last executing test programs: 5.059945116s ago: executing program 3 (id=1913): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002340)={'xfrm0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x8c1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}}, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4.660003108s ago: executing program 2 (id=1919): ioperm(0x0, 0x7, 0x40000000000006) getpgid(0x0) 4.609556437s ago: executing program 2 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000007e020cd27bfc0508000000568e8539d516e6372500490d48fb1e274a3f2ee1d31c6dd085341f9b4c22d1b63edd05652211b1be5321aeeb80daa7096a25b68b3130a735b8532bbd62f4abc62bfc7286d56e16b3a200729e4faea07d1f1d4c2c2f36f07e6ab33cadbde50fd70e2cdd3c7f65d7fc68d03af0c299873d68cb33084051", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) (async) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000010ee5deafc90e46173e63d7cf985e0c17ea60c07b823371cabdc4740537d0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000f90000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000f90000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) memfd_secret(0x0) (async) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) eventfd(0x0) (async) r11 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11}) (async) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11}) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000cc0)={0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.519681881s ago: executing program 0 (id=1922): ioperm(0x0, 0x7, 0x40000000000006) getpgid(0x0) (fail_nth: 1) 4.459979842s ago: executing program 2 (id=1923): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) dup2(r0, r1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000403"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.089681862s ago: executing program 0 (id=1925): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 3.010037921s ago: executing program 0 (id=1926): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="23178899e072cd2b9024b61fc54c905622eb07ef7ee973cb34de42b082a9a0bb90b0da25263ebece12c092124bd7151f9d6834c43574318b892717496509", 0x3e}, {&(0x7f00000000c0)="2132c5191cdb780fad3bf4a688b37e9382ff3c83261761d4fc73f9de6d72c9297b3269cc0afecbfdf5f5ce63feb64867856ca826dd4eabf72e222ff37caad2f638ed", 0x42}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 1) 2.609870879s ago: executing program 0 (id=1928): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x680b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r5, 0x409, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xd7, 0x1000, 0x1156, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xc, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) r8 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/549, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000700)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 2.269824493s ago: executing program 1 (id=1929): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="23178899e072cd2b9024b61fc54c905622eb07ef7ee973cb34de42b082a9a0bb90b0da25263ebece12c092124bd7151f9d6834c43574318b892717496509", 0x3e}, {&(0x7f00000000c0)="2132c5191cdb780fad3bf4a688b37e9382ff3c83261761d4fc73f9de6d72c9297b3269cc0afecbfdf5f5ce63feb64867856ca826dd4eabf72e222ff37caad2f638ed", 0x42}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.220435433s ago: executing program 1 (id=1930): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0xce, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xaf) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2.095167503s ago: executing program 1 (id=1931): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10a) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x20000000000000, 0x0, 0x9075a1ce2cf5b136, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xd, @void, @value, @void, @value}, 0x50) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002000)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000001c0)={0xa0, 0x0, r4}, 0xa0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000028000180080006000500000014000400fe800000000000000000000000000000060001000a000000"], 0x3c}}, 0x0) syz_io_uring_setup(0x6511, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(r10, 0x801) dup3(r3, r3, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f00000002c0), &(0x7f00000001c0)) 1.959038639s ago: executing program 3 (id=1932): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100"/12]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x1, 0x109002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x324, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000002200"/32]) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@mcast2, @private1, @private0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x420a0022}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 1.739925873s ago: executing program 3 (id=1933): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0xce, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xaf) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (fail_nth: 1) 1.629928667s ago: executing program 3 (id=1934): prlimit64(0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r0, 0x5}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e5216dd9bb3af3dd63130c4fcecf547a80327f9bd68560407e9b1b9b4bc3c747152d980273a1552511d6382ccf581a9767104421222b663cbee322ecec70e6c5ec4e7706ce13dd8f9521ada18c9bd8e0b03ca93c70f1d980b7ac51c83d597d3d4ab3af332078a003b603eb0a3548e5fd509485d5c4977b25e14a61cb91bbd47aec38517eb196d75567c0bab8f739b85bd052a1c6ca85b8fc4500000000", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRES16=r0, @ANYBLOB="ebcf43402c36eb321bfaf9bba526a233e89dde9b52dce0d4d119f6e4cc2084fb6e4be9c32d497176424f29e2a908789c35c1c232bf6db69569576228567f54f46039d1d6fa7643b84c80ea87b4da90243c4e566c178a5f1e6cb200"/102]) read$FUSE(r2, &(0x7f0000008600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f0000000240)='./file0\x00', 0x8c100, 0x1747d92376032d2e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x20, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)) r7 = syz_open_procfs(r4, &(0x7f0000000100)='net/icmp6\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x8010661b, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x4, 0x8001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1825ed00000000000000000000000000950e961c7b968c00"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) close_range(r9, r10, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r11, r2, 0x0) open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) 1.539840138s ago: executing program 2 (id=1935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x20, 0x28, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000800000000000000000800001865000010000000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000e0000000000000003000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000060000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x7, 0xa0, 0xfffffff8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x3, 0x2, 0xe, 0xc}, {0x4, 0x3, 0xb, 0x9}], 0x10, 0x8, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) fallocate(r1, 0x50, 0x8000000000000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000007e00000000000000000000000000000000ca5076c102b04629a82a5524b20fa38055ecec5fe466c1c331887fa4dd6d2fa0229431fa5ac04567187c16dc01da2e2a506d4c85ca1872c93addb5e8569d93603d10e231754cdd8cddc1c9d022b177099d7db64db77d0f419aff8b83522d67d0334ca2efbcf4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x80) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000010000000000000095000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x6, 0x0) dup3(r2, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000)) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x358, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x358, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x1, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x60}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) msgget$private(0x0, 0x0) msgget(0x1, 0x0) 1.329790784s ago: executing program 0 (id=1936): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="07000000d95b000004000000060e000000000000", @ANYRES64, @ANYBLOB="0000e9000000005e03f44e8926b6e500efbe464857330917ed430265a61bfc0d63f95fb4e36ef1210ed842bdd37c1d138594b81191be31a108b3e822ecc84f01a9c8fa36c4f126e8d57f96c3e135e920cc21788dac10e0918a19aa05722cd3f24a09000bcee2dba621604c4147b5c4bc2cc74166f1b786422b68f8bcecf1230f83529b7ccd6e51fa7802554d33a7b22419d6e961056421de0fd0ae4e15a14b00a1b00bb10000000000000000000000000000000000000000acd8e4059ff09e49c1d90efc60c962bea418d81544f0ad020f821c29b3e5bb2a71da83649662a4b3de68666a7ee0a27e610bd7c5084b7f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x50) listen(r2, 0x3a5) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000)) 939.887124ms ago: executing program 1 (id=1937): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="07000000d95b000004000000060e000000000000", @ANYRES64, @ANYBLOB="0000e9000000005e03f44e8926b6e500efbe464857330917ed430265a61bfc0d63f95fb4e36ef1210ed842bdd37c1d138594b81191be31a108b3e822ecc84f01a9c8fa36c4f126e8d57f96c3e135e920cc21788dac10e0918a19aa05722cd3f24a09000bcee2dba621604c4147b5c4bc2cc74166f1b786422b68f8bcecf1230f83529b7ccd6e51fa7802554d33a7b22419d6e961056421de0fd0ae4e15a14b00a1b00bb10000000000000000000000000000000000000000acd8e4059ff09e49c1d90efc60c962bea418d81544f0ad020f821c29b3e5bb2a71da83649662a4b3de68666a7ee0a27e610bd7c5084b7f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=r1], 0x50) listen(r2, 0x3a5) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000)) (fail_nth: 1) 700.04297ms ago: executing program 3 (id=1938): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="38003300c0000000e7ffffffffff080211000000"], 0x54}}, 0x0) readv(r3, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x408041) syz_emit_ethernet(0x72, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00072c00fe8000000000000000000000000000bbff02000000000000000000000000000167040000000000000718000000000400000000000000000000000000000000000000070800000000000000000000000000000000000c907801000000"], 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0x18b) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00'}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x300) io_setup(0x20, &(0x7f0000001140)) 639.87321ms ago: executing program 2 (id=1939): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="01000000000000000000010000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100000000000000000011"], 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf250100000008000600060000000c00018008000b007369700008000400050000000400018008000600f9000000080005000100000038000180060001000a000000000007000000000030000000060004004e24000005000b0073697000060002002b00000034000180080008000900000014000300ffffffff00000000000000000000000014000300fe80000000000000000000000000001d"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4881) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="07000000d95b000004000000060e000000000000", @ANYRES64, @ANYBLOB="0000e9000000005e03f44e8926b6e500efbe464857330917ed430265a61bfc0d63f95fb4e36ef1210ed842bdd37c1d138594b81191be31a108b3e822ecc84f01a9c8fa36c4f126e8d57f96c3e135e920cc21788dac10e0918a19aa05722cd3f24a09000bcee2dba621604c4147b5c4bc2cc74166f1b786422b68f8bcecf1230f83529b7ccd6e51fa7802554d33a7b22419d6e961056421de0fd0ae4e15a14b00a1b00bb10000000000000000000000000000000000000000acd8e4059ff09e49c1d90efc60c962bea418d81544f0ad020f821c29b3e5bb2a71da83649662a4b3de68666a7ee0a27e610bd7c5084b7f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=r2], 0x50) listen(r3, 0x3a5) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f00000016c0), 0x3af4701e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r5, 0x8924, &(0x7f0000000000)) 420.031328ms ago: executing program 3 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10b406, &(0x7f0000000400)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x64d142, 0x0) mknodat$loop(r1, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1d4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000240)='./file1\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfe3c) dup3(r4, r3, 0x0) 280.179062ms ago: executing program 1 (id=1941): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000005c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100"/12]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x1, 0x109002) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x324, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000002200"/32]) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@mcast2, @private1, @private0, 0xe, 0x0, 0x0, 0x0, 0x2, 0x420a0022}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 164.329908ms ago: executing program 0 (id=1942): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) futex(&(0x7f0000000000)=0x20000000, 0xc, 0xffffffff, 0x0, &(0x7f00000000c0), 0x2) 88.687111ms ago: executing program 1 (id=1943): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r0 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) dup2(r0, r1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000403"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=1944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10b406, &(0x7f0000000400)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x64d142, 