mount+0x10/0x10 [ 140.659906][ T9639] ? lockdep_hardirqs_on+0x78/0x100 [ 140.659924][ T9639] ? putname+0xb1/0x110 [ 140.659933][ T9639] ? kmem_cache_free+0x127/0x6b0 [ 140.659953][ T9639] ? __x64_sys_mount+0x293/0x310 [ 140.659964][ T9639] __x64_sys_mount+0x293/0x310 [ 140.659977][ T9639] ? __pfx___x64_sys_mount+0x10/0x10 [ 140.659993][ T9639] do_syscall_64+0x115/0x870 [ 140.660008][ T9639] ? clear_bhb_loop+0x40/0x90 [ 140.660021][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.660032][ T9639] RIP: 0033:0x7fa92ab9de59 [ 140.660041][ T9639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.660051][ T9639] RSP: 002b:00007fa92b9e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.660063][ T9639] RAX: ffffffffffffffda RBX: 00007fa92ae25fa0 RCX: 00007fa92ab9de59 [ 140.660070][ T9639] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 140.660076][ T9639] RBP: 00007fa92b9e5090 R08: 0000200000000940 R09: 0000000000000000 [ 140.660082][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.660088][ T9639] R13: 00007fa92ae26038 R14: 00007fa92ae25fa0 R15: 00007ffc53cfd588 [ 140.660101][ T9639] [ 140.801010][ T9648] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 140.807296][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.813521][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.968160][ T9658] 8021q: adding VLAN 0 to HW filter on device bond13 [ 140.972200][ T9658] bond13: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 140.976796][ T9658] bond13: entered allmulticast mode [ 141.030121][ T9665] binder: BINDER_SET_CONTEXT_MGR already set [ 141.032738][ T9665] binder: 9663:9665 ioctl 4018620d 200000000040 returned -16 [ 141.083042][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 141.083054][ T42] audit: type=1400 audit(1784149438.035:644): avc: denied { view } for pid=9669 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 141.168555][ T9668] kAFS: unable to lookup cell '(,c¾Ì' [ 141.353272][ T24] IPVS: starting estimator thread 0... [ 141.392493][ T9685] afs: Unknown parameter 'smackfsroot' [ 141.464917][ T9688] IPVS: using max 44 ests per chain, 105600 per kthread [ 141.508969][ T9693] : entered promiscuous mode [ 141.600765][ T9697] binder: BINDER_SET_CONTEXT_MGR already set [ 141.603574][ T9697] binder: 9696:9697 ioctl 4018620d 200000000040 returned -16 [ 141.608579][ T42] audit: type=1400 audit(1784149438.565:645): avc: denied { setopt } for pid=9694 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.059698][ T42] audit: type=1400 audit(1784149439.015:646): avc: denied { bind } for pid=9705 comm="syz.3.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.113461][ T7534] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 142.248260][ T9717] xt_hashlimit: size too large, truncated to 1048576 [ 142.284512][ T7534] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.287253][ T7534] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.290500][ T7534] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.293419][ T7534] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 142.296555][ T7534] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 142.300925][ T7534] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.304614][ T7534] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.307510][ T7534] usb 7-1: Product: syz [ 142.308965][ T7534] usb 7-1: Manufacturer: syz [ 142.316911][ T7534] cdc_wdm 7-1:1.0: skipping garbage [ 142.318896][ T7534] cdc_wdm 7-1:1.0: skipping garbage [ 142.322371][ T7534] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 142.324689][ T7534] cdc_wdm 7-1:1.0: Unknown control protocol [ 142.416327][ T42] audit: type=1400 audit(1784149439.375:647): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.490607][ T9723] binder: BINDER_SET_CONTEXT_MGR already set [ 142.492601][ T9723] binder: 9722:9723 ioctl 4018620d 200000000040 returned -16 [ 142.511954][ T42] audit: type=1400 audit(1784149439.465:648): avc: denied { bind } for pid=9720 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.527412][ T42] audit: type=1400 audit(1784149439.465:649): avc: denied { setopt } for pid=9720 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.535096][ T42] audit: type=1400 audit(1784149439.475:650): avc: denied { getopt } for pid=9720 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.545977][ T42] audit: type=1400 audit(1784149439.495:651): avc: denied { append } for pid=9725 comm="syz.3.1262" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 142.616375][ T9726] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 142.618634][ T9726] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.624621][ T9726] vhci_hcd vhci_hcd.0: Device attached [ 142.627929][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.632305][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.632885][ T9731] vhci_hcd: connection closed [ 142.640687][ T8502] vhci_hcd vhci_hcd.3: stop threads [ 142.650086][ T8502] vhci_hcd vhci_hcd.3: release socket [ 142.651843][ T8502] vhci_hcd vhci_hcd.3: disconnect device [ 142.666785][ T24] usb 7-1: USB disconnect, device number 6 [ 142.814274][ T65] Bluetooth: hci4: command 0x1003 tx timeout [ 142.821282][ T5747] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.922649][ T9754] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 142.961300][ T9757] fuse: root generation should be zero [ 143.003652][ T9761] validate_nla: 3 callbacks suppressed [ 143.003668][ T9761] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 143.007041][ T9763] binder: 9762:9763 ioctl c0306201 200000000080 returned -14 [ 143.012829][ T9763] binder: 9762:9763 ioctl c0306201 2000000003c0 returned -14 [ 143.029056][ T9761] 8021q: adding VLAN 0 to HW filter on device bond14 [ 143.044799][ T9766] xt_hashlimit: size too large, truncated to 1048576 [ 143.047876][ T9761] bond14: (slave geneve11): making interface the new active one [ 143.052644][ T9761] bond14: (slave geneve11): Enslaving as an active interface with an up link [ 143.328651][ T42] audit: type=1400 audit(1784149440.285:652): avc: denied { write } for pid=9783 comm="syz.3.1281" name="/" dev="9p" ino=72876151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.342909][ T9784] netlink: 'syz.3.1281': attribute type 3 has an invalid length. [ 143.405273][ T9788] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 143.429739][ T9788] 8021q: adding VLAN 0 to HW filter on device bond12 [ 143.449520][ T9788] bond12: (slave geneve13): making interface the new active one [ 143.454669][ T9788] bond12: (slave geneve13): Enslaving as an active interface with an up link [ 143.497336][ T9794] xt_hashlimit: size too large, truncated to 1048576 [ 143.543266][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 