last executing test programs: 5.872519122s ago: executing program 1 (id=893): fsopen(&(0x7f0000000240)='openpromfs\x00', 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000840)='\x00\x00\x1a8\xc2\xe68\xf5|O<\xda\xca>\x03\x00L\xc6k\x8a\x93\xee^b\x94s:\xc7\t\x16\x93{\xc7\xf1g\xa5', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8f_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xf, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000100)='./bus\x00', 0x8) 3.132594792s ago: executing program 1 (id=937): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a00064735010000190581", @ANYRES8=r0, @ANYRES16=0x0], 0x0) syz_usb_disconnect(r1) syz_usb_disconnect(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a00064735010000190581", @ANYRES8=r0, @ANYRES16=0x0], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) (async) 1.664684595s ago: executing program 1 (id=952): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.304351487s ago: executing program 2 (id=965): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80000001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x1}, 0x8) r4 = dup3(r0, r1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000067000000080001"], 0x38}}, 0x10) 1.22464919s ago: executing program 2 (id=966): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = syz_io_uring_setup(0x73e3, &(0x7f0000000140)={0x0, 0x8000c593, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12002, 0x1}) (async) io_uring_enter(r3, 0x54e8, 0x5002, 0x8, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 864.798288ms ago: executing program 3 (id=971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c000280"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010026bd700001dbdf251cf9ffff06000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 864.644369ms ago: executing program 3 (id=972): socket$netlink(0x10, 0x3, 0xa) (async) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000001b0002002cbd7000ffdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2200074e240005020080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000000001000000010000000400000000000000000000000000000001000000000000008bffffffffffffff07000000000000000500000000000000090000000000000002000000000000000100000000000000080000000000000002000000bd6b6e0002010200000000000a00000000000000ec28e1003e40437afa56cd4b4c67e1306d9546b4562d22585df9df8fd62b1c376ca012cdb1b28c39c7f99e3fffaee104"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 863.424478ms ago: executing program 3 (id=973): getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) setrlimit(0x1, &(0x7f0000000000)) (async) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f0000001940)=""/4086, 0xff6) (async) prlimit64(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x9f4, 0x3}, &(0x7f0000000140)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x2, 0x0, 0xfc}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 794.272148ms ago: executing program 3 (id=974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) 793.941093ms ago: executing program 3 (id=975): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) (async) syz_emit_ethernet(0x52, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbaaaaaaaaaa0086dd60003a04001c3a00fe8000000000000000000000000000bbff02000000000000000000000000000182000000000000aaaf5b00"/82], 0x0) (async) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="14419e5465f0006fc8afa8e488a8", 0xe, 0x1, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x2040421, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsdef={'smackfsdef', 0x3d, 'lowerdir'}}, {@appraise_type}, {@appraise_type}], 0x3a}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg(r6, 0x0, 0x0) (async) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) 723.428733ms ago: executing program 3 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r1 = eventfd(0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00229e3ce0790fc4e97046837c10cfd285fd57e5a51b16ff2b0499886240e3e9763161dfac266b76220786659773b5dc78eb92e8f283c149e457d897f3b9fa7f8d73790eeb8a918188ff6bdaa3c760b0d5dab3966e4fc4c8cb18032069373800e33719e022d0005e64e4c7093ef7206e78a6c3fa2cf37f51dc39ab66ccc7e72552"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f00000000c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r1}, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="014c25905156d51c00000004060101000000000000000001000005050001f606000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 354.184484ms ago: executing program 2 (id=979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 284.700185ms ago: executing program 2 (id=981): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) mkdir(&(0x7f0000000040)='./bus\x00', 0xa) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 284.440838ms ago: executing program 0 (id=982): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x3d) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 204.924465ms ago: executing program 2 (id=983): r0 = userfaultfd(0x80001) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 203.686369ms ago: executing program 0 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008"], 0x6c}}, 0x0) 203.157982ms ago: executing program 2 (id=985): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) io_uring_setup(0x2a10, &(0x7f0000000200)={0x0, 0xa221, 0x2, 0x3, 0x99}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x6ed3, 0x1f, 0x0, 0x0, 0x0) 134.704684ms ago: executing program 1 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x8, 0x6, 0x8ce3) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5, 0x0, 0x3}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r3, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e657665"], 0x58}, 0x1, 0x2}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001840)={r9, 0xb}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x25) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r10, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff2e9c90a487fdfbf7a3bd1dcafcc67af208004500002400640000002f90a300000000e00000ed310088be0010"], 0x0) 134.354388ms ago: executing program 0 (id=987): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000005, 0x4031, 0xffffffffffffffff, 0x0) 74.937314ms ago: executing program 0 (id=988): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000000)={0x7, 0x0, '\x00', {0x0, @bt={0x0, 0x1, 0x1, 0x2, 0xe11fdde, 0x8, 0xd5f3, 0x80, 0x4, 0xa98, 0x7, 0x5, 0x437, 0x7, 0xa, 0x26, {0x40, 0x7}, 0x5, 0x40}}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000000)={0x7, 0x0, '\x00', {0x0, @bt={0x0, 0x1, 0x1, 0x2, 0xe11fdde, 0x8, 0xd5f3, 0x80, 0x4, 0xa98, 0x7, 0x5, 0x437, 0x7, 0xa, 0x26, {0x40, 0x7}, 0x5, 0x40}}}) (async) 74.579827ms ago: executing program 0 (id=989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 4.964776ms ago: executing program 0 (id=990): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x1, 0x7, &(0x7f0000000080)={0x0, "e953e14fcab3efeb00000000000000000876060ec031fa7e00"}}) 0s ago: executing program 1 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="64796e2c00c6bf2935d6a80e0806ee4a77400731cf27655c5bbc04301e8954784ff84b8f3482d2f9326f01a77ea72ec339ca7145411a0b68a17581737831a0ddd2c32b57be4551d66c0ccb9eeb9a5549d7b8b3f7c7ccc51d5f1b6b2895e2be30ab4d69"]) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x60000007, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) mkdir(&(0x7f0000000240)='./bus\x00', 0x1e2) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100"], 0xff, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[], 0xff, 0x0) (async) msgrcv(r4, 0xffffffffffffffff, 0x31, 0x1, 0x1800) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) read$snddsp(r5, &(0x7f0000000040)=""/10, 0xa) (async, rerun: 64) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x2, 0xfe32, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (rerun: 64) msgrcv(r4, 0xffffffffffffffff, 0x0, 0x2, 0x1800) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./bus\x00', r6}, 0x18) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x3, 0x1, 0x5}}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (async) msgctl$IPC_RMID(0x0, 0x0) kernel console output (not intermixed with test programs): ability 0, space 0, times 0 [ 67.355975][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.1.291 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 67.355989][ T6986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.355996][ T6986] Call Trace: [ 67.355999][ T6986] [ 67.356003][ T6986] dump_stack_lvl+0x16c/0x1f0 [ 67.356022][ T6986] should_fail_ex+0x50a/0x650 [ 67.356039][ T6986] ? fs_reclaim_acquire+0xae/0x150 [ 67.356056][ T6986] should_failslab+0xc2/0x120 [ 67.356068][ T6986] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 67.356080][ T6986] ? __alloc_skb+0x2b1/0x380 [ 67.356095][ T6986] ? find_held_lock+0x2d/0x110 [ 67.356108][ T6986] __alloc_skb+0x2b1/0x380 [ 67.356123][ T6986] ? __pfx___alloc_skb+0x10/0x10 [ 67.356137][ T6986] ? __pfx_lock_release+0x10/0x10 [ 67.356152][ T6986] ? trace_lock_acquire+0x14e/0x1f0 [ 67.356167][ T6986] alloc_uevent_skb+0x7d/0x210 [ 67.356179][ T6986] kobject_uevent_env+0xca3/0x1870 [ 67.356191][ T6986] ? bus_to_subsys+0x12d/0x160 [ 67.356210][ T6986] device_add+0x10e0/0x1a70 [ 67.356225][ T6986] ? __pfx_device_add+0x10/0x10 [ 67.356240][ T6986] ? kfree+0x2c4/0x4d0 [ 67.356254][ T6986] ? mark_held_locks+0x9f/0xe0 [ 67.356268][ T6986] ? input_register_device+0xc0d/0x1130 [ 67.356282][ T6986] input_register_device+0x7e8/0x1130 [ 67.356296][ T6986] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 67.356313][ T6986] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 67.356328][ T6986] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.356348][ T6986] ? __pfx_lock_release+0x10/0x10 [ 67.356367][ T6986] ? selinux_file_ioctl+0x180/0x270 [ 67.356383][ T6986] ? selinux_file_ioctl+0xb4/0x270 [ 67.356400][ T6986] ? __pfx_uinput_ioctl+0x10/0x10 [ 67.356415][ T6986] __x64_sys_ioctl+0x190/0x200 [ 67.356431][ T6986] do_syscall_64+0xcd/0x250 [ 67.356446][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.356462][ T6986] RIP: 0033:0x7f8ae778d169 [ 67.356470][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.356481][ T6986] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.356491][ T6986] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 67.356497][ T6986] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 67.356503][ T6986] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 67.356509][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.356515][ T6986] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 67.356527][ T6986] [ 67.356590][ T6986] input: syz1 as /devices/virtual/input/input29 [ 67.396301][ T6992] syz.3.293: attempt to access beyond end of device [ 67.396301][ T6992] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 67.443192][ T6992] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 67.699747][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'. [ 67.768656][ T7024] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 67.783552][ T5985] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.812618][ T5986] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.892126][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.894999][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.943128][ T5985] usb 8-1: Using ep0 maxpacket: 8 [ 67.945862][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 67.948922][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 67.951966][ T5985] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.955198][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.961759][ T5985] usb 8-1: config 0 descriptor?? [ 67.962685][ T5986] usb 7-1: Using ep0 maxpacket: 8 [ 67.966974][ T5986] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 67.969487][ T5986] usb 7-1: can't read configurations, error -61 [ 67.975377][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.985601][ T7018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.067526][ T7018] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.070313][ T7018] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.073770][ T7018] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.077190][ T7018] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.092783][ T5986] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.099642][ T7018] hsr_slave_1: left allmulticast mode [ 68.101261][ T7018] vlan2: left promiscuous mode [ 68.102731][ T7018] vlan2: left allmulticast mode [ 68.166727][ T5985] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.208442][ T7039] ======================================================= [ 68.208442][ T7039] WARNING: The mand mount option has been deprecated and [ 68.208442][ T7039] and is ignored by this kernel. Remove the mand [ 68.208442][ T7039] option from the mount to silence this warning. [ 68.208442][ T7039] ======================================================= [ 68.228672][ T7040] 9pnet_virtio: no channels available for device syz [ 68.272722][ T5986] usb 7-1: Using ep0 maxpacket: 8 [ 68.276585][ T5986] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.278746][ T5986] usb 7-1: can't read configurations, error -61 [ 68.280671][ T5986] usb usb7-port1: attempt power cycle [ 68.299198][ T7044] FAULT_INJECTION: forcing a failure. [ 68.299198][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 68.302755][ T7044] CPU: 2 UID: 0 PID: 7044 Comm: syz.1.303 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 68.302768][ T7044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.302775][ T7044] Call Trace: [ 68.302779][ T7044] [ 68.302784][ T7044] dump_stack_lvl+0x16c/0x1f0 [ 68.302803][ T7044] should_fail_ex+0x50a/0x650 [ 68.302819][ T7044] ? fs_reclaim_acquire+0xae/0x150 [ 68.302836][ T7044] should_failslab+0xc2/0x120 [ 68.302849][ T7044] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 68.302860][ T7044] ? __alloc_skb+0x2b1/0x380 [ 68.302877][ T7044] ? find_held_lock+0x2d/0x110 [ 68.302890][ T7044] __alloc_skb+0x2b1/0x380 [ 68.302906][ T7044] ? __pfx___alloc_skb+0x10/0x10 [ 68.302926][ T7044] ? __pfx_lock_release+0x10/0x10 [ 68.302945][ T7044] ? trace_lock_acquire+0x14e/0x1f0 [ 68.302970][ T7044] alloc_uevent_skb+0x7d/0x210 [ 68.302987][ T7044] kobject_uevent_env+0xca3/0x1870 [ 68.303007][ T7044] ? bus_to_subsys+0x12d/0x160 [ 68.303034][ T7044] device_add+0x10e0/0x1a70 [ 68.303057][ T7044] ? __pfx_device_add+0x10/0x10 [ 68.303080][ T7044] ? kfree+0x2c4/0x4d0 [ 68.303102][ T7044] ? mark_held_locks+0x9f/0xe0 [ 68.303122][ T7044] ? input_register_device+0xc0d/0x1130 [ 68.303145][ T7044] input_register_device+0x7e8/0x1130 [ 68.303167][ T7044] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 68.303195][ T7044] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 68.303217][ T7044] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.303247][ T7044] ? __pfx_lock_release+0x10/0x10 [ 68.303278][ T7044] ? selinux_file_ioctl+0x180/0x270 [ 68.303301][ T7044] ? selinux_file_ioctl+0xb4/0x270 [ 68.303324][ T7044] ? __pfx_uinput_ioctl+0x10/0x10 [ 68.303346][ T7044] __x64_sys_ioctl+0x190/0x200 [ 68.303369][ T7044] do_syscall_64+0xcd/0x250 [ 68.303391][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.303412][ T7044] RIP: 0033:0x7f8ae778d169 [ 68.303431][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.303447][ T7044] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.303461][ T7044] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 68.303471][ T7044] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 68.303481][ T7044] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 68.303490][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.303499][ T7044] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 