0x0) mknodat$loop(r1, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1d4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000240)='./file1\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfe3c) dup3(r4, r3, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): 0xa60 [ 304.777856][T10563] ? __pkru_allows_pkey+0x21/0xb0 [ 304.779241][T10563] do_user_addr_fault+0x60d/0x13f0 [ 304.780617][T10563] exc_page_fault+0x5c/0xc0 [ 304.781875][T10563] asm_exc_page_fault+0x26/0x30 [ 304.783185][T10563] RIP: 0033:0x7fc926f2b22b [ 304.784424][T10563] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 304.789515][T10563] RSP: 002b:00007fc927e02e10 EFLAGS: 00010246 [ 304.791137][T10563] RAX: 00007fc927e04f30 RBX: 00007fc92710b620 RCX: 0000000000000000 [ 304.793239][T10563] RDX: 00007fc927e04f78 RSI: 00007fc926fdc900 RDI: 00007fc927e02e30 [ 304.795379][T10563] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 304.797463][T10563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.799555][T10563] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 304.801661][T10563] [ 304.884625][T10563] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 305.131935][T10579] FAULT_INJECTION: forcing a failure. [ 305.131935][T10579] name failslab, interval 1, probability 0, space 0, times 0 [ 305.174880][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.3.1668 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 305.177634][T10579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.180523][T10579] Call Trace: [ 305.181447][T10579] [ 305.182244][T10579] dump_stack_lvl+0x16c/0x1f0 [ 305.183502][T10579] should_fail_ex+0x497/0x5b0 [ 305.184878][T10579] ? fs_reclaim_acquire+0xae/0x160 [ 305.186254][T10579] should_failslab+0xc2/0x120 [ 305.187503][T10579] __kmalloc_noprof+0xcb/0x400 [ 305.188774][T10579] ? __pfx_lock_acquire+0x10/0x10 [ 305.190121][T10579] tomoyo_realpath_from_path+0xb9/0x720 [ 305.191582][T10579] ? tomoyo_profile+0x47/0x60 [ 305.192840][T10579] tomoyo_path_number_perm+0x245/0x590 [ 305.194278][T10579] ? tomoyo_path_number_perm+0x232/0x590 [ 305.195770][T10579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.197367][T10579] ? __pfx_lock_release+0x10/0x10 [ 305.198681][T10579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.200257][T10579] ? __fget_files+0x244/0x3f0 [ 305.201563][T10579] security_file_ioctl+0x75/0xc0 [ 305.202867][T10579] __x64_sys_ioctl+0xbb/0x210 [ 305.204177][T10579] do_syscall_64+0xcd/0x250 [ 305.205382][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.206932][T10579] RIP: 0033:0x7f35e0b7def9 [ 305.208108][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.213183][T10579] RSP: 002b:00007f35e05ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.215340][T10579] RAX: ffffffffffffffda RBX: 00007f35e0d36058 RCX: 00007f35e0b7def9 [ 305.217427][T10579] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 305.219467][T10579] RBP: 00007f35e05ff090 R08: 0000000000000000 R09: 0000000000000000 [ 305.221515][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.223556][T10579] R13: 0000000000000000 R14: 00007f35e0d36058 R15: 00007ffe78d0fe98 [ 305.225656][T10579] [ 305.241642][T10580] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 305.540092][T10579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.497667][ T39] audit: type=1400 audit(1726519549.034:608): avc: denied { ioctl } for pid=10603 comm="syz.2.1672" path="socket:[46782]" dev="sockfs" ino=46782 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 306.997112][T10614] FAULT_INJECTION: forcing a failure. [ 306.997112][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.010826][T10614] CPU: 0 UID: 0 PID: 10614 Comm: syz.3.1675 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 307.013777][T10614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.016546][T10614] Call Trace: [ 307.017441][T10614] [ 307.018223][T10614] dump_stack_lvl+0x16c/0x1f0 [ 307.019470][T10614] should_fail_ex+0x497/0x5b0 [ 307.020719][T10614] _copy_from_user+0x30/0xf0 [ 307.021958][T10614] copy_msghdr_from_user+0x99/0x160 [ 307.023336][T10614] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 307.024920][T10614] ? __pfx___lock_acquire+0x10/0x10 [ 307.026283][T10614] ___sys_sendmsg+0xff/0x1e0 [ 307.027499][T10614] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.028924][T10614] ? find_held_lock+0x2d/0x110 [ 307.030173][T10614] ? ksys_write+0x21c/0x260 [ 307.031364][T10614] ? __fget_light+0x173/0x210 [ 307.032603][T10614] __sys_sendmsg+0x117/0x1f0 [ 307.033826][T10614] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.035171][T10614] do_syscall_64+0xcd/0x250 [ 307.036347][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.037894][T10614] RIP: 0033:0x7f35e0b7def9 [ 307.039054][T10614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.044034][T10614] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.046291][T10614] RAX: ffffffffffffffda RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 307.048328][T10614] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000003 [ 307.050376][T10614] RBP: 00007f35e189b090 R08: 0000000000000000 R09: 0000000000000000 [ 307.052422][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.054487][T10614] R13: 0000000000000000 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 307.056535][T10614] [ 308.028626][T10641] input: syz0 as /devices/virtual/input/input66 [ 308.334192][T10652] FAULT_INJECTION: forcing a failure. [ 308.334192][T10652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.337610][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.1.1687 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 308.340297][T10652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.343179][T10652] Call Trace: [ 308.344070][T10652] [ 308.344855][T10652] dump_stack_lvl+0x16c/0x1f0 [ 308.346113][T10652] should_fail_ex+0x497/0x5b0 [ 308.347359][T10652] _copy_from_user+0x30/0xf0 [ 308.348576][T10652] move_addr_to_kernel+0x68/0x160 [ 308.349903][T10652] __sys_connect+0xbd/0x170 [ 308.351106][T10652] ? __pfx___sys_connect+0x10/0x10 [ 308.352455][T10652] ? __pfx_ksys_write+0x10/0x10 [ 308.353764][T10652] __x64_sys_connect+0x72/0xb0 [ 308.355088][T10652] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.356445][T10652] do_syscall_64+0xcd/0x250 [ 308.357723][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.359270][T10652] RIP: 0033:0x7fea2bf7def9 [ 308.360446][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.365449][T10652] RSP: 002b:00007fea2cdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 308.367607][T10652] RAX: ffffffffffffffda RBX: 00007fea2c135f80 RCX: 00007fea2bf7def9 [ 308.369671][T10652] RDX: 0000000000000010 RSI: 00000000200000c0 RDI: 0000000000000003 [ 308.371707][T10652] RBP: 00007fea2cdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 308.373854][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.375902][T10652] R13: 0000000000000000 R14: 00007fea2c135f80 R15: 00007ffc645b36d8 [ 308.377985][T10652] [ 308.570103][ T831] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 308.751805][ T831] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 308.754825][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.758440][ T831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.766846][ T831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 308.776014][ T831] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 308.778485][ T831] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 308.784264][ T831] usb 7-1: Manufacturer: syz [ 308.791547][ T831] usb 7-1: config 0 descriptor?? [ 309.000889][ T39] audit: type=1400 audit(1726519551.534:609): avc: denied { ioctl } for pid=10643 comm="syz.2.1684" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 309.035853][ T831] usbhid 7-1:0.0: can't add hid device: -71 [ 309.037608][ T831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 309.045109][ T831] usb 7-1: USB disconnect, device number 26 [ 309.711194][T10684] FAULT_INJECTION: forcing a failure. [ 309.711194][T10684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.714618][T10684] CPU: 0 UID: 0 PID: 10684 Comm: syz.1.1695 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 309.717463][T10684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.720240][T10684] Call Trace: [ 309.721127][T10684] [ 309.721902][T10684] dump_stack_lvl+0x16c/0x1f0 [ 309.723146][T10684] should_fail_ex+0x497/0x5b0 [ 309.724394][T10684] _copy_from_user+0x30/0xf0 [ 309.725630][T10684] copy_msghdr_from_user+0x99/0x160 [ 309.726996][T10684] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 309.728522][T10684] ? find_held_lock+0x2d/0x110 [ 309.729800][T10684] ___sys_recvmsg+0xdc/0x1a0 [ 309.731025][T10684] ? __pfx____sys_recvmsg+0x10/0x10 [ 309.732467][T10684] ? __fget_light+0x173/0x210 [ 309.733729][T10684] __sys_recvmsg+0x114/0x1e0 [ 309.734952][T10684] ? __pfx___sys_recvmsg+0x10/0x10 [ 309.736315][T10684] do_syscall_64+0xcd/0x250 [ 309.737528][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.739076][T10684] RIP: 0033:0x7fea2bf7def9 [ 309.740250][T10684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.745221][T10684] RSP: 002b:00007fea2cdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 309.747425][T10684] RAX: ffffffffffffffda RBX: 00007fea2c135f80 RCX: 00007fea2bf7def9 [ 309.749490][T10684] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 309.751544][T10684] RBP: 00007fea2cdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 309.753612][T10684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.755697][T10684] R13: 0000000000000000 R14: 00007fea2c135f80 R15: 00007ffc645b36d8 [ 309.757767][T10684] [ 310.024613][ T39] audit: type=1400 audit(1726519552.564:610): avc: denied { write } for pid=10689 comm="syz.1.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 310.046720][T10690] FAULT_INJECTION: forcing a failure. [ 310.046720][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 310.063905][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.1.1698 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 310.066650][T10690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.069449][T10690] Call Trace: [ 310.070343][T10690] [ 310.071123][T10690] dump_stack_lvl+0x16c/0x1f0 [ 310.072369][T10690] should_fail_ex+0x497/0x5b0 [ 310.073632][T10690] ? fs_reclaim_acquire+0xae/0x160 [ 310.074981][T10690] should_failslab+0xc2/0x120 [ 310.076297][T10690] __kmalloc_noprof+0xcb/0x400 [ 310.077571][T10690] ? __pfx_lock_acquire+0x10/0x10 [ 310.078904][T10690] tomoyo_realpath_from_path+0xb9/0x720 [ 310.080365][T10690] ? tomoyo_profile+0x47/0x60 [ 310.081620][T10690] tomoyo_path_perm+0x273/0x450 [ 310.082908][T10690] ? tomoyo_path_perm+0x25f/0x450 [ 310.084245][T10690] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 310.085697][T10690] security_file_truncate+0x65/0xb0 [ 310.087200][T10690] do_ftruncate+0x302/0x720 [ 310.088436][T10690] __x64_sys_ftruncate+0xa9/0x110 [ 310.089828][T10690] do_syscall_64+0xcd/0x250 [ 310.091134][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.092730][T10690] RIP: 0033:0x7fea2bf7def9 [ 310.093930][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.099007][T10690] RSP: 002b:00007fea2cdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 310.101210][T10690] RAX: ffffffffffffffda RBX: 00007fea2c135f80 RCX: 00007fea2bf7def9 [ 310.103295][T10690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 310.105385][T10690] RBP: 00007fea2cdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 310.107526][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.109594][T10690] R13: 0000000000000000 R14: 00007fea2c135f80 R15: 00007ffc645b36d8 [ 310.111670][T10690] [ 310.161356][T10691] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 310.203678][T10691] fuse: Bad value for 'fd' [ 310.204975][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 310.241884][T10690] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.631707][ T39] audit: type=1400 audit(1726519553.174:611): avc: denied { mounton } for pid=10701 comm="syz.1.1701" path="/376/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.639502][T10702] overlayfs: statfs failed on './file0' [ 310.861321][T10709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.863304][T10709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.879602][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 310.978970][T10711] fuse: Unknown parameter '0x0000000000000003' [ 310.985599][T10713] FAULT_INJECTION: forcing a failure. [ 310.985599][T10713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.988998][T10713] CPU: 0 UID: 0 PID: 10713 Comm: syz.2.1706 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 310.991691][T10713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.994568][T10713] Call Trace: [ 310.995454][T10713] [ 310.996238][T10713] dump_stack_lvl+0x16c/0x1f0 [ 310.997569][T10713] should_fail_ex+0x497/0x5b0 [ 310.998819][T10713] _copy_from_user+0x30/0xf0 [ 311.000043][T10713] copy_msghdr_from_user+0x99/0x160 [ 311.001415][T10713] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 311.002951][T10713] ? __pfx___lock_acquire+0x10/0x10 [ 311.004320][T10713] ___sys_sendmsg+0xff/0x1e0 [ 311.005549][T10713] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.006915][T10713] ? find_held_lock+0x2d/0x110 [ 311.008173][T10713] ? ksys_write+0x21c/0x260 [ 311.009383][T10713] ? __fget_light+0x173/0x210 [ 311.010626][T10713] __sys_sendmsg+0x117/0x1f0 [ 