143.608793][ T9803] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 143.683236][ T24] usb 7-1: device descriptor read/64, error -71 [ 143.822893][ T42] audit: type=1400 audit(1784149440.775:653): avc: denied { map } for pid=9811 comm="syz.0.1291" path="socket:[28342]" dev="sockfs" ino=28342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 143.923868][ T24] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 144.063957][ T24] usb 7-1: device descriptor read/64, error -71 [ 144.174343][ T24] usb usb7-port1: attempt power cycle [ 144.469257][ T9816] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 144.513884][ T24] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 144.517896][ T9816] 8021q: adding VLAN 0 to HW filter on device bond14 [ 144.524646][ T9816] bond13: (slave bond14): making interface the new active one [ 144.528612][ T9816] bond13: (slave bond14): Enslaving as an active interface with an up link [ 144.544059][ T24] usb 7-1: device descriptor read/8, error -71 [ 144.547904][ T9816] bond13: (slave gretap1): Enslaving as a backup interface with an up link [ 144.553907][ T9816] __nla_validate_parse: 6 callbacks suppressed [ 144.553918][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1293'. [ 144.560149][ T9816] 8021q: adding VLAN 0 to HW filter on device bond13 [ 144.805496][ T24] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 144.825248][ T24] usb 7-1: device descriptor read/8, error -71 [ 144.901489][ T9842] netlink: 'syz.0.1303': attribute type 63 has an invalid length. [ 144.904021][ T9842] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1303'. [ 144.906797][ T9842] gretap0: entered allmulticast mode [ 144.908823][ T9842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 144.914857][ T9846] netlink: 'syz.0.1303': attribute type 63 has an invalid length. [ 144.917517][ T9846] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1303'. [ 144.937753][ T24] usb usb7-port1: unable to enumerate USB device [ 144.965871][ T9851] tmpfs: Unknown parameter 'mpb¯Óol' [ 145.110054][ T9860] xt_hashlimit: size too large, truncated to 1048576 [ 145.218419][ T9869] xt_hashlimit: size too large, truncated to 1048576 [ 145.445878][ T9885] tmpfs: Unknown parameter 'grpquimit' [ 145.518342][ T9893] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.1324'. [ 145.640569][ T9900] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 145.768784][ T9907] netlink: 'syz.3.1329': attribute type 1 has an invalid length. [ 145.791427][ T9907] 8021q: adding VLAN 0 to HW filter on device bond10 [ 145.809972][ T9907] bond10: (slave geneve11): making interface the new active one [ 145.822254][ T9907] bond10: (slave geneve11): Enslaving as an active interface with an up link [ 145.871792][ T9915] xt_hashlimit: size too large, truncated to 1048576 [ 146.202983][ T9944] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 146.231341][ T9944] 8021q: adding VLAN 0 to HW filter on device bond11 [ 146.249654][ T9944] bond11: (slave geneve12): making interface the new active one [ 146.255205][ T9944] bond11: (slave geneve12): Enslaving as an active interface with an up link [ 146.315289][ T9949] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 146.463692][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 146.463704][ T42] audit: type=1326 audit(1784149443.425:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.3.1344" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92ab9de59 code=0x0 [ 146.468012][ T9951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.490072][ T42] audit: type=1400 audit(1784149443.445:665): avc: denied { write } for pid=9963 comm="syz.1.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.554221][ T9968] binder: 9967:9968 ioctl c0306201 200000000080 returned -14 [ 146.559270][ T9968] binder: 9967:9968 ioctl c0306201 2000000003c0 returned -14 [ 146.635098][ T9974] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 146.654119][ T9974] 8021q: adding VLAN 0 to HW filter on device bond15 [ 146.671645][ T9974] bond15: (slave geneve14): making interface the new active one [ 146.682351][ T9974] bond15: (slave geneve14): Enslaving as an active interface with an up link [ 146.770557][ T42] audit: type=1400 audit(1784149443.725:666): avc: denied { write } for pid=9980 comm="syz.2.1356" name="/" dev="9p" ino=72876151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.779144][ T9981] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1356'. [ 146.784597][ T42] audit: type=1800 audit(1784149443.735:667): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1356" name="bus" dev="9p" ino=72876299 res=0 errno=0 [ 146.807749][ T9979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.812601][ T9979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.815739][ T9979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.819640][ T9979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.868308][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 147.261681][T10006] xt_hashlimit: size too large, truncated to 1048576 [ 147.481622][T10023] xt_hashlimit: size too large, truncated to 1048576 [ 147.803977][T10032] FAULT_INJECTION: forcing a failure. [ 147.803977][T10032] name failslab, interval 1, probability 0, space 0, times 0 [ 147.809224][T10032] CPU: 0 UID: 0 PID: 10032 Comm: syz.2.1374 Not tainted syzkaller #0 PREEMPT(full) [ 147.809239][T10032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.809246][T10032] Call Trace: [ 147.809250][T10032] [ 147.809255][T10032] dump_stack_lvl+0x100/0x190 [ 147.809272][T10032] should_fail_ex.cold+0x5/0xa [ 147.809286][T10032] should_failslab+0xc2/0x120 [ 147.809299][T10032] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 147.809313][T10032] ? kstrdup_const+0x63/0x80 [ 147.809326][T10032] kstrdup+0x51/0xe0 [ 147.809336][T10032] kstrdup_const+0x63/0x80 [ 147.809346][T10032] __kmem_cache_create_args+0x118/0x420 [ 147.809363][T10032] p9_client_create+0xa5d/0xd40 [ 147.809377][T10032] ? __pfx_p9_client_create+0x10/0x10 [ 147.809391][T10032] ? lockdep_init_map_type+0x5c/0x250 [ 147.809404][T10032] ? __raw_spin_lock_init+0x3a/0x110 [ 147.809445][T10032] v9fs_session_init+0x3c/0xdd0 [ 147.809457][T10032] ? v9fs_get_tree+0x9c/0xb50 [ 147.809472][T10032] v9fs_get_tree+0xb8/0xb50 [ 147.809484][T10032] ? rcu_is_watching+0x12/0xc0 [ 147.809513][T10032] ? __pfx_v9fs_get_tree+0x10/0x10 [ 147.809527][T10032] ? bpf_lsm_capable+0x9/0x10 [ 147.809536][T10032] ? security_capable+0x80/0x260 [ 147.809550][T10032] vfs_get_tree+0x92/0x320 [ 147.809564][T10032] path_mount+0x7d0/0x23d0 [ 147.809578][T10032] ? __pfx_path_mount+0x10/0x10 [ 147.809589][T10032] ? lockdep_hardirqs_on+0x78/0x100 [ 