last executing test programs: 2.660097446s ago: executing program 2 (id=296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000aad4285c0e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0) 2.659784511s ago: executing program 2 (id=298): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x4f2a, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x0, 0x5, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x101, 0x7, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e58, 0x7fff, 0xe6c, 0x3c, 0x1, 0x6]}) 2.589568631s ago: executing program 2 (id=300): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1.789822405s ago: executing program 1 (id=324): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000a00)={'comedi_bond\x00', [0x1, 0x80208000, 0x40, 0xfffffffd, 0x0, 0x5, 0x5, 0x4, 0xffe, 0x1, 0x8, 0x800001, 0x8, 0x3, 0x100, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x5, 0x3fb, 0x10000, 0x800, 0xe2df, 0x9, 0xfffffffe, 0x1af, 0x10003, 0x7, 0x5, 0x5]}) 1.719771685s ago: executing program 1 (id=326): ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)=0xf) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x5}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.609382846s ago: executing program 1 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, &(0x7f0000000800)}) 1.559744466s ago: executing program 1 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x20) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb, 0x80002, 0x5, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xfffffffd, 0x8000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000200)=""/136, 0x88, 0x401) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xb2) 1.457426053s ago: executing program 1 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x2000, 0x10000) 1.379790842s ago: executing program 1 (id=336): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.379539678s ago: executing program 2 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, &(0x7f0000000800)}) 1.310047941s ago: executing program 2 (id=339): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x82}, 0x50) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44800) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000a00)={'comedi_bond\x00', [0x1, 0x80208000, 0x40, 0xfffffffc, 0x0, 0x5, 0x5, 0x4, 0xffe, 0x1, 0x8, 0x800001, 0x8, 0x3, 0x100, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x5, 0x3fb, 0x8, 0x804, 0xe2df, 0x9, 0xfffffffe, 0x1af, 0x10003, 0x7, 0x5, 0x5]}) 1.089291865s ago: executing program 3 (id=341): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = syz_io_uring_setup(0x821, &(0x7f0000000480)={0x0, 0xbc02, 0x800, 0x0, 0x22b}, &(0x7f00000010c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x2, 0xc]}, {0x80000000, 0x0, 0x3, [0x12f, 0xb]}, 0x1, [0x5, 0x80000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x52, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x60080) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)={0x5, 0x800, 0x0, 0x9, 0x5, 0x9bb3}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000a00)={'comedi_bond\x00', [0x201, 0x80208000, 0x40, 0xfffffffc, 0x0, 0x5, 0x5, 0x4, 0xffe, 0x1, 0x8, 0x800001, 0x8, 0x3, 0x100, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x5, 0x3f9, 0x10000, 0x800, 0xe2df, 0x9, 0xfffffffe, 0x1af, 0x10003, 0x7, 0x5, 0x5]}) 1.020108178s ago: executing program 3 (id=343): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x6000000, 0x5, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x101, 0x7, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e58, 0x7fff, 0xe6c, 0x3c, 0x1, 0x6]}) 1.019872681s ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="14000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x2) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000001880)=ANY=[@ANYRES32=r6], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x10}, 0x94) 812.768161ms ago: executing program 3 (id=346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2b, 0x0, &(0x7f0000000040)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r3, r4, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r3, &(0x7f0000000080)={0x5, 0xb, 0x800, 0x81, 0xf0, 0x9, 0x6cc7, 0x54, 0xfffffffd}) 812.459801ms ago: executing program 3 (id=348): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x2a, &(0x7f0000000140), 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x107, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="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", 0x0, 0x2, 0x6, 0x3, 0x0}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) (async) sendfile(r5, r6, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x55, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800"}) (async) inotify_init1(0x800) 805.837575ms ago: executing program 0 (id=349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, &(0x7f0000000800)}) 730.12757ms ago: executing program 0 (id=350): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 729.952435ms ago: executing program 3 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x24, &(0x7f0000000240)={0x0, 0x2, 0x2, 0x100, r4}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4af}, 0x38) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r5, &(0x7f0000000a80), 0x0}, 0x20) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000140)=0xfa, 0x0) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x200000000000, 0xb, 0x80002, 0x5, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x8000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0xd2) 170.003622ms ago: executing program 0 (id=352): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)={0x34, r0, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}]}]}, 0x34}}, 0x8040) 169.866029ms ago: executing program 0 (id=353): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f3f, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x0, 0x80007, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e5c, 0x7fff, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 90.033327ms ago: executing program 0 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb, 0x80002, 0x5, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xfffffffd, 0x8000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r2, r3, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x80000000000000, 0xb2) 241.043µs ago: executing program 0 (id=355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x0, 0x80007, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e5c, 0x7fff, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) (fail_nth: 5) 0s ago: executing program 2 (id=356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x109, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x53}], 0x1}, 0x40fd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0xa6) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000340)="f4", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffa, @loopback}, 0x1c) kernel console output (not intermixed with test programs): ected cc 0x0c03 length: 249 > 1 [ 45.883674][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.887056][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.890212][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.893451][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.900618][ T5958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.904382][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.904963][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.906931][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.910039][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.912867][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.917144][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.921571][ T40] audit: type=1400 audit(1752757983.312:85): avc: denied { read } for pid=5955 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.922582][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.928533][ T40] audit: type=1400 audit(1752757983.312:86): avc: denied { open } for pid=5955 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.932610][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.937291][ T40] audit: type=1400 audit(1752757983.312:87): avc: denied { mounton } for pid=5955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.941564][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.955730][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.959744][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.964956][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.169756][ T40] audit: type=1400 audit(1752757983.562:88): avc: denied { module_request } for pid=5955 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.267377][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 46.338199][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.352473][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.440432][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.526325][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.528998][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.531325][ T5955] bridge_slave_0: entered allmulticast mode [ 46.534068][ T5955] bridge_slave_0: entered promiscuous mode [ 46.537966][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.540206][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.542446][ T5947] bridge_slave_0: entered allmulticast mode [ 46.545214][ T5947] bridge_slave_0: entered promiscuous mode [ 46.551387][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.553734][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.556547][ T5947] bridge_slave_1: entered allmulticast mode [ 46.559563][ T5947] bridge_slave_1: entered promiscuous mode [ 46.584511][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.586801][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.589031][ T5955] bridge_slave_1: entered allmulticast mode [ 46.591548][ T5955] bridge_slave_1: entered promiscuous mode [ 46.691900][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.697783][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.701509][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.704591][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.707472][ T5951] bridge_slave_0: entered allmulticast mode [ 46.711163][ T5951] bridge_slave_0: entered promiscuous mode [ 46.715320][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.749631][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.752645][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.755704][ T5951] bridge_slave_1: entered allmulticast mode [ 46.759444][ T5951] bridge_slave_1: entered promiscuous mode [ 46.786905][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.812569][ T5947] team0: Port device team_slave_0 added [ 46.816375][ T5947] team0: Port device team_slave_1 added [ 46.842702][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.888268][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.890888][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.893316][ T5959] bridge_slave_0: entered allmulticast mode [ 46.896878][ T5959] bridge_slave_0: entered promiscuous mode [ 46.940586][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.956850][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.959777][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.962717][ T5959] bridge_slave_1: entered allmulticast mode [ 46.966942][ T5959] bridge_slave_1: entered promiscuous mode [ 46.970705][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.978740][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.990456][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.010011][ T5955] team0: Port device team_slave_0 added [ 47.025655][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.028528][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.039456][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.061054][ T5955] team0: Port device team_slave_1 added [ 47.091030][ T5951] team0: Port device team_slave_0 added [ 47.095579][ T5951] team0: Port device team_slave_1 added [ 47.142252][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.147925][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.194241][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.196974][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.208174][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.275204][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.277380][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.285412][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.311636][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.314580][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.324831][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.331432][ T5959] team0: Port device team_slave_0 added [ 47.335715][ T5959] team0: Port device team_slave_1 added [ 47.338222][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.341111][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.351362][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.390707][ T5947] hsr_slave_0: entered promiscuous mode [ 47.393090][ T5947] hsr_slave_1: entered promiscuous mode [ 47.427447][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.429979][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.437827][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.443393][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.446212][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.454243][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.541362][ T5951] hsr_slave_0: entered promiscuous mode [ 47.544704][ T5951] hsr_slave_1: entered promiscuous mode [ 47.547637][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.550952][ T5951] Cannot create hsr debugfs directory [ 47.656452][ T5955] hsr_slave_0: entered promiscuous mode [ 47.659495][ T5955] hsr_slave_1: entered promiscuous mode [ 47.662252][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.665658][ T5955] Cannot create hsr debugfs directory [ 47.716165][ T5959] hsr_slave_0: entered promiscuous mode [ 47.718427][ T5959] hsr_slave_1: entered promiscuous mode [ 47.720526][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.722881][ T5959] Cannot create hsr debugfs directory [ 47.953716][ T5957] Bluetooth: hci2: command tx timeout [ 47.963100][ T5957] Bluetooth: hci1: command tx timeout [ 48.035337][ T5957] Bluetooth: hci3: command tx timeout [ 48.043372][ T5957] Bluetooth: hci0: command tx timeout [ 48.062053][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.075293][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.080845][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.085506][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.119177][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.125942][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.129803][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.135201][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.219294][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.228346][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.240134][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.247520][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.301060][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.307510][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.311818][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.315791][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.329387][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.349419][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.366516][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.368857][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.387929][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.392892][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.395859][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.443250][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.456090][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.459113][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.473973][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.476879][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.484554][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.512875][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.522558][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.525352][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.527438][ T40] audit: type=1400 audit(1752757985.922:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.536698][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.544704][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.547777][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.567421][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.585027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.588084][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.609111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.611847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.656910][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.705393][ T5951] veth0_vlan: entered promiscuous mode [ 48.717875][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.725528][ T5951] veth1_vlan: entered promiscuous mode [ 48.769333][ T5951] veth0_macvtap: entered promiscuous mode [ 48.776199][ T5947] veth0_vlan: entered promiscuous mode [ 48.781190][ T5951] veth1_macvtap: entered promiscuous mode [ 48.790654][ T5947] veth1_vlan: entered promiscuous mode [ 48.805253][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.817723][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.822996][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.825753][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.828427][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.831030][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.845636][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.850648][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.868071][ T5947] veth0_macvtap: entered promiscuous mode [ 48.874501][ T5947] veth1_macvtap: entered promiscuous mode [ 48.915505][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.915683][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.921123][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.933532][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.941992][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.946106][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.949747][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.953542][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.976508][ T5959] veth0_vlan: entered promiscuous mode [ 48.985293][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.987743][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.994046][ T5955] veth0_vlan: entered promiscuous mode [ 48.997340][ T5959] veth1_vlan: entered promiscuous mode [ 49.010133][ T5955] veth1_vlan: entered promiscuous mode [ 49.030919][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.033827][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.039418][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.043328][ T5959] veth0_macvtap: entered promiscuous mode [ 49.056545][ T5959] veth1_macvtap: entered promiscuous mode [ 49.063338][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.065828][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.067693][ T5955] veth0_macvtap: entered promiscuous mode [ 49.080140][ T5955] veth1_macvtap: entered promiscuous mode [ 49.086537][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.095715][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.102210][ T5959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.106026][ T5959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.108755][ T5959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.111369][ T5959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.116984][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.122162][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.139897][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.142567][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.146121][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.148865][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.157271][ T6041] input: syz0 as /devices/virtual/input/input5 [ 49.211735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.215644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.222854][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.228876][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.244082][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.246541][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.272900][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.277077][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.380942][ T6045] kvm: pic: non byte write [ 49.386865][ T6045] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 49.395995][ T6045] kvm: pic: non byte write [ 49.493048][ T6016] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.633514][ T6015] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 49.643057][ T6016] usb 5-1: Using ep0 maxpacket: 8 [ 49.648080][ T6016] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 49.652002][ T6016] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 49.656904][ T6016] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.660873][ T6016] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.666198][ T6016] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 49.669796][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.783019][ T6015] usb 8-1: Using ep0 maxpacket: 32 [ 49.787068][ T6015] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 49.790436][ T6015] usb 8-1: config 0 has no interface number 0 [ 49.794169][ T6015] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 49.798322][ T6015] usb 8-1: config 0 interface 196 has no altsetting 0 [ 49.804357][ T6015] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 49.808161][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.811472][ T6015] usb 8-1: Product: syz [ 49.813412][ T6015] usb 8-1: Manufacturer: syz [ 49.815321][ T6015] usb 8-1: SerialNumber: syz [ 49.819462][ T6015] usb 8-1: config 0 descriptor?? [ 49.823062][ T6050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 49.881484][ T6016] usb 5-1: GET_CAPABILITIES returned 0 [ 49.883481][ T6016] usbtmc 5-1:16.0: can't read capabilities [ 50.033880][ T63] Bluetooth: hci2: command tx timeout [ 50.033912][ T5312] Bluetooth: hci1: command tx timeout [ 50.039880][ T6015] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 50.042258][ T6015] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 50.048577][ T6015] usb 8-1: USB disconnect, device number 2 [ 50.088040][ T6060] usb 5-1: USB disconnect, device number 2 [ 50.113465][ T5312] Bluetooth: hci3: command tx timeout [ 50.123138][ T5312] Bluetooth: hci0: command tx timeout [ 50.303672][ T5989] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.473135][ T5989] usb 7-1: Using ep0 maxpacket: 32 [ 50.476970][ T5989] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.481961][ T5989] usb 7-1: config 0 interface 0 has no altsetting 0 [ 50.485034][ T5989] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 50.488787][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.495007][ T5989] usb 7-1: config 0 descriptor?? [ 50.582876][ T6064] comedi comedi1: Cannot bond this driver to itself! [ 50.620506][ T6066] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 50.640772][ T6068] comedi comedi1: Minor 513 is invalid! [ 50.708102][ T5989] usbhid 7-1:0.0: can't add hid device: -71 [ 50.710325][ T5989] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 50.713868][ T5989] usb 7-1: USB disconnect, device number 2 [ 50.772443][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 50.772454][ T40] audit: type=1400 audit(1752757988.162:136): avc: denied { create } for pid=6073 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.782192][ T40] audit: type=1400 audit(1752757988.172:137): avc: denied { ioctl } for pid=6073 comm="syz.0.16" path="socket:[8741]" dev="sockfs" ino=8741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.792380][ T40] audit: type=1400 audit(1752757988.172:138): avc: denied { read } for pid=6073 comm="syz.0.16" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.802615][ T40] audit: type=1400 audit(1752757988.172:139): avc: denied { open } for pid=6073 comm="syz.0.16" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.827245][ T40] audit: type=1400 audit(1752757988.222:140): avc: denied { name_bind } for pid=6073 comm="syz.0.16" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.837422][ T40] audit: type=1400 audit(1752757988.222:141): avc: denied { node_bind } for pid=6073 comm="syz.0.16" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.845577][ T40] audit: type=1400 audit(1752757988.232:142): avc: denied { ioctl } for pid=6073 comm="syz.0.16" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 50.854210][ T40] audit: type=1400 audit(1752757988.232:143): avc: denied { create } for pid=6073 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.862099][ T40] audit: type=1400 audit(1752757988.232:144): avc: denied { bind } for pid=6073 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.868557][ T40] audit: type=1400 audit(1752757988.232:145): avc: denied { node_bind } for pid=6073 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.888024][ T6079] autofs: Unknown parameter 'ò³sÍü-Ƽjù‡«Bªc ñÍ(aÕZœÿ²ƒ £«Ñ]»ÃÃ' [ 50.895905][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 51.001781][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 51.633174][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 52.113842][ T5312] Bluetooth: hci2: command tx timeout [ 52.116155][ T5312] Bluetooth: hci1: command tx timeout [ 52.193394][ T5957] Bluetooth: hci3: command tx timeout [ 52.195874][ T5312] Bluetooth: hci0: command tx timeout [ 52.466401][ T6118] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 52.516019][ T6126] ptrace attach of "/syz-executor exec"[6128] was attempted by "/syz-executor exec"[6126] [ 52.519319][ T6125] ptrace attach of "/syz-executor exec"[6128] was attempted by "/syz-executor exec"[6125] [ 52.533281][ T6126] syzkaller1: entered promiscuous mode [ 52.535015][ T6126] syzkaller1: entered allmulticast mode [ 52.540055][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.543745][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.793046][ T5989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.965043][ T5989] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 52.968070][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0 [ 52.981935][ T5989] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.984933][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.987419][ T5989] usb 6-1: Product: syz [ 52.988811][ T5989] usb 6-1: Manufacturer: syz [ 52.990248][ T5989] usb 6-1: SerialNumber: syz [ 52.995608][ T5989] usb 6-1: config 0 descriptor?? [ 53.002198][ T5989] usb 6-1: selecting invalid altsetting 0 [ 53.217519][ T5989] usb 6-1: USB disconnect, device number 2 [ 53.370543][ T6143] Zero length message leads to an empty skb [ 53.449759][ T6152] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 53.452105][ T6152] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 53.454680][ T6152] netlink: 610 bytes leftover after parsing attributes in process `syz.3.39'. [ 54.159729][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 54.166412][ T6178] Cannot find add_set index 4 as target [ 54.203833][ T5957] Bluetooth: hci1: command tx timeout [ 54.243924][ T6187] ======================================================= [ 54.243924][ T6187] WARNING: The mand mount option has been deprecated and [ 54.243924][ T6187] and is ignored by this kernel. Remove the mand [ 54.243924][ T6187] option from the mount to silence this warning. [ 54.243924][ T6187] ======================================================= [ 54.283315][ T5957] Bluetooth: hci0: command tx timeout [ 54.283747][ T63] Bluetooth: hci3: command tx timeout [ 54.286166][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.343146][ T6193] xt_hashlimit: size too large, truncated to 1048576 [ 54.348792][ T6193] syz.1.52: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 54.355767][ T6193] CPU: 3 UID: 0 PID: 6193 Comm: syz.1.52 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 54.355783][ T6193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.355789][ T6193] Call Trace: [ 54.355793][ T6193] [ 54.355797][ T6193] dump_stack_lvl+0x16c/0x1f0 [ 54.355816][ T6193] warn_alloc+0x248/0x3a0 [ 54.355832][ T6193] ? __pfx_warn_alloc+0x10/0x10 [ 54.355851][ T6193] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.355866][ T6193] ? __vmalloc_node_noprof+0xad/0xf0 [ 54.355880][ T6193] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 54.355897][ T6193] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.355910][ T6193] ? rcu_is_watching+0x12/0xc0 [ 54.355927][ T6193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 54.355940][ T6193] ? __alloc_pages_noprof+0xb/0x1b0 [ 54.355954][ T6193] ? ___kmalloc_large_node+0x84/0x1e0 [ 54.355968][ T6193] __kvmalloc_node_noprof+0x30a/0x620 [ 54.355981][ T6193] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.355995][ T6193] ? net_generic+0xea/0x2a0 [ 54.356006][ T6193] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.356022][ T6193] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 54.356035][ T6193] hashlimit_mt_check_common+0x8bb/0x1460 [ 54.356052][ T6193] hashlimit_mt_check+0x71/0x90 [ 54.356064][ T6193] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 54.356077][ T6193] xt_check_match+0x283/0xa50 [ 54.356089][ T6193] ? mem_cgroup_css_alloc+0x1d12/0x1e80 [ 54.356103][ T6193] ? __pfx_xt_check_match+0x10/0x10 [ 54.356114][ T6193] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 54.356134][ T6193] ? xt_find_match+0x1f6/0x290 [ 54.356148][ T6193] find_check_entry.constprop.0+0x34e/0xa20 [ 54.356165][ T6193] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 54.356182][ T6193] ? kasan_quarantine_put+0x10a/0x240 [ 54.356196][ T6193] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.356229][ T6193] ? kfree+0x2b4/0x4d0 [ 54.356242][ T6193] ? translate_table+0xc0e/0x17b0 [ 54.356257][ T6193] translate_table+0xd0b/0x17b0 [ 54.356275][ T6193] ? __pfx_translate_table+0x10/0x10 [ 54.356287][ T6193] ? xt_alloc_table_info+0x3e/0xa0 [ 54.356302][ T6193] do_ip6t_set_ctl+0x570/0xb00 [ 54.356314][ T6193] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.356328][ T6193] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 54.356341][ T6193] ? avc_has_perm+0x196/0x1c0 [ 54.356352][ T6193] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.356376][ T6193] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 54.356388][ T6193] nf_setsockopt+0x8d/0xf0 [ 54.356400][ T6193] ipv6_setsockopt+0x135/0x170 [ 54.356413][ T6193] rawv6_setsockopt+0xc2/0x510 [ 54.356431][ T6193] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 54.356449][ T6193] ? selinux_socket_setsockopt+0x6a/0x80 [ 54.356462][ T6193] ? sock_common_setsockopt+0x2e/0xf0 [ 54.356480][ T6193] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.356497][ T6193] do_sock_setsockopt+0x224/0x470 [ 54.356514][ T6193] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 54.356540][ T6193] __sys_setsockopt+0x1a0/0x230 [ 54.356557][ T6193] __x64_sys_setsockopt+0xbd/0x160 [ 54.356574][ T6193] ? do_syscall_64+0x91/0x4c0 [ 54.356589][ T6193] ? lockdep_hardirqs_on+0x7c/0x110 [ 54.356604][ T6193] do_syscall_64+0xcd/0x4c0 [ 54.356620][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.356631][ T6193] RIP: 0033:0x7f5e1118e929 [ 54.356640][ T6193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.356650][ T6193] RSP: 002b:00007f5e0eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.356660][ T6193] RAX: ffffffffffffffda RBX: 00007f5e113b5fa0 RCX: 00007f5e1118e929 [ 54.356667][ T6193] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 