311.011843][T10713] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.013252][T10713] do_syscall_64+0xcd/0x250 [ 311.014451][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.016009][T10713] RIP: 0033:0x7fc926f7def9 [ 311.017199][T10713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.022170][T10713] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.024328][T10713] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 311.026389][T10713] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 311.028459][T10713] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 311.030523][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.032587][T10713] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 311.034646][T10713] [ 311.349451][ T39] audit: type=1400 audit(1726519553.884:612): avc: denied { read } for pid=10726 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.354768][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 311.423782][T10730] FAULT_INJECTION: forcing a failure. [ 311.423782][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 311.455943][T10730] CPU: 0 UID: 0 PID: 10730 Comm: syz.2.1710 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 311.458724][T10730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.461614][T10730] Call Trace: [ 311.462497][T10730] [ 311.463282][T10730] dump_stack_lvl+0x16c/0x1f0 [ 311.464556][T10730] should_fail_ex+0x497/0x5b0 [ 311.465840][T10730] ? fs_reclaim_acquire+0xae/0x160 [ 311.467218][T10730] should_failslab+0xc2/0x120 [ 311.468464][T10730] __kmalloc_noprof+0xcb/0x400 [ 311.469747][T10730] ? __pfx_lock_acquire+0x10/0x10 [ 311.471141][T10730] tomoyo_realpath_from_path+0xb9/0x720 [ 311.472630][T10730] ? tomoyo_profile+0x47/0x60 [ 311.473914][T10730] tomoyo_path_number_perm+0x245/0x590 [ 311.475350][T10730] ? tomoyo_path_number_perm+0x232/0x590 [ 311.476825][T10730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 311.478451][T10730] ? __pfx_lock_release+0x10/0x10 [ 311.479785][T10730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.481693][T10730] ? __fget_files+0x244/0x3f0 [ 311.482952][T10730] security_file_ioctl+0x75/0xc0 [ 311.484280][T10730] __x64_sys_ioctl+0xbb/0x210 [ 311.485584][T10730] do_syscall_64+0xcd/0x250 [ 311.486791][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.488362][T10730] RIP: 0033:0x7fc926f7def9 [ 311.489566][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.494629][T10730] RSP: 002b:00007fc927dc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.496911][T10730] RAX: ffffffffffffffda RBX: 00007fc927136130 RCX: 00007fc926f7def9 [ 311.499047][T10730] RDX: 0000000020000040 RSI: 0000000040086603 RDI: 0000000000000003 [ 311.501125][T10730] RBP: 00007fc927dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 311.503207][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.505327][T10730] R13: 0000000000000000 R14: 00007fc927136130 R15: 00007ffc834efab8 [ 311.507401][T10730] [ 311.771452][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1711'. [ 311.926879][T10730] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.154063][ T39] audit: type=1400 audit(1726519554.694:613): avc: denied { watch_reads } for pid=10738 comm="syz.3.1712" path="/425/bus" dev="overlay" ino=2288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 312.610095][ T831] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 312.664211][ T39] audit: type=1400 audit(1726519555.204:614): avc: denied { getopt } for pid=10754 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.790993][ T831] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 312.793978][ T831] usb 7-1: config 0 has no interfaces? [ 312.796226][ T831] usb 7-1: config 0 has no interfaces? [ 312.798465][ T831] usb 7-1: config 0 has no interfaces? [ 312.801079][ T831] usb 7-1: config 0 has no interfaces? [ 312.803357][ T831] usb 7-1: config 0 has no interfaces? [ 312.805584][ T831] usb 7-1: config 0 has no interfaces? [ 312.807989][ T831] usb 7-1: config 0 has no interfaces? [ 312.812257][ T831] usb 7-1: config 0 has no interfaces? [ 312.822132][ T831] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 312.824497][ T831] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 312.837038][ T831] usb 7-1: Product: syz [ 312.838201][ T831] usb 7-1: Manufacturer: syz [ 312.839410][ T831] usb 7-1: SerialNumber: syz [ 312.848477][ T831] usb 7-1: config 0 descriptor?? [ 313.022792][ T10] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 313.055448][T10750] FAULT_INJECTION: forcing a failure. [ 313.055448][T10750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.059190][T10750] CPU: 0 UID: 0 PID: 10750 Comm: syz.2.1714 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 313.061970][T10750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.064774][T10750] Call Trace: [ 313.065672][T10750] [ 313.066454][T10750] dump_stack_lvl+0x16c/0x1f0 [ 313.067702][T10750] should_fail_ex+0x497/0x5b0 [ 313.068956][T10750] _copy_from_user+0x30/0xf0 [ 313.070177][T10750] do_ipv6_setsockopt+0x97d/0x4790 [ 313.071547][T10750] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 313.073021][T10750] ? find_held_lock+0x2d/0x110 [ 313.074340][T10750] ? lock_acquire+0x1b1/0x560 [ 313.075654][T10750] ? __mutex_trylock_common+0xea/0x250 [ 313.077079][T10750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 313.078624][T10750] ? rcu_is_watching+0x12/0xc0 [ 313.079889][T10750] ? trace_contention_end+0xea/0x140 [ 313.081285][T10750] ? __mutex_lock+0x1a6/0x9c0 [ 313.082521][T10750] ? __lock_acquire+0xbdd/0x3cb0 [ 313.083831][T10750] ? smc_setsockopt+0x101/0xa00 [ 313.085123][T10750] ? ipv6_setsockopt+0xcb/0x170 [ 313.086409][T10750] ipv6_setsockopt+0xcb/0x170 [ 313.087664][T10750] tcp_setsockopt+0xa4/0x100 [ 313.088890][T10750] smc_setsockopt+0x1b4/0xa00 [ 313.090126][T10750] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 313.091728][T10750] ? __pfx_smc_setsockopt+0x10/0x10 [ 313.093111][T10750] ? selinux_socket_setsockopt+0x6a/0x80 [ 313.094580][T10750] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 313.096030][T10750] ? __pfx_smc_setsockopt+0x10/0x10 [ 313.097409][T10750] do_sock_setsockopt+0x222/0x480 [ 313.098754][T10750] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 313.100206][T10750] ? __fget_files+0x244/0x3f0 [ 313.101467][T10750] ? __fget_light+0x173/0x210 [ 313.102688][T10750] __sys_setsockopt+0x1a4/0x270 [ 313.103974][T10750] ? __pfx___sys_setsockopt+0x10/0x10 [ 313.105384][T10750] ? fput+0x30/0x390 [ 313.106421][T10750] ? ksys_write+0x1ab/0x260 [ 313.107664][T10750] ? __pfx_ksys_write+0x10/0x10 [ 313.108981][T10750] __x64_sys_setsockopt+0xbd/0x160 [ 313.110328][T10750] ? do_syscall_64+0x91/0x250 [ 313.111561][T10750] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.112947][T10750] do_syscall_64+0xcd/0x250 [ 313.114146][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.115701][T10750] RIP: 0033:0x7fc926f7def9 [ 313.116883][T10750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.121885][T10750] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.124341][T10750] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 313.126439][T10750] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 313.128518][T10750] RBP: 00007fc927e05090 R08: 0000000000000020 R09: 0000000000000000 [ 313.130598][T10750] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 313.132678][T10750] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 313.134758][T10750] [ 313.238474][ T831] usb 7-1: USB disconnect, device number 27 [ 313.263890][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 313.272154][ T10] usb 8-1: config 0 has no interfaces? [ 313.274421][ T10] usb 8-1: config 0 has no interfaces? [ 313.276640][ T10] usb 8-1: config 0 has no interfaces? [ 313.278815][ T10] usb 8-1: config 0 has no interfaces? [ 313.281385][ T10] usb 8-1: config 0 has no interfaces? [ 313.283678][ T10] usb 8-1: config 0 has no interfaces? [ 313.285947][ T10] usb 8-1: config 0 has no interfaces? [ 313.288287][ T10] usb 8-1: config 0 has no interfaces? [ 313.291955][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 313.303996][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 313.307714][ T10] usb 8-1: Product: syz [ 313.308843][ T10] usb 8-1: Manufacturer: syz [ 313.326787][ T10] usb 8-1: SerialNumber: syz [ 313.329365][ T10] usb 8-1: config 0 descriptor?? [ 313.561264][ T39] audit: type=1400 audit(1726519556.104:615): avc: denied { name_bind } for pid=10756 comm="syz.3.1717" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 313.574338][ T5374] usb 8-1: USB disconnect, device number 30 [ 313.670104][ T831] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 313.854613][ T831] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 313.857695][ T831] usb 7-1: config 0 has no interfaces? [ 313.860435][ T831] usb 7-1: config 0 has no interfaces? [ 313.862709][ T831] usb 7-1: config 0 has no interfaces? [ 313.865034][ T831] usb 7-1: config 0 has no interfaces? [ 313.867460][ T831] usb 7-1: config 0 has no interfaces? [ 313.870905][ T831] usb 7-1: config 0 has no interfaces? [ 313.878513][ T831] usb 7-1: config 0 has no interfaces? [ 313.883413][ T831] usb 7-1: config 0 has no interfaces? [ 313.886559][ T831] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 313.895582][ T831] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 313.897785][ T831] usb 7-1: Product: syz [ 313.898895][ T831] usb 7-1: Manufacturer: syz [ 313.910647][ T831] usb 7-1: SerialNumber: syz [ 313.916293][ T831] usb 7-1: config 0 descriptor?? [ 314.172000][ T831] usb 7-1: USB disconnect, device number 28 [ 314.350612][T10780] FAULT_INJECTION: forcing a failure. [ 314.350612][T10780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.381172][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.0.1723 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 314.383930][T10780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.386727][T10780] Call Trace: [ 314.387614][T10780] [ 314.388487][T10780] dump_stack_lvl+0x16c/0x1f0 [ 314.389747][T10780] should_fail_ex+0x497/0x5b0 [ 314.390998][T10780] _copy_from_user+0x30/0xf0 [ 314.392230][T10780] copy_msghdr_from_user+0x99/0x160 [ 314.393613][T10780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 314.395138][T10780] ? __pfx___lock_acquire+0x10/0x10 [ 314.396514][T10780] ___sys_sendmsg+0xff/0x1e0 [ 314.397759][T10780] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.399140][T10780] ? find_held_lock+0x2d/0x110 [ 314.400426][T10780] ? __pfx_lock_release+0x10/0x10 [ 314.401780][T10780] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 314.403280][T10780] ? __fget_light+0x173/0x210 [ 314.404577][T10780] __sys_sendmmsg+0x1a1/0x450 [ 314.405846][T10780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 314.407219][T10780] ? vfs_write+0x14d/0x1140 [ 314.408427][T10780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.410013][T10780] ? fput+0x30/0x390 [ 314.411056][T10780] ? ksys_write+0x1ab/0x260 [ 314.412252][T10780] ? __pfx_ksys_write+0x10/0x10 [ 314.413557][T10780] __x64_sys_sendmmsg+0x9c/0x100 [ 314.414874][T10780] ? lockdep_hardirqs_on+0x7c/0x110 [ 314.416249][T10780] do_syscall_64+0xcd/0x250 [ 314.417470][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.419065][T10780] RIP: 0033:0x7fe24bd7def9 [ 314.420263][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.425282][T10780] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.427466][T10780] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 314.429543][T10780] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000005 [ 314.431602][T10780] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 314.433682][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.435802][T10780] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 314.437895][T10780] [ 314.609303][ T39] audit: type=1400 audit(1726519557.144:616): avc: denied { getopt } for pid=10784 comm="syz.1.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 315.075263][ T39] audit: type=1400 audit(1726519557.614:617): avc: denied { bind } for pid=10790 comm="syz.2.