147.809607][T10032] ? putname+0xb1/0x110 [ 147.809616][T10032] ? kmem_cache_free+0x127/0x6b0 [ 147.809637][T10032] ? __x64_sys_mount+0x293/0x310 [ 147.809648][T10032] __x64_sys_mount+0x293/0x310 [ 147.809660][T10032] ? __pfx___x64_sys_mount+0x10/0x10 [ 147.809677][T10032] do_syscall_64+0x115/0x870 [ 147.809692][T10032] ? clear_bhb_loop+0x40/0x90 [ 147.809705][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.809716][T10032] RIP: 0033:0x7fc628b9de59 [ 147.809727][T10032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.809737][T10032] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.809748][T10032] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 147.809755][T10032] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 147.809761][T10032] RBP: 00007fc626df6090 R08: 0000200000000940 R09: 0000000000000000 [ 147.809768][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.809774][T10032] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 147.809787][T10032] [ 147.809971][T10032] __kmem_cache_create_args(9p-fcall-cache-32) failed with error -12 [ 147.907735][T10032] CPU: 0 UID: 0 PID: 10032 Comm: syz.2.1374 Not tainted syzkaller #0 PREEMPT(full) [ 147.907759][T10032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.907772][T10032] Call Trace: [ 147.907779][T10032] [ 147.907786][T10032] dump_stack_lvl+0x100/0x190 [ 147.907816][T10032] __kmem_cache_create_args.cold+0x33/0x6e [ 147.907849][T10032] p9_client_create+0xa5d/0xd40 [ 147.907875][T10032] ? __pfx_p9_client_create+0x10/0x10 [ 147.907900][T10032] ? lockdep_init_map_type+0x5c/0x250 [ 147.907925][T10032] ? __raw_spin_lock_init+0x3a/0x110 [ 147.907952][T10032] v9fs_session_init+0x3c/0xdd0 [ 147.907971][T10032] ? v9fs_get_tree+0x9c/0xb50 [ 147.907997][T10032] v9fs_get_tree+0xb8/0xb50 [ 147.908019][T10032] ? rcu_is_watching+0x12/0xc0 [ 147.908044][T10032] ? __pfx_v9fs_get_tree+0x10/0x10 [ 147.908067][T10032] ? bpf_lsm_capable+0x9/0x10 [ 147.908085][T10032] ? security_capable+0x80/0x260 [ 147.908107][T10032] vfs_get_tree+0x92/0x320 [ 147.908129][T10032] path_mount+0x7d0/0x23d0 [ 147.908155][T10032] ? __pfx_path_mount+0x10/0x10 [ 147.908175][T10032] ? lockdep_hardirqs_on+0x78/0x100 [ 147.908204][T10032] ? putname+0xb1/0x110 [ 147.908222][T10032] ? kmem_cache_free+0x127/0x6b0 [ 147.908257][T10032] ? __x64_sys_mount+0x293/0x310 [ 147.908275][T10032] __x64_sys_mount+0x293/0x310 [ 147.908296][T10032] ? __pfx___x64_sys_mount+0x10/0x10 [ 147.908325][T10032] do_syscall_64+0x115/0x870 [ 147.908350][T10032] ? clear_bhb_loop+0x40/0x90 [ 147.908370][T10032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.908388][T10032] RIP: 0033:0x7fc628b9de59 [ 147.908403][T10032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.908418][T10032] RSP: 002b:00007fc626df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.908437][T10032] RAX: ffffffffffffffda RBX: 00007fc628e25fa0 RCX: 00007fc628b9de59 [ 147.908450][T10032] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 147.908461][T10032] RBP: 00007fc626df6090 R08: 0000200000000940 R09: 0000000000000000 [ 147.908471][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.908482][T10032] R13: 00007fc628e26038 R14: 00007fc628e25fa0 R15: 00007ffcb7e2e488 [ 147.908507][T10032] [ 148.022184][ T42] audit: type=1400 audit(1784149444.975:668): avc: denied { setopt } for pid=10033 comm="syz.2.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.029294][ T42] audit: type=1400 audit(1784149444.975:669): avc: denied { read } for pid=10033 comm="syz.2.1375" path="socket:[29302]" dev="sockfs" ino=29302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.337205][T10060] 9pnet_virtio: no channels available for device syz [ 148.563244][ T24] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 148.714886][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.720816][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.730003][T10074] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 148.733454][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 148.740018][ T24] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 148.744942][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.753393][ T24] usb 5-1: Product: syz [ 148.755106][ T24] usb 5-1: Manufacturer: syz [ 148.756219][T10076] 9pnet_virtio: no channels available for device syz [ 148.759262][ T24] usb 5-1: SerialNumber: syz [ 148.783860][ T24] usb 5-1: config 0 descriptor?? [ 148.790451][T10056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.801866][ T42] audit: type=1400 audit(1784149445.755:670): avc: denied { override_creds } for pid=10077 comm="syz.3.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.814269][ T5747] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.865366][ T24] rc_core: IR keymap rc-streamzap not found [ 148.867249][ T24] Registered IR keymap rc-empty [ 148.877817][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 148.893246][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.893292][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 148.895972][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.899539][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.978834][ T5744] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 149.007584][ T42] audit: type=1400 audit(1784149445.965:671): avc: denied { write } for pid=10088 comm="syz.1.1394" path="socket:[29365]" dev="sockfs" ino=29365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.137798][T10098] FAULT_INJECTION: forcing a failure. [ 149.137798][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 149.143537][T10098] CPU: 2 UID: 0 PID: 10098 Comm: syz.3.1396 Not tainted syzkaller #0 PREEMPT(full) [ 149.143552][T10098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.143559][T10098] Call Trace: [ 149.143563][T10098] [ 149.143567][T10098] dump_stack_lvl+0x100/0x190 [ 149.143585][T10098] should_fail_ex.cold+0x5/0xa [ 149.143598][T10098] should_failslab+0xc2/0x120 [ 149.143611][T10098] kmem_cache_alloc_noprof+0x91/0x6a0 [ 149.143622][T10098] ? stack_trace_save+0x8e/0xc0 [ 149.143639][T10098] ? alloc_empty_file+0x5b/0x1c0 [ 149.143666][T10098] alloc_empty_file+0x5b/0x1c0 [ 149.143678][T10098] path_openat+0xe7/0x4280 [ 149.143687][T10098] ? __kasan_slab_alloc+0x89/0x90 [ 149.143699][T10098] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 149.143709][T10098] ? do_getname+0x35/0x390 [ 149.143720][T10098] ? do_sys_openat2+0xc7/0x1e0 [ 149.143731][T10098] ? __x64_sys_openat+0x12d/0x210 [ 149.143742][T10098] ? do_syscall_64+0x115/0x870 [ 149.143757][T10098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.143772][T10098] ? __pfx_path_openat+0x10/0x10 [ 149.143786][T10098] do_file_open+0x20e/0x430 [ 149.143797][T10098] ? __pfx_do_file_open+0x10/0x10 [ 149.143816][T10098] ? alloc_fd+0x471/0x7a0 [ 149.143827][T10098] ? do_getname+0x191/0x390 [ 149.143840][T10098] do_sys_openat2+0x10f/0x1e0 [ 149.143852][T10098] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.143869][T10098] __x64_sys_openat+0x12d/0x210 [ 149.143881][T10098] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.143898][T10098] do_syscall_64+0x115/0x870 [ 149.143913][T10098] ? clear_bhb_loop+0x40/0x90 [ 149.143926][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.143937][T10098] RIP: 0033:0x7fa92ab5e68e [ 149.143946][T10098] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.143956][T10098] RSP: 002b:00007fa92b9e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.143966][T10098] RAX: ffffffffffffffda RBX: 00007fa92b9e56c0 RCX: 00007fa92ab5e68e [ 149.143973][T10098] RDX: 000000000004c082 RSI: 00007fa92b9e4c00 RDI: ffffffffffffff9c [ 149.143979][T10098] RBP: 00007fa92b9e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 149.143985][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.143991][T10098] R13: 00007fa92ae26038 R14: 00007fa92ae25fa0 R15: 00007ffc53cfd588 [ 149.144004][T10098] [ 149.174848][ T5817] usb 5-1: USB disconnect, device number 12 [ 149.189077][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1397'. [ 149.251956][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 149.257293][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 149.285467][T10101] bond0: entered promiscuous mode [ 149.287142][T10101] bond_slave_0: entered promiscuous mode [ 149.289419][T10101] bond_slave_1: entered promiscuous mode [ 149.293925][T10101] bond0: left promiscuous mode [ 149.295482][T10101] bond_slave_0: left promiscuous mode [ 149.297301][T10101] bond_slave_1: left promiscuous mode [ 149.314192][T10105] bond0: entered promiscuous mode [ 149.316202][T10105] bond_slave_0: entered promiscuous mode [ 149.318138][T10105] bond_slave_1: entered promiscuous mode [ 149.321469][T10105] bond0: left promiscuous mode [ 149.323178][T10105] bond_slave_0: left promiscuous mode [ 149.324953][T10105] bond_slave_1: left promiscuous mode [ 149.337757][T10107] syzkaller0: entered promiscuous mode [ 149.339566][T10107] syzkaller0: entered allmulticast mode [ 149.343320][ T5782] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.350751][ T5782] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.480327][T10112] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 149.500119][T10112] 8021q: adding VLAN 0 to HW filter on device bond16 [ 149.518843][T10112] bond16: (slave geneve15): making interface the new active one [ 149.527275][T10112] bond16: (slave geneve15): Enslaving as an active interface with an up link [ 149.796130][T10126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=10126 comm=syz.1.1405 [ 149.888495][T10130] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 149.908238][T10130] 8021q: adding VLAN 0 to HW filter on device bond12 [ 149.966049][T10137] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 149.990960][T10137] 8021q: adding VLAN 0 to HW filter on device bond17 [ 150.007863][T10137] bond17: (slave geneve16): making interface the new active one [ 150.011736][T10137] bond17: (slave geneve16): Enslaving as an active interface with an up link [ 150.115109][T10147] bridge2: entered promiscuous mode [ 150.116820][T10147] bridge2: entered allmulticast mode [ 150.403709][T10158] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 150.406024][T10158] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1416'. [ 150.492516][T10170] xt_hashlimit: size too large, truncated to 1048576 [ 150.613707][T10175] syzkaller0: entered promiscuous mode [ 150.617978][T10175] syzkaller0: entered allmulticast mode [ 150.750680][ T42] audit: type=1326 audit(1784149447.705:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10180 comm="syz.2.1425" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc628b9de59 code=0x0 [ 150.753300][T10182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.883368][T10194] FAULT_INJECTION: forcing a failure. [ 150.883368][T10194] name failslab, interval 1, probability 0, space 0, times 0 [ 150.888775][T10194] CPU: 2 UID: 0 PID: 10194 Comm: syz.0.1427 Not tainted syzkaller #0 PREEMPT(full) [ 150.888797][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.888807][T10194] Call Trace: [ 150.888813][T10194] [ 150.888820][T10194] dump_stack_lvl+0x100/0x190 [ 150.888846][T10194] should_fail_ex.cold+0x5/0xa [ 150.888866][T10194] should_failslab+0xc2/0x120 [ 150.888885][T10194] __kmalloc_noprof+0xfc/0x820 [ 150.888901][T10194] ? tomoyo_encode2+0xfb/0x3c0 [ 150.888931][T10194] tomoyo_encode2+0xfb/0x3c0 [ 150.888958][T10194] tomoyo_encode+0x29/0x50 [ 150.888981][T10194] tomoyo_realpath_from_path+0x18c/0x690 [ 150.889011][T10194] tomoyo_check_open_permission+0x2af/0x3c0 [ 150.889034][T10194] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 150.889063][T10194] ? hook_file_open+0x24f/0x8f0 [ 150.889122][T10194] ? path_get+0x61/0x80 [ 150.889146][T10194] tomoyo_file_open+0x6b/0x90 [ 150.889165][T10194] security_file_open+0xb5/0x1e0 [ 150.889198][T10194] do_dentry_open+0x588/0x14d0 [ 150.889244][T10194] vfs_open+0x82/0x3f0 [ 150.889269][T10194] path_openat+0x2873/0x4280 [ 150.889295][T10194] ? __pfx_path_openat+0x10/0x10 [ 150.889318][T10194] do_file_open+0x20e/0x430 [ 150.889337][T10194] ? __pfx_do_file_open+0x10/0x10 [ 150.889371][T10194] ? alloc_fd+0x471/0x7a0 [ 150.889390][T10194] ? do_getname+0x191/0x390 [ 150.889412][T10194] do_sys_openat2+0x10f/0x1e0 [ 150.889432][T10194] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.889460][T10194] __x64_sys_openat+0x12d/0x210 [ 150.889481][T10194] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.889511][T10194] do_syscall_64+0x115/0x870 [ 150.889537][T10194] ? clear_bhb_loop+0x40/0x90 [ 150.889559][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.889576][T10194] RIP: 0033:0x7fd99ad5e68e [ 150.889591][T10194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.889607][T10194] RSP: 002b:00007fd99bb89b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.889625][T10194] RAX: ffffffffffffffda RBX: 00007fd99bb8a6c0 RCX: 00007fd99ad5e68e [ 150.889637][T10194] RDX: 000000000004c082 RSI: 00007fd99bb89c00 RDI: ffffffffffffff9c [ 150.889648][T10194] RBP: 00007fd99bb89c00 R08: 0000000000000000 R09: 0000000000000000 [ 150.889659][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 150.889670][T10194] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 150.889694][T10194] [ 150.889801][T10194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.632178][T10203] xfrm0 speed is unknown, defaulting to 1000 [ 