54.356673][ T6193] RBP: 00007f5e11210ca1 R08: 00000000000005c0 R09: 0000000000000000 [ 54.356679][ T6193] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 54.356685][ T6193] R13: 0000000000000000 R14: 00007f5e113b5fa0 R15: 00007fffdfd93338 [ 54.356698][ T6193] [ 54.356862][ T6193] Mem-Info: [ 54.493718][ T6193] active_anon:9165 inactive_anon:0 isolated_anon:0 [ 54.493718][ T6193] active_file:11899 inactive_file:40578 isolated_file:0 [ 54.493718][ T6193] unevictable:1768 dirty:1781 writeback:0 [ 54.493718][ T6193] slab_reclaimable:11483 slab_unreclaimable:68045 [ 54.493718][ T6193] mapped:24608 shmem:2438 pagetables:1117 [ 54.493718][ T6193] sec_pagetables:304 bounce:0 [ 54.493718][ T6193] kernel_misc_reclaimable:0 [ 54.493718][ T6193] free:448231 free_pcp:28535 free_cma:0 [ 54.508933][ T6193] Node 0 active_anon:36624kB inactive_anon:0kB active_file:47596kB inactive_file:162116kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98540kB dirty:7080kB writeback:0kB shmem:6140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4312kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 54.523072][ T6193] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:44kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.532610][ T6193] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.541318][ T6193] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 54.543163][ T6193] Node 0 DMA32 free:178848kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36476kB inactive_anon:0kB active_file:47596kB inactive_file:162124kB unevictable:3536kB writepending:7096kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:90380kB local_pcp:33756kB free_cma:0kB [ 54.553884][ T6193] lowmem_reserve[]: 0 0 0 0 0 [ 54.555410][ T6193] Node 1 Normal free:1606316kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:44kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:16536kB local_pcp:4848kB free_cma:0kB [ 54.564999][ T6193] lowmem_reserve[]: 0 0 0 0 0 [ 54.566537][ T6193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 54.570437][ T6193] Node 0 DMA32: 628*4kB (UM) 649*8kB (UM) 358*16kB (UM) 340*32kB (UME) 245*64kB (UME) 85*128kB (UM) 50*256kB (UM) 23*512kB (ME) 9*1024kB (UME) 2*2048kB (M) 22*4096kB (UM) = 178872kB [ 54.576031][ T6193] Node 1 Normal: 14*4kB (UME) 19*8kB (UME) 20*16kB (UME) 19*32kB (UME) 11*64kB (UME) 7*128kB (UME) 0*256kB 4*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 390*4096kB (M) = 1606320kB [ 54.582026][ T6193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.585030][ T6193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.587824][ T6193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.590801][ T6193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 54.593725][ T6193] 54874 total pagecache pages [ 54.595199][ T6193] 0 pages in swap cache [ 54.596536][ T6193] Free swap = 124996kB [ 54.597843][ T6193] Total swap = 124996kB [ 54.599164][ T6193] 1048443 pages RAM [ 54.600365][ T6193] 0 pages HighMem/MovableOnly [ 54.601887][ T6193] 283068 pages reserved [ 54.603318][ T6193] 0 pages cma reserved [ 54.911388][ T6216] netlink: 44 bytes leftover after parsing attributes in process `syz.1.59'. [ 54.960923][ T6218] ipt_REJECT: TCP_RESET invalid for non-tcp [ 54.973246][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.133092][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 55.137511][ T29] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.142638][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.145432][ T29] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 55.148279][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.152421][ T29] usb 8-1: config 0 descriptor?? [ 55.258378][ T6232] can0: slcan on ptm0. [ 55.345156][ T6231] can0 (unregistered): slcan off ptm0. [ 55.348202][ T6231] delete_channel: no stack [ 55.365170][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 55.367707][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 55.376625][ T29] usb 8-1: USB disconnect, device number 3 [ 55.426157][ T6239] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 55.473064][ T63] Bluetooth: hci2: command 0x206a tx timeout [ 55.473099][ T5312] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 55.718715][ T6254] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 55.796736][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 55.796747][ T40] audit: type=1400 audit(1752757993.192:228): avc: denied { create } for pid=6253 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.971902][ T40] audit: type=1400 audit(1752757993.362:229): avc: denied { create } for pid=6262 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.985205][ T40] audit: type=1400 audit(1752757993.372:230): avc: denied { connect } for pid=6262 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.997744][ T40] audit: type=1400 audit(1752757993.372:231): avc: denied { write } for pid=6262 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.026639][ T40] audit: type=1400 audit(1752757993.422:232): avc: denied { create } for pid=6268 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.034961][ T40] audit: type=1400 audit(1752757993.432:233): avc: denied { listen } for pid=6268 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.041904][ T40] audit: type=1400 audit(1752757993.432:234): avc: denied { accept } for pid=6268 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 56.057761][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.81'. [ 56.064397][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 56.072817][ T24] IPVS: starting estimator thread 0... [ 56.173097][ T6276] IPVS: using max 43 ests per chain, 103200 per kthread [ 56.283002][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.413031][ T885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.443085][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 56.446760][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.449790][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.452775][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.456468][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.460473][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.463630][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.563005][ T885] usb 5-1: Using ep0 maxpacket: 32 [ 56.567145][ T885] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.572597][ T885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.575530][ T885] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 56.579340][ T885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.585322][ T885] usb 5-1: config 0 descriptor?? [ 56.673619][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 56.675891][ T29] usbtmc 8-1:16.0: can't read capabilities [ 56.792741][ T885] usbhid 5-1:0.0: can't add hid device: -71 [ 56.794729][ T885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 56.798210][ T885] usb 5-1: USB disconnect, device number 3 [ 56.874455][ T24] usb 8-1: USB disconnect, device number 4 [ 56.944884][ T40] audit: type=1400 audit(1752757994.342:235): avc: denied { mounton } for pid=6286 comm="syz.1.85" path="/38/file1" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.946578][ T6291] syz.1.85: attempt to access beyond end of device [ 56.946578][ T6291] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 56.956870][ T6291] syz.1.85: attempt to access beyond end of device [ 56.956870][ T6291] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 56.961753][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 56.965653][ T6291] syz.1.85: attempt to access beyond end of device [ 56.965653][ T6291] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 56.970543][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 56.974977][ T6291] syz.1.85: attempt to access beyond end of device [ 56.974977][ T6291] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 56.979899][ T6291] syz.1.85: attempt to access beyond end of device [ 56.979899][ T6291] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 56.985039][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 56.989227][ T6291] syz.1.85: attempt to access beyond end of device [ 56.989227][ T6291] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 56.994320][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 56.998962][ T6291] syz.1.85: attempt to access beyond end of device [ 56.998962][ T6291] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 57.003724][ T6291] syz.1.85: attempt to access beyond end of device [ 57.003724][ T6291] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 57.008414][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 57.011714][ T6291] syz.1.85: attempt to access beyond end of device [ 57.011714][ T6291] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 57.015656][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 57.018731][ T6291] syz.1.85: attempt to access beyond end of device [ 57.018731][ T6291] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 57.022636][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 57.025649][ T6291] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 57.028510][ T6291] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 57.413309][ T40] audit: type=1400 audit(1752757994.812:236): avc: denied { create } for pid=6297 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.420238][ T40] audit: type=1400 audit(1752757994.812:237): avc: denied { create } for pid=6297 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=isdn_socket permissive=1 [ 58.543146][ T5989] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.693006][ T5989] usb 8-1: Using ep0 maxpacket: 8 [ 58.697004][ T5989] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.700938][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.711161][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.714444][ T5989] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.718577][ T5989] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.721368][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.726876][ T6342] random: crng reseeded on system resumption [ 58.940417][ T5989] usb 8-1: GET_CAPABILITIES returned 0 [ 58.942209][ T5989] usbtmc 8-1:16.0: can't read capabilities [ 59.141615][ T5989] usb 8-1: USB disconnect, device number 5 [ 59.144869][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.303378][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 59.306156][ T29] usb 5-1: config 0 has no interfaces? [ 59.307924][ T29] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 59.310734][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.319822][ T29] usb 5-1: config 0 descriptor?? [ 59.432153][ T6360] usb 5-1: USB disconnect, device number 4 [ 59.910938][ T6371] Invalid logical block size (2) [ 59.913612][ T6371] netlink: 'syz.3.110': attribute type 3 has an invalid length. [ 59.916930][ T6371] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 59.920096][ T6371] netlink: 192 bytes leftover after parsing attributes in process `syz.3.110'. [ 59.924026][ T6371] NCSI netlink: No device for ifindex 0 [ 59.994304][ T6376] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 60.164520][ T6386] FAULT_INJECTION: forcing a failure. [ 60.164520][ T6386] name failslab, interval 1, probability 0, space 0, times 1 [ 60.168518][ T6386] CPU: 3 UID: 0 PID: 6386 Comm: syz.3.116 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 60.168533][ T6386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.168540][ T6386] Call Trace: [ 60.168544][ T6386] [ 60.168548][ T6386] dump_stack_lvl+0x16c/0x1f0 [ 60.168582][ T6386] should_fail_ex+0x512/0x640 [ 60.168602][ T6386] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 60.168617][ T6386] should_failslab+0xc2/0x120 [ 60.168633][ T6386] __kmalloc_cache_noprof+0x6a/0x3e0 [ 60.168646][ T6386] ? __pfx___mutex_trylock_common+0x10/0x10 [ 60.168657][ T6386] ? fuse_lookup_name+0x19f/0x780 [ 60.168676][ T6386] fuse_lookup_name+0x19f/0x780 [ 60.168694][ T6386] ? __mutex_lock+0x1ca/0xb90 [ 60.168710][ T6386] ? __pfx_fuse_lookup_name+0x10/0x10 [ 60.168726][ T6386] ? fuse_lock_inode+0xd2/0x110 [ 60.168752][ T6386] fuse_lookup+0x26a/0x560 [ 60.168769][ T6386] ? __pfx_fuse_lookup+0x10/0x10 [ 60.168785][ T6386] ? d_alloc_parallel+0x6ae/0x12e0 [ 60.168804][ T6386] ? __pfx_d_alloc_parallel+0x10/0x10 [ 60.168820][ T6386] fuse_atomic_open+0x2cd/0x470 [ 60.168837][ T6386] ? __pfx_fuse_atomic_open+0x10/0x10 [ 60.168854][ T6386] lookup_open.isra.0+0x83d/0x1580 [ 60.168870][ T6386] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 60.168892][ T6386] ? lookup_fast+0x156/0x610 [ 60.168906][ T6386] path_openat+0x893/0x2cb0 [ 60.168926][ T6386] ? __pfx_path_openat+0x10/0x10 [ 60.168944][ T6386] do_filp_open+0x20b/0x470 [ 60.168959][ T6386] ? __pfx_do_filp_open+0x10/0x10 [ 60.168984][ T6386] ? _raw_spin_unlock+0x28/0x50 [ 60.168996][ T6386] ? alloc_fd+0x471/0x7d0 [ 60.169015][ T6386] do_sys_openat2+0x11b/0x1d0 [ 60.169025][ T6386] ? __pfx_do_sys_openat2+0x10/0x10 [ 60.169036][ T6386] ? __fget_files+0x20e/0x3c0 [ 60.169054][ T6386] __x64_sys_open+0x153/0x1e0 [ 60.169064][ T6386] ? __pfx___x64_sys_open+0x10/0x10 [ 60.169077][ T6386] ? rcu_is_watching+0x12/0xc0 [ 60.169093][ T6386] do_syscall_64+0xcd/0x4c0 [ 60.169110][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.169121][ T6386] RIP: 0033:0x7f2583b8e929 [ 60.169130][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.169141][ T6386] RSP: 002b:00007f25849cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 60.169151][ T6386] RAX: ffffffffffffffda RBX: 00007f2583db6080 RCX: 00007f2583b8e929 [ 60.169158][ T6386] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 60.169164][ T6386] RBP: 00007f25849cc090 R08: 0000000000000000 R09: 0000000000000000 [ 60.169170][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.169176][ T6386] R13: 0000000000000000 R14: 00007f2583db6080 R15: 00007ffc4d9d1658 [ 60.169189][ T6386] [ 60.366280][ T6396] fuse: Bad value for 'group_id' [ 60.368471][ T6396] fuse: Bad value for 'group_id' [ 60.633582][ T6408] raw_sendmsg: syz.1.124 forgot to set AF_INET. Fix it! [ 60.838937][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 60.838953][ T40] audit: type=1400 audit(1752757998.232:266): avc: denied { read write } for pid=6414 comm="syz.1.126" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.850363][ T40] audit: type=1400 audit(1752757998.232:267): avc: denied { open } for pid=6414 comm="syz.1.126" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.861117][ T40] audit: type=1400 audit(1752757998.252:268): avc: denied { create } for pid=6414 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.869707][ T40] audit: type=1400 audit(1752757998.252:269): avc: denied { bind } for pid=6414 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.990265][ T40] audit: type=1400 audit(1752757998.382:270): avc: denied { create } for pid=6419 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.012543][ T40] audit: type=1400 audit(1752757998.392:271): avc: denied { bind } for pid=6419 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.023483][ T40] audit: type=1400 audit(1752757998.402:272): avc: denied { connect } for pid=6419 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.031110][ T40] audit: type=1400 audit(1752757998.402:273): avc: denied { create } for pid=6419 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.093517][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 61.101243][ T6425] loop7: detected capacity change from 0 to 7 [ 61.107915][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.111641][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.115177][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.118221][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.121211][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.124622][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.125721][ T40] audit: type=1400 audit(1752757998.522:274): avc: denied { map } for pid=6417 comm="syz.1.127" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 