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 315.404200][T10803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10803 comm=syz.3.1731 [ 315.416213][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1731'. [ 315.643938][T10810] loop7: detected capacity change from 0 to 16384 [ 315.890228][T10811] loop7: detected capacity change from 16384 to 16383 [ 317.053138][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054677][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.199769][ C0] sched: RT throttling activated [ 320.107043][T10844] FAULT_INJECTION: forcing a failure. [ 320.107043][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.128947][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.0.1742 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 320.131685][T10844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.134515][T10844] Call Trace: [ 320.135412][T10844] [ 320.136204][T10844] dump_stack_lvl+0x16c/0x1f0 [ 320.137464][T10844] should_fail_ex+0x497/0x5b0 [ 320.138802][T10844] copy_fpstate_to_sigframe+0x812/0xaa0 [ 320.140263][T10844] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 320.141872][T10844] ? __pfx_lock_acquire+0x10/0x10 [ 320.143202][T10844] ? do_raw_spin_unlock+0x172/0x230 [ 320.144564][T10844] ? do_raw_spin_lock+0x12d/0x2c0 [ 320.145887][T10844] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.147286][T10844] ? find_held_lock+0x2d/0x110 [ 320.148545][T10844] get_sigframe+0x455/0x930 [ 320.149755][T10844] ? __pfx_get_sigframe+0x10/0x10 [ 320.151072][T10844] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.152486][T10844] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.153921][T10844] ? siginfo_layout+0x177/0x290 [ 320.155212][T10844] x64_setup_rt_frame+0x129/0xce0 [ 320.156544][T10844] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 320.158009][T10844] arch_do_signal_or_restart+0x5e6/0x7e0 [ 320.159535][T10844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.161154][T10844] ? ksys_write+0x1ab/0x260 [ 320.162348][T10844] ? __pfx_ksys_write+0x10/0x10 [ 320.163632][T10844] syscall_exit_to_user_mode+0x150/0x2a0 [ 320.165109][T10844] do_syscall_64+0xda/0x250 [ 320.166310][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.167868][T10844] RIP: 0033:0x7fe24bd7def7 [ 320.169121][T10844] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 320.174123][T10844] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 320.176282][T10844] RAX: 0000000000000116 RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 320.178329][T10844] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 320.180384][T10844] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 320.182435][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.184486][T10844] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 320.186607][T10844] [ 320.698781][ T5374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 320.714430][T10861] FAULT_INJECTION: forcing a failure. [ 320.714430][T10861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.724867][ T5374] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 320.740846][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.1.1746 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 320.743505][T10861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.746142][T10861] Call Trace: [ 320.746959][T10861] [ 320.747773][T10861] dump_stack_lvl+0x16c/0x1f0 [ 320.748945][T10861] should_fail_ex+0x497/0x5b0 [ 320.750104][T10861] _copy_to_user+0x30/0xc0 [ 320.751187][T10861] uhid_char_read+0x4a0/0x760 [ 320.752382][T10861] ? __pfx_uhid_char_read+0x10/0x10 [ 320.753704][T10861] ? avc_policy_seqno+0x9/0x20 [ 320.754931][T10861] ? selinux_file_permission+0x11f/0x580 [ 320.756337][T10861] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.757801][T10861] ? bpf_lsm_file_permission+0x9/0x10 [ 320.759175][T10861] ? security_file_permission+0x98/0xc0 [ 320.760563][T10861] ? __pfx_uhid_char_read+0x10/0x10 [ 320.761845][T10861] vfs_readv+0x6bf/0x890 [ 320.762932][T10861] ? __pfx_vfs_readv+0x10/0x10 [ 320.764129][T10861] ? __fget_files+0x23a/0x3f0 [ 320.765308][T10861] ? do_readv+0x287/0x370 [ 320.766380][T10861] do_readv+0x287/0x370 [ 320.767409][T10861] ? __pfx_do_readv+0x10/0x10 [ 320.768607][T10861] do_syscall_64+0xcd/0x250 [ 320.769753][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.771224][T10861] RIP: 0033:0x7fea2bf7def9 [ 320.772360][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.777083][T10861] RSP: 002b:00007fea2cd6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 320.779177][T10861] RAX: ffffffffffffffda RBX: 00007fea2c136130 RCX: 00007fea2bf7def9 [ 320.781065][T10861] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000009 [ 320.782977][T10861] RBP: 00007fea2cd6d090 R08: 0000000000000000 R09: 0000000000000000 [ 320.784835][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.786743][T10861] R13: 0000000000000000 R14: 00007fea2c136130 R15: 00007ffc645b36d8 [ 320.788718][T10861] [ 321.279241][ T5374] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 321.286840][ T5374] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 321.733029][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 321.736079][ T10] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 322.919380][T10895] FAULT_INJECTION: forcing a failure. [ 322.919380][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 322.937795][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.1.1755 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 322.940605][T10895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.943468][T10895] Call Trace: [ 322.944376][T10895] [ 322.945192][T10895] dump_stack_lvl+0x16c/0x1f0 [ 322.946467][T10895] should_fail_ex+0x497/0x5b0 [ 322.947742][T10895] ? fs_reclaim_acquire+0xae/0x160 [ 322.949136][T10895] should_failslab+0xc2/0x120 [ 322.950487][T10895] __kmalloc_cache_noprof+0x6b/0x300 [ 322.951921][T10895] ? ovl_iterate+0x7b5/0xe40 [ 322.953196][T10895] ovl_iterate+0x7b5/0xe40 [ 322.954407][T10895] ? down_read_killable+0xcc/0x380 [ 322.955790][T10895] ? __pfx_down_read_killable+0x10/0x10 [ 322.957288][T10895] ? __pfx_ovl_iterate+0x10/0x10 [ 322.958631][T10895] wrap_directory_iterator+0x9f/0xe0 [ 322.960049][T10895] iterate_dir+0x52f/0xb40 [ 322.961259][T10895] __x64_sys_getdents64+0x14f/0x2e0 [ 322.962655][T10895] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 322.964174][T10895] ? __pfx_filldir64+0x10/0x10 [ 322.965472][T10895] do_syscall_64+0xcd/0x250 [ 322.966762][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.968343][T10895] RIP: 0033:0x7fea2bf7def9 [ 322.969552][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.974655][T10895] RSP: 002b:00007fea2cd8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 322.976873][T10895] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 322.978973][T10895] RDX: 0000000000000069 RSI: 0000000020000180 RDI: 000000000000000b [ 322.981077][T10895] RBP: 00007fea2cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.983217][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.985328][T10895] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 322.987442][T10895] [ 323.484871][T10900] overlay: Unknown parameter 'obj_type' [ 323.939646][T10904] netlink: 'syz.3.1757': attribute type 4 has an invalid length. [ 324.185362][T10917] FAULT_INJECTION: forcing a failure. [ 324.185362][T10917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.188759][T10917] CPU: 0 UID: 0 PID: 10917 Comm: syz.0.1759 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 324.191466][T10917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.194274][T10917] Call Trace: [ 324.195158][T10917] [ 324.195952][T10917] dump_stack_lvl+0x16c/0x1f0 [ 324.197210][T10917] should_fail_ex+0x497/0x5b0 [ 324.198462][T10917] _copy_from_user+0x30/0xf0 [ 324.199698][T10917] __sys_bpf+0x21c/0x49c0 [ 324.200928][T10917] ? ksys_write+0x21c/0x260 [ 324.202136][T10917] ? reacquire_held_locks+0x480/0x4c0 [ 324.203554][T10917] ? __pfx___sys_bpf+0x10/0x10 [ 324.204834][T10917] ? vfs_write+0x14d/0x1140 [ 324.206037][T10917] ? __mutex_unlock_slowpath+0x164/0x650 [ 324.207514][T10917] ? fput+0x30/0x390 [ 324.208553][T10917] ? ksys_write+0x1ab/0x260 [ 324.209775][T10917] ? __pfx_ksys_write+0x10/0x10 [ 324.211070][T10917] __x64_sys_bpf+0x78/0xc0 [ 324.212250][T10917] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.213642][T10917] do_syscall_64+0xcd/0x250 [ 324.214843][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.216454][T10917] RIP: 0033:0x7fe24bd7def9 [ 324.217645][T10917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.222626][T10917] RSP: 002b:00007fe24caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.224810][T10917] RAX: ffffffffffffffda RBX: 00007fe24bf36058 RCX: 00007fe24bd7def9 [ 324.226870][T10917] RDX: 0000000000000040 RSI: 0000000020000240 RDI: 000000000000001c [ 324.228933][T10917] RBP: 00007fe24caba090 R08: 0000000000000000 R09: 0000000000000000 [ 324.231002][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.233193][T10917] R13: 0000000000000000 R14: 00007fe24bf36058 R15: 00007ffc42d64068 [ 324.235272][T10917] [ 325.025990][T10930] can0: slcan on ttyS3. [ 325.121172][T10933] FAULT_INJECTION: forcing a failure. [ 325.121172][T10933] name failslab, interval 1, probability 0, space 0, times 0 [ 325.124607][T10933] CPU: 0 UID: 0 PID: 10933 Comm: syz.1.1765 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 325.127292][T10933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.130074][T10933] Call Trace: [ 325.130955][T10933] [ 325.131737][T10933] dump_stack_lvl+0x16c/0x1f0 [ 325.132991][T10933] should_fail_ex+0x497/0x5b0 [ 325.134240][T10933] ? fs_reclaim_acquire+0xae/0x160 [ 325.135593][T10933] should_failslab+0xc2/0x120 [ 325.136836][T10933] __kmalloc_noprof+0xcb/0x400 [ 325.138309][T10933] ? __pfx_lock_acquire+0x10/0x10 [ 325.139671][T10933] tomoyo_realpath_from_path+0xb9/0x720 [ 325.141165][T10933] ? tomoyo_profile+0x47/0x60 [ 325.142434][T10933] tomoyo_path_number_perm+0x245/0x590 [ 325.143894][T10933] ? tomoyo_path_number_perm+0x232/0x590 [ 325.145398][T10933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.147001][T10933] ? __pfx_lock_release+0x10/0x10 [ 325.148346][T10933] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.149939][T10933] ? __fget_files+0x244/0x3f0 [ 325.151185][T10933] security_file_ioctl+0x75/0xc0 [ 325.152521][T10933] __x64_sys_ioctl+0xbb/0x210 [ 325.153879][T10933] do_syscall_64+0xcd/0x250 [ 325.155075][T10933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.156619][T10933] RIP: 0033:0x7fea2bf7def9 [ 325.157814][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.162810][T10933] RSP: 002b:00007fea2cd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.164985][T10933] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 325.167035][T10933] RDX: 000000002000000c RSI: 0000000000004b49 RDI: 0000000000000003 [ 325.169123][T10933] RBP: 00007fea2cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.171224][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.173322][T10933] R13: 0000000000000001 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 325.175414][T10933] [ 325.304823][T10933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.310317][T10930] can0 (unregistered): slcan off ttyS3. [ 326.033507][ T5374] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 326.037452][ T5374] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 326.077205][ T39] audit: type=1400 audit(1726519568.614:618): avc: denied { unlink } for pid=10959 comm="syz.1.1773" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 326.141029][ T831] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.144217][ T831] hid-generic 0000:0000:0000.0006: hidraw2: HID v0.00 Device [syz0] on syz0 [ 326.146931][T10961] FAULT_INJECTION: forcing a failure. [ 326.146931][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.233394][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.0.1772 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 326.236110][T10961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.238898][T10961] Call Trace: [ 326.239785][T10961] [ 326.240577][T10961] dump_stack_lvl+0x16c/0x1f0 [ 326.241835][T10961] should_fail_ex+0x497/0x5b0 [ 326.243085][T10961] _copy_from_user+0x30/0xf0 [ 326.244307][T10961] uhid_char_write+0x190/0x10b0 [ 326.245593][T10961] ? rw_verify_area+0xd0/0x700 [ 326.246846][T10961] ? __pfx_uhid_char_write+0x10/0x10 [ 326.248296][T10961] vfs_writev+0x6da/0xdd0 [ 326.249453][T10961] ? __pfx_vfs_writev+0x10/0x10 [ 326.250725][T10961] ? __fget_files+0x23a/0x3f0 [ 326.251982][T10961] ? do_writev+0x287/0x370 [ 326.253175][T10961] do_writev+0x287/0x370 [ 326.254285][T10961] ? __pfx_do_writev+0x10/0x10 [ 326.255544][T10961] do_syscall_64+0xcd/0x250 [ 326.256744][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.258281][T10961] RIP: 0033:0x7fe24bd7def9 [ 326.259449][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.264503][T10961] RSP: 002b:00007fe24caba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 326.266666][T10961] RAX: ffffffffffffffda RBX: 00007fe24bf36058 RCX: 00007fe24bd7def9 [ 326.268729][T10961] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 000000000000000a [ 326.270777][T10961] RBP: 00007fe24caba090 R08: 0000000000000000 R09: 0000000000000000 [ 326.272844][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.274887][T10961] R13: 0000000000000000 R14: 00007fe24bf36058 R15: 00007ffc42d64068 [ 326.276956][T10961] [ 326.323429][ T831] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 326.330281][ T831] hid-generic 0000:0000:0000.0007: hidraw3: HID v0.00 Device [syz0] on syz0 [ 326.896986][ T7799] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 327.142730][T10990] FAULT_INJECTION: forcing a failure. [ 327.142730][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.166803][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.3.1780 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 327.169621][T10990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.172431][T10990] Call Trace: [ 327.173331][T10990] [ 327.174221][T10990] dump_stack_lvl+0x16c/0x1f0 [ 327.175478][T10990] should_fail_ex+0x497/0x5b0 [ 327.176757][T10990] _copy_from_user+0x30/0xf0 [ 327.177999][T10990] move_addr_to_kernel+0x68/0x160 [ 327.179340][T10990] __sys_connect+0xbd/0x170 [ 327.180552][T10990] ? __pfx___sys_connect+0x10/0x10 [ 327.181913][T10990] ? __pfx_ksys_write+0x10/0x10 [ 327.183207][T10990] __x64_sys_connect+0x72/0xb0 [ 327.184468][T10990] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.185952][T10990] do_syscall_64+0xcd/0x250 [ 327.187158][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.188731][T10990] RIP: 0033:0x7f35e0b7def9 [ 327.189910][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.195235][T10990] RSP: 