151.656632][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.715307][T10210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.873536][ T1047] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 152.023722][ T1047] usb 7-1: Invalid ep0 maxpacket: 16 [ 152.163786][ T1047] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 152.201746][T10218] xt_hashlimit: size too large, truncated to 1048576 [ 152.313019][ T42] audit: type=1326 audit(1784149449.265:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.3.1436" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92ab9de59 code=0x0 [ 152.313527][ T1047] usb 7-1: Invalid ep0 maxpacket: 16 [ 152.323644][ T1047] usb usb7-port1: attempt power cycle [ 152.453309][T10229] FAULT_INJECTION: forcing a failure. [ 152.453309][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 152.457348][T10229] CPU: 3 UID: 0 PID: 10229 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) [ 152.457363][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.457370][T10229] Call Trace: [ 152.457374][T10229] [ 152.457378][T10229] dump_stack_lvl+0x100/0x190 [ 152.457397][T10229] should_fail_ex.cold+0x5/0xa [ 152.457410][T10229] should_failslab+0xc2/0x120 [ 152.457423][T10229] __kmalloc_flags_noprof+0x115/0x890 [ 152.457439][T10229] ? __kmalloc_cache_node_noprof+0x2d0/0x6c0 [ 152.457451][T10229] ? do_kmem_cache_create+0x6fc/0x7a0 [ 152.457466][T10229] do_kmem_cache_create+0x6fc/0x7a0 [ 152.457479][T10229] ? __kmem_cache_create_args+0x366/0x420 [ 152.457497][T10229] __kmem_cache_create_args+0x386/0x420 [ 152.457514][T10229] p9_client_create+0xa5d/0xd40 [ 152.457528][T10229] ? __pfx_p9_client_create+0x10/0x10 [ 152.457542][T10229] ? lockdep_init_map_type+0x5c/0x250 [ 152.457555][T10229] ? __raw_spin_lock_init+0x3a/0x110 [ 152.457570][T10229] v9fs_session_init+0x3c/0xdd0 [ 152.457581][T10229] ? v9fs_get_tree+0x9c/0xb50 [ 152.457597][T10229] v9fs_get_tree+0xb8/0xb50 [ 152.457608][T10229] ? rcu_is_watching+0x12/0xc0 [ 152.457623][T10229] ? __pfx_v9fs_get_tree+0x10/0x10 [ 152.457637][T10229] ? bpf_lsm_capable+0x9/0x10 [ 152.457647][T10229] ? security_capable+0x80/0x260 [ 152.457660][T10229] vfs_get_tree+0x92/0x320 [ 152.457674][T10229] path_mount+0x7d0/0x23d0 [ 152.457689][T10229] ? __pfx_path_mount+0x10/0x10 [ 152.457702][T10229] ? lockdep_hardirqs_on+0x78/0x100 [ 152.457719][T10229] ? putname+0xb1/0x110 [ 152.457729][T10229] ? kmem_cache_free+0x127/0x6b0 [ 152.457749][T10229] ? __x64_sys_mount+0x293/0x310 [ 152.457760][T10229] __x64_sys_mount+0x293/0x310 [ 152.457772][T10229] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.457788][T10229] do_syscall_64+0x115/0x870 [ 152.457803][T10229] ? clear_bhb_loop+0x40/0x90 [ 152.457816][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.457828][T10229] RIP: 0033:0x7fd99ad9de59 [ 152.457837][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.457847][T10229] RSP: 002b:00007fd99bb8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.457858][T10229] RAX: ffffffffffffffda RBX: 00007fd99b025fa0 RCX: 00007fd99ad9de59 [ 152.457865][T10229] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 152.457871][T10229] RBP: 00007fd99bb8a090 R08: 0000200000000940 R09: 0000000000000000 [ 152.457877][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.457883][T10229] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 152.457896][T10229] [ 152.458069][T10229] __kmem_cache_create_args(9p-fcall-cache-35) failed with error -12 [ 152.570706][T10229] CPU: 3 UID: 0 PID: 10229 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT(full) [ 152.570729][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.570740][T10229] Call Trace: [ 152.570750][T10229] [ 152.570759][T10229] dump_stack_lvl+0x100/0x190 [ 152.570787][T10229] __kmem_cache_create_args.cold+0x33/0x6e [ 152.570814][T10229] p9_client_create+0xa5d/0xd40 [ 152.570841][T10229] ? __pfx_p9_client_create+0x10/0x10 [ 152.570866][T10229] ? lockdep_init_map_type+0x5c/0x250 [ 152.570891][T10229] ? __raw_spin_lock_init+0x3a/0x110 [ 152.570919][T10229] v9fs_session_init+0x3c/0xdd0 [ 152.570940][T10229] ? v9fs_get_tree+0x9c/0xb50 [ 152.570967][T10229] v9fs_get_tree+0xb8/0xb50 [ 152.570989][T10229] ? rcu_is_watching+0x12/0xc0 [ 152.571015][T10229] ? __pfx_v9fs_get_tree+0x10/0x10 [ 152.571039][T10229] ? bpf_lsm_capable+0x9/0x10 [ 152.571055][T10229] ? security_capable+0x80/0x260 [ 152.571082][T10229] vfs_get_tree+0x92/0x320 [ 152.571105][T10229] path_mount+0x7d0/0x23d0 [ 152.571130][T10229] ? __pfx_path_mount+0x10/0x10 [ 152.571149][T10229] ? lockdep_hardirqs_on+0x78/0x100 [ 152.571179][T10229] ? putname+0xb1/0x110 [ 152.571203][T10229] ? kmem_cache_free+0x127/0x6b0 [ 152.571238][T10229] ? __x64_sys_mount+0x293/0x310 [ 152.571258][T10229] __x64_sys_mount+0x293/0x310 [ 152.571281][T10229] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.571310][T10229] do_syscall_64+0x115/0x870 [ 152.571335][T10229] ? clear_bhb_loop+0x40/0x90 [ 152.571359][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.571379][T10229] RIP: 0033:0x7fd99ad9de59 [ 152.571396][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.571413][T10229] RSP: 002b:00007fd99bb8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.571433][T10229] RAX: ffffffffffffffda RBX: 00007fd99b025fa0 RCX: 00007fd99ad9de59 [ 152.571445][T10229] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 152.571457][T10229] RBP: 00007fd99bb8a090 R08: 0000200000000940 R09: 0000000000000000 [ 152.571469][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.571480][T10229] R13: 00007fd99b026038 R14: 00007fd99b025fa0 R15: 00007ffdb5f8a7c8 [ 152.571505][T10229] [ 152.734618][ T1047] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 152.764302][ T1047] usb 7-1: Invalid ep0 maxpacket: 16 [ 152.913234][ T1047] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 152.943914][ T1047] usb 7-1: Invalid ep0 maxpacket: 16 [ 152.946449][ T1047] usb usb7-port1: unable to enumerate USB device [ 153.016871][T10236] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 153.206119][T10238] FAULT_INJECTION: forcing a failure. [ 153.206119][T10238] name failslab, interval 1, probability 0, space 0, times 0 [ 153.212108][T10238] CPU: 1 UID: 0 PID: 10238 Comm: syz.3.1442 Not tainted syzkaller #0 PREEMPT(full) [ 153.212136][T10238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.212144][T10238] Call Trace: [ 153.212148][T10238] [ 153.212154][T10238] dump_stack_lvl+0x100/0x190 [ 153.212171][T10238] should_fail_ex.cold+0x5/0xa [ 153.212185][T10238] should_failslab+0xc2/0x120 [ 153.212199][T10238] __kmalloc_noprof+0xfc/0x820 [ 153.212211][T10238] ? usb_alloc_urb+0x66/0xa0 [ 153.212307][T10238] usb_alloc_urb+0x66/0xa0 [ 153.212320][T10238] usb_control_msg+0x1d3/0x4b0 [ 153.212337][T10238] ? __pfx_usb_control_msg+0x10/0x10 [ 153.212353][T10238] ? __lock_acquire+0x49f/0x1a40 [ 153.212367][T10238] hub_ext_port_status+0x152/0x600 [ 153.212387][T10238] hub_activate+0x6e5/0x1c40 [ 153.212407][T10238] ? __pfx_hub_activate+0x10/0x10 [ 153.212423][T10238] ? find_held_lock+0x2b/0x80 [ 153.212440][T10238] ? psi_account_irqtime+0x5f0/0xc70 [ 153.212456][T10238] ? usbdev_read+0x2d0/0x790 [ 153.212469][T10238] ? usb_generic_driver_resume+0x70/0xa0 [ 153.212485][T10238] ? hcd_bus_resume+0x37b/0x810 [ 153.212500][T10238] hub_resume+0xb0/0x400 [ 153.212517][T10238] ? __pfx_hub_resume+0x10/0x10 [ 153.212533][T10238] ? __pfx_hcd_bus_resume+0x10/0x10 [ 153.212550][T10238] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 153.212564][T10238] usb_resume_both+0x53a/0x7f0 [ 153.212576][T10238] ? do_dentry_open+0x6ab/0x14d0 [ 153.212592][T10238] ? __pfx_usb_resume_both+0x10/0x10 [ 153.212603][T10238] ? __rpm_callback+0x272/0x620 [ 153.212615][T10238] ? __pfx_usb_runtime_resume+0x10/0x10 [ 153.212628][T10238] ? rcu_is_watching+0x12/0xc0 [ 153.212644][T10238] ? __pfx_usb_runtime_resume+0x10/0x10 [ 153.212663][T10238] __rpm_callback+0xc8/0x620 [ 153.212677][T10238] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 153.212696][T10238] ? __pfx_usb_runtime_resume+0x10/0x10 [ 153.212819][T10238] rpm_callback+0x16a/0x1b0 [ 153.212830][T10238] ? __pfx_usb_runtime_resume+0x10/0x10 [ 153.212844][T10238] rpm_resume+0xd13/0x1320 [ 153.212854][T10238] ? usbdev_open+0x150/0x870 [ 153.212866][T10238] ? klist_put+0xcb/0x1d0 [ 153.212881][T10238] ? __pfx_rpm_resume+0x10/0x10 [ 153.212892][T10238] ? do_raw_spin_lock+0x128/0x260 [ 153.212906][T10238] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.212921][T10238] ? _raw_spin_lock_irqsave+0x52/0x60 [ 153.212962][T10238] __pm_runtime_resume+0xb6/0x170 [ 153.212975][T10238] usb_autoresume_device+0x23/0xe0 [ 153.212990][T10238] usbdev_open+0x228/0x870 [ 153.213004][T10238] ? kobject_get_unless_zero+0x156/0x200 [ 153.213016][T10238] ? __pfx_usbdev_open+0x10/0x10 [ 153.213028][T10238] ? chrdev_open+0x10b/0x6a0 [ 153.213037][T10238] ? chrdev_open+0x10b/0x6a0 [ 153.213048][T10238] ? __pfx_usbdev_open+0x10/0x10 [ 153.213093][T10238] chrdev_open+0x234/0x6a0 [ 153.213103][T10238] ? __pfx_chrdev_open+0x10/0x10 [ 153.213114][T10238] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 153.213135][T10238] do_dentry_open+0x6ab/0x14d0 [ 153.213157][T10238] ? __pfx_chrdev_open+0x10/0x10 [ 153.213170][T10238] vfs_open+0x82/0x3f0 [ 153.213184][T10238] path_openat+0x2873/0x4280 [ 153.213200][T10238] ? __pfx_path_openat+0x10/0x10 [ 153.213214][T10238] do_file_open+0x20e/0x430 [ 153.213231][T10238] ? __pfx_do_file_open+0x10/0x10 [ 153.213265][T10238] ? alloc_fd+0x471/0x7a0 [ 153.213283][T10238] ? do_getname+0x191/0x390 [ 153.213303][T10238] do_sys_openat2+0x10f/0x1e0 [ 153.213322][T10238] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.213349][T10238] __x64_sys_openat+0x12d/0x210 [ 153.213369][T10238] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.213401][T10238] do_syscall_64+0x115/0x870 [ 153.213424][T10238] ? clear_bhb_loop+0x40/0x90 [ 153.213444][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.213460][T10238] RIP: 0033:0x7fa92ab5e68e [ 153.213476][T10238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.213491][T10238] RSP: 002b:00007fa92b9e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.213508][T10238] RAX: ffffffffffffffda RBX: 00007fa92b9e56c0 RCX: 00007fa92ab5e68e [ 153.213519][T10238] RDX: 000000000004c082 RSI: 00007fa92b9e4c00 RDI: ffffffffffffff9c [ 153.213530][T10238] RBP: 00007fa92b9e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 153.213540][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 153.213550][T10238] R13: 00007fa92ae26038 R14: 00007fa92ae25fa0 R15: 00007ffc53cfd588 [ 153.213573][T10238] [ 153.362651][T10238] hub 3-0:1.0: hub_ext_port_status failed (err = -12) [ 153.460444][ T7535] ================================================================== [ 153.463568][ T7535] BUG: KASAN: slab-use-after-free in uea_upload_pre_firmware+0x3bd/0x3d0 [ 153.466895][ T7535] Read of size 8 at addr ffff888023beb0b8 by task kworker/1:6/7535 [ 153.470061][ T7535] [ 153.471577][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 153.471591][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.471600][ T7535] Workqueue: events request_firmware_work_func [ 153.471622][ T7535] Call Trace: [ 153.471627][ T7535] [ 153.471632][ T7535] dump_stack_lvl+0x100/0x190 [ 153.471645][ T7535] print_report+0x13d/0x4b0 [ 153.471660][ T7535] ? __virt_addr_valid+0x239/0x430 [ 153.471673][ T7535] ? uea_upload_pre_firmware+0x3bd/0x3d0 [ 153.471692][ T7535] kasan_report+0xdf/0x1c0 [ 153.471705][ T7535] ? uea_upload_pre_firmware+0x3bd/0x3d0 [ 153.471722][ T7535] uea_upload_pre_firmware+0x3bd/0x3d0 [ 153.471736][ T7535] ? __pfx__request_firmware+0x10/0x10 [ 153.471753][ T7535] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 153.471768][ T7535] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.471784][ T7535] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 153.471800][ T7535] request_firmware_work_func+0x13f/0x440 [ 153.471817][ T7535] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.471834][ T7535] ? rcu_is_watching+0x12/0xc0 [ 153.471850][ T7535] process_one_work+0xa23/0x1940 [ 153.471862][ T7535] ? __pfx_process_one_work+0x10/0x10 [ 153.471874][ T7535] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.471891][ T7535] worker_thread+0x5ef/0xe50 [ 153.471902][ T7535] ? __pfx_worker_thread+0x10/0x10 [ 153.471913][ T7535] ? kthread+0x13a/0x450 [ 153.471928][ T7535] ? __pfx_worker_thread+0x10/0x10 [ 153.471937][ T7535] kthread+0x370/0x450 [ 153.471952][ T7535] ? __pfx_kthread+0x10/0x10 [ 153.471968][ T7535] ret_from_fork+0x72b/0xd50 [ 153.471981][ T7535] ? __pfx_ret_from_fork+0x10/0x10 [ 153.471995][ T7535] ? __switch_to+0x800/0x10f0 [ 153.472011][ T7535] ? __pfx_kthread+0x10/0x10 [ 153.472027][ T7535] ret_from_fork_asm+0x1a/0x30 [ 153.472045][ T7535] [ 153.472049][ T7535] [ 153.536732][ T7535] Allocated by task 5105: [ 153.538023][ T7535] kasan_save_stack+0x30/0x50 [ 153.539484][ T7535] kasan_save_track+0x14/0x30 [ 153.540922][ T7535] __kasan_kmalloc+0xaa/0xb0 [ 153.542332][ T7535] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 153.544297][ T7535] kmalloc_reserve+0xe8/0x350 [ 153.545778][ T7535] __alloc_skb+0x185/0x710 [ 153.547124][ T7535] mld_newpack.isra.0+0x18e/0xa20 [ 153.548798][ T7535] add_grhead+0x299/0x340 [ 153.550571][ T7535] add_grec+0x1389/0x1930 [ 153.551947][ T7535] mld_ifc_work+0x3c5/0xc10 [ 153.553389][ T7535] process_one_work+0xa23/0x1940 [ 153.554913][ T7535] worker_thread+0x5ef/0xe50 [ 153.556360][ T7535] kthread+0x370/0x450 [ 153.557628][ T7535] ret_from_fork+0x72b/0xd50 [ 153.559057][ T7535] ret_from_fork_asm+0x1a/0x30 [ 153.560537][ T7535] [ 153.561303][ T7535] Freed by task 0: [ 153.562462][ T7535] kasan_save_stack+0x30/0x50 [ 153.563953][ T7535] kasan_save_track+0x14/0x30 [ 153.565420][ T7535] kasan_save_free_info+0x3b/0x70 [ 153.567026][ T7535] __kasan_slab_free+0x5f/0x80 [ 153.568610][ T7535] kfree+0x22b/0x6c0 [ 153.570143][ T7535] skb_free_head+0xb9/0x160 [ 153.571571][ T7535] skb_release_data+0x6c5/0x8e0 [ 153.573153][ T7535] sk_skb_reason_drop+0x102/0x1b0 [ 153.574744][ T7535] neigh_invalidate+0x224/0x580 [ 153.576278][ T7535] neigh_timer_handler+0xb06/0x1230 [ 153.577965][ T7535] call_timer_fn+0x19a/0x610 [ 153.579516][ T7535] __run_timers+0x757/0xb00 [ 153.580921][ T7535] run_timer_base+0x114/0x190 [ 153.582489][ T7535] run_timer_softirq+0x1a/0x50 [ 153.583995][ T7535] handle_softirqs+0x1ea/0x9b0 [ 153.585530][ T7535] __irq_exit_rcu+0x162/0x210 [ 153.586992][ T7535] irq_exit_rcu+0x9/0x30 [ 153.588346][ T7535] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 153.590089][ T7535] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.591912][ T7535] [ 153.592685][ T7535] The buggy address belongs to the object at ffff888023beb000 [ 153.592685][ T7535] which belongs to the cache kmalloc-2k of size 2048 [ 153.596985][ T7535] The buggy address is located 184 bytes inside of [ 153.596985][ T7535] freed 2048-byte region [ffff888023beb000, ffff888023beb800) [ 153.601256][ T7535] [ 153.602020][ T7535] The buggy address belongs to the physical page: [ 153.604018][ T7535] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23be8 [ 153.606707][ T7535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.609352][ T7535] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.611645][ T7535] page_type: f5(slab) [ 153.612961][ T7535] raw: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 153.615702][ T7535] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 153.618307][ T7535] head: 00fff00000000040 ffff88801bc42f00 dead000000000100 dead000000000122 [ 153.621509][ T7535] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 153.624205][ T7535] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 153.626887][ T7535] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 153.629556][ T7535] page dumped because: kasan: bad access detected [ 153.631525][ T7535] page_owner tracks the page as allocated [ 153.633250][ T7535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5143838097, free_ts 0 [ 153.639177][ T7535] post_alloc_hook+0xfd/0x120 [ 153.640627][ T7535] get_page_from_freelist+0xf48/0x3530 [ 153.642297][ T7535] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 153.644180][ T7535] new_slab+0xa2/0x650 [ 153.645462][ T7535] refill_objects+0xe3/0x410 [ 153.646942][ T7535] __pcs_replace_empty_main+0x376/0x680 [ 153.648627][ T7535] __kmalloc_cache_noprof+0x479/0x6c0 [ 153.650341][ T7535] acpi_ds_create_walk_state+0x95/0x300 [ 153.652042][ T7535] acpi_ps_execute_method+0x2c1/0xe90 [ 153.653751][ T7535] acpi_ns_evaluate+0x640/0x1670 [ 153.655354][ T7535] acpi_ut_evaluate_object+0xf7/0x610 [ 153.657040][ T7535] acpi_rs_get_prt_method_data+0xa0/0x150 [ 153.658783][ T7535] acpi_get_irq_routing_table+0xb8/0x140 [ 153.660763][ T7535] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 153.662644][ T7535] acpi_pci_irq_lookup+0x8e/0x6b0 [ 153.664279][ T7535] acpi_pci_irq_disable+0x1a8/0x360 [ 153.665959][ T7535] page_owner free stack trace missing [ 153.667602][ T7535] [ 153.668380][ T7535] Memory state around the buggy address: [ 153.670303][ T7535] ffff888023beaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.672787][ T7535] ffff888023beb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.675374][ T7535] >ffff888023beb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.677888][ T7535] ^ [ 153.679737][ T7535] ffff888023beb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.682282][ T7535] ffff888023beb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.684808][ T7535] ================================================================== [ 153.689958][ T29] (NULL device *): [UEAGLE-ATM] firmware is not available [ 153.694236][ T29] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 153.698145][ T29] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 153.700841][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 153.703820][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.707068][ T29] Workqueue: events request_firmware_work_func [ 153.709158][ T29] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 153.709832][ T42] audit: type=1400 audit(1784149450.655:674): avc: denied { read } for pid=5126 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 153.711198][ T29] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 40 42 09 66 66 2e 0f 1f 84 00 00 00 [ 153.711212][ T29] RSP: 0018:ffffc900006879f0 EFLAGS: 00010082 [ 153.711222][ T29] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.711229][ T29] RDX: 0000000000000000 RSI: ffffffff8bbc444a RDI: dffffc0000000004 [ 153.711236][ T29] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000 [ 153.734074][ T42] audit: type=1400 audit(1784149450.655:675): avc: denied { search } for pid=5126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.734108][ T29] R10: ffffffff91223d97 R11: 0000000000000000 R12: ffffffff8bbc444a [ 153.743166][ T29] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 153.743644][ T42] audit: type=1400 audit(1784149450.655:676): avc: denied { write search } for pid=5126 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.745683][ T29] FS: 0000000000000000(0000) GS:ffff8880d5ee8000(0000) knlGS:0000000000000000 [ 153.745711][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.745721][ T29] CR2: 00007fa92ab58f70 CR3: 000000002c84d000 CR4: 0000000000352ef0 [ 153.755630][ T42] audit: type=1400 audit(1784149450.655:677): avc: denied { add_name } for pid=5126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.757554][ T29] Call Trace: [ 153.760030][ T42] audit: type=1400 audit(1784149450.655:678): avc: denied { create } for pid=5126 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.766171][ T29] [ 153.766178][ T29] __kasan_check_byte+0x13/0x50 [ 153.766196][ T29] lock_acquire+0x132/0x370 [ 153.766208][ T29] ? _raw_spin_unlock+0x28/0x50 [ 153.766223][ T29] ? _raw_spin_lock_irqsave+0x52/0x60 [ 153.766237][ T29] _raw_spin_lock_irqsave+0x3a/0x60 [ 153.766250][ T29] ? complete+0x1d/0x200 [ 153.766265][ T29] complete+0x1d/0x200 [ 153.766282][ T29] uea_upload_pre_firmware.cold+0x2e/0xfa [ 153.767753][ T42] audit: type=1400 audit(1784149450.655:679): avc: denied { append open } for