68.303519][ T7044] [ 68.303592][ T7044] input: syz1 as /devices/virtual/input/input30 [ 68.441666][ T7046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 68.443634][ T7046] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.447160][ T7046] vhci_hcd vhci_hcd.0: Device attached [ 68.449839][ T7047] vhci_hcd: unknown pdu 2 [ 68.452316][ T78] vhci_hcd: stop threads [ 68.453679][ T78] vhci_hcd: release socket [ 68.454930][ T78] vhci_hcd: disconnect device [ 68.567987][ T71] usb 8-1: USB disconnect, device number 4 [ 68.568041][ C3] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 68.672767][ T5986] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.702974][ T5986] usb 7-1: Using ep0 maxpacket: 8 [ 68.705927][ T5986] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.708050][ T5986] usb 7-1: can't read configurations, error -61 [ 68.842557][ T5986] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 68.863088][ T5986] usb 7-1: Using ep0 maxpacket: 8 [ 68.866193][ T5986] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 68.868769][ T5986] usb 7-1: can't read configurations, error -61 [ 68.871758][ T5986] usb usb7-port1: unable to enumerate USB device [ 69.576462][ T7080] FAULT_INJECTION: forcing a failure. [ 69.576462][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 69.581292][ T7080] CPU: 2 UID: 0 PID: 7080 Comm: syz.3.312 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 69.581314][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.581324][ T7080] Call Trace: [ 69.581329][ T7080] [ 69.581336][ T7080] dump_stack_lvl+0x16c/0x1f0 [ 69.581364][ T7080] should_fail_ex+0x50a/0x650 [ 69.581391][ T7080] ? fs_reclaim_acquire+0xae/0x150 [ 69.581417][ T7080] should_failslab+0xc2/0x120 [ 69.581437][ T7080] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 69.581456][ T7080] ? skb_clone+0x190/0x3f0 [ 69.581503][ T7080] skb_clone+0x190/0x3f0 [ 69.581529][ T7080] netlink_broadcast_filtered+0xb11/0xef0 [ 69.581561][ T7080] ? sprintf+0xcd/0x110 [ 69.581581][ T7080] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 69.581616][ T7080] netlink_broadcast+0x39/0x50 [ 69.581639][ T7080] kobject_uevent_env+0xc69/0x1870 [ 69.581668][ T7080] ? bus_to_subsys+0x12d/0x160 [ 69.581698][ T7080] device_add+0x10e0/0x1a70 [ 69.581722][ T7080] ? __pfx_device_add+0x10/0x10 [ 69.581746][ T7080] ? kfree+0x2c4/0x4d0 [ 69.581767][ T7080] ? mark_held_locks+0x9f/0xe0 [ 69.581789][ T7080] ? input_register_device+0xc0d/0x1130 [ 69.581810][ T7080] input_register_device+0x7e8/0x1130 [ 69.581831][ T7080] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 69.581856][ T7080] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 69.581875][ T7080] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.581905][ T7080] ? __pfx_lock_release+0x10/0x10 [ 69.581937][ T7080] ? selinux_file_ioctl+0x180/0x270 [ 69.581960][ T7080] ? selinux_file_ioctl+0xb4/0x270 [ 69.581983][ T7080] ? __pfx_uinput_ioctl+0x10/0x10 [ 69.582004][ T7080] __x64_sys_ioctl+0x190/0x200 [ 69.582026][ T7080] do_syscall_64+0xcd/0x250 [ 69.582050][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.582071][ T7080] RIP: 0033:0x7fda82b8d169 [ 69.582083][ T7080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.582096][ T7080] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.582111][ T7080] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 69.582120][ T7080] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 69.582129][ T7080] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 69.582137][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.582145][ T7080] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 69.582166][ T7080] [ 69.582269][ T7080] input: syz1 as /devices/virtual/input/input31 [ 69.852187][ T7096] netlink: 'syz.0.317': attribute type 2 has an invalid length. [ 69.855412][ T7096] netlink: 'syz.0.317': attribute type 8 has an invalid length. [ 69.857574][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.317'. [ 70.076486][ T7105] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.319'. [ 70.079035][ T7105] openvswitch: netlink: Flow actions attr not present in new flow. [ 70.162910][ T7115] FAULT_INJECTION: forcing a failure. [ 70.162910][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 70.166323][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.1.322 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 70.166337][ T7115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.166344][ T7115] Call Trace: [ 70.166348][ T7115] [ 70.166352][ T7115] dump_stack_lvl+0x16c/0x1f0 [ 70.166371][ T7115] should_fail_ex+0x50a/0x650 [ 70.166398][ T7115] ? fs_reclaim_acquire+0xae/0x150 [ 70.166416][ T7115] should_failslab+0xc2/0x120 [ 70.166428][ T7115] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 70.166440][ T7115] ? skb_clone+0x190/0x3f0 [ 70.166458][ T7115] skb_clone+0x190/0x3f0 [ 70.166475][ T7115] netlink_broadcast_filtered+0xb11/0xef0 [ 70.166494][ T7115] ? sprintf+0xcd/0x110 [ 70.166507][ T7115] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 70.166528][ T7115] netlink_broadcast+0x39/0x50 [ 70.166543][ T7115] kobject_uevent_env+0xc69/0x1870 [ 70.166557][ T7115] ? bus_to_subsys+0x12d/0x160 [ 70.166575][ T7115] device_add+0x10e0/0x1a70 [ 70.166590][ T7115] ? __pfx_device_add+0x10/0x10 [ 70.166605][ T7115] ? kfree+0x2c4/0x4d0 [ 70.166619][ T7115] ? mark_held_locks+0x9f/0xe0 [ 70.166634][ T7115] ? input_register_device+0xc0d/0x1130 [ 70.166648][ T7115] input_register_device+0x7e8/0x1130 [ 70.166661][ T7115] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 70.166679][ T7115] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 70.166693][ T7115] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 70.166713][ T7115] ? __pfx_lock_release+0x10/0x10 [ 70.166732][ T7115] ? selinux_file_ioctl+0x180/0x270 [ 70.166748][ T7115] ? selinux_file_ioctl+0xb4/0x270 [ 70.166765][ T7115] ? __pfx_uinput_ioctl+0x10/0x10 [ 70.166780][ T7115] __x64_sys_ioctl+0x190/0x200 [ 70.166796][ T7115] do_syscall_64+0xcd/0x250 [ 70.166811][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.166826][ T7115] RIP: 0033:0x7f8ae778d169 [ 70.166835][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.166845][ T7115] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.166855][ T7115] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 70.166862][ T7115] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 70.166867][ T7115] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 70.166873][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.166879][ T7115] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 70.166891][ T7115] [ 70.166998][ T7115] input: syz1 as /devices/virtual/input/input32 [ 70.374726][ T7127] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 70.377191][ T7127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.380924][ T7127] vhci_hcd vhci_hcd.0: Device attached [ 70.624122][ T7031] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 70.676311][ T7138] kAFS: unparsable volume name [ 70.744446][ T7034] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.826971][ T7141] ufs: You didn't specify the type of your ufs filesystem [ 70.826971][ T7141] [ 70.826971][ T7141] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 70.826971][ T7141] [ 70.826971][ T7141] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 70.837281][ T7141] ufs: ufstype=old is supported read-only [ 70.839504][ T7141] syz.3.330: attempt to access beyond end of device [ 70.839504][ T7141] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 70.892702][ T7034] usb 7-1: Using ep0 maxpacket: 16 [ 70.896967][ T7034] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 70.899673][ T7034] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.901954][ T7034] usb 7-1: Product: syz [ 70.903371][ T7034] usb 7-1: Manufacturer: syz [ 70.904763][ T7034] usb 7-1: SerialNumber: syz [ 70.907301][ T7034] usb 7-1: config 0 descriptor?? [ 70.910279][ T7034] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 70.913306][ T7034] usb 7-1: Detected FT232H [ 71.030616][ T7143] input: syz1 as /devices/virtual/input/input33 [ 71.032875][ T7143] FAULT_INJECTION: forcing a failure. [ 71.032875][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 71.037243][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.3.331 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 71.037262][ T7143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.037272][ T7143] Call Trace: [ 71.037278][ T7143] [ 71.037285][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 71.037324][ T7143] should_fail_ex+0x50a/0x650 [ 71.037354][ T7143] ? fs_reclaim_acquire+0xae/0x150 [ 71.037383][ T7143] ? evdev_connect+0x82/0x4c0 [ 71.037401][ T7143] should_failslab+0xc2/0x120 [ 71.037420][ T7143] __kmalloc_cache_noprof+0x68/0x410 [ 71.037450][ T7143] evdev_connect+0x82/0x4c0 [ 71.037470][ T7143] input_attach_handler.isra.0+0x181/0x260 [ 71.037491][ T7143] input_register_device+0xa84/0x1130 [ 71.037511][ T7143] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 71.037538][ T7143] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 71.037560][ T7143] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.037590][ T7143] ? __pfx_lock_release+0x10/0x10 [ 71.037621][ T7143] ? selinux_file_ioctl+0x180/0x270 [ 71.037644][ T7143] ? selinux_file_ioctl+0xb4/0x270 [ 71.037670][ T7143] ? __pfx_uinput_ioctl+0x10/0x10 [ 71.037692][ T7143] __x64_sys_ioctl+0x190/0x200 [ 71.037715][ T7143] do_syscall_64+0xcd/0x250 [ 71.037739][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.037760][ T7143] RIP: 0033:0x7fda82b8d169 [ 71.037772][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.037787][ T7143] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.037803][ T7143] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 71.037814][ T7143] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 71.037823][ T7143] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 71.037832][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.037841][ T7143] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 71.037863][ T7143] [ 71.037872][ T7143] input: failed to attach handler evdev to device input33, error: -12 [ 71.110201][ T7128] usb 41-1: recv xbuf, 0 [ 71.115315][ T78] vhci_hcd: stop threads [ 71.116987][ T78] vhci_hcd: release socket [ 71.124246][ T78] vhci_hcd: disconnect device [ 71.129229][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 71.129238][ T40] audit: type=1400 audit(1742382429.627:415): avc: denied { write } for pid=7148 comm="syz.3.332" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.136970][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 71.140607][ T7034] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.142941][ T7034] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.145315][ T7034] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 71.145445][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.149087][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.150596][ T7034] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.164431][ T7034] usb 7-1: USB disconnect, device number 8 [ 71.167954][ T7034] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.170742][ T7034] ftdi_sio 7-1:0.0: device disconnected [ 71.187143][ T7031] vhci_hcd: vhci_device speed not set [ 71.206844][ T40] audit: type=1400 audit(1742382429.707:416): avc: denied { setattr } for pid=7154 comm="syz.2.333" name="/" dev="9p" ino=36831264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.239450][ T7163] program syz.3.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.248465][ T7164] program syz.3.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.266428][ T7167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.272233][ T7167] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 71.274642][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 71.329738][ T40] audit: type=1800 audit(1742382429.827:417): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.337" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 71.333172][ T7176] input: syz1 as /devices/virtual/input/input34 [ 71.336777][ T7176] FAULT_INJECTION: forcing a failure. [ 71.336777][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 71.340210][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.0.340 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 71.340223][ T7176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.340229][ T7176] Call Trace: [ 71.340239][ T7176] [ 71.340244][ T7176] dump_stack_lvl+0x16c/0x1f0 [ 71.340275][ T7176] should_fail_ex+0x50a/0x650 [ 71.340299][ T7176] ? fs_reclaim_acquire+0xae/0x150 [ 71.340316][ T7176] should_failslab+0xc2/0x120 [ 71.340329][ T7176] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 71.340341][ T7176] ? evdev_connect+0x82/0x4c0 [ 71.340353][ T7176] ? input_attach_handler.isra.0+0x181/0x260 [ 71.340364][ T7176] ? input_register_device+0xa84/0x1130 [ 71.340375][ T7176] ? kvasprintf_const+0x66/0x1a0 [ 71.340389][ T7176] kvasprintf+0xbd/0x160 [ 71.340399][ T7176] ? __pfx_kvasprintf+0x10/0x10 [ 71.340415][ T7176] kvasprintf_const+0x66/0x1a0 [ 71.340427][ T7176] kobject_set_name_vargs+0x5a/0x140 [ 71.340444][ T7176] dev_set_name+0xc8/0x100 [ 71.340471][ T7176] ? __pfx_dev_set_name+0x10/0x10 [ 71.340488][ T7176] ? lockdep_init_map_type+0x16d/0x7d0 [ 71.340505][ T7176] ? lockdep_init_map_type+0x16d/0x7d0 [ 71.340522][ T7176] ? evdev_connect+0x14c/0x4c0 [ 71.340547][ T7176] evdev_connect+0x17a/0x4c0 [ 71.340561][ T7176] input_attach_handler.isra.0+0x181/0x260 [ 71.340574][ T7176] input_register_device+0xa84/0x1130 [ 71.340587][ T7176] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 71.340604][ T7176] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 71.340619][ T7176] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.340639][ T7176] ? __pfx_lock_release+0x10/0x10 [ 71.340658][ T7176] ? selinux_file_ioctl+0x180/0x270 [ 71.340674][ T7176] ? selinux_file_ioctl+0xb4/0x270 [ 71.340691][ T7176] ? __pfx_uinput_ioctl+0x10/0x10 [ 71.340706][ T7176] __x64_sys_ioctl+0x190/0x200 [ 71.340722][ T7176] do_syscall_64+0xcd/0x250 [ 71.340738][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.340753][ T7176] RIP: 0033:0x7f8f8538d169 [ 71.340762][ T7176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.340773][ T7176] RSP: 002b:00007f8f86181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.340783][ T7176] RAX: ffffffffffffffda RBX: 00007f8f855a5fa0 RCX: 00007f8f8538d169 [ 71.340789][ T7176] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 71.340795][ T7176] RBP: 00007f8f86181090 R08: 0000000000000000 R09: 0000000000000000 [ 71.340801][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.340807][ T7176] R13: 0000000000000000 R14: 00007f8f855a5fa0 R15: 00007ffd23519228 [ 71.340819][ T7176] [ 71.416512][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.419216][ T7176] input: failed to attach handler evdev to device input34, error: -22 [ 71.470785][ T7185] input: syz0 as /devices/virtual/input/input35 [ 71.475670][ T40] audit: type=1400 audit(1742382429.977:418): avc: denied { getopt } for pid=7186 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.476103][ T7187] tmpfs: Bad value for 'mpol' [ 71.495279][ T7185] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 71.501347][ T40] audit: type=1400 audit(1742382429.997:419): avc: denied { accept } for pid=7189 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 71.502447][ T7185] CIFS mount error: No usable UNC path provided in device string! [ 71.502447][ T7185] [ 71.511567][ T7185] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 71.538821][ T40] audit: type=1400 audit(1742382430.037:420): avc: denied { relabelfrom } for pid=7193 