002b:00007f35e05ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 327.197421][T10990] RAX: ffffffffffffffda RBX: 00007f35e0d36058 RCX: 00007f35e0b7def9 [ 327.199498][T10990] RDX: 000000000000001c RSI: 0000000020000000 RDI: 000000000000000a [ 327.201626][T10990] RBP: 00007f35e05ff090 R08: 0000000000000000 R09: 0000000000000000 [ 327.203701][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.205774][T10990] R13: 0000000000000000 R14: 00007f35e0d36058 R15: 00007ffe78d0fe98 [ 327.207852][T10990] [ 328.193072][T11013] FAULT_INJECTION: forcing a failure. [ 328.193072][T11013] name failslab, interval 1, probability 0, space 0, times 0 [ 328.196325][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.2.1788 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 328.199033][T11013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.201872][T11013] Call Trace: [ 328.202757][T11013] [ 328.203544][T11013] dump_stack_lvl+0x16c/0x1f0 [ 328.204795][T11013] should_fail_ex+0x497/0x5b0 [ 328.206046][T11013] ? fs_reclaim_acquire+0xae/0x160 [ 328.207400][T11013] should_failslab+0xc2/0x120 [ 328.208754][T11013] __kmalloc_noprof+0xcb/0x400 [ 328.210022][T11013] ? __pfx_lock_acquire+0x10/0x10 [ 328.211358][T11013] tomoyo_realpath_from_path+0xb9/0x720 [ 328.212826][T11013] ? tomoyo_profile+0x47/0x60 [ 328.214063][T11013] tomoyo_path_number_perm+0x245/0x590 [ 328.215482][T11013] ? tomoyo_path_number_perm+0x232/0x590 [ 328.216966][T11013] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.218551][T11013] ? __pfx_lock_release+0x10/0x10 [ 328.219869][T11013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.221449][T11013] ? __fget_files+0x244/0x3f0 [ 328.222688][T11013] security_file_ioctl+0x75/0xc0 [ 328.224063][T11013] __x64_sys_ioctl+0xbb/0x210 [ 328.225345][T11013] do_syscall_64+0xcd/0x250 [ 328.226552][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.228099][T11013] RIP: 0033:0x7fc926f7def9 [ 328.229281][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.235071][T11013] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.237232][T11013] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 328.239288][T11013] RDX: 0000000000000000 RSI: 0000000000007002 RDI: 0000000000000003 [ 328.241397][T11013] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 328.243444][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.245491][T11013] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 328.247556][T11013] [ 328.305296][T11013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.830193][T11030] FAULT_INJECTION: forcing a failure. [ 328.830193][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 328.843591][T11030] CPU: 0 UID: 0 PID: 11030 Comm: syz.2.1793 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 328.846338][T11030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.849137][T11030] Call Trace: [ 328.850027][T11030] [ 328.850812][T11030] dump_stack_lvl+0x16c/0x1f0 [ 328.852069][T11030] should_fail_ex+0x497/0x5b0 [ 328.853337][T11030] ? fs_reclaim_acquire+0xae/0x160 [ 328.854697][T11030] should_failslab+0xc2/0x120 [ 328.855944][T11030] __kmalloc_noprof+0xcb/0x400 [ 328.857220][T11030] ? __pfx_lock_acquire+0x10/0x10 [ 328.858560][T11030] tomoyo_realpath_from_path+0xb9/0x720 [ 328.860022][T11030] ? tomoyo_profile+0x47/0x60 [ 328.861273][T11030] tomoyo_path_number_perm+0x245/0x590 [ 328.862710][T11030] ? tomoyo_path_number_perm+0x232/0x590 [ 328.864191][T11030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.865783][T11030] ? __pfx_lock_release+0x10/0x10 [ 328.867108][T11030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.868694][T11030] ? __fget_files+0x244/0x3f0 [ 328.869945][T11030] security_file_ioctl+0x75/0xc0 [ 328.871260][T11030] __x64_sys_ioctl+0xbb/0x210 [ 328.872517][T11030] do_syscall_64+0xcd/0x250 [ 328.873730][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.875278][T11030] RIP: 0033:0x7fc926f7def9 [ 328.876453][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.881434][T11030] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.883604][T11030] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 328.885678][T11030] RDX: 0000000020000800 RSI: 00000000c02c563a RDI: 0000000000000003 [ 328.887741][T11030] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 328.889796][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.891862][T11030] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 328.893960][T11030] [ 328.937964][T11030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.799704][T11051] FAULT_INJECTION: forcing a failure. [ 329.799704][T11051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.824808][T11051] CPU: 0 UID: 0 PID: 11051 Comm: syz.1.1798 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 329.827597][T11051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.830442][T11051] Call Trace: [ 329.831340][T11051] [ 329.832139][T11051] dump_stack_lvl+0x16c/0x1f0 [ 329.833400][T11051] should_fail_ex+0x497/0x5b0 [ 329.834661][T11051] _copy_from_user+0x30/0xf0 [ 329.835901][T11051] copy_msghdr_from_user+0x99/0x160 [ 329.837311][T11051] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 329.838868][T11051] ? __pfx___lock_acquire+0x10/0x10 [ 329.840258][T11051] ___sys_sendmsg+0xff/0x1e0 [ 329.841509][T11051] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.842889][T11051] ? find_held_lock+0x2d/0x110 [ 329.844171][T11051] ? __pfx_lock_release+0x10/0x10 [ 329.845517][T11051] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 329.847034][T11051] ? __fget_light+0x173/0x210 [ 329.848294][T11051] __sys_sendmmsg+0x1a1/0x450 [ 329.849566][T11051] ? __pfx___sys_sendmmsg+0x10/0x10 [ 329.850948][T11051] ? vfs_write+0x14d/0x1140 [ 329.852168][T11051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.853798][T11051] ? fput+0x30/0x390 [ 329.854879][T11051] ? ksys_write+0x1ab/0x260 [ 329.856093][T11051] ? __pfx_ksys_write+0x10/0x10 [ 329.857404][T11051] __x64_sys_sendmmsg+0x9c/0x100 [ 329.858730][T11051] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.860113][T11051] do_syscall_64+0xcd/0x250 [ 329.861335][T11051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.862891][T11051] RIP: 0033:0x7fea2bf7def9 [ 329.864083][T11051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.869137][T11051] RSP: 002b:00007fea2cd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.871324][T11051] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 329.873427][T11051] RDX: 0000000004000070 RSI: 0000000020003b80 RDI: 0000000000000006 [ 329.875495][T11051] RBP: 00007fea2cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 329.877579][T11051] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 329.879661][T11051] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 329.881750][T11051] [ 329.905663][ T39] audit: type=1400 audit(329.782:619): avc: denied { ioctl } for pid=11049 comm="syz.2.1799" path="socket:[49775]" dev="sockfs" ino=49775 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.477822][T11068] FAULT_INJECTION: forcing a failure. [ 330.477822][T11068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.527410][T11068] CPU: 0 UID: 0 PID: 11068 Comm: syz.0.1803 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 330.530201][T11068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.533076][T11068] Call Trace: [ 330.533977][T11068] [ 330.534772][T11068] dump_stack_lvl+0x16c/0x1f0 [ 330.536039][T11068] should_fail_ex+0x497/0x5b0 [ 330.537314][T11068] _copy_from_user+0x30/0xf0 [ 330.538556][T11068] do_ipv6_setsockopt+0x97d/0x4790 [ 330.539928][T11068] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 330.541425][T11068] ? avc_has_perm_noaudit+0x143/0x3a0 [ 330.542851][T11068] ? avc_has_perm+0x11b/0x1c0 [ 330.544104][T11068] ? __pfx_avc_has_perm+0x10/0x10 [ 330.545451][T11068] ? __lock_acquire+0xbdd/0x3cb0 [ 330.546777][T11068] ? sock_has_perm+0x25a/0x2f0 [ 330.548057][T11068] ? __pfx_sock_has_perm+0x10/0x10 [ 330.549429][T11068] ? selinux_netlbl_socket_setsockopt+0x142/0x420 [ 330.551357][T11068] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 330.553322][T11068] ? ipv6_setsockopt+0xcb/0x170 [ 330.554622][T11068] ipv6_setsockopt+0xcb/0x170 [ 330.555876][T11068] udpv6_setsockopt+0x7d/0xd0 [ 330.557144][T11068] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 330.558710][T11068] do_sock_setsockopt+0x222/0x480 [ 330.560057][T11068] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 330.561541][T11068] ? __fget_files+0x244/0x3f0 [ 330.562805][T11068] ? __fget_light+0x173/0x210 [ 330.564061][T11068] __sys_setsockopt+0x1a4/0x270 [ 330.565368][T11068] ? __pfx___sys_setsockopt+0x10/0x10 [ 330.566795][T11068] ? fput+0x30/0x390 [ 330.567969][T11068] ? ksys_write+0x1ab/0x260 [ 330.569196][T11068] ? __pfx_ksys_write+0x10/0x10 [ 330.570495][T11068] __x64_sys_setsockopt+0xbd/0x160 [ 330.571858][T11068] ? do_syscall_64+0x91/0x250 [ 330.573125][T11068] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.574512][T11068] do_syscall_64+0xcd/0x250 [ 330.575724][T11068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.577308][T11068] RIP: 0033:0x7fe24bd7def9 [ 330.578501][T11068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.583594][T11068] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.585808][T11068] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 330.587891][T11068] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 330.589989][T11068] RBP: 00007fe24cadb090 R08: 00000000000004a0 R09: 0000000000000000 [ 330.592071][T11068] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 330.594170][T11068] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 330.596253][T11068] [ 330.666611][T11070] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 330.766002][T11076] FAULT_INJECTION: forcing a failure. [ 330.766002][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 330.783853][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.2.1807 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 330.786646][T11076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.789466][T11076] Call Trace: [ 330.790358][T11076] [ 330.791145][T11076] dump_stack_lvl+0x16c/0x1f0 [ 330.792414][T11076] should_fail_ex+0x497/0x5b0 [ 330.793684][T11076] ? fs_reclaim_acquire+0xae/0x160 [ 330.795051][T11076] should_failslab+0xc2/0x120 [ 330.796307][T11076] __kmalloc_noprof+0xcb/0x400 [ 330.797592][T11076] ? __pfx_lock_acquire+0x10/0x10 [ 330.798941][T11076] tomoyo_realpath_from_path+0xb9/0x720 [ 330.800408][T11076] ? tomoyo_profile+0x47/0x60 [ 330.801675][T11076] tomoyo_path_number_perm+0x245/0x590 [ 330.803128][T11076] ? tomoyo_path_number_perm+0x232/0x590 [ 330.804623][T11076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.806263][T11076] ? __pfx_lock_release+0x10/0x10 [ 330.807613][T11076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.809233][T11076] ? __fget_files+0x244/0x3f0 [ 330.810507][T11076] security_file_ioctl+0x75/0xc0 [ 330.811856][T11076] __x64_sys_ioctl+0xbb/0x210 [ 330.813148][T11076] do_syscall_64+0xcd/0x250 [ 330.814383][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.815962][T11076] RIP: 0033:0x7fc926f7def9 [ 330.817162][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.822247][T11076] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.824454][T11076] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 330.826537][T11076] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 330.828637][T11076] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 330.830866][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.832975][T11076] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 330.835032][T11076] [ 330.917572][T11076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.211048][T11084] sch_tbf: peakrate 1023 is lower than or equals to rate 52123 ! [ 331.431921][ T39] audit: type=1400 audit(331.312:620): avc: denied { setopt } for pid=11090 comm="syz.2.