61.127995][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.137739][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.140278][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.143194][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.146580][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.149412][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.152218][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.155147][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.157067][ T40] audit: type=1400 audit(1752757998.552:275): avc: denied { name_connect } for pid=6424 comm="syz.2.130" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.157591][ T6425] ldm_validate_partition_table(): Disk read failed. [ 61.166431][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.169251][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.171779][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.174955][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.182971][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 61.186643][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.190262][ T6425] Dev loop7: unable to read RDB block 0 [ 61.198989][ T6425] loop7: unable to read partition table [ 61.200855][ T6425] loop7: partition table beyond EOD, truncated [ 61.206369][ T6425] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 61.290593][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 61.613153][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.786804][ T60] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 61.791086][ T60] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 61.795226][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 61.798804][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.804139][ T6447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.808772][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.048089][ T6447] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 62.050831][ T6447] bridge_slave_0: default FDB implementation only supports local addresses [ 62.054714][ T6016] usb 7-1: USB disconnect, device number 3 [ 62.276575][ T6454] FAULT_INJECTION: forcing a failure. [ 62.276575][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 62.280378][ T6454] CPU: 2 UID: 0 PID: 6454 Comm: syz.1.139 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 62.280393][ T6454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.280399][ T6454] Call Trace: [ 62.280403][ T6454] [ 62.280408][ T6454] dump_stack_lvl+0x16c/0x1f0 [ 62.280427][ T6454] should_fail_ex+0x512/0x640 [ 62.280442][ T6454] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 62.280459][ T6454] should_failslab+0xc2/0x120 [ 62.280475][ T6454] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 62.280489][ T6454] ? do_sys_openat2+0x11b/0x1d0 [ 62.280500][ T6454] ? __x64_sys_open+0x153/0x1e0 [ 62.280509][ T6454] ? do_syscall_64+0xcd/0x4c0 [ 62.280523][ T6454] ? fuse_request_alloc+0x22/0x200 [ 62.280537][ T6454] fuse_request_alloc+0x22/0x200 [ 62.280549][ T6454] fuse_get_req+0x748/0xfd0 [ 62.280564][ T6454] ? __pfx_fuse_get_req+0x10/0x10 [ 62.280583][ T6454] __fuse_simple_request+0xb8/0xcb0 [ 62.280597][ T6454] ? __asan_memset+0x23/0x50 [ 62.280610][ T6454] fuse_lookup_name+0x2ad/0x780 [ 62.280630][ T6454] ? __pfx_fuse_lookup_name+0x10/0x10 [ 62.280646][ T6454] ? fuse_lock_inode+0xd2/0x110 [ 62.280668][ T6454] fuse_lookup+0x26a/0x560 [ 62.280685][ T6454] ? __pfx_fuse_lookup+0x10/0x10 [ 62.280705][ T6454] ? d_alloc_parallel+0x6ae/0x12e0 [ 62.280723][ T6454] ? __pfx_d_alloc_parallel+0x10/0x10 [ 62.280739][ T6454] fuse_atomic_open+0x2cd/0x470 [ 62.280756][ T6454] ? __pfx_fuse_atomic_open+0x10/0x10 [ 62.280773][ T6454] lookup_open.isra.0+0x83d/0x1580 [ 62.280789][ T6454] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 62.280810][ T6454] ? lookup_fast+0x156/0x610 [ 62.280825][ T6454] path_openat+0x893/0x2cb0 [ 62.280845][ T6454] ? __pfx_path_openat+0x10/0x10 [ 62.280863][ T6454] do_filp_open+0x20b/0x470 [ 62.280878][ T6454] ? __pfx_do_filp_open+0x10/0x10 [ 62.280903][ T6454] ? _raw_spin_unlock+0x28/0x50 [ 62.280916][ T6454] ? alloc_fd+0x471/0x7d0 [ 62.280934][ T6454] do_sys_openat2+0x11b/0x1d0 [ 62.280944][ T6454] ? __pfx_do_sys_openat2+0x10/0x10 [ 62.280955][ T6454] ? __fget_files+0x20e/0x3c0 [ 62.280973][ T6454] __x64_sys_open+0x153/0x1e0 [ 62.280983][ T6454] ? __pfx___x64_sys_open+0x10/0x10 [ 62.280997][ T6454] ? rcu_is_watching+0x12/0xc0 [ 62.281013][ T6454] do_syscall_64+0xcd/0x4c0 [ 62.281029][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.281041][ T6454] RIP: 0033:0x7f5e1118e929 [ 62.281049][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.281060][ T6454] RSP: 002b:00007f5e0efd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 62.281070][ T6454] RAX: ffffffffffffffda RBX: 00007f5e113b6080 RCX: 00007f5e1118e929 [ 62.281076][ T6454] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 62.281082][ T6454] RBP: 00007f5e0efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 62.281088][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.281094][ T6454] R13: 0000000000000000 R14: 00007f5e113b6080 R15: 00007fffdfd93338 [ 62.281107][ T6454] [ 62.470080][ T6457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 62.479935][ T6457] hpfs: Bad magic ... probably not HPFS [ 62.586346][ T6459] process 'syz.2.141' launched './file1' with NULL argv: empty string added [ 62.755271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.853041][ T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.005664][ T60] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 63.009837][ T60] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.014184][ T60] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.019314][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.022809][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.043212][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.066707][ T60] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 63.109115][ T6461] tipc: Started in network mode [ 63.110831][ T6461] tipc: Node identity 569019f948d9, cluster identity 4711 [ 63.115238][ T6461] tipc: Enabled bearer , priority 0 [ 63.117896][ T6461] syzkaller0: entered promiscuous mode [ 63.119761][ T6461] syzkaller0: entered allmulticast mode [ 63.161858][ T6468] rose1: entered promiscuous mode [ 63.164274][ T6468] rose1: entered allmulticast mode [ 63.167653][ T6463] tipc: Resetting bearer [ 63.178850][ T6463] tipc: Disabling bearer [ 63.207525][ T6468] syzkaller0: entered promiscuous mode [ 63.209293][ T6468] syzkaller0: entered allmulticast mode [ 63.238907][ T9] usb 7-1: USB disconnect, device number 4 [ 63.518540][ T6490] orangefs_devreq_open: device cannot be opened in blocking mode [ 63.550291][ T6492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.643043][ T6016] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 63.659298][ T6499] FAULT_INJECTION: forcing a failure. [ 63.659298][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 63.666248][ T6499] CPU: 2 UID: 0 PID: 6499 Comm: syz.0.154 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 63.666264][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.666271][ T6499] Call Trace: [ 63.666275][ T6499] [ 63.666280][ T6499] dump_stack_lvl+0x16c/0x1f0 [ 63.666299][ T6499] should_fail_ex+0x512/0x640 [ 63.666313][ T6499] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 63.666330][ T6499] should_failslab+0xc2/0x120 [ 63.666347][ T6499] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 63.666361][ T6499] ? find_inode+0x19a/0x5e0 [ 63.666372][ T6499] ? fuse_alloc_inode+0x2c/0x350 [ 63.666389][ T6499] ? __pfx_fuse_inode_set+0x10/0x10 [ 63.666403][ T6499] fuse_alloc_inode+0x2c/0x350 [ 63.666419][ T6499] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 63.666435][ T6499] alloc_inode+0x64/0x240 [ 63.666446][ T6499] iget5_locked+0x338/0x3d0 [ 63.666457][ T6499] ? __pfx_fuse_inode_eq+0x10/0x10 [ 63.666472][ T6499] ? __pfx_fuse_inode_set+0x10/0x10 [ 63.666487][ T6499] ? __pfx_iget5_locked+0x10/0x10 [ 63.666500][ T6499] ? kasan_quarantine_put+0x10a/0x240 [ 63.666513][ T6499] ? lockdep_hardirqs_on+0x7c/0x110 [ 63.666532][ T6499] fuse_iget+0x165/0x8e0 [ 63.666543][ T6499] ? __pfx_fuse_iget+0x10/0x10 [ 63.666553][ T6499] ? __fuse_simple_request+0x465/0xcb0 [ 63.666570][ T6499] fuse_lookup_name+0x481/0x780 [ 63.666588][ T6499] ? __pfx_fuse_lookup_name+0x10/0x10 [ 63.666605][ T6499] ? fuse_lock_inode+0xd2/0x110 [ 63.666627][ T6499] fuse_lookup+0x26a/0x560 [ 63.666644][ T6499] ? __pfx_fuse_lookup+0x10/0x10 [ 63.666666][ T6499] ? d_alloc_parallel+0x6ae/0x12e0 [ 63.666684][ T6499] ? __pfx_d_alloc_parallel+0x10/0x10 [ 63.666700][ T6499] fuse_atomic_open+0x2cd/0x470 [ 63.666717][ T6499] ? __pfx_fuse_atomic_open+0x10/0x10 [ 63.666734][ T6499] lookup_open.isra.0+0x83d/0x1580 [ 63.666750][ T6499] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 63.666772][ T6499] ? lookup_fast+0x156/0x610 [ 63.666787][ T6499] path_openat+0x893/0x2cb0 [ 63.666806][ T6499] ? __pfx_path_openat+0x10/0x10 [ 63.666825][ T6499] do_filp_open+0x20b/0x470 [ 63.666840][ T6499] ? __pfx_do_filp_open+0x10/0x10 [ 63.666864][ T6499] ? _raw_spin_unlock+0x28/0x50 [ 63.666889][ T6499] ? alloc_fd+0x471/0x7d0 [ 63.666908][ T6499] do_sys_openat2+0x11b/0x1d0 [ 63.666919][ T6499] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.666930][ T6499] ? __fget_files+0x20e/0x3c0 [ 63.666948][ T6499] __x64_sys_open+0x153/0x1e0 [ 63.666958][ T6499] ? __pfx___x64_sys_open+0x10/0x10 [ 63.666972][ T6499] ? rcu_is_watching+0x12/0xc0 [ 63.666988][ T6499] do_syscall_64+0xcd/0x4c0 [ 63.667004][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.667016][ T6499] RIP: 0033:0x7f15c8d8e929 [ 63.667025][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.667035][ T6499] RSP: 002b:00007f15c9c60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 63.667046][ T6499] RAX: ffffffffffffffda RBX: 00007f15c8fb6080 RCX: 00007f15c8d8e929 [ 63.667053][ T6499] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 63.667059][ T6499] RBP: 00007f15c9c60090 R08: 0000000000000000 R09: 0000000000000000 [ 63.667065][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.667070][ T6499] R13: 0000000000000000 R14: 00007f15c8fb6080 R15: 00007fff04e95238 [ 63.667084][ T6499] [ 63.837172][ T6503] comedi comedi1: Minor 513 is invalid! [ 63.863031][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 63.866675][ T6016] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.869742][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.872723][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.876962][ T6016] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.882267][ T6016] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.886059][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.939909][ T6505] input: syz0 as /devices/virtual/input/input13 [ 64.094484][ T6016] usb 8-1: GET_CAPABILITIES returned 0 [ 64.096235][ T6016] usbtmc 8-1:16.0: can't read capabilities [ 64.131178][ T6513] comedi comedi1: Minor 47 could not be opened [ 64.223119][ T6516] orangefs_devreq_open: device cannot be opened in blocking mode [ 64.297898][ T29] usb 8-1: USB disconnect, device number 6 [ 64.359473][ T6521] FAULT_INJECTION: forcing a failure. [ 64.359473][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 64.364163][ T6521] CPU: 2 UID: 0 PID: 6521 Comm: syz.2.164 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 64.364179][ T6521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.364186][ T6521] Call Trace: [ 64.364190][ T6521] [ 64.364194][ T6521] dump_stack_lvl+0x16c/0x1f0 [ 64.364213][ T6521] should_fail_ex+0x512/0x640 [ 64.364228][ T6521] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 64.364243][ T6521] should_failslab+0xc2/0x120 [ 64.364260][ T6521] __kmalloc_cache_noprof+0x6a/0x3e0 [ 64.364272][ T6521] ? lockdep_init_map_type+0x5c/0x280 [ 64.364283][ T6521] ? fuse_alloc_inode+0x21f/0x350 [ 64.364301][ T6521] ? __pfx_fuse_inode_set+0x10/0x10 [ 64.364315][ T6521] fuse_alloc_inode+0x21f/0x350 [ 64.364331][ T6521] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 64.364347][ T6521] alloc_inode+0x64/0x240 [ 64.364358][ T6521] iget5_locked+0x338/0x3d0 [ 64.364369][ T6521] ? __pfx_fuse_inode_eq+0x10/0x10 [ 64.364384][ T6521] ? __pfx_fuse_inode_set+0x10/0x10 [ 64.364404][ T6521] ? __pfx_iget5_locked+0x10/0x10 [ 64.364418][ T6521] ? kasan_quarantine_put+0x10a/0x240 [ 64.364431][ T6521] ? lockdep_hardirqs_on+0x7c/0x110 [ 64.364449][ T6521] fuse_iget+0x165/0x8e0 [ 64.364460][ T6521] ? __pfx_fuse_iget+0x10/0x10 [ 64.364470][ T6521] ? __fuse_simple_request+0x465/0xcb0 [ 64.364486][ T6521] fuse_lookup_name+0x481/0x780 [ 64.364505][ T6521] ? __pfx_fuse_lookup_name+0x10/0x10 [ 64.364521][ T6521] ? fuse_lock_inode+0xd2/0x110 [ 64.364543][ T6521] fuse_lookup+0x26a/0x560 [ 64.364560][ T6521] ? __pfx_fuse_lookup+0x10/0x10 [ 64.364577][ T6521] ? d_alloc_parallel+0x6ae/0x12e0 [ 64.364595][ T6521] ? __pfx_d_alloc_parallel+0x10/0x10 [ 64.364611][ T6521] fuse_atomic_open+0x2cd/0x470 [ 64.364628][ T6521] ? __pfx_fuse_atomic_open+0x10/0x10 [ 64.364645][ T6521] lookup_open.isra.0+0x83d/0x1580 [ 64.364668][ T6521] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 64.364690][ T6521] ? lookup_fast+0x156/0x610 [ 64.364704][ T6521] path_openat+0x893/0x2cb0 [ 64.364724][ T6521] ? __pfx_path_openat+0x10/0x10 [ 64.364742][ T6521] do_filp_open+0x20b/0x470 [ 64.364757][ T6521] ? __pfx_do_filp_open+0x10/0x10 [ 64.364782][ T6521] ? _raw_spin_unlock+0x28/0x50 [ 64.364795][ T6521] ? alloc_fd+0x471/0x7d0 [ 64.364813][ T6521] do_sys_openat2+0x11b/0x1d0 [ 64.364824][ T6521] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.364835][ T6521] ? __fget_files+0x20e/0x3c0 [ 64.364853][ T6521] __x64_sys_open+0x153/0x1e0 [ 64.364863][ T6521] ? __pfx___x64_sys_open+0x10/0x10 [ 64.364877][ T6521] ? rcu_is_watching+0x12/0xc0 [ 64.364893][ T6521] do_syscall_64+0xcd/0x4c0 [ 64.364910][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.364921][ T6521] RIP: 0033:0x7fad0a78e929 [ 64.364930][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.364940][ T6521] RSP: 002b:00007fad0b58a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 64.364950][ T6521] RAX: ffffffffffffffda RBX: 00007fad0a9b6080 RCX: 00007fad0a78e929 [ 64.364957][ T6521] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 64.364963][ T6521] RBP: 00007fad0b58a090 R08: 0000000000000000 R09: 0000000000000000 [ 64.364969][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.364975][ T6521] R13: 0000000000000000 R14: 00007fad0a9b6080 R15: 00007ffc139360b8 [ 64.364988][ T6521] [ 64.560996][ T6525] input: syz0 as /devices/virtual/input/input14 [ 64.679726][ T6535] comedi comedi1: Minor 513 is invalid! [ 64.875174][ T6552] comedi comedi1: Minor 559 is invalid! [ 64.977791][ T6566] binder_alloc: 6565: binder_alloc_buf, no vma [ 64.978166][ T6568] input: syz0 as /devices/virtual/input/input15 [ 65.058873][ T6579] comedi comedi1: Minor 513 is invalid! [ 65.089831][ T6581] comedi comedi1: Minor 513 is invalid! [ 65.147343][ T6592] comedi comedi1: Cannot bond this driver to itself! [ 65.177761][ T6596] FAULT_INJECTION: forcing a failure. [ 65.177761][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 65.182226][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.2.187 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 65.182241][ T6596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.182247][ T6596] Call Trace: [ 65.182251][ T6596] [ 65.182255][ T6596] dump_stack_lvl+0x16c/0x1f0 [ 65.182275][ T6596] should_fail_ex+0x512/0x640 [ 65.182289][ T6596] ? fs_reclaim_acquire+0xae/0x150 [ 65.182302][ T6596] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.182318][ T6596] should_failslab+0xc2/0x120 [ 65.182334][ T6596] __kmalloc_noprof+0xd2/0x510 [ 65.182351][ T6596] tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.182368][ T6596] ? tomoyo_profile+0x47/0x60 [ 65.182390][ T6596] tomoyo_path_number_perm+0x245/0x580 [ 65.182403][ T6596] ? tomoyo_path_number_perm+0x237/0x580 [ 65.182417][ T6596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.182431][ T6596] ? find_held_lock+0x2b/0x80 [ 65.182457][ T6596] ? find_held_lock+0x2b/0x80 [ 65.182470][ T6596] ? hook_file_ioctl_common+0x145/0x410 [ 65.182490][ T6596] ? __fget_files+0x20e/0x3c0 [ 65.182515][ T6596] security_file_ioctl+0x9b/0x240 [ 65.182537][ T6596] __x64_sys_ioctl+0xb7/0x210 [ 65.182555][ T6596] do_syscall_64+0xcd/0x4c0 [ 65.182572][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.182583][ T6596] RIP: 0033:0x7fad0a78e929 [ 65.182594][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.182608][ T6596] RSP: 002b:00007fad0b5ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.182623][ T6596] RAX: ffffffffffffffda RBX: 00007fad0a9b5fa0 RCX: 00007fad0a78e929 [ 65.182635][ T6596] RDX: 0000200000000a00 RSI: 0000000040946400 RDI: 0000000000000003 [ 65.182644][ T6596] RBP: 00007fad0b5ab090 R08: 0000000000000000 R09: 0000000000000000 [ 65.182653][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.182663][ T6596] R13: 0000000000000000 R14: 00007fad0a9b5fa0 R15: 00007ffc139360b8 [ 65.182684][ T6596] [ 65.182690][ T6596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.186921][ T6598] binder_alloc: 6597: binder_alloc_buf, no vma [ 65.250921][ T6596] comedi comedi1: Cannot bond this driver to itself! [ 65.314486][ T6605] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=6605 comm=syz.0.191 [ 65.318989][ T6605] comedi comedi1: Cannot bond this driver to itself! [ 65.347346][ T6610] input: syz0 as /devices/virtual/input/input16 [ 65.373715][ T59] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 65.391325][ T6613] input: syz0 as /devices/virtual/input/input17 [ 65.398543][ T6613] FAULT_INJECTION: forcing a failure. [ 65.398543][ T6613] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.404480][ T6613] CPU: 3 UID: 0 PID: 6613 Comm: syz.2.194 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 65.404503][ T6613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.404513][ T6613] Call Trace: [ 65.404518][ T6613] [ 65.404525][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 65.404553][ T6613] should_fail_ex+0x512/0x640 [ 65.404578][ T6613] _copy_from_user+0x2e/0xd0 [ 65.404602][ T6613] input_event_from_user+0x133/0x3b0 [ 65.404626][ T6613] ? __pfx_input_event_from_user+0x10/0x10 [ 65.404657][ T6613] uinput_write+0xbb4/0x12b0 [ 65.404688][ T6613] ? __pfx_uinput_write+0x10/0x10 [ 65.404715][ T6613] ? bpf_lsm_file_permission+0x9/0x10 [ 65.404730][ T6613] ? security_file_permission+0x71/0x210 [ 65.404754][ T6613] ? rw_verify_area+0xcf/0x680 [ 65.404775][ T6613] ? __pfx_uinput_write+0x10/0x10 [ 65.404798][ T6613] vfs_write+0x2a0/0x1150 [ 65.404822][ T6613] ? __pfx_vfs_write+0x10/0x10 [ 65.404839][ T6613] ? find_held_lock+0x2b/0x80 [ 65.404859][ T6613] ? __fget_files+0x204/0x3c0 [ 65.404884][ T6613] ? __fget_files+0x20e/0x3c0 [ 65.404911][ T6613] ksys_write+0x1f8/0x250 [ 65.404930][ T6613] ? __pfx_ksys_write+0x10/0x10 [ 65.404958][ T6613] do_syscall_64+0xcd/0x4c0 [ 65.404984][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.405002][ T6613] RIP: 0033:0x7fad0a78e929 [ 65.405016][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.405031][ T6613] RSP: 002b:00007fad0b5ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.405047][ T6613] RAX: ffffffffffffffda RBX: 00007fad0a9b5fa0 RCX: 00007fad0a78e929 [ 65.405058][ T6613] RDX: 0000000000000018 RSI: 0000200000000400 RDI: 0000000000000003 [ 65.405069][ T6613] RBP: 00007fad0b5ab090 R08: 0000000000000000 R09: 0000000000000000 [ 65.405079][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.405088][ T6613] R13: 0000000000000000 R14: 00007fad0a9b5fa0 R15: 00007ffc139360b8 [ 65.405111][ T6613] [ 65.507165][ T6619] input: syz1 as /devices/virtual/input/input18 [ 65.549031][ T6623] comedi comedi1: Minor 513 is invalid! [ 65.575235][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 65.583933][ T59] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.588131][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.592467][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.605670][ T59] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.611016][ T59] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.615553][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.635122][ T6634] syz_tun: entered allmulticast mode [ 65.645878][ T6634] comedi comedi1: comedi_config --init_data is deprecated [ 65.656387][ T6633] syz_tun: left allmulticast mode [ 65.662344][ T6636] orangefs_devreq_open: device cannot be opened in blocking mode [ 65.690348][ T6640] comedi comedi1: Cannot bond this driver to itself! [ 65.731336][ T6644] KVM: debugfs: duplicate directory 6644-5 [ 65.735170][ T6644] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.744787][ T6644] CIFS: Unable to determine destination address [ 65.830076][ T59] usb 8-1: GET_CAPABILITIES returned 0 [ 65.831792][ T59] usbtmc 8-1:16.0: can't read capabilities [ 65.843751][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 65.843760][ T40] audit: type=1400 audit(1752758003.242:358): avc: denied { setopt } for pid=6647 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.843982][ T6649] comedi comedi1: Cannot bond this driver to itself! [ 65.932320][ T6652] orangefs_devreq_open: device cannot be opened in blocking mode [ 65.974776][ T40] audit: type=1400 audit(1752758003.372:359): avc: denied { read } for pid=6656 comm="syz.0.211" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.981789][ T40] audit: type=1400 audit(1752758003.372:360): avc: denied { open } for pid=6656 comm="syz.0.211" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 65.981814][ T40] audit: type=1400 audit(1752758003.372:361): avc: denied { ioctl } for pid=6656 comm="syz.0.211" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 66.033125][ T6062] usb 8-1: USB disconnect, device number 7 [ 66.067791][ T6661] input: syz0 as /devices/virtual/input/input20 [ 66.168439][ T6665] FAULT_INJECTION: forcing a failure. [ 66.168439][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 66.172258][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.1.214 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 66.172272][ T6665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.172279][ T6665] Call Trace: [ 66.172283][ T6665] [ 66.172287][ T6665] dump_stack_lvl+0x16c/0x1f0 [ 66.172307][ T6665] should_fail_ex+0x512/0x640 [ 66.172322][ T6665] ? fs_reclaim_acquire+0xae/0x150 [ 66.172334][ T6665] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.172350][ T6665] should_failslab+0xc2/0x120 [ 66.172367][ T6665] __kmalloc_noprof+0xd2/0x510 [ 66.172384][ T6665] tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.172404][ T6665] tomoyo_check_open_permission+0x2ab/0x3c0 [ 66.172418][ T6665] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 66.172448][ T6665] ? do_raw_spin_lock+0x12c/0x2b0 [ 66.172465][ T6665] tomoyo_file_open+0x6b/0x90 [ 66.172475][ T6665] security_file_open+0x84/0x1e0 [ 66.172492][ T6665] do_dentry_open+0x596/0x1c10 [ 66.172510][ T6665] vfs_open+0x82/0x3f0 [ 66.172522][ T6665] path_openat+0x1de4/0x2cb0 [ 66.172541][ T6665] ? __pfx_path_openat+0x10/0x10 [ 66.172560][ T6665] do_filp_open+0x20b/0x470 [ 66.172575][ T6665] ? __pfx_do_filp_open+0x10/0x10 [ 66.172599][ T6665] ? _raw_spin_unlock+0x28/0x50 [ 66.172612][ T6665] ? alloc_fd+0x471/0x7d0 [ 66.172630][ T6665] do_sys_openat2+0x11b/0x1d0 [ 66.172640][ T6665] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.172652][ T6665] ? __fget_files+0x20e/0x3c0 [ 66.172669][ T6665] __x64_sys_open+0x153/0x1e0 [ 66.172679][ T6665] ? __pfx___x64_sys_open+0x10/0x10 [ 66.172693][ T6665] ? rcu_is_watching+0x12/0xc0 [ 66.172709][ T6665] do_syscall_64+0xcd/0x4c0 [ 66.172726][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.172737][ T6665] RIP: 0033:0x7f5e1118e929 [ 66.172746][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.172756][ T6665] RSP: 002b:00007f5e0efd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 66.172767][ T6665] RAX: ffffffffffffffda RBX: 00007f5e113b6080 RCX: 00007f5e1118e929 [ 66.172773][ T6665] RDX: 00000000000000b2 RSI: 0000000000000000 RDI: 00002000000001c0 [ 66.172779][ T6665] RBP: 00007f5e0efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 66.172785][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.172791][ T6665] R13: 0000000000000000 R14: 00007f5e113b6080 R15: 00007fffdfd93338 [ 66.172804][ T6665] [ 66.172808][ T6665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.266736][ T6669] input: syz0 as /devices/virtual/input/input21 [ 66.267978][ T6665] orangefs_devreq_open: device cannot be opened in blocking mode [ 66.274623][ T6669] FAULT_INJECTION: forcing a failure. [ 66.274623][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.280307][ T6669] CPU: 3 UID: 0 PID: 6669 Comm: syz.2.216 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 66.280331][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.280341][ T6669] Call Trace: [ 66.280346][ T6669] [ 66.280352][ T6669] dump_stack_lvl+0x16c/0x1f0 [ 66.280380][ T6669] should_fail_ex+0x512/0x640 [ 66.280406][ T6669] _copy_to_user+0x32/0xd0 [ 66.280432][ T6669] simple_read_from_buffer+0xcb/0x170 [ 66.280456][ T6669] proc_fail_nth_read+0x197/0x270 [ 66.280479][ T6669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.280502][ T6669] ? rw_verify_area+0xcf/0x680 [ 66.280523][ T6669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.280545][ T6669] vfs_read+0x1e1/0xc60 [ 66.280570][ T6669] ? __pfx___mutex_lock+0x10/0x10 [ 66.280595][ T6669] ? __pfx_vfs_read+0x10/0x10 [ 66.280623][ T6669] ? __fget_files+0x20e/0x3c0 [ 66.280653][ T6669] ksys_read+0x12a/0x250 [ 66.280674][ T6669] ? __pfx_ksys_read+0x10/0x10 [ 66.280708][ T6669] do_syscall_64+0xcd/0x4c0 [ 66.280735][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.280751][ T6669] RIP: 0033:0x7fad0a78d33c [ 66.280766][ T6669] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.280780][ T6669] RSP: 002b:00007fad0b5ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.280795][ T6669] RAX: ffffffffffffffda RBX: 00007fad0a9b5fa0 RCX: 00007fad0a78d33c [ 66.280807][ T6669] RDX: 000000000000000f RSI: 00007fad0b5ab0a0 RDI: 0000000000000004 [ 66.280817][ T6669] RBP: 00007fad0b5ab090 R08: 0000000000000000 R09: 0000000000000000 [ 66.280828][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.280838][ T6669] R13: 0000000000000000 R14: 00007fad0a9b5fa0 R15: 00007ffc139360b8 [ 66.280861][ T6669] [ 66.359485][ T6673] input: syz0 as /devices/virtual/input/input22 [ 66.360082][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.369605][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.375432][ T40] audit: type=1400 audit(1752758003.772:362): avc: denied { create } for pid=6670 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.381407][ T40] audit: type=1400 audit(1752758003.772:363): avc: denied { write } for pid=6670 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.406871][ T6679] comedi comedi1: Minor 513 is invalid! [ 66.488106][ T6687] orangefs_devreq_open: device cannot be opened in blocking mode [ 66.563144][ T6693] comedi comedi1: Minor 16777217 is invalid! [ 66.596190][ T6697] FAULT_INJECTION: forcing a failure. [ 66.596190][ T6697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.600172][ T6697] CPU: 3 UID: 0 PID: 6697 Comm: syz.3.227 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 66.600187][ T6697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.600194][ T6697] Call Trace: [ 66.600198][ T6697] [ 66.600202][ T6697] dump_stack_lvl+0x16c/0x1f0 [ 66.600235][ T6697] should_fail_ex+0x512/0x640 [ 66.600257][ T6697] _copy_from_user+0x2e/0xd0 [ 66.600273][ T6697] do_devconfig_ioctl+0x117/0x580 [ 66.600292][ T6697] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 66.600317][ T6697] ? find_held_lock+0x2b/0x80 [ 66.600334][ T6697] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 66.600349][ T6697] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.600366][ T6697] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 66.600377][ T6697] ? do_vfs_ioctl+0x523/0x1a60 [ 66.600390][ T6697] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.600405][ T6697] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 66.600422][ T6697] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 66.600438][ T6697] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.600458][ T6697] ? hook_file_ioctl_common+0x145/0x410 [ 66.600472][ T6697] ? selinux_file_ioctl+0x180/0x270 [ 66.600486][ T6697] ? selinux_file_ioctl+0xb4/0x270 [ 66.600502][ T6697] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 66.600514][ T6697] __x64_sys_ioctl+0x18e/0x210 [ 66.600527][ T6697] do_syscall_64+0xcd/0x4c0 [ 66.600544][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.600555][ T6697] RIP: 0033:0x7f2583b8e929 [ 66.600564][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.600574][ T6697] RSP: 002b:00007f25849ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.600584][ T6697] RAX: ffffffffffffffda RBX: 00007f2583db5fa0 RCX: 00007f2583b8e929 [ 66.600591][ T6697] RDX: 0000200000000a00 RSI: 0000000040946400 RDI: 0000000000000003 [ 66.600597][ T6697] RBP: 00007f25849ed090 R08: 0000000000000000 R09: 0000000000000000 [ 66.600603][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.600609][ T6697] R13: 0000000000000000 R14: 00007f2583db5fa0 R15: 00007ffc4d9d1658 [ 66.600622][ T6697] [ 66.639144][ T6703] comedi comedi1: Minor 47 could not be opened [ 66.674950][ T6705] comedi comedi1: Minor 513 is invalid! [ 66.715738][ T6707] input: syz1 as /devices/virtual/input/input23 [ 66.722376][ T6707] ip6t_srh: unknown srh match flags 4000 [ 66.731600][ T6136] udevd[6136]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 66.772382][ T6714] orangefs_devreq_open: device cannot be opened in blocking mode [ 66.887288][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 66.889695][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 66.907114][ T6727] FAULT_INJECTION: forcing a failure. [ 66.907114][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 66.910999][ T6727] CPU: 3 UID: 0 PID: 6727 Comm: syz.1.239 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 66.911013][ T6727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.911020][ T6727] Call Trace: [ 66.911024][ T6727] [ 66.911028][ T6727] dump_stack_lvl+0x16c/0x1f0 [ 66.911047][ T6727] should_fail_ex+0x512/0x640 [ 66.911061][ T6727] ? fs_reclaim_acquire+0xae/0x150 [ 66.911074][ T6727] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.911089][ T6727] should_failslab+0xc2/0x120 [ 66.911105][ T6727] __kmalloc_noprof+0xd2/0x510 [ 66.911122][ T6727] tomoyo_realpath_from_path+0xc2/0x6e0 [ 66.911140][ T6727] ? tomoyo_profile+0x47/0x60 [ 66.911158][ T6727] tomoyo_path_number_perm+0x245/0x580 [ 66.911171][ T6727] ? tomoyo_path_number_perm+0x237/0x580 [ 66.911185][ T6727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.911199][ T6727] ? find_held_lock+0x2b/0x80 [ 66.911225][ T6727] ? find_held_lock+0x2b/0x80 [ 66.911239][ T6727] ? hook_file_ioctl_common+0x145/0x410 [ 66.911252][ T6727] ? __fget_files+0x20e/0x3c0 [ 66.911270][ T6727] security_file_ioctl+0x9b/0x240 [ 66.911286][ T6727] __x64_sys_ioctl+0xb7/0x210 [ 66.911299][ T6727] do_syscall_64+0xcd/0x4c0 [ 66.911316][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.911327][ T6727] RIP: 0033:0x7f5e1118e929 [ 66.911336][ T6727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.911347][ T6727] RSP: 002b:00007f5e0eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.911357][ T6727] RAX: ffffffffffffffda RBX: 00007f5e113b5fa0 RCX: 00007f5e1118e929 [ 66.911364][ T6727] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 66.911370][ T6727] RBP: 00007f5e0eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.911376][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.911382][ T6727] R13: 0000000000000000 R14: 00007f5e113b5fa0 R15: 00007fffdfd93338 [ 66.911400][ T6727] [ 66.911405][ T6727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.939817][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 