comm="syz.0.346" name="" dev="pipefs" ino=17765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 71.551213][ T7194] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.346'. [ 71.553844][ T7194] openvswitch: netlink: Flow actions attr not present in new flow. [ 71.575194][ T40] audit: type=1400 audit(1742382430.077:421): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.615620][ T7208] input: syz1 as /devices/virtual/input/input36 [ 71.617962][ T7208] FAULT_INJECTION: forcing a failure. [ 71.617962][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 71.622390][ T7208] CPU: 2 UID: 0 PID: 7208 Comm: syz.1.349 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 71.622403][ T7208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.622410][ T7208] Call Trace: [ 71.622414][ T7208] [ 71.622418][ T7208] dump_stack_lvl+0x16c/0x1f0 [ 71.622436][ T7208] should_fail_ex+0x50a/0x650 [ 71.622453][ T7208] ? fs_reclaim_acquire+0xae/0x150 [ 71.622470][ T7208] ? device_add+0xccf/0x1a70 [ 71.622495][ T7208] should_failslab+0xc2/0x120 [ 71.622508][ T7208] __kmalloc_cache_noprof+0x68/0x410 [ 71.622525][ T7208] ? trace_kmalloc+0x2d/0xd0 [ 71.622540][ T7208] device_add+0xccf/0x1a70 [ 71.622555][ T7208] ? __pfx_device_add+0x10/0x10 [ 71.622569][ T7208] ? __pfx_exact_lock+0x10/0x10 [ 71.622585][ T7208] ? kobject_get+0xbb/0x150 [ 71.622602][ T7208] cdev_device_add+0xc2/0x1e0 [ 71.622614][ T7208] evdev_connect+0x3a4/0x4c0 [ 71.622628][ T7208] input_attach_handler.isra.0+0x181/0x260 [ 71.622641][ T7208] input_register_device+0xa84/0x1130 [ 71.622654][ T7208] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 71.622672][ T7208] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 71.622687][ T7208] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.622706][ T7208] ? __pfx_lock_release+0x10/0x10 [ 71.622727][ T7208] ? selinux_file_ioctl+0x180/0x270 [ 71.622743][ T7208] ? selinux_file_ioctl+0xb4/0x270 [ 71.622760][ T7208] ? __pfx_uinput_ioctl+0x10/0x10 [ 71.622774][ T7208] __x64_sys_ioctl+0x190/0x200 [ 71.622790][ T7208] do_syscall_64+0xcd/0x250 [ 71.622806][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.622821][ T7208] RIP: 0033:0x7f8ae778d169 [ 71.622830][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.622841][ T7208] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.622851][ T7208] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 71.622857][ T7208] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 71.622863][ T7208] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 71.622869][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.622875][ T7208] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 71.622887][ T7208] [ 71.714625][ T7208] input: failed to attach handler evdev to device input36, error: -12 [ 71.828550][ T40] audit: type=1400 audit(1742382430.327:422): avc: denied { watch watch_reads } for pid=7218 comm="syz.3.353" path="/84/file0" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 71.867480][ T7224] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.874549][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 71.878129][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 71.920069][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 71.927404][ T7230] xt_recent: Unsupported userspace flags (00000042) [ 71.954696][ T40] audit: type=1400 audit(1742382430.457:423): avc: denied { execute } for pid=7231 comm="syz.1.357" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.005150][ T40] audit: type=1400 audit(1742382430.507:424): avc: denied { setattr } for pid=7236 comm="syz.1.359" name="L2TP/IPv6" dev="sockfs" ino=17858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.054763][ T7242] input: syz1 as /devices/virtual/input/input37 [ 72.057587][ T7242] FAULT_INJECTION: forcing a failure. [ 72.057587][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 72.061404][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.3.361 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 72.061440][ T7242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.061447][ T7242] Call Trace: [ 72.061459][ T7242] [ 72.061466][ T7242] dump_stack_lvl+0x16c/0x1f0 [ 72.061518][ T7242] should_fail_ex+0x50a/0x650 [ 72.061541][ T7242] ? fs_reclaim_acquire+0xae/0x150 [ 72.061558][ T7242] ? device_add+0xccf/0x1a70 [ 72.061572][ T7242] should_failslab+0xc2/0x120 [ 72.061584][ T7242] __kmalloc_cache_noprof+0x68/0x410 [ 72.061601][ T7242] ? trace_kmalloc+0x2d/0xd0 [ 72.061616][ T7242] device_add+0xccf/0x1a70 [ 72.061636][ T7242] ? __pfx_device_add+0x10/0x10 [ 72.061650][ T7242] ? __pfx_exact_lock+0x10/0x10 [ 72.061663][ T7242] ? kobject_get+0xbb/0x150 [ 72.061680][ T7242] cdev_device_add+0xc2/0x1e0 [ 72.061691][ T7242] evdev_connect+0x3a4/0x4c0 [ 72.061705][ T7242] input_attach_handler.isra.0+0x181/0x260 [ 72.061718][ T7242] input_register_device+0xa84/0x1130 [ 72.061731][ T7242] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 72.061749][ T7242] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 72.061764][ T7242] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.061783][ T7242] ? __pfx_lock_release+0x10/0x10 [ 72.061837][ T7242] ? selinux_file_ioctl+0x180/0x270 [ 72.061855][ T7242] ? selinux_file_ioctl+0xb4/0x270 [ 72.061872][ T7242] ? __pfx_uinput_ioctl+0x10/0x10 [ 72.061887][ T7242] __x64_sys_ioctl+0x190/0x200 [ 72.061903][ T7242] do_syscall_64+0xcd/0x250 [ 72.061919][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.061934][ T7242] RIP: 0033:0x7fda82b8d169 [ 72.061943][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.061952][ T7242] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.061963][ T7242] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 72.061969][ T7242] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 72.061975][ T7242] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 72.061981][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.061987][ T7242] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 72.061999][ T7242] [ 72.130189][ T7242] input: failed to attach handler evdev to device input37, error: -12 [ 72.308361][ T7266] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.335310][ T7270] input: syz1 as /devices/virtual/input/input38 [ 72.337513][ T7270] FAULT_INJECTION: forcing a failure. [ 72.337513][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 72.372671][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.3.370 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 72.372698][ T7270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.372709][ T7270] Call Trace: [ 72.372714][ T7270] [ 72.372720][ T7270] dump_stack_lvl+0x16c/0x1f0 [ 72.372750][ T7270] should_fail_ex+0x50a/0x650 [ 72.372788][ T7270] ? fs_reclaim_acquire+0xae/0x150 [ 72.372815][ T7270] should_failslab+0xc2/0x120 [ 72.372835][ T7270] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 72.372852][ T7270] ? __asan_memcpy+0x3c/0x60 [ 72.372876][ T7270] ? __kernfs_new_node+0xd3/0x890 [ 72.372906][ T7270] __kernfs_new_node+0xd3/0x890 [ 72.372933][ T7270] ? hlock_class+0x4e/0x130 [ 72.372951][ T7270] ? __pfx___kernfs_new_node+0x10/0x10 [ 72.372989][ T7270] ? __pfx___lock_acquire+0x10/0x10 [ 72.373011][ T7270] ? hlock_class+0x4e/0x130 [ 72.373028][ T7270] ? __lock_acquire+0x15a9/0x3c40 [ 72.373055][ T7270] kernfs_new_node+0x186/0x240 [ 72.373073][ T7270] ? lock_acquire.part.0+0x11b/0x380 [ 72.373099][ T7270] kernfs_create_dir_ns+0x4c/0x150 [ 72.373120][ T7270] sysfs_create_dir_ns+0x13b/0x2b0 [ 72.373145][ T7270] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 72.373169][ T7270] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.373187][ T7270] ? kobject_add_internal+0x12d/0x990 [ 72.373214][ T7270] ? do_raw_spin_unlock+0x172/0x230 [ 72.373233][ T7270] kobject_add_internal+0x2c8/0x990 [ 72.373262][ T7270] kobject_add+0x16f/0x240 [ 72.373288][ T7270] ? __pfx_kobject_add+0x10/0x10 [ 72.373311][ T7270] ? class_to_subsys+0x3e/0x160 [ 72.373336][ T7270] ? do_raw_spin_unlock+0x172/0x230 [ 72.373353][ T7270] ? kobject_put+0xab/0x5a0 [ 72.373379][ T7270] ? device_add+0x250/0x1a70 [ 72.373406][ T7270] device_add+0x289/0x1a70 [ 72.373432][ T7270] ? __pfx_device_add+0x10/0x10 [ 72.373454][ T7270] ? __pfx_exact_lock+0x10/0x10 [ 72.373476][ T7270] ? kobject_get+0xbb/0x150 [ 72.373502][ T7270] cdev_device_add+0xc2/0x1e0 [ 72.373522][ T7270] evdev_connect+0x3a4/0x4c0 [ 72.373545][ T7270] input_attach_handler.isra.0+0x181/0x260 [ 72.373567][ T7270] input_register_device+0xa84/0x1130 [ 72.373595][ T7270] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 72.373621][ T7270] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 72.373643][ T7270] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.373674][ T7270] ? __pfx_lock_release+0x10/0x10 [ 72.373707][ T7270] ? selinux_file_ioctl+0x180/0x270 [ 72.373732][ T7270] ? selinux_file_ioctl+0xb4/0x270 [ 72.373759][ T7270] ? __pfx_uinput_ioctl+0x10/0x10 [ 72.373783][ T7270] __x64_sys_ioctl+0x190/0x200 [ 72.373809][ T7270] do_syscall_64+0xcd/0x250 [ 72.373834][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.373857][ T7270] RIP: 0033:0x7fda82b8d169 [ 72.373872][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.373889][ T7270] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.373906][ T7270] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 72.373918][ T7270] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 72.373928][ T7270] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 72.373938][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.373949][ T7270] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 72.373972][ T7270] [ 72.374004][ T7270] kobject: kobject_add_internal failed for event4 (error: -12 parent: input38) [ 72.492705][ T7270] input: failed to attach handler evdev to device input38, error: -12 [ 72.562126][ T7288] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 72.565925][ T1177] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.701832][ T7301] kvm: MWAIT instruction emulated as NOP! [ 73.023665][ T7343] input: syz1 as /devices/virtual/input/input39 [ 73.025545][ T7343] FAULT_INJECTION: forcing a failure. [ 73.025545][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 73.029067][ T7343] CPU: 2 UID: 0 PID: 7343 Comm: syz.1.385 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 73.029080][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.029086][ T7343] Call Trace: [ 73.029089][ T7343] [ 73.029094][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 73.029122][ T7343] should_fail_ex+0x50a/0x650 [ 73.029145][ T7343] ? fs_reclaim_acquire+0xae/0x150 [ 73.029162][ T7343] should_failslab+0xc2/0x120 [ 73.029174][ T7343] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 73.029185][ T7343] ? __asan_memcpy+0x3c/0x60 [ 73.029201][ T7343] ? __kernfs_new_node+0xd3/0x890 [ 73.029219][ T7343] __kernfs_new_node+0xd3/0x890 [ 73.029235][ T7343] ? hlock_class+0x4e/0x130 [ 73.029247][ T7343] ? __pfx___kernfs_new_node+0x10/0x10 [ 73.029268][ T7343] ? __pfx___lock_acquire+0x10/0x10 [ 73.029283][ T7343] ? hlock_class+0x4e/0x130 [ 73.029294][ T7343] ? __lock_acquire+0x15a9/0x3c40 [ 73.029310][ T7343] kernfs_new_node+0x186/0x240 [ 73.029321][ T7343] ? lock_acquire.part.0+0x11b/0x380 [ 73.029337][ T7343] kernfs_create_dir_ns+0x4c/0x150 [ 73.029350][ T7343] sysfs_create_dir_ns+0x13b/0x2b0 [ 73.029365][ T7343] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.029380][ T7343] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 73.029391][ T7343] ? kobject_add_internal+0x12d/0x990 [ 73.029408][ T7343] ? do_raw_spin_unlock+0x172/0x230 [ 73.029418][ T7343] kobject_add_internal+0x2c8/0x990 [ 73.029437][ T7343] kobject_add+0x16f/0x240 [ 73.029452][ T7343] ? __pfx_kobject_add+0x10/0x10 [ 73.029468][ T7343] ? class_to_subsys+0x3e/0x160 [ 73.029484][ T7343] ? do_raw_spin_unlock+0x172/0x230 [ 73.029494][ T7343] ? kobject_put+0xab/0x5a0 [ 73.029510][ T7343] ? device_add+0x250/0x1a70 [ 73.029526][ T7343] device_add+0x289/0x1a70 [ 73.029541][ T7343] ? __pfx_device_add+0x10/0x10 [ 73.029555][ T7343] ? __pfx_exact_lock+0x10/0x10 [ 73.029567][ T7343] ? kobject_get+0xbb/0x150 [ 73.029583][ T7343] cdev_device_add+0xc2/0x1e0 [ 73.029595][ T7343] evdev_connect+0x3a4/0x4c0 [ 73.029612][ T7343] input_attach_handler.isra.0+0x181/0x260 [ 73.029626][ T7343] input_register_device+0xa84/0x1130 [ 73.029639][ T7343] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 73.029656][ T7343] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 73.029671][ T7343] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.029691][ T7343] ? __pfx_lock_release+0x10/0x10 [ 73.029711][ T7343] ? selinux_file_ioctl+0x180/0x270 [ 73.029726][ T7343] ? selinux_file_ioctl+0xb4/0x270 [ 73.029743][ T7343] ? __pfx_uinput_ioctl+0x10/0x10 [ 73.029758][ T7343] __x64_sys_ioctl+0x190/0x200 [ 73.029774][ T7343] do_syscall_64+0xcd/0x250 [ 73.029790][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.029806][ T7343] RIP: 0033:0x7f8ae778d169 [ 73.029815][ T7343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.029825][ T7343] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.029835][ T7343] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 73.029842][ T7343] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 73.029847][ T7343] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 73.029853][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.029859][ T7343] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 73.029871][ T7343] [ 73.029882][ T7343] kobject: kobject_add_internal failed for event4 (error: -12 parent: input39) [ 73.129716][ T7343] input: failed to attach handler evdev to device input39, error: -12 [ 73.387996][ T7392] random: crng reseeded on system resumption [ 73.586692][ T7392] can: request_module (can-proto-0) failed. [ 73.602359][ T7413] input: syz1 as /devices/virtual/input/input40 [ 73.604309][ T7413] FAULT_INJECTION: forcing a failure. [ 73.604309][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 73.607756][ T7413] CPU: 3 UID: 0 PID: 7413 Comm: syz.0.394 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 73.607769][ T7413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.607776][ T7413] Call Trace: [ 73.607780][ T7413] [ 73.607784][ T7413] dump_stack_lvl+0x16c/0x1f0 [ 73.607802][ T7413] should_fail_ex+0x50a/0x650 [ 73.607819][ T7413] ? fs_reclaim_acquire+0xae/0x150 [ 73.607836][ T7413] should_failslab+0xc2/0x120 [ 73.607849][ T7413] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 73.607862][ T7413] ? kstrdup_const+0x63/0x80 [ 73.607879][ T7413] kstrdup+0x53/0x100 [ 73.607894][ T7413] kstrdup_const+0x63/0x80 [ 73.607909][ T7413] __kernfs_new_node+0x9c/0x890 [ 73.607926][ T7413] ? hlock_class+0x4e/0x130 [ 73.607938][ T7413] ? __pfx___kernfs_new_node+0x10/0x10 [ 73.607959][ T7413] ? __pfx___lock_acquire+0x10/0x10 [ 73.607973][ T7413] ? hlock_class+0x4e/0x130 [ 73.607984][ T7413] ? __lock_acquire+0x15a9/0x3c40 [ 73.608000][ T7413] kernfs_new_node+0x186/0x240 [ 73.608011][ T7413] ? lock_acquire.part.0+0x11b/0x380 [ 73.608027][ T7413] kernfs_create_dir_ns+0x4c/0x150 [ 73.608040][ T7413] sysfs_create_dir_ns+0x13b/0x2b0 [ 73.608055][ T7413] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.608071][ T7413] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 73.608081][ T7413] ? kobject_add_internal+0x12d/0x990 [ 73.608098][ T7413] ? do_raw_spin_unlock+0x172/0x230 [ 73.608109][ T7413] kobject_add_internal+0x2c8/0x990 [ 73.608138][ T7413] kobject_add+0x16f/0x240 [ 73.608158][ T7413] ? __pfx_kobject_add+0x10/0x10 [ 73.608174][ T7413] ? class_to_subsys+0x3e/0x160 [ 73.608189][ T7413] ? do_raw_spin_unlock+0x172/0x230 [ 73.608199][ T7413] ? kobject_put+0xab/0x5a0 [ 73.608215][ T7413] ? device_add+0x250/0x1a70 [ 73.608231][ T7413] device_add+0x289/0x1a70 [ 73.608246][ T7413] ? __pfx_device_add+0x10/0x10 [ 73.608260][ T7413] ? __pfx_exact_lock+0x10/0x10 [ 73.608273][ T7413] ? kobject_get+0xbb/0x150 [ 73.608289][ T7413] cdev_device_add+0xc2/0x1e0 [ 73.608301][ T7413] evdev_connect+0x3a4/0x4c0 [ 73.608315][ T7413] input_attach_handler.isra.0+0x181/0x260 [ 73.608333][ T7413] input_register_device+0xa84/0x1130 [ 73.608346][ T7413] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 73.608363][ T7413] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 73.608378][ T7413] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.608398][ T7413] ? __pfx_lock_release+0x10/0x10 [ 73.608417][ T7413] ? selinux_file_ioctl+0x180/0x270 [ 73.608433][ T7413] ? selinux_file_ioctl+0xb4/0x270 [ 73.608450][ T7413] ? __pfx_uinput_ioctl+0x10/0x10 [ 73.608465][ T7413] __x64_sys_ioctl+0x190/0x200 [ 73.608481][ T7413] do_syscall_64+0xcd/0x250 [ 73.608497][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.608526][ T7413] RIP: 0033:0x7f8f8538d169 [ 73.608535][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.608545][ T7413] RSP: 002b:00007f8f86181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.608555][ T7413] RAX: ffffffffffffffda RBX: 00007f8f855a5fa0 RCX: 00007f8f8538d169 [ 73.608562][ T7413] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 73.608568][ T7413] RBP: 00007f8f86181090 R08: 0000000000000000 R09: 0000000000000000 [ 73.608573][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.608580][ T7413] R13: 0000000000000000 R14: 00007f8f855a5fa0 R15: 00007ffd23519228 [ 73.608592][ T7413] [ 73.608652][ T7413] kobject: kobject_add_internal failed for event4 (error: -12 parent: input40) [ 73.706717][ T7413] input: failed to attach handler evdev to device input40, error: -12 [ 73.822557][ T7424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.582662][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.582715][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 74.798137][ T7487] trusted_key: encrypted_key: insufficient parameters specified [ 75.141173][ T7492] netlink: 'syz.1.418': attribute type 21 has an invalid length. [ 75.145411][ T7492] netlink: 'syz.1.418': attribute type 20 has an invalid length. [ 75.147659][ T7492] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.537322][ T7512] __nla_validate_parse: 2 callbacks suppressed [ 75.537338][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 75.545973][ T7512] netem: invalid attributes len -9 [ 75.548225][ T7512] netem: change failed [ 75.551293][ T7512] x_tables: duplicate underflow at hook 1 [ 75.561041][ T7513] capability: warning: `syz.1.425' uses 32-bit capabilities (legacy support in use) [ 75.936315][ T7538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=7538 comm=syz.2.430 [ 76.135119][ T7542] ucma_write: process 407 (syz.1.432) changed security contexts after opening file descriptor, this is not allowed. [ 76.287958][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 76.287971][ T40] audit: type=1400 audit(1742382434.787:459): avc: denied { bind } for pid=7547 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.296954][ T40] audit: type=1400 audit(1742382434.787:460): avc: denied { listen } for pid=7547 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.310713][ T40] audit: type=1400 audit(1742382434.807:461): avc: denied { write } for pid=7547 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.317397][ T40] audit: type=1400 audit(1742382434.807:462): avc: denied { accept } for pid=7547 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.322795][ T40] audit: type=1400 audit(1742382434.807:463): avc: denied { read } for pid=7547 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.360477][ T40] audit: type=1400 audit(1742382434.857:464): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 76.382955][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'. [ 76.937596][ T40] audit: type=1400 audit(1742382435.437:465): avc: denied { bind } for pid=7567 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.950646][ T40] audit: type=1400 audit(1742382435.437:466): avc: denied { name_bind } for pid=7567 comm="syz.2.440" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 76.961338][ T7568] 9pnet_virtio: no channels available for device syz [ 76.966515][ T40] audit: type=1400 audit(1742382435.447:467): avc: denied { node_bind } for pid=7567 comm="syz.2.440" saddr=ff01::1 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 76.981523][ T40] audit: type=1400 audit(1742382435.447:468): avc: denied { connect } for pid=7567 comm="syz.2.440" laddr=ff01::1 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 77.062084][ T7575] syz.2.442: attempt to access beyond end of device [ 77.062084][ T7575] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 77.069610][ T7575] EXT4-fs (nbd2): unable to read superblock [ 77.199123][ T7584] syz.0.443: attempt to access beyond end of device [ 77.199123][ T7584] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 77.206609][ T7584] syz.0.443: attempt to access beyond end of device [ 77.206609][ T7584] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 77.210952][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 77.213910][ T7584] getblk(): invalid block size 512 requested [ 77.215627][ T7584] logical block size: 1024 [ 77.217051][ T7584] CPU: 3 UID: 0 PID: 7584 Comm: syz.0.443 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 77.217065][ T7584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.217072][ T7584] Call Trace: [ 77.217075][ T7584] [ 77.217080][ T7584] dump_stack_lvl+0x16c/0x1f0 [ 77.217099][ T7584] __getblk_slow+0x4ec/0x5b0 [ 77.217113][ T7584] ? __pfx___might_resched+0x10/0x10 [ 77.217130][ T7584] ? fs_reclaim_acquire+0xae/0x150 [ 77.217148][ T7584] bdev_getblk+0xb1/0xc0 [ 77.217160][ T7584] __bread_gfp+0x86/0x340 [ 77.217185][ T7584] udf_read_tagged+0xae/0x740 [ 77.217202][ T7584] udf_check_anchor_block+0x8a/0x4b0 [ 77.217216][ T7584] ? udf_get_last_block+0x1cf/0x2b0 [ 77.217227][ T7584] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 77.217242][ T7584] ? __brelse+0x8c/0xb0 [ 77.217258][ T7584] udf_load_vrs+0x668/0x1050 [ 77.217277][ T7584] ? __pfx_udf_load_vrs+0x10/0x10 [ 77.217290][ T7584] ? lockdep_init_map_type+0x16d/0x7d0 [ 77.217311][ T7584] ? __pfx_udf_get_last_session+0x10/0x10 [ 77.217324][ T7584] udf_fill_super+0x792/0x1df0 [ 77.217340][ T7584] ? __pfx_udf_fill_super+0x10/0x10 [ 77.217352][ T7584] ? do_raw_spin_lock+0x12d/0x2c0 [ 77.217362][ T7584] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.217372][ T7584] ? set_blocksize+0x29f/0x350 [ 77.217386][ T7584] ? sb_set_blocksize+0xf6/0x120 [ 77.217398][ T7584] ? setup_bdev_super+0x369/0x730 [ 77.217417][ T7584] get_tree_bdev_flags+0x38b/0x620 [ 77.217433][ T7584] ? __pfx_udf_fill_super+0x10/0x10 [ 77.217446][ T7584] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 77.217466][ T7584] ? bpf_lsm_capable+0x9/0x10 [ 77.217479][ T7584] ? security_capable+0x7e/0x260 [ 77.217493][ T7584] vfs_get_tree+0x8b/0x340 [ 77.217507][ T7584] path_mount+0x14e6/0x1f10 [ 77.217519][ T7584] ? kmem_cache_free+0x2e2/0x4d0 [ 77.217530][ T7584] ? __pfx_path_mount+0x10/0x10 [ 77.217543][ T7584] ? putname+0x13c/0x180 [ 77.217559][ T7584] __x64_sys_mount+0x28f/0x310 [ 77.217571][ T7584] ? __pfx___x64_sys_mount+0x10/0x10 [ 77.217586][ T7584] do_syscall_64+0xcd/0x250 [ 77.217602][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.217617][ T7584] RIP: 0033:0x7f8f8538d169 [ 77.217626][ T7584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.217636][ T7584] RSP: 002b:00007f8f86160038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.217646][ T7584] RAX: ffffffffffffffda RBX: 00007f8f855a6080 RCX: 00007f8f8538d169 [ 77.217653][ T7584] RDX: 0000400000000040 RSI: 0000400000004a00 RDI: 0000400000000500 [ 77.217659][ T7584] RBP: 00007f8f8540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.217665][ T7584] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 77.217671][ T7584] R13: 0000000000000000 R14: 00007f8f855a6080 R15: 00007ffd23519228 [ 77.217683][ T7584] [ 77.217698][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 77.309986][ T7584] syz.0.443: attempt to access beyond end of device [ 77.309986][ T7584] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 77.314845][ T7584] syz.0.443: attempt to access beyond end of device [ 77.314845][ T7584] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 77.318468][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 77.321329][ T7584] syz.0.443: attempt to access beyond end of device [ 77.321329][ T7584] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 77.325127][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 77.327994][ T7584] syz.0.443: attempt to access beyond end of device [ 77.327994][ T7584] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 77.331648][ T7584] syz.0.443: attempt to access beyond end of device [ 77.331648][ T7584] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 77.335427][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 77.338242][ T7584] syz.0.443: attempt to access beyond end of device [ 77.338242][ T7584] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 77.341891][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 77.344831][ T7584] syz.0.443: attempt to access beyond end of device [ 77.344831][ T7584] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 77.351056][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 77.354482][ T7584] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 77.357362][ T7584] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 77.462668][ T5986] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 77.592615][ T5313] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 77.603793][ T7604] netdevsim netdevsim3 all: renamed from netdevsim0 (while UP) [ 77.615495][ T5986] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.618361][ T5986] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 77.621377][ T5986] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.624255][ T5986] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 77.624252][ T7603] (syz.3.448,7603,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.627282][ T5986] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 77.628751][ T5986] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.630752][ T7603] (syz.3.448,7603,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 77.633893][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.633906][ T5986] usb 7-1: Product: syz [ 77.633913][ T5986] usb 7-1: Manufacturer: syz [ 77.635858][ T5986] cdc_wdm 7-1:1.0: skipping garbage [ 77.648613][ T5986] cdc_wdm 7-1:1.0: skipping garbage [ 77.651738][ T7604] (syz.3.448,7604,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 77.655186][ T5986] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 77.656867][ T5986] cdc_wdm 7-1:1.0: Unknown control protocol [ 77.658640][ T7604] (syz.3.448,7604,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 77.744747][ T5313] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.747863][ T5313] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.750768][ T5313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.753414][ T5313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 77.756714][ T5313] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25954, setting to 1024 [ 77.761025][ T5313] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.763669][ T5313] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.765940][ T5313] usb 6-1: Product: syz [ 77.767149][ T5313] usb 6-1: Manufacturer: syz [ 77.769882][ T7586] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.772734][ T5313] cdc_wdm 6-1:1.0: skipping garbage [ 77.774367][ T5313] cdc_wdm 6-1:1.0: skipping garbage [ 77.777586][ T5313] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 77.779329][ T5313] cdc_wdm 6-1:1.0: Unknown control protocol [ 77.844633][ T7031] usb 7-1: USB disconnect, device number 9 [ 77.942008][ T7580] block nbd0: shutting down sockets [ 78.052887][ T71] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.175511][ T7031] usb 6-1: USB disconnect, device number 10 [ 78.225135][ T71] usb 8-1: config index 0 descriptor too short (expected 16402, got 18) [ 78.227434][ T71] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.230177][ T71] usb 8-1: config 0 has no interfaces? [ 78.234186][ T71] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 78.236766][ T71] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.238976][ T71] usb 8-1: Product: syz [ 78.240154][ T71] usb 8-1: Manufacturer: syz [ 78.241486][ T71] usb 8-1: SerialNumber: syz [ 78.244844][ T71] usb 8-1: config 0 descriptor?? [ 78.450537][ T71] usb 8-1: USB disconnect, device number 5 [ 78.551799][ T7642] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 78.554127][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 78.625143][ T7647] skbuff: bad partial csum: csum=65506/2 headroom=176 headlen=65526 [ 78.721156][ T7651] tmpfs: Bad value for 'mpol' [ 78.771045][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 78.773961][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 78.954777][ T7593] Bluetooth: Error in BCSP hdr checksum [ 79.024135][ T7660] syz_tun: entered allmulticast mode [ 79.028658][ T7660] syz_tun: left allmulticast mode [ 79.222762][ T7286] Bluetooth: Error in BCSP hdr checksum [ 79.473656][ T7286] Bluetooth: Error in BCSP hdr checksum [ 79.503184][ T7679] syz.2.475 (7679) used greatest stack depth: 19312 bytes left [ 79.530027][ T7681] vlan2: entered allmulticast mode [ 79.531532][ T7681] vlan1: entered allmulticast mode [ 79.533236][ T7681] veth0_vlan: entered allmulticast mode [ 79.852549][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 80.012633][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 80.019724][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 80.027402][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 80.031724][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.035304][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.039581][ T9] usb 7-1: config 0 descriptor?? [ 80.157770][ T7695] input: syz1 as /devices/virtual/input/input41 [ 80.160280][ T7695] FAULT_INJECTION: forcing a failure. [ 80.160280][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 80.165662][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.1.481 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 80.165685][ T7695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.165694][ T7695] Call Trace: [ 80.165699][ T7695] [ 80.165706][ T7695] dump_stack_lvl+0x16c/0x1f0 [ 80.165733][ T7695] should_fail_ex+0x50a/0x650 [ 80.165759][ T7695] ? fs_reclaim_acquire+0xae/0x150 [ 80.165783][ T7695] should_failslab+0xc2/0x120 [ 80.165802][ T7695] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 80.165819][ T7695] ? __kernfs_new_node+0xd3/0x890 [ 80.165846][ T7695] __kernfs_new_node+0xd3/0x890 [ 80.165872][ T7695] ? __pfx___kernfs_new_node+0x10/0x10 [ 80.165904][ T7695] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 80.165928][ T7695] ? rwsem_read_trylock+0x12d/0x250 [ 80.165945][ T7695] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 80.165972][ T7695] kernfs_new_node+0x186/0x240 [ 80.165993][ T7695] __kernfs_create_file+0x53/0x350 [ 80.166016][ T7695] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 80.166044][ T7695] sysfs_merge_group+0x1b1/0x340 [ 80.166070][ T7695] ? __pfx_sysfs_merge_group+0x10/0x10 [ 80.166098][ T7695] ? __pfx_dev_add_physical_location+0x10/0x10 [ 80.166119][ T7695] ? bus_to_subsys+0x12d/0x160 [ 80.166146][ T7695] dpm_sysfs_add+0x237/0x280 [ 80.166168][ T7695] device_add+0x9a8/0x1a70 [ 80.166194][ T7695] ? __pfx_device_add+0x10/0x10 [ 80.166215][ T7695] ? __pfx_exact_lock+0x10/0x10 [ 80.166236][ T7695] ? kobject_get+0xbb/0x150 [ 80.166261][ T7695] cdev_device_add+0xc2/0x1e0 [ 80.166279][ T7695] evdev_connect+0x3a4/0x4c0 [ 80.166302][ T7695] input_attach_handler.isra.0+0x181/0x260 [ 80.166323][ T7695] input_register_device+0xa84/0x1130 [ 80.166345][ T7695] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 80.166370][ T7695] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 80.166392][ T7695] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 80.166423][ T7695] ? __pfx_lock_release+0x10/0x10 [ 80.166454][ T7695] ? selinux_file_ioctl+0x180/0x270 [ 80.166478][ T7695] ? selinux_file_ioctl+0xb4/0x270 [ 80.166505][ T7695] ? __pfx_uinput_ioctl+0x10/0x10 [ 80.166532][ T7695] __x64_sys_ioctl+0x190/0x200 [ 80.166556][ T7695] do_syscall_64+0xcd/0x250 [ 80.166580][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.166601][ T7695] RIP: 0033:0x7f8ae778d169 [ 80.166615][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.166629][ T7695] RSP: 002b:00007f8ae8638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.166644][ T7695] RAX: ffffffffffffffda RBX: 00007f8ae79a5fa0 RCX: 00007f8ae778d169 [ 80.166655][ T7695] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 80.166664][ T7695] RBP: 00007f8ae8638090 R08: 0000000000000000 R09: 0000000000000000 [ 80.166673][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.166682][ T7695] R13: 0000000000000000 R14: 00007f8ae79a5fa0 R15: 00007fff210277e8 [ 80.166704][ T7695] [ 80.168091][ T7695] input: failed to attach handler evdev to device input41, error: -12 [ 80.246977][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 80.340288][ T7699] 9pnet: Could not find request transport: un)x [ 80.585313][ T7702] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 80.587411][ T7702] netlink: 208292 bytes leftover after parsing attributes in process `syz.1.484'. [ 80.589737][ T7702] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 80.591647][ T7702] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 80.650321][ T5313] usb 7-1: USB disconnect, device number 10 [ 80.679478][ T7711] "syz.1.486" (7711) uses obsolete ecb(arc4) skcipher [ 80.742876][ T66] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.789337][ T7721] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 80.791183][ T7721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.795418][ T7721] vhci_hcd vhci_hcd.0: Device attached [ 80.809780][ T7722] vhci_hcd: connection closed [ 80.811228][ T7593] vhci_hcd: stop threads [ 80.815487][ T7593] vhci_hcd: release socket [ 80.817265][ T7593] vhci_hcd: disconnect device [ 80.885621][ T7734] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 80.888335][ T7734] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 80.891962][ T7734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.907472][ T7734] loop2: detected capacity change from 0 to 524287999 [ 80.921734][ T7734] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 80.924547][ T7734] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.489'. [ 81.001906][ T7749] input: syz1 as /devices/virtual/input/input42 [ 81.004979][ T7749] FAULT_INJECTION: forcing a failure. [ 81.004979][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 81.008823][ T7749] CPU: 3 UID: 0 PID: 7749 Comm: syz.0.500 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 81.008842][ T7749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.008853][ T7749] Call Trace: [ 81.008858][ T7749] [ 81.008865][ T7749] dump_stack_lvl+0x16c/0x1f0 [ 81.008891][ T7749] should_fail_ex+0x50a/0x650 [ 81.008916][ T7749] ? fs_reclaim_acquire+0xae/0x150 [ 81.008943][ T7749] should_failslab+0xc2/0x120 [ 81.008962][ T7749] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 81.008979][ T7749] ? __kernfs_new_node+0xd3/0x890 [ 81.009008][ T7749] __kernfs_new_node+0xd3/0x890 [ 81.009031][ T7749] ? __pfx___lock_acquire+0x10/0x10 [ 81.009056][ T7749] ? __pfx___kernfs_new_node+0x10/0x10 [ 81.009089][ T7749] ? find_held_lock+0x2d/0x110 [ 81.009111][ T7749] kernfs_new_node+0x186/0x240 [ 81.009133][ T7749] kernfs_create_dir_ns+0x4c/0x150 [ 81.009154][ T7749] internal_create_group+0x34e/0xf10 [ 81.009186][ T7749] ? __pfx_internal_create_group+0x10/0x10 [ 81.009221][ T7749] ? __pfx_dev_add_physical_location+0x10/0x10 [ 81.009242][ T7749] ? bus_to_subsys+0x12d/0x160 [ 81.009271][ T7749] dpm_sysfs_add+0x80/0x280 [ 81.009291][ T7749] device_add+0x9a8/0x1a70 [ 81.009314][ T7749] ? __pfx_device_add+0x10/0x10 [ 81.009335][ T7749] ? __pfx_exact_lock+0x10/0x10 [ 81.009355][ T7749] ? kobject_get+0xbb/0x150 [ 81.009380][ T7749] cdev_device_add+0xc2/0x1e0 [ 81.009397][ T7749] evdev_connect+0x3a4/0x4c0 [ 81.009417][ T7749] input_attach_handler.isra.0+0x181/0x260 [ 81.009439][ T7749] input_register_device+0xa84/0x1130 [ 81.009459][ T7749] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 81.009484][ T7749] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 81.009507][ T7749] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.009537][ T7749] ? __pfx_lock_release+0x10/0x10 [ 81.009570][ T7749] ? selinux_file_ioctl+0x180/0x270 [ 81.009592][ T7749] ? selinux_file_ioctl+0xb4/0x270 [ 81.009619][ T7749] ? __pfx_uinput_ioctl+0x10/0x10 [ 81.009642][ T7749] __x64_sys_ioctl+0x190/0x200 [ 81.009667][ T7749] do_syscall_64+0xcd/0x250 [ 81.009692][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.009715][ T7749] RIP: 0033:0x7f8f8538d169 [ 81.009729][ T7749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.009744][ T7749] RSP: 002b:00007f8f86181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.009761][ T7749] RAX: ffffffffffffffda RBX: 00007f8f855a5fa0 RCX: 00007f8f8538d169 [ 81.009772][ T7749] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 81.009782][ T7749] RBP: 00007f8f86181090 R08: 0000000000000000 R09: 0000000000000000 [ 81.009791][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.009801][ T7749] R13: 0000000000000000 R14: 00007f8f855a5fa0 R15: 00007ffd23519228 [ 81.009823][ T7749] [ 81.013957][ T7749] input: failed to attach handler evdev to device input42, error: -12 [ 81.123737][ T7754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.167157][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.170447][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.173611][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.176355][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.179166][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.181865][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.186150][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.189391][ T7751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.192010][ T7751] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 81.284679][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 81.287055][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 81.384971][ T59] cfg80211: failed to load regulatory.db [ 81.529156][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 81.529171][ T40] audit: type=1400 audit(1742382440.027:494): avc: denied { map } for pid=7775 comm="syz.1.503" path="socket:[19812]" dev="sockfs" ino=19812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.539834][ T40] audit: type=1400 audit(1742382440.027:495): avc: denied { read accept } for pid=7775 comm="syz.1.503" path="socket:[19812]" dev="sockfs" ino=19812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.554456][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 81.556338][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 81.872569][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 81.882005][ T7752] block nbd3: shutting down sockets [ 81.915507][ T7780] input: syz1 as /devices/virtual/input/input44 [ 81.917407][ T7780] FAULT_INJECTION: forcing a failure. [ 81.917407][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 81.920827][ T7780] CPU: 2 UID: 0 PID: 7780 Comm: syz.3.505 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 81.920840][ T7780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.920847][ T7780] Call Trace: [ 81.920850][ T7780] [ 81.920854][ T7780] dump_stack_lvl+0x16c/0x1f0 [ 81.920874][ T7780] should_fail_ex+0x50a/0x650 [ 81.920890][ T7780] ? fs_reclaim_acquire+0xae/0x150 [ 81.920907][ T7780] should_failslab+0xc2/0x120 [ 81.920920][ T7780] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 81.920931][ T7780] ? __kernfs_new_node+0xd3/0x890 [ 81.920950][ T7780] __kernfs_new_node+0xd3/0x890 [ 81.920968][ T7780] ? __pfx___kernfs_new_node+0x10/0x10 [ 81.920983][ T7780] ? __pfx_lock_release+0x10/0x10 [ 81.920999][ T7780] ? kernfs_add_one+0x39d/0x520 [ 81.921025][ T7780] ? up_write+0x1b2/0x520 [ 81.921044][ T7780] kernfs_new_node+0x186/0x240 [ 81.921070][ T7780] __kernfs_create_file+0x53/0x350 [ 81.921085][ T7780] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 81.921103][ T7780] sysfs_merge_group+0x1b1/0x340 [ 81.921120][ T7780] ? __pfx_sysfs_merge_group+0x10/0x10 [ 81.921138][ T7780] ? __pfx_dev_add_physical_location+0x10/0x10 [ 81.921153][ T7780] ? bus_to_subsys+0x12d/0x160 [ 81.921170][ T7780] dpm_sysfs_add+0x237/0x280 [ 81.921184][ T7780] device_add+0x9a8/0x1a70 [ 81.921204][ T7780] ? __pfx_device_add+0x10/0x10 [ 81.921218][ T7780] ? __pfx_exact_lock+0x10/0x10 [ 81.921230][ T7780] ? kobject_get+0xbb/0x150 [ 81.921247][ T7780] cdev_device_add+0xc2/0x1e0 [ 81.921259][ T7780] evdev_connect+0x3a4/0x4c0 [ 81.921272][ T7780] input_attach_handler.isra.0+0x181/0x260 [ 81.921286][ T7780] input_register_device+0xa84/0x1130 [ 81.921300][ T7780] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 81.921317][ T7780] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 81.921331][ T7780] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 81.921351][ T7780] ? __pfx_lock_release+0x10/0x10 [ 81.921371][ T7780] ? selinux_file_ioctl+0x180/0x270 [ 81.921387][ T7780] ? selinux_file_ioctl+0xb4/0x270 [ 81.921404][ T7780] ? __pfx_uinput_ioctl+0x10/0x10 [ 81.921419][ T7780] __x64_sys_ioctl+0x190/0x200 [ 81.921435][ T7780] do_syscall_64+0xcd/0x250 [ 81.921451][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.921466][ T7780] RIP: 0033:0x7fda82b8d169 [ 81.921474][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.921484][ T7780] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.921494][ T7780] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 81.921501][ T7780] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 81.921507][ T7780] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 81.921513][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.921518][ T7780] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 81.921531][ T7780] [ 82.005390][ T7780] input: failed to attach handler evdev to device input44, error: -12 [ 82.023404][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 82.028521][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.032969][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.035721][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.037008][ T7782] xt_hashlimit: size too large, truncated to 1048576 [ 82.039259][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 82.043631][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.046772][ T9] usb 6-1: config 0 descriptor?? [ 82.063396][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 82.065077][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 82.093361][ T7770] ceph: No mds server is up or the cluster is laggy [ 82.109911][ T40] audit: type=1400 audit(1742382440.607:496): avc: denied { ioctl } for pid=7781 comm="syz.3.506" path="socket:[20552]" dev="sockfs" ino=20552 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.146772][ T40] audit: type=1400 audit(1742382440.647:497): avc: denied { write } for pid=7787 comm="syz.3.508" name="ip6_tables_names" dev="proc" ino=4026533251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.157410][ T7790] SELinux: policydb version -1467056921 does not match my version range 15-34 [ 82.159919][ T7790] SELinux: failed to load policy [ 82.205997][ T7792] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.212127][ T7794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.298596][ T7792] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.352697][ T40] audit: type=1804 audit(1742382440.857:498): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.512" name="/newroot/107/file0" dev="tmpfs" ino=597 res=1 errno=0 [ 82.358732][ T40] audit: type=1804 audit(1742382440.857:499): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.512" name="/newroot/107/file0" dev="tmpfs" ino=597 res=1 errno=0 [ 82.358916][ T7798] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 82.369034][ T7798] ref_ctr increment failed for inode: 0x255 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a47bc00 [ 82.395037][ T7792] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.455160][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.458228][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.469873][ T7792] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.474253][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input45 [ 82.513252][ T40] audit: type=1400 audit(1742382441.017:500): avc: denied { bind } for pid=7799 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.535765][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0002/input/input46 [ 82.559693][ T9] kye 0003:0458:5011.0002: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 82.609077][ T7792] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.615780][ T7792] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622373][ T7792] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.630648][ T7792] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.664344][ T40] audit: type=1326 audit(1742382441.167:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.1.504" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae778d169 code=0x0 [ 82.766361][ T836] usb 6-1: USB disconnect, device number 11 [ 83.130834][ T7804] input: syz1 as /devices/virtual/input/input47 [ 83.133713][ T7804] FAULT_INJECTION: forcing a failure. [ 83.133713][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 83.138070][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.3.515 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 83.138092][ T7804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.138102][ T7804] Call Trace: [ 83.138106][ T7804] [ 83.138112][ T7804] dump_stack_lvl+0x16c/0x1f0 [ 83.138139][ T7804] should_fail_ex+0x50a/0x650 [ 83.138164][ T7804] ? fs_reclaim_acquire+0xae/0x150 [ 83.138188][ T7804] should_failslab+0xc2/0x120 [ 83.138214][ T7804] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 83.138231][ T7804] ? __kernfs_new_node+0xd3/0x890 [ 83.138257][ T7804] __kernfs_new_node+0xd3/0x890 [ 83.138274][ T7804] ? __pfx___kernfs_new_node+0x10/0x10 [ 83.138290][ T7804] ? __pfx_lock_release+0x10/0x10 [ 83.138306][ T7804] ? kernfs_add_one+0x39d/0x520 [ 83.138320][ T7804] ? up_write+0x1b2/0x520 [ 83.138339][ T7804] kernfs_new_node+0x186/0x240 [ 83.138351][ T7804] __kernfs_create_file+0x53/0x350 [ 83.138366][ T7804] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 83.138385][ T7804] sysfs_merge_group+0x1b1/0x340 [ 83.138402][ T7804] ? __pfx_sysfs_merge_group+0x10/0x10 [ 83.138420][ T7804] ? __pfx_dev_add_physical_location+0x10/0x10 [ 83.138434][ T7804] ? bus_to_subsys+0x12d/0x160 [ 83.138452][ T7804] dpm_sysfs_add+0x237/0x280 [ 83.138467][ T7804] device_add+0x9a8/0x1a70 [ 83.138483][ T7804] ? __pfx_device_add+0x10/0x10 [ 83.138496][ T7804] ? __pfx_exact_lock+0x10/0x10 [ 83.138509][ T7804] ? kobject_get+0xbb/0x150 [ 83.138526][ T7804] cdev_device_add+0xc2/0x1e0 [ 83.138537][ T7804] evdev_connect+0x3a4/0x4c0 [ 83.138551][ T7804] input_attach_handler.isra.0+0x181/0x260 [ 83.138564][ T7804] input_register_device+0xa84/0x1130 [ 83.138577][ T7804] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 83.138595][ T7804] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 83.138609][ T7804] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.138629][ T7804] ? __pfx_lock_release+0x10/0x10 [ 83.138649][ T7804] ? selinux_file_ioctl+0x180/0x270 [ 83.138665][ T7804] ? selinux_file_ioctl+0xb4/0x270 [ 83.138682][ T7804] ? __pfx_uinput_ioctl+0x10/0x10 [ 83.138697][ T7804] __x64_sys_ioctl+0x190/0x200 [ 83.138713][ T7804] do_syscall_64+0xcd/0x250 [ 83.138729][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.138744][ T7804] RIP: 0033:0x7fda82b8d169 [ 83.138753][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.138767][ T7804] RSP: 002b:00007fda83a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.138783][ T7804] RAX: ffffffffffffffda RBX: 00007fda82da5fa0 RCX: 00007fda82b8d169 [ 83.138794][ T7804] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 83.138803][ T7804] RBP: 00007fda83a95090 R08: 0000000000000000 R09: 0000000000000000 [ 83.138813][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.138822][ T7804] R13: 0000000000000000 R14: 00007fda82da5fa0 R15: 00007fff5e589c88 [ 83.138846][ T7804] [ 83.139285][ T7804] input: failed to attach handler evdev to device input47, error: -12 [ 83.249350][ T7806] bio_check_eod: 14 callbacks suppressed [ 83.249365][ T7806] syz.2.514: attempt to access beyond end of device [ 83.249365][ T7806] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 83.255994][ T7806] syz.2.514: attempt to access beyond end of device [ 83.255994][ T7806] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 83.259593][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 83.262295][ T7806] syz.2.514: attempt to access beyond end of device [ 83.262295][ T7806] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 83.266272][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 83.269609][ T7806] syz.2.514: attempt to access beyond end of device [ 83.269609][ T7806] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 83.274109][ T7806] syz.2.514: attempt to access beyond end of device [ 83.274109][ T7806] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 83.277931][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 83.280558][ T7806] syz.2.514: attempt to access beyond end of device [ 83.280558][ T7806] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 83.284366][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 83.287199][ T7806] syz.2.514: attempt to access beyond end of device [ 83.287199][ T7806] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 83.290726][ T7806] syz.2.514: attempt to access beyond end of device [ 83.290726][ T7806] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 83.294247][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 83.294939][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 83.301968][ T7806] syz.2.514: attempt to access beyond end of device [ 83.301968][ T7806] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 83.307779][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 83.311904][ T7806] syz.2.514: attempt to access beyond end of device [ 83.311904][ T7806] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 83.317251][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 83.320501][ T7806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 83.323796][ T7806] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 83.360611][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 83.445170][ T40] audit: type=1400 audit(1742382441.947:502): avc: denied { getattr } for pid=7822 comm="syz.3.521" laddr=ff01::1 lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.540656][ T7829] overlayfs: conflicting options: userxattr,verity=on [ 83.545742][ T7829] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 83.548816][ T7829] PKCS7: Only support pkcs7_signedData type [ 83.971965][ T7807] block nbd2: shutting down sockets [ 84.009949][ T7831] input: syz1 as /devices/virtual/input/input48 [ 84.011970][ T7831] FAULT_INJECTION: forcing a failure. [ 84.011970][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 84.015837][ T7831] CPU: 2 UID: 0 PID: 7831 Comm: syz.2.524 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 84.015862][ T7831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.015871][ T7831] Call Trace: [ 84.015875][ T7831] [ 84.015881][ T7831] dump_stack_lvl+0x16c/0x1f0 [ 84.015906][ T7831] should_fail_ex+0x50a/0x650 [ 84.015930][ T7831] ? fs_reclaim_acquire+0xae/0x150 [ 84.015954][ T7831] should_failslab+0xc2/0x120 [ 84.015972][ T7831] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 84.015989][ T7831] ? __kernfs_new_node+0xd3/0x890 [ 84.016016][ T7831] __kernfs_new_node+0xd3/0x890 [ 84.016043][ T7831] ? __pfx___kernfs_new_node+0x10/0x10 [ 84.016066][ T7831] ? __pfx_lock_release+0x10/0x10 [ 84.016089][ T7831] ? kernfs_add_one+0x39d/0x520 [ 84.016112][ T7831] ? up_write+0x1b2/0x520 [ 84.016139][ T7831] kernfs_new_node+0x186/0x240 [ 84.016173][ T7831] __kernfs_create_file+0x53/0x350 [ 84.016195][ T7831] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 84.016217][ T7831] sysfs_merge_group+0x1b1/0x340 [ 84.016234][ T7831] ? __pfx_sysfs_merge_group+0x10/0x10 [ 84.016252][ T7831] ? __pfx_dev_add_physical_location+0x10/0x10 [ 84.016267][ T7831] ? bus_to_subsys+0x12d/0x160 [ 84.016284][ T7831] dpm_sysfs_add+0x237/0x280 [ 84.016299][ T7831] device_add+0x9a8/0x1a70 [ 84.016314][ T7831] ? __pfx_device_add+0x10/0x10 [ 84.016329][ T7831] ? __pfx_exact_lock+0x10/0x10 [ 84.016341][ T7831] ? kobject_get+0xbb/0x150 [ 84.016358][ T7831] cdev_device_add+0xc2/0x1e0 [ 84.016371][ T7831] evdev_connect+0x3a4/0x4c0 [ 84.016385][ T7831] input_attach_handler.isra.0+0x181/0x260 [ 84.016398][ T7831] input_register_device+0xa84/0x1130 [ 84.016442][ T7831] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 84.016461][ T7831] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 84.016476][ T7831] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.016496][ T7831] ? __pfx_lock_release+0x10/0x10 [ 84.016516][ T7831] ? selinux_file_ioctl+0x180/0x270 [ 84.016532][ T7831] ? selinux_file_ioctl+0xb4/0x270 [ 84.016549][ T7831] ? __pfx_uinput_ioctl+0x10/0x10 [ 84.016564][ T7831] __x64_sys_ioctl+0x190/0x200 [ 84.016580][ T7831] do_syscall_64+0xcd/0x250 [ 84.016596][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.016611][ T7831] RIP: 0033:0x7f4b09b8d169 [ 84.016620][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.016630][ T7831] RSP: 002b:00007f4b0aad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.016640][ T7831] RAX: ffffffffffffffda RBX: 00007f4b09da5fa0 RCX: 00007f4b09b8d169 [ 84.016647][ T7831] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 84.016653][ T7831] RBP: 00007f4b0aad4090 R08: 0000000000000000 R09: 0000000000000000 [ 84.016659][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.016665][ T7831] R13: 0000000000000000 R14: 00007f4b09da5fa0 R15: 00007ffc48703b08 [ 84.016677][ T7831] [ 84.016996][ T7831] input: failed to attach handler evdev to device input48, error: -12 [ 84.139067][ T40] audit: type=1400 audit(1742382442.637:503): avc: denied { create } for pid=7837 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.146887][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.527'. [ 84.158682][ T7840] tmpfs: Bad value for 'mpol' [ 84.567277][ T7876] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.540'. [ 84.696258][ T7888] afs: Unknown parameter 'dyQ' [ 84.791679][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 84.795511][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 84.842304][ T7909] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 84.853979][ T7912] No source specified [ 84.975300][ T7927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 84.978596][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'. [ 84.982265][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 85.223017][ T7965] team0: No ports can be present during mode change [ 85.408968][ T7986] netlink: 'syz.3.570': attribute type 20 has an invalid length. [ 85.472362][ T7990] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 85.482067][ T7991] ufs: You didn't specify the type of your ufs filesystem [ 85.482067][ T7991] [ 85.482067][ T7991] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 85.482067][ T7991] [ 85.482067][ T7991] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 85.493192][ T7991] ufs: failed to set blocksize [ 85.552672][ T7034] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 85.572701][ T7995] IPv6: Can't replace route, no match found [ 85.629667][ T8001] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1073741824) [ 85.632169][ T8001] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 85.702644][ T7034] usb 7-1: Using ep0 maxpacket: 8 [ 85.705393][ T7034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 85.708501][ T7034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 85.711557][ T7034] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.715825][ T7034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.719119][ T7034] usb 7-1: config 0 descriptor?? [ 85.817704][ T8010] overlayfs: failed to resolve './file0/file0': -2 [ 85.925321][ T7034] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.018662][ T8023] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 86.022804][ T8023] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 86.033997][ T66] Bluetooth: hci4: sending frame failed (-49) [ 86.036364][ T5954] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 86.125365][ T7034] usb 7-1: USB disconnect, device number 11 [ 86.193710][ T8031] xt_l2tp: v2 sid > 0xffff: 150994944 [ 86.195771][ T8031] overlayfs: failed to clone upperpath [ 86.233865][ T8034] __nla_validate_parse: 14 callbacks suppressed [ 86.233876][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'. [ 86.347989][ T8059] delete_channel: no stack [ 86.442729][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.454334][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.466095][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.474090][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.478125][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.502433][ T8057] kvm: kvm [8055]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 86.639150][ T8076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.604'. [ 86.644679][ T8076] unsupported nlmsg_type 40 [ 86.692045][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 86.692057][ T40] audit: type=1400 audit(1742382445.187:527): avc: denied { append } for pid=8084 comm="syz.2.607" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 86.702185][ T40] audit: type=1400 audit(1742382445.197:528): avc: denied { setattr } for pid=8084 comm="syz.2.607" name="cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.715396][ T8086] netlink: 'syz.0.605': attribute type 3 has an invalid length. [ 86.717950][ T40] audit: type=1400 audit(1742382445.217:529): avc: denied { mounton } for pid=8078 comm="syz.0.605" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.808294][ T40] audit: type=1400 audit(1742382445.307:530): avc: denied { create } for pid=8090 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.814723][ T40] audit: type=1400 audit(1742382445.317:531): avc: denied { ioctl } for pid=8090 comm="syz.2.609" path="socket:[22713]" dev="sockfs" ino=22713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 86.892544][ T5313] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 86.948644][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 86.951198][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 86.954877][ T8098] netlink: 'syz.2.611': attribute type 13 has an invalid length. [ 87.032721][ T5313] usb 6-1: device descriptor read/64, error -71 [ 87.272635][ T5313] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 87.422595][ T5313] usb 6-1: device descriptor read/64, error -71 [ 87.544834][ T5313] usb usb6-port1: attempt power cycle [ 87.612553][ T40] audit: type=1326 audit(1742382446.107:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8112 comm="syz.0.616" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8538d169 code=0x0 [ 87.746695][ T40] audit: type=1400 audit(1742382446.247:533): avc: denied { read write } for pid=8117 comm="syz.0.617" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.762540][ T40] audit: type=1400 audit(1742382446.257:534): avc: denied { open } for pid=8117 comm="syz.0.617" path="/dev/usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.892821][ T5313] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 87.914128][ T5313] usb 6-1: device descriptor read/8, error -71 [ 87.918527][ T8122] netlink: 'syz.0.619': attribute type 3 has an invalid length. [ 87.920745][ T8122] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.619'. [ 88.073402][ T8138] vlan2: entered allmulticast mode [ 88.074923][ T8138] vlan1: entered allmulticast mode [ 88.076463][ T8138] veth0_vlan: entered allmulticast mode [ 88.123848][ T8140] xt_hashlimit: size too large, truncated to 1048576 [ 88.162672][ T5313] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 88.182949][ T5313] usb 6-1: device descriptor read/8, error -71 [ 88.295100][ T5313] usb usb6-port1: unable to enumerate USB device [ 88.300462][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 88.303849][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 88.552650][ T5985] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 88.705270][ T5985] usb 7-1: Using ep0 maxpacket: 8 [ 88.709860][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 88.714559][ T5985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 88.718785][ T5985] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.722216][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.730529][ T5985] usb 7-1: config 0 descriptor?? [ 88.942095][ T5985] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.342628][ T5985] usb 7-1: USB disconnect, device number 12 [ 89.731221][ T8182] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 89.736780][ T8182] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 89.738908][ T8182] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.639'. [ 89.792204][ T8186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8186 comm=syz.3.642 [ 89.796874][ T8186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8186 comm=syz.3.642 [ 91.032663][ T7034] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 91.182597][ T7034] usb 7-1: Using ep0 maxpacket: 8 [ 91.187034][ T7034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 91.190006][ T7034] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 91.198529][ T7034] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.201829][ T7034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.205480][ T7034] usb 7-1: config 0 descriptor?? [ 91.312836][ T8237] fuse: Bad value for 'fd' [ 91.317010][ T8239] tmpfs: Bad value for 'huge' [ 91.396069][ T8240] fuse: Bad value for 'fd' [ 91.414192][ T7034] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 91.536919][ T40] audit: type=1400 audit(1742382450.037:535): avc: denied { read } for pid=8244 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 91.539175][ T8245] lo speed is unknown, defaulting to 1000 [ 91.549697][ T8245] lo speed is unknown, defaulting to 1000 [ 91.557346][ T8245] lo speed is unknown, defaulting to 1000 [ 91.583285][ T8247] bio_check_eod: 2 callbacks suppressed [ 91.583296][ T8247] syz.0.663: attempt to access beyond end of device [ 91.583296][ T8247] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 91.589050][ T8247] FAT-fs (nbd0): unable to read boot sector [ 91.649939][ T8245] infiniband syz0: set active [ 91.653434][ T5313] lo speed is unknown, defaulting to 1000 [ 91.656857][ T8245] infiniband syz0: added lo [ 91.690027][ T8245] RDS/IB: syz0: added [ 91.691819][ T8245] smc: adding ib device syz0 with port count 1 [ 91.699201][ T8245] smc: ib device syz0 port 1 has pnetid [ 91.703969][ T8245] lo speed is unknown, defaulting to 1000 [ 91.707968][ T7034] lo speed is unknown, defaulting to 1000 [ 91.804609][ T8245] lo speed is unknown, defaulting to 1000 [ 91.815241][ T5313] usb 7-1: USB disconnect, device number 13 [ 91.865931][ T8245] lo speed is unknown, defaulting to 1000 [ 91.919374][ T8245] lo speed is unknown, defaulting to 1000 [ 92.023985][ T40] audit: type=1400 audit(1742382450.527:536): avc: denied { accept } for pid=8262 comm="syz.3.669" path="socket:[23620]" dev="sockfs" ino=23620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.505801][ T40] audit: type=1400 audit(1742382451.007:537): avc: denied { nlmsg_write } for pid=8295 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 92.508298][ T8296] syz.3.679 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.516567][ T40] audit: type=1400 audit(1742382451.017:538): avc: denied { getopt } for pid=8295 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.576215][ T8301] lo speed is unknown, defaulting to 1000 [ 92.617373][ T8300] lo speed is unknown, defaulting to 1000 [ 92.756206][ T8309] xfrm1: entered allmulticast mode [ 93.236392][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 93.320366][ T8320] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 93.373369][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 93.377918][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 93.381780][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 93.385869][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 93.443265][ T8332] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.470394][ T8320] kvm: pic: non byte write [ 93.483129][ T8320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (144 ns). Using initial count to start timer. [ 93.503070][ T40] audit: type=1400 audit(1742382451.997:539): avc: denied { shutdown } for pid=8338 comm="syz.1.691" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.580185][ T8344] block nbd1: NBD_DISCONNECT [ 93.630306][ T40] audit: type=1400 audit(1742382452.127:540): avc: denied { listen } for pid=8357 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.636140][ T40] audit: type=1400 audit(1742382452.137:541): avc: denied { ioctl } for pid=8357 comm="syz.1.696" path="socket:[22317]" dev="sockfs" ino=22317 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.622568][ T26] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 94.762606][ T26] usb 7-1: device descriptor read/64, error -71 [ 94.772598][ T71] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 94.947605][ T71] usb 6-1: Using ep0 maxpacket: 8 [ 94.951099][ T71] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 94.955198][ T71] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 94.958395][ T71] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.961943][ T71] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.967242][ T71] usb 6-1: config 0 descriptor?? [ 95.012740][ T26] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 95.027969][ T8391] kvm: kvm [8390]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 95.031030][ T8391] kvm: kvm [8390]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 95.152626][ T26] usb 7-1: device descriptor read/64, error -71 [ 95.173828][ T71] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.262770][ T26] usb usb7-port1: attempt power cycle [ 95.574824][ T58] usb 6-1: USB disconnect, device number 16 [ 95.602575][ T26] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 95.623338][ T26] usb 7-1: device descriptor read/8, error -71 [ 95.862616][ T26] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 95.883302][ T26] usb 7-1: device descriptor read/8, error -71 [ 95.974547][ T8411] /dev/sg0: Can't lookup blockdev [ 96.000297][ T26] usb usb7-port1: unable to enumerate USB device [ 96.135225][ T40] audit: type=1400 audit(1742382454.637:542): avc: denied { read } for pid=8414 comm="syz.1.712" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 96.147185][ T40] audit: type=1400 audit(1742382454.637:543): avc: denied { open } for pid=8414 comm="syz.1.712" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 96.225537][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 96.228006][ T8427] netlink: 'syz.0.717': attribute type 30 has an invalid length. [ 96.232465][ T8427] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.236383][ T8427] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.239351][ T8427] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.241932][ T8427] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.342141][ T8444] netlink: 108 bytes leftover after parsing attributes in process `syz.3.723'. [ 96.345082][ T8444] netlink: 108 bytes leftover after parsing attributes in process `syz.3.723'. [ 96.351754][ T8445] netlink: 124 bytes leftover after parsing attributes in process `syz.3.723'. [ 96.351875][ T8444] netlink: 124 bytes leftover after parsing attributes in process `syz.3.723'. [ 96.355005][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.362679][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.380341][ T8445] openvswitch: netlink: Message has 44053 unknown bytes. [ 96.382696][ T8448] openvswitch: netlink: Message has 44053 unknown bytes. [ 96.512669][ T7034] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 96.567134][ T8467] can: request_module (can-proto-0) failed. [ 96.662732][ T7034] usb 6-1: Using ep0 maxpacket: 8 [ 96.666012][ T7034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 96.670262][ T7034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 96.674956][ T7034] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.678390][ T7034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.682338][ T7034] usb 6-1: config 0 descriptor?? [ 96.891289][ T7034] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 97.294754][ T5313] usb 6-1: USB disconnect, device number 17 [ 97.421327][ T40] audit: type=1400 audit(1742382455.917:544): avc: denied { ioctl } for pid=8478 comm="syz.2.734" path="/144/file0/file0" dev="9p" ino=36831278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.429529][ T40] audit: type=1804 audit(1742382455.917:545): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.734" name="/newroot/144/file0/file0" dev="9p" ino=36831278 res=1 errno=0 [ 97.755653][ T40] audit: type=1400 audit(1742382456.257:546): avc: denied { map } for pid=8501 comm="syz.2.743" path="socket:[23078]" dev="sockfs" ino=23078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.761897][ T40] audit: type=1400 audit(1742382456.257:547): avc: denied { accept } for pid=8501 comm="syz.2.743" path="socket:[23078]" dev="sockfs" ino=23078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.827883][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 97.872616][ T40] audit: type=1400 audit(1742382456.367:548): avc: denied { getattr } for pid=8516 comm="syz.1.747" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.986173][ T8533] overlayfs: missing 'lowerdir' [ 97.996850][ T8533] netlink: 'syz.0.752': attribute type 22 has an invalid length. [ 98.142780][ T8548] overlayfs: invalid redirect (./file0) [ 98.346344][ T8568] __nla_validate_parse: 6 callbacks suppressed [ 98.346364][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 98.382915][ T8570] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.559772][ T8584] syz.1.768: attempt to access beyond end of device [ 98.559772][ T8584] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 98.565017][ T8584] MINIX-fs: unable to read superblock [ 98.602139][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 98.605479][ T8586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.609222][ T8586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.624694][ T8590] tipc: Started in network mode [ 98.626643][ T8590] tipc: Node identity 6, cluster identity 4711 [ 98.629009][ T8590] tipc: Node number set to 6 [ 98.644602][ T8591] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 98.644608][ T8590] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 98.827727][ T40] audit: type=1800 audit(1742382457.327:549): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.777" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 98.890182][ T8618] overlayfs: failed to clone upperpath [ 98.917648][ T8620] netlink: 'syz.1.780': attribute type 4 has an invalid length. [ 98.952096][ T8624] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 98.954424][ T7034] IPVS: starting estimator thread 0... [ 98.983697][ T40] audit: type=1400 audit(1742382457.477:550): avc: denied { setopt } for pid=8626 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.043669][ T40] audit: type=1400 audit(1742382457.547:551): avc: denied { read } for pid=8633 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.047794][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 99.050462][ T8634] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 99.052355][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 99.061617][ T8634] overlayfs: missing 'lowerdir' [ 99.063554][ T8625] IPVS: using max 35 ests per chain, 84000 per kthread [ 99.122667][ T5313] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 99.246415][ T8649] netlink: 25 bytes leftover after parsing attributes in process `syz.0.792'. [ 99.249610][ T40] audit: type=1326 audit(1742382457.747:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8538d169 code=0x7ffc0000 [ 99.261702][ T40] audit: type=1326 audit(1742382457.757:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.0.792" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f8f8538d169 code=0x7ffc0000 [ 99.292541][ T5313] usb 7-1: Using ep0 maxpacket: 8 [ 99.303318][ T5313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 99.306525][ T5313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 99.310031][ T5313] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.324593][ T5313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.329156][ T5313] usb 7-1: config 0 descriptor?? [ 99.579852][ T8678] lo speed is unknown, defaulting to 1000 [ 99.737970][ T5313] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 99.743995][ T5313] usb 7-1: USB disconnect, device number 18 [ 99.773461][ T8694] netlink: 'syz.3.809': attribute type 3 has an invalid length. [ 99.963955][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=8707 comm=syz.3.814 [ 100.104869][ T8726] tunl0: entered promiscuous mode [ 100.268738][ T8744] xt_hashlimit: size too large, truncated to 1048576 [ 100.339879][ T8756] 9pnet_fd: Insufficient options for proto=fd [ 100.345130][ T8756] 9pnet_fd: Insufficient options for proto=fd [ 100.662672][ T5313] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 100.822576][ T5313] usb 6-1: Using ep0 maxpacket: 8 [ 100.827460][ T5313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 195, changing to 11 [ 100.830935][ T5313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49499, setting to 1024 [ 100.834069][ T5313] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.836611][ T5313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.839664][ T5313] usb 6-1: config 0 descriptor?? [ 101.066240][ T8795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'. [ 101.068827][ T8795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.070889][ T8795] IPv6: NLM_F_CREATE should be set when creating new route [ 101.072970][ T8795] IPv6: NLM_F_CREATE should be set when creating new route [ 101.076999][ T8796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'. [ 101.080282][ T8796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.255363][ T5313] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.259602][ T5313] usb 6-1: USB disconnect, device number 18 [ 101.283986][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 101.349413][ T8813] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.439553][ T8821] overlayfs: failed to clone upperpath [ 101.489891][ T8830] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 101.536219][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 101.539471][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 101.580544][ T8837] xt_time: unknown flags 0xc [ 101.701201][ T58] hid-generic 00A0:0008:0003.0003: item fetching failed at offset 13/15 [ 101.704026][ T58] hid-generic 00A0:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 101.753328][ T8846] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 102.381292][ T8869] 9pnet_fd: Insufficient options for proto=fd [ 102.387537][ T8870] 9pnet_fd: Insufficient options for proto=fd [ 102.415441][ T8874] netlink: 'syz.3.870': attribute type 11 has an invalid length. [ 102.424100][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 102.424111][ T40] audit: type=1400 audit(1742382716.924:600): avc: denied { create } for pid=8873 comm="syz.3.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.432465][ T40] audit: type=1400 audit(1742382716.924:601): avc: denied { write } for pid=8873 comm="syz.3.870" path="socket:[26906]" dev="sockfs" ino=26906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.441395][ T8874] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 102.477876][ T8876] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 102.560783][ T40] audit: type=1400 audit(1742382717.054:602): avc: denied { listen } for pid=8881 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.568479][ T40] audit: type=1400 audit(1742382717.064:603): avc: denied { accept } for pid=8881 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.824971][ T40] audit: type=1400 audit(1742382717.324:604): avc: denied { mounton } for pid=8894 comm="syz.1.878" path="/229/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 102.834639][ T9] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.836739][ T9] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.838765][ T9] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.843889][ T9] hid-generic 0000:0004:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 102.891799][ T40] audit: type=1400 audit(1742382717.384:605): avc: denied { setopt } for pid=8894 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.953187][ T836] IPVS: starting estimator thread 0... [ 103.000541][ T40] audit: type=1400 audit(1742382717.494:606): avc: denied { ioctl } for pid=8905 comm="syz.1.882" path="socket:[25077]" dev="sockfs" ino=25077 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.042608][ T8902] IPVS: using max 35 ests per chain, 84000 per kthread [ 103.049165][ T8915] xt_hashlimit: size too large, truncated to 1048576 [ 103.195340][ T40] audit: type=1400 audit(1742382717.694:607): avc: denied { getopt } for pid=8921 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.201145][ T40] audit: type=1400 audit(1742382717.694:608): avc: denied { ioctl } for pid=8921 comm="syz.2.887" path="socket:[26038]" dev="sockfs" ino=26038 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.516927][ T40] audit: type=1400 audit(1742382718.014:609): avc: denied { getopt } for pid=8952 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.680118][ T8969] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 103.682912][ T8970] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 103.832062][ T8987] __nla_validate_parse: 8 callbacks suppressed [ 103.832073][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 103.870110][ T8990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 103.872868][ T8990] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 103.883206][ T8983] jfs: Unknown parameter 'grpquotae' [ 103.962660][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 104.115222][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 104.120370][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.125154][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.128868][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 104.132337][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.140701][ T9] usb 6-1: config 0 descriptor?? [ 104.380703][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 104.383656][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 104.456650][ T9001] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.911'. [ 104.459209][ T9001] openvswitch: netlink: EtherType 0 is less than min 600 [ 104.464747][ T9001] JFS: discard option not supported on device [ 104.467362][ T9001] syz.0.911: attempt to access beyond end of device [ 104.467362][ T9001] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 104.470830][ T9001] syz.0.911: attempt to access beyond end of device [ 104.470830][ T9001] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 104.474605][ T9001] Mount JFS Failure: -5 [ 104.547797][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:05AC:8241.0005/input/input50 [ 104.598629][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.0.914'. [ 104.601207][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.914'. [ 104.628129][ T9] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 104.741165][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 104.771320][ T9014] program syz.0.