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 331.443012][T11089] tmpfs: Invalid uid '0x00000000ffffffff' [ 331.455070][T11089] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1812'. [ 331.457519][T11089] openvswitch: netlink: Actions may not be safe on all matching packets [ 331.558621][ T39] audit: type=1400 audit(331.432:621): avc: denied { setattr } for pid=11090 comm="syz.2.1813" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.570716][T11095] FAULT_INJECTION: forcing a failure. [ 331.570716][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 331.574018][T11095] CPU: 0 UID: 0 PID: 11095 Comm: syz.1.1814 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 331.576752][T11095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.579555][T11095] Call Trace: [ 331.580448][T11095] [ 331.581239][T11095] dump_stack_lvl+0x16c/0x1f0 [ 331.582492][T11095] should_fail_ex+0x497/0x5b0 [ 331.583779][T11095] ? fs_reclaim_acquire+0xae/0x160 [ 331.585288][T11095] should_failslab+0xc2/0x120 [ 331.586569][T11095] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 331.588017][T11095] ? getname_flags.part.0+0x4c/0x550 [ 331.589429][T11095] getname_flags.part.0+0x4c/0x550 [ 331.590786][T11095] getname_flags+0x93/0xf0 [ 331.591971][T11095] user_path_at+0x24/0x60 [ 331.593255][T11095] __x64_sys_chmod+0xe8/0x1c0 [ 331.594506][T11095] ? __pfx___x64_sys_chmod+0x10/0x10 [ 331.595922][T11095] do_syscall_64+0xcd/0x250 [ 331.597130][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.598687][T11095] RIP: 0033:0x7fea2bf7def9 [ 331.599864][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.604912][T11095] RSP: 002b:00007fea2cd8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 331.607079][T11095] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 331.609158][T11095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 331.611213][T11095] RBP: 00007fea2cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 331.613311][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.615401][T11095] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 331.617488][T11095] [ 331.970098][ T831] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 332.176308][T11102] binder: 11101:11102 ioctl c0306201 20005dc0 returned -11 [ 332.204407][ T831] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.206808][ T831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.208889][ T831] usb 5-1: Product: syz [ 332.220085][ T831] usb 5-1: Manufacturer: syz [ 332.221348][ T831] usb 5-1: SerialNumber: syz [ 332.237144][ T831] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.342488][T11108] FAULT_INJECTION: forcing a failure. [ 332.342488][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.356243][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.2.1819 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 332.359002][T11108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.361813][T11108] Call Trace: [ 332.362689][T11108] [ 332.363699][T11108] dump_stack_lvl+0x16c/0x1f0 [ 332.365344][T11108] should_fail_ex+0x497/0x5b0 [ 332.366629][T11108] _copy_from_user+0x30/0xf0 [ 332.367846][T11108] copy_msghdr_from_user+0x99/0x160 [ 332.369607][T11108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 332.372010][T11108] ? __pfx___lock_acquire+0x10/0x10 [ 332.374166][T11108] ___sys_sendmsg+0xff/0x1e0 [ 332.375486][T11108] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.376891][T11108] ? find_held_lock+0x2d/0x110 [ 332.378162][T11108] ? ksys_write+0x21c/0x260 [ 332.379364][T11108] ? __fget_light+0x173/0x210 [ 332.380606][T11108] __sys_sendmsg+0x117/0x1f0 [ 332.381855][T11108] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.383213][T11108] do_syscall_64+0xcd/0x250 [ 332.384418][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.385977][T11108] RIP: 0033:0x7fc926f7def9 [ 332.387129][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.392122][T11108] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.394300][T11108] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 332.396357][T11108] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000003 [ 332.398422][T11108] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 332.400510][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.402549][T11108] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 332.404617][T11108] [ 332.471013][ T5374] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 332.726255][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 332.818896][T11111] 9pnet: Could not find request transport: fd0x0000000000000006 [ 332.835557][ T39] audit: type=1400 audit(332.712:622): avc: denied { mount } for pid=11109 comm="syz.2.1820" name="/" dev="pstore" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 333.005922][T11115] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1818'. [ 333.018413][ T831] usb 5-1: USB disconnect, device number 28 [ 333.744250][ T39] audit: type=1400 audit(333.622:623): avc: denied { unmount } for pid=8359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 333.756119][T11127] FAULT_INJECTION: forcing a failure. [ 333.756119][T11127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.761306][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.1.1824 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 333.764847][T11127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.768486][T11127] Call Trace: [ 333.769648][T11127] [ 333.770674][T11127] dump_stack_lvl+0x16c/0x1f0 [ 333.772288][T11127] should_fail_ex+0x497/0x5b0 [ 333.773930][T11127] _copy_from_user+0x30/0xf0 [ 333.775520][T11127] copy_msghdr_from_user+0x99/0x160 [ 333.777312][T11127] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 333.779317][T11127] ? __pfx___lock_acquire+0x10/0x10 [ 333.781115][T11127] ___sys_sendmsg+0xff/0x1e0 [ 333.782719][T11127] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.784519][T11127] ? find_held_lock+0x2d/0x110 [ 333.786194][T11127] ? ksys_write+0x21c/0x260 [ 333.787775][T11127] ? __fget_light+0x173/0x210 [ 333.789387][T11127] __sys_sendmsg+0x117/0x1f0 [ 333.790977][T11127] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.792769][T11127] do_syscall_64+0xcd/0x250 [ 333.794345][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.796363][T11127] RIP: 0033:0x7fea2bf7def9 [ 333.797904][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.804682][T11127] RSP: 002b:00007fea2cdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.807598][T11127] RAX: ffffffffffffffda RBX: 00007fea2c135f80 RCX: 00007fea2bf7def9 [ 333.810278][T11127] RDX: 0000000000040000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 333.812962][T11127] RBP: 00007fea2cdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 333.815643][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.818327][T11127] R13: 0000000000000000 R14: 00007fea2c135f80 R15: 00007ffc645b36d8 [ 333.821014][T11127] [ 333.838929][ T39] audit: type=1400 audit(333.712:624): avc: denied { write } for pid=11128 comm="syz.3.1825" path="socket:[50384]" dev="sockfs" ino=50384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 333.848795][ T39] audit: type=1400 audit(333.712:625): avc: denied { setopt } for pid=11128 comm="syz.3.1825" lport=58816 faddr=::ffff:10.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 333.878764][ T5374] usb 5-1: Service connection timeout for: 256 [ 333.880811][ T5374] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 333.884676][ T5374] ath9k_htc: Failed to initialize the device [ 333.908577][ T39] audit: type=1400 audit(333.782:626): avc: denied { append } for pid=11131 comm="syz.2.1826" name="btrfs-control" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.932155][ T831] usb 5-1: ath9k_htc: USB layer deinitialized [ 334.108176][T11143] FAULT_INJECTION: forcing a failure. [ 334.108176][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 334.117100][T11141] loop9: detected capacity change from 0 to 7 [ 334.130107][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.3.1831 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 334.132944][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.135824][T11143] Call Trace: [ 334.136748][T11143] [ 334.137560][T11143] dump_stack_lvl+0x16c/0x1f0 [ 334.138840][T11143] should_fail_ex+0x497/0x5b0 [ 334.140128][T11143] ? fs_reclaim_acquire+0xae/0x160 [ 334.141543][T11143] should_failslab+0xc2/0x120 [ 334.142814][T11143] __kmalloc_cache_noprof+0x6b/0x300 [ 334.144252][T11143] ? alloc_pipe_info+0x10e/0x590 [ 334.145610][T11143] alloc_pipe_info+0x10e/0x590 [ 334.146916][T11143] splice_direct_to_actor+0x793/0xa40 [ 334.148378][T11143] ? __pfx_direct_splice_actor+0x10/0x10 [ 334.149919][T11143] ? inode_has_perm+0x16f/0x1d0 [ 334.151252][T11143] ? file_has_perm+0x280/0x350 [ 334.152582][T11143] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 334.154238][T11143] ? __pfx_file_has_perm+0x10/0x10 [ 334.155644][T11143] do_splice_direct+0x178/0x250 [ 334.156974][T11143] ? __pfx_do_splice_direct+0x10/0x10 [ 334.158457][T11143] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 334.160070][T11143] ? bpf_lsm_file_permission+0x9/0x10 [ 334.161532][T11143] ? security_file_permission+0x98/0xc0 [ 334.163032][T11143] do_sendfile+0xb0a/0xe40 [ 334.164256][T11143] ? __pfx_do_sendfile+0x10/0x10 [ 334.165622][T11143] __x64_sys_sendfile64+0x1da/0x220 [ 334.167040][T11143] ? ksys_write+0x1ab/0x260 [ 334.168279][T11143] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 334.169837][T11143] do_syscall_64+0xcd/0x250 [ 334.171071][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.172708][T11143] RIP: 0033:0x7f35e0b7def9 [ 334.173921][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.180533][T11143] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.183432][T11143] RAX: ffffffffffffffda RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 334.186193][T11143] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 334.188941][T11143] RBP: 00007f35e189b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.191684][T11143] R10: 00008000ffffc001 R11: 0000000000000246 R12: 0000000000000001 [ 334.194442][T11143] R13: 0000000000000000 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 334.197197][T11143] [ 334.199345][T11141] Dev loop9: unable to read RDB block 7 [ 334.205997][T11141] loop9: AHDI p1 p3 [ 334.211559][T11141] loop9: partition table partially beyond EOD, truncated [ 334.221817][T11141] loop9: p1 start 2048 is beyond EOD, truncated [ 334.432053][T11156] FAULT_INJECTION: forcing a failure. [ 334.432053][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 334.445691][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.1.1834 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 334.449304][T11156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 334.453022][T11156] Call Trace: [ 334.454193][T11156] [ 334.455226][T11156] dump_stack_lvl+0x16c/0x1f0 [ 334.456885][T11156] should_fail_ex+0x497/0x5b0 [ 334.458515][T11156] ? fs_reclaim_acquire+0xae/0x160 [ 334.460444][T11156] should_failslab+0xc2/0x120 [ 334.462112][T11156] __kmalloc_noprof+0xcb/0x400 [ 334.463785][T11156] ? __pfx_lock_acquire+0x10/0x10 [ 334.465548][T11156] tomoyo_realpath_from_path+0xb9/0x720 [ 334.467471][T11156] ? tomoyo_profile+0x47/0x60 [ 334.469289][T11156] tomoyo_path_number_perm+0x245/0x590 [ 334.471184][T11156] ? tomoyo_path_number_perm+0x232/0x590 [ 334.473139][T11156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 334.475226][T11156] ? __pfx_lock_release+0x10/0x10 [ 334.476977][T11156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.479044][T11156] ? __fget_files+0x244/0x3f0 [ 334.480678][T11156] security_file_ioctl+0x75/0xc0 [ 334.482398][T11156] __x64_sys_ioctl+0xbb/0x210 [ 334.484041][T11156] do_syscall_64+0xcd/0x250 [ 334.485635][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.487678][T11156] RIP: 0033:0x7fea2bf7def9 [ 334.489248][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.495879][T11156] RSP: 002b:00007fea2cd8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.498761][T11156] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 334.501486][T11156] RDX: 0000000020000140 RSI: 000000008208ae63 RDI: 0000000000000004 [ 334.504219][T11156] RBP: 00007fea2cd8d090 R08: 0000000000000000 R09: 0000000000000000 [ 334.506949][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.509678][T11156] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 334.512443][T11156] [ 334.626308][T11156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.715883][ T39] audit: type=1400 audit(334.592:627): avc: denied { shutdown } for pid=11159 comm="syz.3.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.879966][ T39] audit: type=1400 audit(335.752:628): avc: denied { read } for pid=11174 comm="syz.1.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 336.273776][T11187] FAULT_INJECTION: forcing a failure. [ 336.273776][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.299391][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.2.1840 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 336.302062][T11187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.304961][T11187] Call Trace: [ 336.306055][T11187] [ 336.307071][T11187] dump_stack_lvl+0x16c/0x1f0 [ 336.308283][T11187] should_fail_ex+0x497/0x5b0 [ 336.309506][T11187] _copy_from_user+0x30/0xf0 [ 336.311050][T11187] core_sys_select+0x2cf/0xb80 [ 336.312640][T11187] ? __pfx_core_sys_select+0x10/0x10 [ 336.314440][T11187] ? get_pid_task+0xfc/0x250 [ 336.315938][T11187] ? set_user_sigmask+0x217/0x2a0 [ 336.317228][T11187] ? __pfx_set_user_sigmask+0x10/0x10 [ 336.318987][T11187] do_pselect.constprop.0+0x1a0/0x1f0 [ 336.320764][T11187] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 336.322735][T11187] ? __fget_files+0x244/0x3f0 [ 336.324330][T11187] __x64_sys_pselect6+0x183/0x240 [ 336.326058][T11187] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 336.327877][T11187] do_syscall_64+0xcd/0x250 [ 336.329403][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.331387][T11187] RIP: 0033:0x7fc926f7def9 [ 336.332720][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.337585][T11187] RSP: 002b:00007fc927dc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 336.340228][T11187] RAX: ffffffffffffffda RBX: 00007fc927136130 RCX: 00007fc926f7def9 [ 336.342284][T11187] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 336.344305][T11187] RBP: 00007fc927dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 336.346930][T11187] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 336.349521][T11187] R13: 0000000000000000 R14: 00007fc927136130 R15: 00007ffc834efab8 [ 336.351836][T11187] [ 337.450468][T11195] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1843'. [ 337.463544][T11195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.630056][T11204] FAULT_INJECTION: forcing a failure. [ 337.630056][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.633428][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.2.1845 