pid=5126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.773826][ T29] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 153.773848][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.773864][ T29] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 153.773879][ T29] request_firmware_work_func+0x13f/0x440 [ 153.773897][ T29] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.774893][ T42] audit: type=1400 audit(1784149450.655:680): avc: denied { getattr } for pid=5126 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.776314][ T29] ? rcu_is_watching+0x12/0xc0 [ 153.777717][ T42] audit: type=1400 audit(1784149450.705:681): avc: denied { relabelfrom } for pid=10247 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.779375][ T29] process_one_work+0xa23/0x1940 [ 153.779394][ T29] ? __pfx_process_one_work+0x10/0x10 [ 153.779406][ T29] ? __pfx_request_firmware_work_func+0x10/0x10 [ 153.781132][ T42] audit: type=1400 audit(1784149450.705:682): avc: denied { relabelto } for pid=10247 comm="syz.3.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.782598][ T29] worker_thread+0x5ef/0xe50 [ 153.782613][ T29] ? kthread+0x13a/0x450 [ 153.831386][ T29] ? __pfx_worker_thread+0x10/0x10 [ 153.833018][ T29] kthread+0x370/0x450 [ 153.834374][ T29] ? __pfx_kthread+0x10/0x10 [ 153.835847][ T29] ret_from_fork+0x72b/0xd50 [ 153.837304][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 153.838968][ T29] ? __switch_to+0x800/0x10f0 [ 153.840865][ T29] ? __pfx_kthread+0x10/0x10 [ 153.842435][ T29] ret_from_fork_asm+0x1a/0x30 [ 153.843959][ T29] [ 153.844950][ T29] Modules linked in: [ 153.846205][ T29] ---[ end trace 0000000000000000 ]--- [ 153.847909][ T29] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 153.849744][ T29] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 40 42 09 66 66 2e 0f 1f 84 00 00 00 [ 153.855721][ T29] RSP: 0018:ffffc900006879f0 EFLAGS: 00010082 [ 153.857602][ T29] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.860528][ T29] RDX: 0000000000000000 RSI: ffffffff8bbc444a RDI: dffffc0000000004 [ 153.863091][ T29] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000 [ 153.865495][ T29] R10: ffffffff91223d97 R11: 0000000000000000 R12: ffffffff8bbc444a [ 153.867901][ T29] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 153.870832][ T29] FS: 0000000000000000(0000) GS:ffff8880d5ee8000(0000) knlGS:0000000000000000 [ 153.874378][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.877069][ T29] CR2: 00007fa92ab58f70 CR3: 000000002c84d000 CR4: 0000000000352ef0 [ 153.880226][ T29] Kernel panic - not syncing: Fatal exception [ 153.883432][ T29] Kernel Offset: disabled [ 153.884741][ T29] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:04:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000016f429 RBX=ffffffff8e891480 RCX=ffffffff8bb962d5 RDX=0000000000000000 RSI=ffffffff8e1a4091 RDI=ffffffff8c401180 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb9489f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5de8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=000000002c3fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fda3b69a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000080000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff40b40f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff40b40f86 00007fff40b40f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af4345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000208 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000208 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a29865 RDI=ffffffff9b9fbb40 RBP=ffffffff9b9fbb00 RSP=ffffc90003baf500 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000033353754 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6ee1e2 R15=ffffffff85a29800 RIP=ffffffff85a2988f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ee8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa92ab58f70 CR3=000000002c84d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c615f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb5f8acb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb5f8acb6 00007ffdb5f8acbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99ae34452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99ae34492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99ae345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd99ae34484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000234 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000234 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff91d3563a RBX=ffffffff91454518 RCX=dffffc0000000000 RDX=ffffffff827a5e4b RSI=0000000000000000 RDI=ffffffff91454500 RBP=ffffffff91454500 RSP=ffffc9000062f5c0 R8 =ffffffff91d3568e R9 =0000000000000007 R10=0000000000000200 R11=0000000000017a5e R12=ffffffff91454534 R13=ffffffff827a5e2c R14=ffffffff91454500 R15=ffffffff91454500 RIP=ffffffff81b7dbae RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fe8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa92b9c3ff8 CR3=000000002c3fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=0000000080000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff40b40f86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff40b40f86 00007fff40b40f8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af4345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07af434484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000208 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000208 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88803414d540 RCX=ffffffff826281f3 RDX=ffff88802eaea540 RSI=ffffffff826281fe RDI=ffff88803414d540 RBP=dffffc0000000000 RSP=ffffc9000443f960 R8 =0000000000000007 R9 =0000000000000002 R10=0000000000000000 R11=0000000000000000 R12=ffffffffffffffff R13=0000000008100073 R14=ffff88803a7d8cc0 R15=0000000000000001 RIP=ffffffff8243a7c2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3c35df8c80 ffffffff 00c00000 GS =0000 ffff8880d60e8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3c35fcca90 CR3=000000005c424000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c35ed17b0 00007f3c361635f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c35ed17b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300020000000033 2e325f4342494c47 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000005f5f0063 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572637000636f6c 5f625f6570797463 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000288 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000378 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3c36163b20 00007f3c36164050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000