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.840607][ T9032] netlink: 52 bytes leftover after parsing attributes in process `syz.3.922'. [ 104.843842][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 104.879985][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 105.928264][ T9068] loop6: detected capacity change from 0 to 520093696 [ 106.166406][ T9076] can0: slcan on ptm1. [ 106.226708][ T9075] can0 (unregistered): slcan off ptm1. [ 106.643686][ T7031] usb 6-1: USB disconnect, device number 19 [ 106.803082][ T7031] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 106.997443][ T7031] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.000284][ T7031] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.002894][ T7031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.005872][ T7031] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.008551][ T7031] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.010998][ T7031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.015087][ T7031] hub 6-1:1.0: bad descriptor, ignoring hub [ 107.016758][ T7031] hub 6-1:1.0: probe with driver hub failed with error -5 [ 107.018852][ T7031] cdc_wdm 6-1:1.0: skipping garbage [ 107.020308][ T7031] cdc_wdm 6-1:1.0: skipping garbage [ 107.023313][ T7031] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 107.024980][ T7031] cdc_wdm 6-1:1.0: Unknown control protocol [ 107.333532][ T7031] usb 6-1: USB disconnect, device number 20 [ 107.411430][ T9103] wg2: entered promiscuous mode [ 107.418665][ T9103] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 107.491488][ T9110] openvswitch: netlink: Flow key attribute not present in set flow. [ 107.549253][ T9110] trusted_key: encrypted_key: insufficient parameters specified [ 107.849504][ T9138] tmpfs: Bad value for 'mpol' [ 107.929403][ T40] kauditd_printk_skb: 67 callbacks suppressed [ 107.929413][ T40] audit: type=1400 audit(1742382722.424:677): avc: denied { mounton } for pid=9147 comm="syz.2.960" path="mnt:[4026533302]" dev="nsfs" ino=4026533302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.939057][ T40] audit: type=1400 audit(1742382722.424:678): avc: denied { append } for pid=9147 comm="syz.2.960" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.958620][ T9151] sg_write: data in/out 188/10 bytes for SCSI command 0x2a-- guessing data in; [ 107.958620][ T9151] program syz.0.961 not setting count and/or reply_len properly [ 107.975811][ T9155] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 107.994572][ T9155] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 108.008691][ T9155] team0: Port device geneve0 added [ 108.043471][ T7034] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 108.073591][ T40] audit: type=1400 audit(1742382722.574:679): avc: denied { setopt } for pid=9156 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.202608][ T7034] usb 6-1: Using ep0 maxpacket: 8 [ 108.206303][ T7034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.210363][ T7034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.218771][ T7034] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.228885][ T7034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.236694][ T7034] usb 6-1: config 0 descriptor?? [ 108.279098][ T40] audit: type=1400 audit(1742382722.774:680): avc: denied { create } for pid=9170 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 108.286242][ T40] audit: type=1400 audit(1742382722.774:681): avc: denied { module_request } for pid=9170 comm="syz.3.967" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.446756][ T7034] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.475923][ T40] audit: type=1400 audit(1742382722.974:682): avc: denied { create } for pid=9184 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.481936][ T40] audit: type=1400 audit(1742382722.974:683): avc: denied { write } for pid=9184 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.647541][ T58] usb 6-1: USB disconnect, device number 21 [ 108.902859][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 109.057273][ T9211] overlayfs: missing 'workdir' [ 109.197191][ T40] audit: type=1400 audit(1742382723.694:684): avc: denied { create } for pid=9225 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 109.263319][ T9234] __nla_validate_parse: 74 callbacks suppressed [ 109.263331][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 109.272657][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 109.378137][ T5942] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 109.381691][ T5942] KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] [ 109.384533][ T5942] CPU: 1 UID: 0 PID: 5942 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 109.384823][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.384832][ T5942] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 109.384898][ T5942] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 109.384908][ T5942] RSP: 0018:ffffc90003c9f988 EFLAGS: 00010206 [ 109.384917][ T5942] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 109.384924][ T5942] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 109.384931][ T5942] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 109.384937][ T5942] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 109.384943][ T5942] R13: ffff88804dab4000 R14: 0000000000000003 R15: ffff88802f443340 [ 109.384954][ T5942] FS: 00005555582e8500(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 109.384977][ T5942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.384986][ T5942] CR2: 000055555830b608 CR3: 000000004a1e4000 CR4: 0000000000352ef0 [ 109.384992][ T5942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.384998][ T5942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.385004][ T5942] Call Trace: [ 109.385008][ T5942] [ 109.385012][ T5942] ? die_addr+0x3b/0xa0 [ 109.385027][ T5942] ? exc_general_protection+0x155/0x230 [ 109.385045][ T5942] ? asm_exc_general_protection+0x26/0x30 [ 109.385061][ T5942] ? afs_atcell_get_link+0x39a/0x480 [ 109.385076][ T5942] ? afs_atcell_get_link+0x326/0x480 [ 109.385092][ T5942] ? afs_atcell_get_link+0x33e/0x480 [ 109.385107][ T5942] ? afs_atcell_get_link+0x326/0x480 [ 109.385122][ T5942] ? __pfx_afs_atcell_get_link+0x10/0x10 [ 109.385138][ T5942] step_into+0x1982/0x2220 [ 109.385155][ T5942] ? __pfx_step_into+0x10/0x10 [ 109.385171][ T5942] ? lookup_fast+0x153/0x5f0 [ 109.385186][ T5942] path_openat+0x74c/0x2d80 [ 109.385200][ T5942] ? __pfx_path_openat+0x10/0x10 [ 109.385210][ T5942] ? __pfx___lock_acquire+0x10/0x10 [ 109.385224][ T5942] ? lock_acquire.part.0+0x11b/0x380 [ 109.385239][ T5942] ? find_held_lock+0x2d/0x110 [ 109.385250][ T5942] do_filp_open+0x20c/0x470 [ 109.385260][ T5942] ? __pfx_do_filp_open+0x10/0x10 [ 109.385269][ T5942] ? find_held_lock+0x2d/0x110 [ 109.385283][ T5942] ? alloc_fd+0x41f/0x760 [ 109.385294][ T5942] do_sys_openat2+0x17a/0x1e0 [ 109.385307][ T5942] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.385324][ T5942] ? do_unlinkat+0x165/0x760 [ 109.385338][ T5942] ? __virt_addr_valid+0x5e/0x590 [ 109.385352][ T5942] ? __pfx_do_unlinkat+0x10/0x10 [ 109.385369][ T5942] __x64_sys_openat+0x175/0x210 [ 109.385383][ T5942] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.385398][ T5942] do_syscall_64+0xcd/0x250 [ 109.385413][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.385427][ T5942] RIP: 0033:0x7f8ae778bad0 [ 109.385435][ T5942] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 109.385445][ T5942] RSP: 002b:00007fff21025910 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 109.385456][ T5942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ae778bad0 [ 109.385462][ T5942] RDX: 0000000000000000 RSI: 00007fff21025a40 RDI: 00000000ffffff9c [ 109.385468][ T5942] RBP: 00007fff21025a40 R08: 0000000000000000 R09: 0000000000000000 [ 109.385474][ T5942] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fff21026b30 [ 109.385480][ T5942] R13: 00007f8ae780e08c R14: 00005555582e84a8 R15: 00007fff21027c00 [ 109.385489][ T5942] [ 109.385492][ T5942] Modules linked in: [ 109.385706][ T5942] ---[ end trace 0000000000000000 ]--- [ 109.393137][ T5942] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 109.393161][ T5942] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 109.393171][ T5942] RSP: 0018:ffffc90003c9f988 EFLAGS: 00010206 [ 109.393179][ T5942] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 109.393186][ T5942] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 109.393192][ T5942] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 109.393200][ T5942] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 109.393206][ T5942] R13: ffff88804dab4000 R14: 0000000000000003 R15: ffff88802f443340 [ 109.393213][ T5942] FS: 00005555582e8500(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 109.393233][ T5942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.393241][ T5942] CR2: 000055555830b608 CR3: 000000004a1e4000 CR4: 0000000000352ef0 [ 109.393248][ T5942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.393254][ T5942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.393262][ T5942] Kernel panic - not syncing: Fatal exception [ 109.393811][ T5942] Kernel Offset: disabled VM DIAGNOSIS: 11:07:48 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc900036dfa08 RCX=0000000000000001 RDX=ffffc900036dfa08 RSI=ffffffff821cda84 RDI=ffffc900036dfa14 RBP=0000000000000001 RSP=ffffc900036df928 R8 =ffffc900036df97c R9 =ffffffff9103f7d8 R10=ffffc900036df948 R11=0000000000011cda R12=ffffffff81a5adc0 R13=ffffc900036dfa08 R14=0000000000000000 R15=ffff88802470c880 RIP=ffffffff81a5ae67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e0ac93280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8ae84d56c0 CR3=000000003124a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000004 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ccb43b3790 000055ccb43940c0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ccb43b3790 000055ccb43940c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff00000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff00000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47555c5a5a4f0a03 1a171d1f4b4b4b47 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 014a4703574c0145 5d474a0c13056560 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73202c297325286b 636f6c66206f7420 656c62616e55006e 6f69746974726170 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c393230302c38 3230302c37323030 2c36323030003731 3d5145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d11040f0d0d1105 0f0d0d110a0f0d0d 110b0f0d0d000a0c 005145534b534944 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ab39e7f2e782a5b 000055c9e8f17946 0000000000000101 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ccb43b5390 000055ccb4388e00 0000000000000041 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382433273f397b27 697a787c69303b7e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a00000a005f 485441505f220041 4e4f47202c004400 000a00652422000a ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a00000a005f 485441000a000041 494e47202c004400 000a0049000a000a ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819986a0 RDX=ffff8880264f8000 RSI=ffffffff819986ae RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003c9f490 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90003c9f710 R13=0000000000000001 R14=ffffffff8ccefe00 R15=ffffc90003c9f710 RIP=ffffffff819986c5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555582e8500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055555830b608 CR3=000000004a1e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff21025990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8ae780f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000008fc94 RBX=0000000000000002 RCX=ffffffff8b578469 RDX=ffffed100d506f86 RSI=ffffffff8bd36920 RDI=ffffffff819084e9 RBP=ffffed1003b5a488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad2440 R14=ffffffff90626a10 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8f86180f98 CR3=0000000061f4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82c0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000006f6010005 0500000100000000 0000000001010604 0000001cd5565190 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda838dd100 00007fda82d7c440 00007fda82d70004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda82d7c498 00007fda82d7c490 00007fda82d7c488 00007fda82d7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5225e7c7cc66ab39 dc517ff32cfac3a6 786e20f73e09c7e4 645e00d022e01937 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e300383769200318 cbc8c44f6e96b3da d5b060c7a3da6bff 8881918aeb0e7973 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d7ffab9f397d857 e449c183f2e892eb 78dcb57397658607 22766b26acdf6131 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76e9e34062889904 2bff161ba5e557fd 85d2cf107c834670 e9c40f79e03c9e22 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000078 RBX=0000000000000002 RCX=00007f05df937b6a RDX=00000000000000ff RSI=000055ff75f54300 RDI=0000000000000000 RBP=000055ff75f542c0 RSP=00007ffe840b5170 R8 =0000000000000001 R9 =0000000000000000 R10=00007f05dfad63a3 R11=0000000000000246 R12=000055ff75f543aa R13=000055ff75f54300 R14=0000000000000000 R15=00007f05dfb1aa80 RIP=00007f05dfa71319 RFL=00000207 [-----PC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f05df7e3500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8f855a7bac CR3=0000000031f7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe840b5060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b2030303030203a 3635303030303030 3030636666666664 7830207373657264 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2030000a30203a 3635203030303030 20304d532054504d 45302050205d3123 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a725f6d64617379 733a746f6f723d74 7865746e6f637420 745f6d6461737973 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a70206d6461636f 733a636f6f6d3d61 3d6573616c637420 745f6d6461737973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000