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 337.636089][T11204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.638854][T11204] Call Trace: [ 337.639744][T11204] [ 337.640526][T11204] dump_stack_lvl+0x16c/0x1f0 [ 337.641776][T11204] should_fail_ex+0x497/0x5b0 [ 337.643015][T11204] _copy_to_user+0x30/0xc0 [ 337.644201][T11204] simple_read_from_buffer+0xd0/0x160 [ 337.645612][T11204] proc_fail_nth_read+0x198/0x270 [ 337.646931][T11204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.648376][T11204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.649831][T11204] vfs_read+0x1ce/0xbd0 [ 337.650930][T11204] ? __fdget_pos+0xe8/0x170 [ 337.652123][T11204] ? __fget_files+0x244/0x3f0 [ 337.653374][T11204] ? __pfx_vfs_read+0x10/0x10 [ 337.654611][T11204] ? __pfx___mutex_lock+0x10/0x10 [ 337.655925][T11204] ? __fget_files+0x244/0x3f0 [ 337.657163][T11204] ksys_read+0x12f/0x260 [ 337.658276][T11204] ? __pfx_ksys_read+0x10/0x10 [ 337.659539][T11204] do_syscall_64+0xcd/0x250 [ 337.660739][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.662271][T11204] RIP: 0033:0x7fc926f7c93c [ 337.663435][T11204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 337.668386][T11204] RSP: 002b:00007fc927e05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.670537][T11204] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7c93c [ 337.672587][T11204] RDX: 000000000000000f RSI: 00007fc927e050a0 RDI: 0000000000000004 [ 337.674654][T11204] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 337.676695][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.678814][T11204] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 337.680889][T11204] [ 337.725749][ T39] audit: type=1400 audit(337.602:629): avc: denied { watch watch_reads } for pid=11205 comm="syz.3.1847" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 337.772544][ T39] audit: type=1800 audit(337.652:630): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1846" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 338.120204][ T5882] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 338.250137][ T831] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 338.310135][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 338.312774][ T5882] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.315515][ T5882] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.317832][ T5882] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.325595][ T5882] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.327939][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.338317][ T5882] hub 8-1:1.0: bad descriptor, ignoring hub [ 338.345806][ T5882] hub 8-1:1.0: probe with driver hub failed with error -5 [ 338.347950][ T5882] cdc_wdm 8-1:1.0: skipping garbage [ 338.349321][ T5882] cdc_wdm 8-1:1.0: skipping garbage [ 338.360610][ T5882] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.430101][ T5374] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 338.440096][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 338.445832][ T831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.454216][ T831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.456563][ T831] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.465033][ T831] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.467383][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.493645][ T831] hub 5-1:1.0: bad descriptor, ignoring hub [ 338.495232][ T831] hub 5-1:1.0: probe with driver hub failed with error -5 [ 338.497309][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 338.498672][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 338.515882][ T831] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 338.579842][ T5374] usb 7-1: device descriptor read/64, error -71 [ 338.702757][ T831] usb 8-1: USB disconnect, device number 31 [ 338.720602][T11221] FAULT_INJECTION: forcing a failure. [ 338.720602][T11221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.734751][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.0.1852 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 338.737472][T11221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 338.740281][T11221] Call Trace: [ 338.741178][T11221] [ 338.741971][T11221] dump_stack_lvl+0x16c/0x1f0 [ 338.743221][T11221] should_fail_ex+0x497/0x5b0 [ 338.744485][T11221] _copy_from_user+0x30/0xf0 [ 338.745726][T11221] copy_msghdr_from_user+0x99/0x160 [ 338.747097][T11221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 338.748641][T11221] ? find_held_lock+0x2d/0x110 [ 338.749899][T11221] ___sys_recvmsg+0xdc/0x1a0 [ 338.751119][T11221] ? __pfx____sys_recvmsg+0x10/0x10 [ 338.752504][T11221] ? __fget_light+0x173/0x210 [ 338.753940][T11221] do_recvmmsg+0x2ba/0x750 [ 338.755141][T11221] ? __pfx_do_recvmmsg+0x10/0x10 [ 338.756465][T11221] ? vfs_write+0x14d/0x1140 [ 338.757772][T11221] ? __mutex_unlock_slowpath+0x164/0x650 [ 338.759254][T11221] __x64_sys_recvmmsg+0x239/0x290 [ 338.760608][T11221] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 338.762069][T11221] do_syscall_64+0xcd/0x250 [ 338.763270][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.764836][T11221] RIP: 0033:0x7fe24bd7def9 [ 338.766020][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.771010][T11221] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 338.773195][T11221] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 338.775263][T11221] RDX: 0000000000000f00 RSI: 00000000200004c0 RDI: 0000000000000009 [ 338.777322][T11221] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 338.779369][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.781417][T11221] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 338.783482][T11221] [ 338.870113][ T5374] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 339.033113][ T5374] usb 7-1: device descriptor read/64, error -71 [ 339.060283][ T831] usb 5-1: USB disconnect, device number 29 [ 339.160310][ T5374] usb usb7-port1: attempt power cycle [ 339.303441][T11240] FAULT_INJECTION: forcing a failure. [ 339.303441][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.310955][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.1.1858 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 339.314518][T11240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.318181][T11240] Call Trace: [ 339.319334][T11240] [ 339.320350][T11240] dump_stack_lvl+0x16c/0x1f0 [ 339.321988][T11240] should_fail_ex+0x497/0x5b0 [ 339.323620][T11240] _copy_from_user+0x30/0xf0 [ 339.325229][T11240] copy_msghdr_from_user+0x99/0x160 [ 339.327020][T11240] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.329039][T11240] ? __pfx___lock_acquire+0x10/0x10 [ 339.330845][T11240] ___sys_sendmsg+0xff/0x1e0 [ 339.332457][T11240] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.334258][T11240] ? find_held_lock+0x2d/0x110 [ 339.335921][T11240] ? ksys_write+0x21c/0x260 [ 339.337500][T11240] ? __fget_light+0x173/0x210 [ 339.339128][T11240] __sys_sendmsg+0x117/0x1f0 [ 339.340924][T11240] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.342489][T11240] do_syscall_64+0xcd/0x250 [ 339.343701][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.345282][T11240] RIP: 0033:0x7fea2bf7def9 [ 339.346483][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.351510][T11240] RSP: 002b:00007fea2cdaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.353708][T11240] RAX: ffffffffffffffda RBX: 00007fea2c135f80 RCX: 00007fea2bf7def9 [ 339.355773][T11240] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 339.357876][T11240] RBP: 00007fea2cdaf090 R08: 0000000000000000 R09: 0000000000000000 [ 339.359957][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.362031][T11240] R13: 0000000000000000 R14: 00007fea2c135f80 R15: 00007ffc645b36d8 [ 339.364117][T11240] [ 339.571054][ T5374] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 339.600724][ T5374] usb 7-1: device descriptor read/8, error -71 [ 339.870083][ T5374] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 339.900752][ T5374] usb 7-1: device descriptor read/8, error -71 [ 340.021469][ T5374] usb usb7-port1: unable to enumerate USB device [ 340.588403][T11261] FAULT_INJECTION: forcing a failure. [ 340.588403][T11261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.620117][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.3.1864 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 340.622818][T11261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 340.625720][T11261] Call Trace: [ 340.626611][T11261] [ 340.627406][T11261] dump_stack_lvl+0x16c/0x1f0 [ 340.628664][T11261] should_fail_ex+0x497/0x5b0 [ 340.629910][T11261] _copy_from_user+0x30/0xf0 [ 340.631144][T11261] comm_write+0xc4/0x2d0 [ 340.632285][T11261] ? __pfx_comm_write+0x10/0x10 [ 340.633592][T11261] ? __pfx_comm_write+0x10/0x10 [ 340.634877][T11261] vfs_writev+0x6da/0xdd0 [ 340.636019][T11261] ? __pfx_vfs_writev+0x10/0x10 [ 340.637317][T11261] ? trace_contention_end+0xea/0x140 [ 340.638718][T11261] ? __mutex_lock+0x1a6/0x9c0 [ 340.639955][T11261] ? __fdget_pos+0xe8/0x170 [ 340.641179][T11261] ? do_writev+0x137/0x370 [ 340.642356][T11261] do_writev+0x137/0x370 [ 340.643478][T11261] ? __pfx_do_writev+0x10/0x10 [ 340.644762][T11261] do_syscall_64+0xcd/0x250 [ 340.645958][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.647503][T11261] RIP: 0033:0x7f35e0b7def9 [ 340.648682][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.653731][T11261] RSP: 002b:00007f35e05de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 340.655890][T11261] RAX: ffffffffffffffda RBX: 00007f35e0d36130 RCX: 00007f35e0b7def9 [ 340.657961][T11261] RDX: 0000000000000001 RSI: 00000000200010c0 RDI: 000000000000000a [ 340.660038][T11261] RBP: 00007f35e05de090 R08: 0000000000000000 R09: 0000000000000000 [ 340.662088][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.664131][T11261] R13: 0000000000000000 R14: 00007f35e0d36130 R15: 00007ffe78d0fe98 [ 340.666195][T11261] [ 341.290928][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'. [ 341.319693][T11274] 9pnet_fd: Insufficient options for proto=fd [ 341.323082][T11275] FAULT_INJECTION: forcing a failure. [ 341.323082][T11275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.347530][T11275] CPU: 0 UID: 0 PID: 11275 Comm: syz.1.1867 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 341.347550][T11275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 341.347557][T11275] Call Trace: [ 341.347562][T11275] [ 341.347567][T11275] dump_stack_lvl+0x16c/0x1f0 [ 341.347584][T11275] should_fail_ex+0x497/0x5b0 [ 341.347601][T11275] _copy_from_user+0x30/0xf0 [ 341.347617][T11275] copy_msghdr_from_user+0x99/0x160 [ 341.347634][T11275] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 341.347652][T11275] ? __pfx___lock_acquire+0x10/0x10 [ 341.347670][T11275] ___sys_sendmsg+0xff/0x1e0 [ 341.347686][T11275] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.347700][T11275] ? find_held_lock+0x2d/0x110 [ 341.347717][T11275] ? ksys_write+0x21c/0x260 [ 341.347747][T11275] ? __fget_light+0x173/0x210 [ 341.347762][T11275] __sys_sendmsg+0x117/0x1f0 [ 341.347777][T11275] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.347801][T11275] do_syscall_64+0xcd/0x250 [ 341.347813][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.347827][T11275] RIP: 0033:0x7fea2bf7def9 [ 341.347837][T11275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.347848][T11275] RSP: 002b:00007fea2b9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.347860][T11275] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 341.347867][T11275] RDX: 0000000000000000 RSI: 0000000020006040 RDI: 000000000000000c [ 341.347874][T11275] RBP: 00007fea2b9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 341.347881][T11275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.347887][T11275] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 341.347901][T11275] [ 341.399360][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 341.633882][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 342.041362][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'. [ 342.425918][T11291] FAULT_INJECTION: forcing a failure. [ 342.425918][T11291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.429341][T11291] CPU: 0 UID: 0 PID: 11291 Comm: syz.3.1874 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 342.432047][T11291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.434853][T11291] Call Trace: [ 342.435736][T11291] [ 342.436525][T11291] dump_stack_lvl+0x16c/0x1f0 [ 342.437787][T11291] should_fail_ex+0x497/0x5b0 [ 342.439035][T11291] _copy_from_user+0x30/0xf0 [ 342.440262][T11291] __sys_bpf+0x21c/0x49c0 [ 342.441426][T11291] ? ksys_write+0x21c/0x260 [ 342.442633][T11291] ? reacquire_held_locks+0x480/0x4c0 [ 342.444031][T11291] ? __pfx___sys_bpf+0x10/0x10 [ 342.445295][T11291] ? vfs_write+0x14d/0x1140 [ 342.446484][T11291] ? __mutex_unlock_slowpath+0x164/0x650 [ 342.447952][T11291] ? fput+0x30/0x390 [ 342.448992][T11291] ? ksys_write+0x1ab/0x260 [ 342.450183][T11291] ? __pfx_ksys_write+0x10/0x10 [ 342.451465][T11291] __x64_sys_bpf+0x78/0xc0 [ 342.452668][T11291] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.454038][T11291] do_syscall_64+0xcd/0x250 [ 342.455247][T11291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.456809][T11291] RIP: 0033:0x7f35e0b7def9 [ 