66.992285][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 67.013057][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.144040][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 67.146555][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 67.173231][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 67.177397][ T59] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.180663][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.183667][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.190801][ T59] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.197077][ T59] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.199858][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.255565][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 67.257961][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 67.408549][ T59] usb 7-1: usb_control_msg returned -71 [ 67.410350][ T59] usbtmc 7-1:16.0: can't read capabilities [ 67.413618][ T6753] orangefs_devreq_open: device cannot be opened in blocking mode [ 67.419757][ T59] usb 7-1: USB disconnect, device number 5 [ 67.509908][ T6756] orangefs_devreq_open: device cannot be opened in blocking mode [ 67.556802][ T40] audit: type=1400 audit(1752758004.952:364): avc: denied { bind } for pid=6757 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.564100][ T40] audit: type=1400 audit(1752758004.952:365): avc: denied { accept } for pid=6757 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.567492][ C2] Unknown status report in ack skb [ 67.575006][ T40] audit: type=1400 audit(1752758004.972:366): avc: denied { read } for pid=6757 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.626330][ T40] audit: type=1400 audit(1752758005.022:367): avc: denied { write } for pid=6757 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.653454][ T6035] libceph: connect (1)[c::]:6789 error -101 [ 67.658262][ T6035] libceph: mon0 (1)[c::]:6789 connect error [ 67.710435][ T6721] ceph: No mds server is up or the cluster is laggy [ 67.713084][ T6728] ceph: No mds server is up or the cluster is laggy [ 67.935746][ T6765] binder: BINDER_SET_CONTEXT_MGR already set [ 67.938435][ T6765] binder: 6764:6765 ioctl 4018620d 200000000040 returned -16 [ 68.037726][ T6774] netlink: 'syz.2.258': attribute type 9 has an invalid length. [ 68.047202][ T6774] Bluetooth: MGMT ver 1.23 [ 68.161155][ T6783] FAULT_INJECTION: forcing a failure. [ 68.161155][ T6783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.167292][ T6783] CPU: 2 UID: 0 PID: 6783 Comm: syz.3.262 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 68.167308][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.167315][ T6783] Call Trace: [ 68.167319][ T6783] [ 68.167323][ T6783] dump_stack_lvl+0x16c/0x1f0 [ 68.167343][ T6783] should_fail_ex+0x512/0x640 [ 68.167363][ T6783] _copy_from_user+0x2e/0xd0 [ 68.167380][ T6783] kstrtouint_from_user+0xd6/0x1d0 [ 68.167392][ T6783] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 68.167404][ T6783] ? __lock_acquire+0xb8a/0x1c90 [ 68.167420][ T6783] proc_fail_nth_write+0x83/0x250 [ 68.167435][ T6783] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.167453][ T6783] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.167466][ T6783] vfs_write+0x2a0/0x1150 [ 68.167483][ T6783] ? __pfx___mutex_lock+0x10/0x10 [ 68.167499][ T6783] ? __pfx_vfs_write+0x10/0x10 [ 68.167516][ T6783] ? __fget_files+0x20e/0x3c0 [ 68.167535][ T6783] ksys_write+0x12a/0x250 [ 68.167548][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 68.167563][ T6783] ? fput+0x70/0xf0 [ 68.167574][ T6783] do_syscall_64+0xcd/0x4c0 [ 68.167591][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.167609][ T6783] RIP: 0033:0x7f2583b8d3df [ 68.167617][ T6783] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 68.167627][ T6783] RSP: 002b:00007f25849ed030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.167638][ T6783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2583b8d3df [ 68.167644][ T6783] RDX: 0000000000000001 RSI: 00007f25849ed0a0 RDI: 0000000000000004 [ 68.167650][ T6783] RBP: 00007f25849ed090 R08: 0000000000000000 R09: 0000000000000000 [ 68.167656][ T6783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 68.167662][ T6783] R13: 0000000000000000 R14: 00007f2583db5fa0 R15: 00007ffc4d9d1658 [ 68.167675][ T6783] [ 68.278113][ T6787] binder: 6786:6787 unknown command 0 [ 68.280340][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.283555][ T6787] binder: 6786:6787 unknown command 0 [ 68.285480][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.287784][ T6787] binder: 6786:6787 unknown command 0 [ 68.289479][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.291747][ T6787] binder: 6786:6787 unknown command 0 [ 68.294644][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.297420][ T6787] binder: 6786:6787 unknown command 0 [ 68.299159][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.301530][ T6787] binder: 6786:6787 unknown command 0 [ 68.303827][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.306452][ T6787] binder: 6786:6787 unknown command 0 [ 68.308089][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.310490][ T6787] binder: 6786:6787 unknown command 0 [ 68.312221][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.314698][ T6787] binder: 6786:6787 unknown command 0 [ 68.316533][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.318894][ T6787] binder: 6786:6787 unknown command 0 [ 68.320592][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.323087][ T6787] binder: 6786:6787 unknown command 0 [ 68.325027][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.327391][ T6787] binder: 6786:6787 unknown command 0 [ 68.329087][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.331500][ T6787] binder: 6786:6787 unknown command 0 [ 68.333298][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.335694][ T6787] binder: 6786:6787 unknown command 0 [ 68.337353][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.339681][ T6787] binder: 6786:6787 unknown command 0 [ 68.341390][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.344020][ T6787] binder: 6786:6787 unknown command 0 [ 68.345893][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.348310][ T6787] binder: 6786:6787 unknown command 0 [ 68.350094][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.352508][ T6787] binder: 6786:6787 unknown command 0 [ 68.354364][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.357498][ T6787] binder: 6786:6787 unknown command 0 [ 68.359237][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.361678][ T6787] binder: 6786:6787 unknown command 0 [ 68.363631][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.366091][ T6787] binder: 6786:6787 unknown command 0 [ 68.367826][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.370224][ T6787] binder: 6786:6787 unknown command 0 [ 68.372016][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.374731][ T6787] binder: 6786:6787 unknown command 0 [ 68.376520][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.378970][ T6787] binder: 6786:6787 unknown command 0 [ 68.380754][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.383420][ T6787] binder: 6786:6787 unknown command 0 [ 68.385435][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.388232][ T6787] binder: 6786:6787 unknown command 0 [ 68.389967][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.392397][ T6787] binder: 6786:6787 unknown command 0 [ 68.394274][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.396732][ T6787] binder: 6786:6787 unknown command 0 [ 68.398480][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.400894][ T6787] binder: 6786:6787 unknown command 0 [ 68.402562][ T6787] binder: 6786:6787 ioctl c0306201 200000000080 returned -22 [ 68.428610][ T6791] binder: BINDER_SET_CONTEXT_MGR already set [ 68.430493][ T6791] binder: 6790:6791 ioctl 4018620d 200000000040 returned -16 [ 68.504409][ T6016] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.528035][ T6801] orangefs_devreq_open: device cannot be opened in blocking mode [ 68.576312][ T6806] capability: warning: `syz.2.271' uses 32-bit capabilities (legacy support in use) [ 68.583364][ T6802] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 68.621596][ T6809] FAULT_INJECTION: forcing a failure. [ 68.621596][ T6809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.626902][ T6809] CPU: 2 UID: 0 PID: 6809 Comm: syz.1.273 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 68.626926][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.626937][ T6809] Call Trace: [ 68.626942][ T6809] [ 68.626949][ T6809] dump_stack_lvl+0x16c/0x1f0 [ 68.626978][ T6809] should_fail_ex+0x512/0x640 [ 68.627005][ T6809] _copy_from_user+0x2e/0xd0 [ 68.627030][ T6809] do_devconfig_ioctl+0x117/0x580 [ 68.627058][ T6809] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 68.627099][ T6809] ? find_held_lock+0x2b/0x80 [ 68.627126][ T6809] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 68.627150][ T6809] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.627171][ T6809] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.627190][ T6809] ? do_vfs_ioctl+0x523/0x1a60 [ 68.627210][ T6809] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.627234][ T6809] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 68.627259][ T6809] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 68.627285][ T6809] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.627316][ T6809] ? hook_file_ioctl_common+0x145/0x410 [ 68.627341][ T6809] ? selinux_file_ioctl+0x180/0x270 [ 68.627370][ T6809] ? selinux_file_ioctl+0xb4/0x270 [ 68.627392][ T6809] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 68.627413][ T6809] __x64_sys_ioctl+0x18e/0x210 [ 68.627433][ T6809] do_syscall_64+0xcd/0x4c0 [ 68.627460][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.627477][ T6809] RIP: 0033:0x7f5e1118e929 [ 68.627492][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.627508][ T6809] RSP: 002b:00007f5e0eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.627525][ T6809] RAX: ffffffffffffffda RBX: 00007f5e113b5fa0 RCX: 00007f5e1118e929 [ 68.627536][ T6809] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 68.627547][ T6809] RBP: 00007f5e0eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.627557][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.627567][ T6809] R13: 0000000000000000 R14: 00007f5e113b5fa0 R15: 00007fffdfd93338 [ 68.627595][ T6809] [ 68.733004][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 68.737252][ T6016] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.740198][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.744965][ T6016] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 68.748188][ T6016] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.752376][ T6016] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.755662][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.814477][ T6815] binder: BINDER_SET_CONTEXT_MGR already set [ 68.816928][ T6815] binder: 6814:6815 ioctl 4018620d 200000000040 returned -16 [ 68.968350][ T6016] usb 8-1: usb_control_msg returned -71 [ 68.977395][ T6016] usbtmc 8-1:16.0: can't read capabilities [ 68.990457][ T6016] usb 8-1: USB disconnect, device number 8 [ 69.015430][ T6827] warning: `syz.0.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.096886][ T6830] netlink: zone id is out of range [ 69.098650][ T6830] netlink: zone id is out of range [ 69.100663][ T6830] netlink: zone id is out of range [ 69.102859][ T6830] netlink: zone id is out of range [ 69.106535][ T6830] netlink: zone id is out of range [ 69.108752][ T6830] netlink: zone id is out of range [ 69.110829][ T6830] netlink: zone id is out of range [ 69.115059][ T6830] netlink: zone id is out of range [ 69.117340][ T6830] netlink: zone id is out of range [ 69.119528][ T6830] netlink: zone id is out of range [ 69.290715][ T6848] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 69.348309][ T6852] FAULT_INJECTION: forcing a failure. [ 69.348309][ T6852] name failslab, interval 1, probability 0, space 0, times 0 [ 69.355049][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.0.288 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 69.355066][ T6852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.355073][ T6852] Call Trace: [ 69.355076][ T6852] [ 69.355081][ T6852] dump_stack_lvl+0x16c/0x1f0 [ 69.355100][ T6852] should_fail_ex+0x512/0x640 [ 69.355115][ T6852] ? fs_reclaim_acquire+0xae/0x150 [ 69.355128][ T6852] ? tomoyo_encode2+0x100/0x3e0 [ 69.355143][ T6852] should_failslab+0xc2/0x120 [ 69.355159][ T6852] __kmalloc_noprof+0xd2/0x510 [ 69.355174][ T6852] ? d_absolute_path+0x136/0x1a0 [ 69.355188][ T6852] tomoyo_encode2+0x100/0x3e0 [ 69.355205][ T6852] tomoyo_encode+0x29/0x50 [ 69.355219][ T6852] tomoyo_realpath_from_path+0x18f/0x6e0 [ 69.355239][ T6852] tomoyo_path_number_perm+0x245/0x580 [ 69.355252][ T6852] ? tomoyo_path_number_perm+0x237/0x580 [ 69.355267][ T6852] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 69.355281][ T6852] ? find_held_lock+0x2b/0x80 [ 69.355307][ T6852] ? find_held_lock+0x2b/0x80 [ 69.355321][ T6852] ? hook_file_ioctl_common+0x145/0x410 [ 69.355334][ T6852] ? __fget_files+0x20e/0x3c0 [ 69.355354][ T6852] security_file_ioctl+0x9b/0x240 [ 69.355370][ T6852] __x64_sys_ioctl+0xb7/0x210 [ 69.355384][ T6852] do_syscall_64+0xcd/0x4c0 [ 69.355401][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.355412][ T6852] RIP: 0033:0x7f15c8d8e929 [ 69.355421][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.355432][ T6852] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.355443][ T6852] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 69.355450][ T6852] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 69.355457][ T6852] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 69.355463][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.355469][ T6852] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 69.355482][ T6852] [ 69.355491][ T6852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.441722][ T6852] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 69.517580][ T6858] FAULT_INJECTION: forcing a failure. [ 69.517580][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 69.521630][ T6858] CPU: 3 UID: 0 PID: 6858 Comm: syz.0.290 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 69.521645][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.521652][ T6858] Call Trace: [ 69.521656][ T6858] [ 69.521660][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 69.521680][ T6858] should_fail_ex+0x512/0x640 [ 69.521695][ T6858] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 69.521711][ T6858] should_failslab+0xc2/0x120 [ 69.521727][ T6858] __kmalloc_cache_noprof+0x6a/0x3e0 [ 69.521740][ T6858] ? __request_region+0x5c/0xf0 [ 69.521758][ T6858] __request_region+0x5c/0xf0 [ 69.521776][ T6858] comedi_request_region+0x6d/0x1c0 [ 69.521792][ T6858] pcl730_attach+0xa8/0xbe0 [ 69.521806][ T6858] comedi_device_attach+0x3b0/0x900 [ 69.521824][ T6858] do_devconfig_ioctl+0x1a7/0x580 [ 69.521842][ T6858] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 69.521867][ T6858] ? find_held_lock+0x2b/0x80 [ 69.521884][ T6858] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 69.521900][ T6858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.521914][ T6858] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.521926][ T6858] ? do_vfs_ioctl+0x523/0x1a60 [ 69.521938][ T6858] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.521954][ T6858] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 69.521971][ T6858] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 69.521988][ T6858] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.522008][ T6858] ? hook_file_ioctl_common+0x145/0x410 [ 69.522023][ T6858] ? selinux_file_ioctl+0x180/0x270 [ 69.522037][ T6858] ? selinux_file_ioctl+0xb4/0x270 [ 69.522052][ T6858] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.522065][ T6858] __x64_sys_ioctl+0x18e/0x210 [ 69.522078][ T6858] do_syscall_64+0xcd/0x4c0 [ 69.522094][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.522106][ T6858] RIP: 0033:0x7f15c8d8e929 [ 69.522126][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.522137][ T6858] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.522148][ T6858] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 69.522154][ T6858] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 69.522175][ T6858] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 69.522182][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.522188][ T6858] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 69.522202][ T6858] [ 69.522220][ T6858] comedi comedi3: pcl730: I/O port conflict (0x4f27,4) [ 69.641543][ T6860] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 69.652733][ T6865] xt_hashlimit: size too large, truncated to 1048576 [ 69.707369][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 69.784852][ T6883] tc_dump_action: action bad kind [ 69.790284][ T6885] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 69.792027][ T6883] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.301'. [ 69.919561][ T6894] netlink: 80 bytes leftover after parsing attributes in process `syz.3.305'. [ 69.960111][ T6897] geneve2: entered promiscuous mode [ 69.962348][ T6897] geneve2: entered allmulticast mode [ 69.979769][ T6898] FAULT_INJECTION: forcing a failure. [ 69.979769][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 69.984981][ T6898] CPU: 3 UID: 0 PID: 6898 Comm: syz.1.306 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 69.984986][ T6900] geneve2: entered promiscuous mode [ 69.984997][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.985004][ T6898] Call Trace: [ 69.985008][ T6898] [ 69.985012][ T6898] dump_stack_lvl+0x16c/0x1f0 [ 69.985045][ T6898] should_fail_ex+0x512/0x640 [ 69.985066][ T6898] ? __kmalloc_noprof+0xbf/0x510 [ 69.985082][ T6898] ? comedi_alloc_subdevices+0x4a/0x240 [ 69.985096][ T6898] should_failslab+0xc2/0x120 [ 69.985113][ T6898] __kmalloc_noprof+0xd2/0x510 [ 69.985128][ T6898] ? _raw_write_unlock+0x28/0x50 [ 69.985145][ T6898] comedi_alloc_subdevices+0x4a/0x240 [ 69.985160][ T6898] pcl730_attach+0x109/0xbe0 [ 69.985175][ T6898] comedi_device_attach+0x3b0/0x900 [ 69.985193][ T6898] do_devconfig_ioctl+0x1a7/0x580 [ 69.985210][ T6898] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 69.985236][ T6898] ? find_held_lock+0x2b/0x80 [ 69.985253][ T6898] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 69.985268][ T6898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.985281][ T6898] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.985293][ T6898] ? do_vfs_ioctl+0x523/0x1a60 [ 69.985306][ T6898] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 69.985321][ T6898] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 69.985338][ T6898] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 69.985355][ T6898] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 69.985375][ T6898] ? hook_file_ioctl_common+0x145/0x410 [ 69.985389][ T6898] ? selinux_file_ioctl+0x180/0x270 [ 69.985404][ T6898] ? selinux_file_ioctl+0xb4/0x270 [ 69.985419][ T6898] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.985432][ T6898] __x64_sys_ioctl+0x18e/0x210 [ 69.985445][ T6898] do_syscall_64+0xcd/0x4c0 [ 69.985462][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.985474][ T6898] RIP: 0033:0x7f5e1118e929 [ 69.985482][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.985493][ T6898] RSP: 002b:00007f5e0eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.985504][ T6898] RAX: ffffffffffffffda RBX: 00007f5e113b5fa0 RCX: 00007f5e1118e929 [ 69.985511][ T6898] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 69.985517][ T6898] RBP: 00007f5e0eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.985524][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.985530][ T6898] R13: 0000000000000000 R14: 00007f5e113b5fa0 R15: 00007fffdfd93338 [ 69.985543][ T6898] [ 70.014661][ T6903] ufs: You didn't specify the type of your ufs filesystem [ 70.014661][ T6903] [ 70.014661][ T6903] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 70.014661][ T6903] [ 70.014661][ T6903] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 70.015730][ T6900] geneve2: entered allmulticast mode [ 70.074899][ T6908] random: crng reseeded on system resumption [ 70.076573][ T6903] ufs: failed to set blocksize [ 70.077372][ T885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.108962][ T6903] Restarting kernel threads ... [ 70.115826][ T6903] Done restarting kernel threads. [ 70.118868][ T6910] fuse: Invalid rootmode [ 70.233089][ T885] usb 7-1: Using ep0 maxpacket: 8 [ 70.238805][ T885] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.242054][ T885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.250564][ T885] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.255879][ T885] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.260328][ T885] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.263623][ T885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.473015][ T885] usb 7-1: usb_control_msg returned -71 [ 70.475376][ T885] usbtmc 7-1:16.0: can't read capabilities [ 70.482238][ T885] usb 7-1: USB disconnect, device number 6 [ 70.520506][ T6949] FAULT_INJECTION: forcing a failure. [ 70.520506][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.527459][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.3.321 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 70.527483][ T6949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.527494][ T6949] Call Trace: [ 70.527501][ T6949] [ 70.527508][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 70.527537][ T6949] should_fail_ex+0x512/0x640 [ 70.527565][ T6949] _copy_to_user+0x32/0xd0 [ 70.527592][ T6949] simple_read_from_buffer+0xcb/0x170 [ 70.527617][ T6949] proc_fail_nth_read+0x197/0x270 [ 70.527641][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.527666][ T6949] ? rw_verify_area+0xcf/0x680 [ 70.527691][ T6949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.527713][ T6949] vfs_read+0x1e1/0xc60 [ 70.527738][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 70.527763][ T6949] ? __pfx_vfs_read+0x10/0x10 [ 70.527792][ T6949] ? __fget_files+0x20e/0x3c0 [ 70.527824][ T6949] ksys_read+0x12a/0x250 [ 70.527845][ T6949] ? __pfx_ksys_read+0x10/0x10 [ 70.527867][ T6949] ? fput+0x70/0xf0 [ 70.527887][ T6949] do_syscall_64+0xcd/0x4c0 [ 70.527915][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.527932][ T6949] RIP: 0033:0x7f2583b8d33c [ 70.527947][ T6949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.527963][ T6949] RSP: 002b:00007f25849ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.527980][ T6949] RAX: ffffffffffffffda RBX: 00007f2583db5fa0 RCX: 00007f2583b8d33c [ 70.527992][ T6949] RDX: 000000000000000f RSI: 00007f25849ed0a0 RDI: 0000000000000004 [ 70.528003][ T6949] RBP: 00007f25849ed090 R08: 0000000000000000 R09: 0000000000000000 [ 70.528013][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.528023][ T6949] R13: 0000000000000000 R14: 00007f2583db5fa0 R15: 00007ffc4d9d1658 [ 70.528047][ T6949] [ 70.551118][ T6939] input: syz0 as /devices/virtual/input/input24 [ 70.768048][ T6966] binder: BINDER_SET_CONTEXT_MGR already set [ 70.770475][ T6966] binder: 6965:6966 ioctl 4018620d 200000000040 returned -16 [ 70.857769][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 70.857784][ T40] audit: type=1400 audit(1752758008.252:394): avc: denied { ioctl } for pid=6971 comm="syz.3.331" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 70.872143][ T6973] orangefs_devreq_open: device cannot be opened in blocking mode [ 70.917556][ T6977] comedi comedi1: comedi_config --init_data is deprecated [ 71.012902][ T6986] binder: BINDER_SET_CONTEXT_MGR already set [ 71.020852][ T6986] binder: 6985:6986 ioctl 4018620d 200000000040 returned -16 [ 71.076012][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.078605][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.118679][ T40] audit: type=1400 audit(1752758008.512:395): avc: denied { ioctl } for pid=6990 comm="syz.2.339" path="socket:[15694]" dev="sockfs" ino=15694 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.127147][ T40] audit: type=1400 audit(1752758008.512:396): avc: denied { create } for pid=6990 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.133380][ T40] audit: type=1400 audit(1752758008.512:397): avc: denied { bind } for pid=6990 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.163491][ T6994] FAULT_INJECTION: forcing a failure. [ 71.163491][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 71.168090][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.3.340 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 71.168107][ T6994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.168114][ T6994] Call Trace: [ 71.168118][ T6994] [ 71.168122][ T6994] dump_stack_lvl+0x16c/0x1f0 [ 71.168142][ T6994] should_fail_ex+0x512/0x640 [ 71.168157][ T6994] ? __kmalloc_noprof+0xbf/0x510 [ 71.168174][ T6994] ? comedi_alloc_devpriv+0x22/0x60 [ 71.168188][ T6994] should_failslab+0xc2/0x120 [ 71.168205][ T6994] __kmalloc_noprof+0xd2/0x510 [ 71.168222][ T6994] comedi_alloc_devpriv+0x22/0x60 [ 71.168236][ T6994] waveform_common_attach+0x27/0x940 [ 71.168250][ T6994] comedi_device_attach+0x3b0/0x900 [ 71.168268][ T6994] do_devconfig_ioctl+0x1a7/0x580 [ 71.168286][ T6994] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 71.168311][ T6994] ? find_held_lock+0x2b/0x80 [ 71.168328][ T6994] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 71.168343][ T6994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.168356][ T6994] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 71.168368][ T6994] ? do_vfs_ioctl+0x523/0x1a60 [ 71.168381][ T6994] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.168396][ T6994] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 71.168413][ T6994] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 71.168430][ T6994] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.168450][ T6994] ? hook_file_ioctl_common+0x145/0x410 [ 71.168465][ T6994] ? selinux_file_ioctl+0x180/0x270 [ 71.168479][ T6994] ? selinux_file_ioctl+0xb4/0x270 [ 71.168495][ T6994] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 71.168508][ T6994] __x64_sys_ioctl+0x18e/0x210 [ 71.168521][ T6994] do_syscall_64+0xcd/0x4c0 [ 71.168538][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.168549][ T6994] RIP: 0033:0x7f2583b8e929 [ 71.168559][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.168569][ T6994] RSP: 002b:00007f25849ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.168581][ T6994] RAX: ffffffffffffffda RBX: 00007f2583db5fa0 RCX: 00007f2583b8e929 [ 71.168587][ T6994] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 71.168594][ T6994] RBP: 00007f25849ed090 R08: 0000000000000000 R09: 0000000000000000 [ 71.168600][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.168606][ T6994] R13: 0000000000000000 R14: 00007f2583db5fa0 R15: 00007ffc4d9d1658 [ 71.168624][ T6994] [ 71.249857][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.308116][ T40] audit: type=1400 audit(1752758008.702:398): avc: denied { name_bind } for pid=6997 comm="syz.0.342" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 71.393980][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 71.403692][ T40] audit: type=1400 audit(1752758008.802:399): avc: denied { create } for pid=7003 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.409730][ T40] audit: type=1400 audit(1752758008.802:400): avc: denied { getopt } for pid=7003 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.447137][ T40] audit: type=1400 audit(1752758008.842:401): avc: denied { create } for pid=7005 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.555815][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.560150][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 71.561119][ T7013] netlink: 'syz.3.348': attribute type 10 has an invalid length. [ 71.564929][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 71.568577][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.570613][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.573385][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.586537][ T9] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 71.586946][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.590468][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.590488][ T9] usb 7-1: Product: syz [ 71.592827][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.596738][ T9] usb 7-1: Manufacturer: syz [ 71.597757][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.603874][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.607800][ T9] usb 7-1: SerialNumber: syz [ 71.608105][ T7013] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.608947][ T7015] binder: BINDER_SET_CONTEXT_MGR already set [ 71.608969][ T7015] binder: 7014:7015 ioctl 4018620d 200000000040 returned -16 [ 71.618077][ T9] usb 7-1: config 0 descriptor?? [ 71.625365][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 71.657634][ T40] audit: type=1400 audit(1752758009.052:402): avc: denied { lock } for pid=7018 comm="syz.3.351" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.687105][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 71.707819][ T7022] capability: warning: `syz.3.351' uses deprecated v2 capabilities in a way that may be insecure [ 71.876233][ C3] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 71.881309][ T6062] usb 7-1: USB disconnect, device number 7 [ 72.193062][ T5957] Bluetooth: hci3: command 0x0405 tx timeout [ 72.220975][ T7027] comedi comedi3: comedi_test: 20287 microvolt, 5 microsecond waveform attached [ 72.333661][ T7030] orangefs_devreq_open: device cannot be opened in blocking mode [ 72.386033][ T7032] FAULT_INJECTION: forcing a failure. [ 72.386033][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 72.391434][ T7032] CPU: 2 UID: 0 PID: 7032 Comm: syz.0.355 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 72.391458][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.391468][ T7032] Call Trace: [ 72.391475][ T7032] [ 72.391482][ T7032] dump_stack_lvl+0x16c/0x1f0 [ 72.391512][ T7032] should_fail_ex+0x512/0x640 [ 72.391535][ T7032] ? __kmalloc_noprof+0xbf/0x510 [ 72.391566][ T7032] ? comedi_alloc_subdevices+0x4a/0x240 [ 72.391589][ T7032] should_failslab+0xc2/0x120 [ 72.391615][ T7032] __kmalloc_noprof+0xd2/0x510 [ 72.391636][ T7032] ? rcu_is_watching+0x12/0xc0 [ 72.391665][ T7032] comedi_alloc_subdevices+0x4a/0x240 [ 72.391691][ T7032] waveform_common_attach+0xae/0x940 [ 72.391715][ T7032] comedi_device_attach+0x3b0/0x900 [ 72.391745][ T7032] do_devconfig_ioctl+0x1a7/0x580 [ 72.391773][ T7032] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 72.391817][ T7032] ? find_held_lock+0x2b/0x80 [ 72.391844][ T7032] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 72.391870][ T7032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.391890][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.391910][ T7032] ? do_vfs_ioctl+0x523/0x1a60 [ 72.391931][ T7032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.391957][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 72.391982][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 72.392008][ T7032] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.392041][ T7032] ? hook_file_ioctl_common+0x145/0x410 [ 72.392065][ T7032] ? selinux_file_ioctl+0x180/0x270 [ 72.392088][ T7032] ? selinux_file_ioctl+0xb4/0x270 [ 72.392113][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.392134][ T7032] __x64_sys_ioctl+0x18e/0x210 [ 72.392156][ T7032] do_syscall_64+0xcd/0x4c0 [ 72.392184][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.392202][ T7032] RIP: 0033:0x7f15c8d8e929 [ 72.392216][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.392234][ T7032] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.392251][ T7032] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 72.392263][ T7032] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 72.392273][ T7032] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 72.392284][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.392294][ T7032] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 72.392317][ T7032] [ 72.392329][ T7032] INFO: trying to register non-static key. [ 72.410340][ T40] audit: type=1400 audit(1752758009.802:403): avc: denied { read } for pid=7033 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.410696][ T7032] The code is fine but needs lockdep annotation, or maybe [ 72.490072][ T7032] you didn't initialize this object before use? [ 72.492252][ T7032] turning off the locking correctness validator. [ 72.494254][ T7032] CPU: 2 UID: 0 PID: 7032 Comm: syz.0.355 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 72.494269][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.494277][ T7032] Call Trace: [ 72.494281][ T7032] [ 72.494285][ T7032] dump_stack_lvl+0x116/0x1f0 [ 72.494305][ T7032] register_lock_class+0x4a3/0x4c0 [ 72.494317][ T7032] ? __lock_acquire+0xb8a/0x1c90 [ 72.494327][ T7032] __lock_acquire+0xa6/0x1c90 [ 72.494338][ T7032] lock_acquire+0x179/0x350 [ 72.494348][ T7032] ? __timer_delete_sync+0x145/0x1b0 [ 72.494365][ T7032] ? down_write+0x14d/0x200 [ 72.494381][ T7032] ? __timer_delete_sync+0x145/0x1b0 [ 72.494397][ T7032] __timer_delete_sync+0x152/0x1b0 [ 72.494412][ T7032] ? __timer_delete_sync+0x145/0x1b0 [ 72.494428][ T7032] waveform_detach+0x3e/0x60 [ 72.494439][ T7032] comedi_device_detach+0x140/0x9e0 [ 72.494453][ T7032] ? waveform_common_attach+0x751/0x940 [ 72.494464][ T7032] comedi_device_attach+0x43d/0x900 [ 72.494479][ T7032] do_devconfig_ioctl+0x1a7/0x580 [ 72.494496][ T7032] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 72.494516][ T7032] ? find_held_lock+0x2b/0x80 [ 72.494530][ T7032] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 72.494543][ T7032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.494556][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.494567][ T7032] ? do_vfs_ioctl+0x523/0x1a60 [ 72.494584][ T7032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.494597][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 72.494613][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 72.494629][ T7032] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.494647][ T7032] ? hook_file_ioctl_common+0x145/0x410 [ 72.494659][ T7032] ? selinux_file_ioctl+0x180/0x270 [ 72.494673][ T7032] ? selinux_file_ioctl+0xb4/0x270 [ 72.494687][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.494699][ T7032] __x64_sys_ioctl+0x18e/0x210 [ 72.494711][ T7032] do_syscall_64+0xcd/0x4c0 [ 72.494726][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.494737][ T7032] RIP: 0033:0x7f15c8d8e929 [ 72.494747][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.494758][ T7032] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.494768][ T7032] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 72.494775][ T7032] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 72.494782][ T7032] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 72.494788][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.494794][ T7032] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 72.494803][ T7032] [ 72.581488][ T7032] ------------[ cut here ]------------ [ 72.583303][ T7032] ODEBUG: assert_init not available (active state 0) object: ffff888033a90800 object type: timer_list hint: 0x0 [ 72.587199][ T7032] WARNING: CPU: 2 PID: 7032 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 72.590112][ T7032] Modules linked in: [ 72.591368][ T7032] CPU: 2 UID: 0 PID: 7032 Comm: syz.0.355 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 72.596059][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.600214][ T7032] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 72.602156][ T7032] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 a0 15 8c 4c 89 e6 48 c7 c7 c0 94 15 8c e8 8f 16 99 fc 90 <0f> 0b 90 90 58 83 05 c6 df c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 72.608259][ T7032] RSP: 0018:ffffc900059e77c8 EFLAGS: 00010286 [ 72.610200][ T7032] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817af1a8 [ 72.612780][ T7032] RDX: ffff888058502440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 72.615375][ T7032] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 72.617823][ T7032] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8c159ba0 [ 72.620250][ T7032] R13: ffffffff8baff1c0 R14: 0000000000000000 R15: ffffc900059e7888 [ 72.622644][ T7032] FS: 00007f15c9c816c0(0000) GS:ffff8880d6913000(0000) knlGS:0000000000000000 [ 72.625479][ T7032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.627463][ T7032] CR2: 0000555583387808 CR3: 0000000061674000 CR4: 0000000000352ef0 [ 72.629875][ T7032] Call Trace: [ 72.630970][ T7032] [ 72.631910][ T7032] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 72.633900][ T7032] debug_object_assert_init+0x1ec/0x2f0 [ 72.635734][ T7032] ? __pfx_debug_object_assert_init+0x10/0x10 [ 72.638066][ T7032] ? rcu_is_watching+0x12/0xc0 [ 72.639755][ T7032] __try_to_del_timer_sync+0x7f/0x170 [ 72.641393][ T7032] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 72.643400][ T7032] ? __timer_delete_sync+0x174/0x1b0 [ 72.644993][ T7032] ? __timer_delete_sync+0x17f/0x1b0 [ 72.646607][ T7032] __timer_delete_sync+0xf4/0x1b0 [ 72.648148][ T7032] waveform_detach+0x3e/0x60 [ 72.649550][ T7032] comedi_device_detach+0x140/0x9e0 [ 72.651204][ T7032] ? waveform_common_attach+0x751/0x940 [ 72.652865][ T7032] comedi_device_attach+0x43d/0x900 [ 72.654619][ T7032] do_devconfig_ioctl+0x1a7/0x580 [ 72.656346][ T7032] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 72.658086][ T7032] ? find_held_lock+0x2b/0x80 [ 72.659671][ T7032] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 72.661415][ T7032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.663542][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.665346][ T7032] ? do_vfs_ioctl+0x523/0x1a60 [ 72.666851][ T7032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.668438][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 72.670571][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 72.672592][ T7032] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.674790][ T7032] ? hook_file_ioctl_common+0x145/0x410 [ 72.676516][ T7032] ? selinux_file_ioctl+0x180/0x270 [ 72.678186][ T7032] ? selinux_file_ioctl+0xb4/0x270 [ 72.679915][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.681773][ T7032] __x64_sys_ioctl+0x18e/0x210 [ 72.683419][ T7032] do_syscall_64+0xcd/0x4c0 [ 72.684899][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.686728][ T7032] RIP: 0033:0x7f15c8d8e929 [ 72.688113][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.694207][ T7032] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.696729][ T7032] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 72.699215][ T7032] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 72.701658][ T7032] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 72.704221][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.706741][ T7032] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 72.709822][ T7032] [ 72.711095][ T7032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.713974][ T7032] CPU: 2 UID: 0 PID: 7032 Comm: syz.0.355 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 72.718645][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.722881][ T7032] Call Trace: [ 72.724283][ T7032] [ 72.725511][ T7032] dump_stack_lvl+0x3d/0x1f0 [ 72.727469][ T7032] panic+0x71c/0x800 [ 72.729114][ T7032] ? __pfx_panic+0x10/0x10 [ 72.730926][ T7032] ? show_trace_log_lvl+0x29b/0x3e0 [ 72.733015][ T7032] ? check_panic_on_warn+0x1f/0xb0 [ 72.735057][ T7032] ? debug_print_object+0x1a2/0x2b0 [ 72.737046][ T7032] check_panic_on_warn+0xab/0xb0 [ 72.739039][ T7032] __warn+0xf6/0x3c0 [ 72.740281][ T7032] ? debug_print_object+0x1a2/0x2b0 [ 72.741907][ T7032] report_bug+0x3c3/0x580 [ 72.743306][ T7032] ? debug_print_object+0x1a2/0x2b0 [ 72.744943][ T7032] handle_bug+0x184/0x210 [ 72.746320][ T7032] exc_invalid_op+0x17/0x50 [ 72.747786][ T7032] asm_exc_invalid_op+0x1a/0x20 [ 72.749387][ T7032] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 72.751230][ T7032] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 a0 15 8c 4c 89 e6 48 c7 c7 c0 94 15 8c e8 8f 16 99 fc 90 <0f> 0b 90 90 58 83 05 c6 df c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 72.757016][ T7032] RSP: 0018:ffffc900059e77c8 EFLAGS: 00010286 [ 72.758947][ T7032] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817af1a8 [ 72.761492][ T7032] RDX: ffff888058502440 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 72.764825][ T7032] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 72.767730][ T7032] R10: 0000000000000001 R11: 203a47554245444f R12: ffffffff8c159ba0 [ 72.770238][ T7032] R13: ffffffff8baff1c0 R14: 0000000000000000 R15: ffffc900059e7888 [ 72.772685][ T7032] ? __warn_printk+0x198/0x350 [ 72.774196][ T7032] ? __warn_printk+0x1a5/0x350 [ 72.775709][ T7032] ? debug_print_object+0x1a1/0x2b0 [ 72.777337][ T7032] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 72.779240][ T7032] debug_object_assert_init+0x1ec/0x2f0 [ 72.780884][ T7032] ? __pfx_debug_object_assert_init+0x10/0x10 [ 72.782725][ T7032] ? rcu_is_watching+0x12/0xc0 [ 72.784173][ T7032] __try_to_del_timer_sync+0x7f/0x170 [ 72.785843][ T7032] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 72.787740][ T7032] ? __timer_delete_sync+0x174/0x1b0 [ 72.789475][ T7032] ? __timer_delete_sync+0x17f/0x1b0 [ 72.791127][ T7032] __timer_delete_sync+0xf4/0x1b0 [ 72.792722][ T7032] waveform_detach+0x3e/0x60 [ 72.794183][ T7032] comedi_device_detach+0x140/0x9e0 [ 72.795844][ T7032] ? waveform_common_attach+0x751/0x940 [ 72.797589][ T7032] comedi_device_attach+0x43d/0x900 [ 72.799539][ T7032] do_devconfig_ioctl+0x1a7/0x580 [ 72.801363][ T7032] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 72.803108][ T7032] ? find_held_lock+0x2b/0x80 [ 72.804597][ T7032] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 72.806434][ T7032] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 72.808317][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.810270][ T7032] ? do_vfs_ioctl+0x523/0x1a60 [ 72.811839][ T7032] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 72.813434][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 72.815422][ T7032] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 72.817464][ T7032] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 72.819677][ T7032] ? hook_file_ioctl_common+0x145/0x410 [ 72.821385][ T7032] ? selinux_file_ioctl+0x180/0x270 [ 72.823009][ T7032] ? selinux_file_ioctl+0xb4/0x270 [ 72.824623][ T7032] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 72.826453][ T7032] __x64_sys_ioctl+0x18e/0x210 [ 72.827937][ T7032] do_syscall_64+0xcd/0x4c0 [ 72.829417][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.831251][ T7032] RIP: 0033:0x7f15c8d8e929 [ 72.832686][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.838431][ T7032] RSP: 002b:00007f15c9c81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.841047][ T7032] RAX: ffffffffffffffda RBX: 00007f15c8fb5fa0 RCX: 00007f15c8d8e929 [ 72.843495][ T7032] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 72.845891][ T7032] RBP: 00007f15c9c81090 R08: 0000000000000000 R09: 0000000000000000 [ 72.848358][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.850846][ T7032] R13: 0000000000000000 R14: 00007f15c8fb5fa0 R15: 00007fff04e95238 [ 72.853283][ T7032] [ 72.854863][ T7032] Kernel Offset: disabled [ 72.856187][ T7032] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:13:30 Registers: info registers vcpu 0 CPU#0 RAX=000000000004a2ab RBX=ffff88806a63fe20 RCX=ffffc900077a1000 RDX=0000000000080000 RSI=ffffffff81afd479 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90004367aa8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c7fc5 R15=ffff88806a43b580 RIP=ffffffff81afd47b RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fad0b5ab6c0 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fad0b5aaf98 CR3=000000002753f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a986488 00007fad0a986480 00007fad0a986478 00007fad0a986450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0b4ed100 00007fad0a986440 00007fad0a986458 00007fad0a9864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a986498 00007fad0a986490 00007fad0a986488 00007fad0a986480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000478 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000005ad0c RBX=0000000000000001 RCX=ffffffff8b885c99 RDX=ffffed100d4a6646 RSI=ffffffff8c158ee0 RDI=ffffffff81920e71 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88472255db CR3=0000000034402000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000ffffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557907e730 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557908c120 0000555579089b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557907e4a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557908e777 000055557908e710 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557908e694 000055557908e690 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606041e98001000 05b8820800010000 00080606021e9a00 0400040800068004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040880c5ba920800 0100000408060601 1f9e04100005b982 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000020806 06041e9800100005 b882080001000000 080606021e9a0004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020802c080808002 2008cc002008ac00 0a00040a098c0300 0484000990030004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0138100004800400 10000210000d8004 0100000008060c01 68e200080004b003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0204900004a00300 0490000490031fff fffff40488000488 0302b8c604840004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8403140400048003 f402080d80030fff ffffffffff040880 0401941000060172 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c22808ec00086080 8080020802c08080 80022008cc002008 ac000a00040a098c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000003d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc900059e7378 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3930303835373261 R12=0000000000000000 R13=000000000000003d R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f15c9c816c0 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555583387808 CR3=0000000061674000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583c11df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583d86488 00007f2583d86480 00007f2583d86478 00007f2583d86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25848ed100 00007f2583d86440 00007f2583d80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2583d86498 00007f2583d86490 00007f2583d86488 00007f2583d86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000008c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000044854 RBX=0000000000000003 RCX=ffffffff8b885c99 RDX=ffffed100d4e6646 RSI=ffffffff8c158ee0 RDI=ffffffff81920e71 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f91fffc CR3=000000002753f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c7a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c87 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c81 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811c95 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811d1b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a811df9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a986488 00007fad0a986480 00007fad0a986478 00007fad0a986450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0b4ed100 00007fad0a986440 00007fad0a986458 00007fad0a9864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad0a986498 00007fad0a986490 00007fad0a986488 00007fad0a986480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000478 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000