342.457983][T11291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.463138][T11291] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.465297][T11291] RAX: ffffffffffffffda RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 342.467373][T11291] RDX: 0000000000000080 RSI: 00000000200001c0 RDI: 0000000000000005 [ 342.469466][T11291] RBP: 00007f35e189b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.471542][T11291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.473628][T11291] R13: 0000000000000001 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 342.475692][T11291] [ 342.476626][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.614853][T11293] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 342.648988][T11293] kvm: pic: level sensitive irq not supported [ 342.649604][T11293] kvm: pic: non byte read [ 342.659183][T11293] kvm: pic: level sensitive irq not supported [ 342.659438][T11293] kvm: pic: non byte read [ 342.776678][ T39] audit: type=1400 audit(342.652:631): avc: denied { map } for pid=11301 comm="syz.1.1876" path="/dev/usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 342.951448][T11306] FAULT_INJECTION: forcing a failure. [ 342.951448][T11306] name failslab, interval 1, probability 0, space 0, times 0 [ 343.000262][T11306] CPU: 0 UID: 0 PID: 11306 Comm: syz.0.1878 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 343.003019][T11306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 343.005805][T11306] Call Trace: [ 343.006699][T11306] [ 343.007487][T11306] dump_stack_lvl+0x16c/0x1f0 [ 343.008756][T11306] should_fail_ex+0x497/0x5b0 [ 343.010018][T11306] ? fs_reclaim_acquire+0xae/0x160 [ 343.011367][T11306] should_failslab+0xc2/0x120 [ 343.012635][T11306] __kmalloc_noprof+0xcb/0x400 [ 343.013911][T11306] ? __pfx_lock_acquire+0x10/0x10 [ 343.015253][T11306] tomoyo_realpath_from_path+0xb9/0x720 [ 343.016725][T11306] ? tomoyo_profile+0x47/0x60 [ 343.017971][T11306] tomoyo_path_number_perm+0x245/0x590 [ 343.019421][T11306] ? tomoyo_path_number_perm+0x232/0x590 [ 343.020909][T11306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.022509][T11306] ? __pfx_lock_release+0x10/0x10 [ 343.023843][T11306] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 343.025442][T11306] ? __fget_files+0x244/0x3f0 [ 343.026684][T11306] security_file_ioctl+0x75/0xc0 [ 343.027997][T11306] __x64_sys_ioctl+0xbb/0x210 [ 343.029252][T11306] do_syscall_64+0xcd/0x250 [ 343.030453][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.032001][T11306] RIP: 0033:0x7fe24bd7def9 [ 343.033199][T11306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.038217][T11306] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.040396][T11306] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 343.042471][T11306] RDX: 0000000020000100 RSI: 0000000040085618 RDI: 0000000000000003 [ 343.044542][T11306] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 343.046626][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.048712][T11306] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 343.050792][T11306] [ 343.051760][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.234870][ T39] audit: type=1400 audit(343.112:632): avc: denied { setopt } for pid=11309 comm="syz.2.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.248808][T11310] overlay: Unknown parameter 'smackfshat' [ 343.336950][T11310] syzkaller1: entered allmulticast mode [ 343.362758][T11306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.447358][T11309] block nbd2: shutting down sockets [ 347.130559][T11340] FAULT_INJECTION: forcing a failure. [ 347.130559][T11340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.133952][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.2.1887 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 347.136624][T11340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.139400][T11340] Call Trace: [ 347.140287][T11340] [ 347.141077][T11340] dump_stack_lvl+0x16c/0x1f0 [ 347.142322][T11340] should_fail_ex+0x497/0x5b0 [ 347.143569][T11340] _copy_from_user+0x30/0xf0 [ 347.144803][T11340] copy_msghdr_from_user+0x99/0x160 [ 347.146171][T11340] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 347.147713][T11340] ? __pfx___lock_acquire+0x10/0x10 [ 347.149091][T11340] ___sys_sendmsg+0xff/0x1e0 [ 347.150297][T11340] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.151657][T11340] ? find_held_lock+0x2d/0x110 [ 347.152939][T11340] ? __pfx_lock_release+0x10/0x10 [ 347.154277][T11340] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 347.155779][T11340] ? __fget_light+0x173/0x210 [ 347.157037][T11340] __sys_sendmmsg+0x1a1/0x450 [ 347.158284][T11340] ? __pfx___sys_sendmmsg+0x10/0x10 [ 347.159654][T11340] ? vfs_write+0x14d/0x1140 [ 347.160870][T11340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.162441][T11340] ? fput+0x30/0x390 [ 347.163479][T11340] ? ksys_write+0x1ab/0x260 [ 347.164674][T11340] ? __pfx_ksys_write+0x10/0x10 [ 347.165948][T11340] __x64_sys_sendmmsg+0x9c/0x100 [ 347.167252][T11340] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.168622][T11340] do_syscall_64+0xcd/0x250 [ 347.169814][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.171357][T11340] RIP: 0033:0x7fc926f7def9 [ 347.172544][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.177504][T11340] RSP: 002b:00007fc927dc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.179656][T11340] RAX: ffffffffffffffda RBX: 00007fc927136130 RCX: 00007fc926f7def9 [ 347.181703][T11340] RDX: 0000000000264e33 RSI: 0000000020005240 RDI: 0000000000000006 [ 347.183744][T11340] RBP: 00007fc927dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 347.185789][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.187820][T11340] R13: 0000000000000000 R14: 00007fc927136130 R15: 00007ffc834efab8 [ 347.189878][T11340] [ 348.079262][T11348] input: syz0 as /devices/virtual/input/input69 [ 348.235386][ T39] audit: type=1400 audit(348.112:633): avc: denied { ioctl } for pid=11350 comm="syz.1.1891" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x530c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 348.261588][T11352] FAULT_INJECTION: forcing a failure. [ 348.261588][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.265054][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.0.1890 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 348.267765][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.270569][T11352] Call Trace: [ 348.271459][T11352] [ 348.272255][T11352] dump_stack_lvl+0x16c/0x1f0 [ 348.273510][T11352] should_fail_ex+0x497/0x5b0 [ 348.274762][T11352] _copy_from_user+0x30/0xf0 [ 348.275990][T11352] copy_msghdr_from_user+0x99/0x160 [ 348.277379][T11352] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 348.278918][T11352] ? __pfx___lock_acquire+0x10/0x10 [ 348.280295][T11352] ___sys_sendmsg+0xff/0x1e0 [ 348.281537][T11352] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.282916][T11352] ? find_held_lock+0x2d/0x110 [ 348.284189][T11352] ? __pfx_lock_release+0x10/0x10 [ 348.285527][T11352] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 348.287032][T11352] ? __fget_light+0x173/0x210 [ 348.288280][T11352] __sys_sendmmsg+0x1a1/0x450 [ 348.289546][T11352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.290926][T11352] ? vfs_write+0x14d/0x1140 [ 348.292140][T11352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.293747][T11352] ? fput+0x30/0x390 [ 348.294792][T11352] ? ksys_write+0x1ab/0x260 [ 348.296001][T11352] ? __pfx_ksys_write+0x10/0x10 [ 348.297305][T11352] __x64_sys_sendmmsg+0x9c/0x100 [ 348.298623][T11352] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.299994][T11352] do_syscall_64+0xcd/0x250 [ 348.301207][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.302757][T11352] RIP: 0033:0x7fe24bd7def9 [ 348.303937][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.308934][T11352] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.311104][T11352] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 348.313186][T11352] RDX: 00000000000001a3 RSI: 0000000020002cc0 RDI: 0000000000000004 [ 348.315247][T11352] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 348.317323][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.319390][T11352] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 348.321463][T11352] [ 348.322395][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.556803][ T39] audit: type=1400 audit(348.432:634): avc: denied { mounton } for pid=11358 comm="syz.1.1893" path="/430/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 348.558844][T11360] jfs: Unrecognized mount option "gid=" or missing value [ 348.600263][T11364] FAULT_INJECTION: forcing a failure. [ 348.600263][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 348.612367][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.3.1895 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 348.615271][T11364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.618079][T11364] Call Trace: [ 348.618975][T11364] [ 348.619769][T11364] dump_stack_lvl+0x16c/0x1f0 [ 348.621029][T11364] should_fail_ex+0x497/0x5b0 [ 348.622287][T11364] ? fs_reclaim_acquire+0xae/0x160 [ 348.623666][T11364] should_failslab+0xc2/0x120 [ 348.624923][T11364] __kmalloc_noprof+0xcb/0x400 [ 348.626195][T11364] ? __pfx_lock_acquire+0x10/0x10 [ 348.627545][T11364] tomoyo_realpath_from_path+0xb9/0x720 [ 348.629032][T11364] ? tomoyo_profile+0x47/0x60 [ 348.630278][T11364] tomoyo_path_number_perm+0x245/0x590 [ 348.631719][T11364] ? tomoyo_path_number_perm+0x232/0x590 [ 348.633221][T11364] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.634816][T11364] ? __pfx_lock_release+0x10/0x10 [ 348.636152][T11364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.637732][T11364] ? __fget_files+0x244/0x3f0 [ 348.638983][T11364] security_file_ioctl+0x75/0xc0 [ 348.640304][T11364] __x64_sys_ioctl+0xbb/0x210 [ 348.641571][T11364] do_syscall_64+0xcd/0x250 [ 348.642778][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.644340][T11364] RIP: 0033:0x7f35e0b7def9 [ 348.645472][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.650500][T11364] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.652696][T11364] RAX: ffffffffffffffda RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 348.654757][T11364] RDX: 0000000020000080 RSI: 00000000c004ae0a RDI: 0000000000000004 [ 348.656828][T11364] RBP: 00007f35e189b090 R08: 0000000000000000 R09: 0000000000000000 [ 348.658894][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.660976][T11364] R13: 0000000000000000 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 348.663049][T11364] [ 348.663904][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.712810][T11364] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.795656][T11373] misc userio: Can't change port type on an already running userio instance [ 348.849528][T11375] FAULT_INJECTION: forcing a failure. [ 348.849528][T11375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.860082][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.2.1900 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 348.862784][T11375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.865580][T11375] Call Trace: [ 348.866468][T11375] [ 348.867253][T11375] dump_stack_lvl+0x16c/0x1f0 [ 348.868510][T11375] should_fail_ex+0x497/0x5b0 [ 348.869766][T11375] _copy_to_user+0x30/0xc0 [ 348.870959][T11375] simple_read_from_buffer+0xd0/0x160 [ 348.872396][T11375] proc_fail_nth_read+0x198/0x270 [ 348.873739][T11375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.875185][T11375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.876648][T11375] vfs_read+0x1ce/0xbd0 [ 348.877763][T11375] ? __fdget_pos+0xe8/0x170 [ 348.878964][T11375] ? __fget_files+0x244/0x3f0 [ 348.880204][T11375] ? __pfx_vfs_read+0x10/0x10 [ 348.881458][T11375] ? __pfx___mutex_lock+0x10/0x10 [ 348.882788][T11375] ? __fget_files+0x244/0x3f0 [ 348.884039][T11375] ksys_read+0x12f/0x260 [ 348.885164][T11375] ? __pfx_ksys_read+0x10/0x10 [ 348.886432][T11375] do_syscall_64+0xcd/0x250 [ 348.887629][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.889183][T11375] RIP: 0033:0x7fc926f7c93c [ 348.890361][T11375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 348.895363][T11375] RSP: 002b:00007fc927e05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.897562][T11375] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7c93c [ 348.899622][T11375] RDX: 000000000000000f RSI: 00007fc927e050a0 RDI: 0000000000000004 [ 348.901696][T11375] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 348.903776][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.905848][T11375] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 348.907920][T11375] [ 348.908787][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.676070][T11389] FAULT_INJECTION: forcing a failure. [ 349.676070][T11389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.688942][T11389] CPU: 0 UID: 0 PID: 11389 Comm: syz.3.1905 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 349.691669][T11389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 349.694473][T11389] Call Trace: [ 349.695358][T11389] [ 349.696138][T11389] dump_stack_lvl+0x16c/0x1f0 [ 349.697394][T11389] should_fail_ex+0x497/0x5b0 [ 349.698636][T11389] ? fs_reclaim_acquire+0xae/0x160 [ 349.699983][T11389] should_fail_alloc_page+0xe7/0x130 [ 349.701389][T11389] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 349.703010][T11389] ? is_bpf_text_address+0x8a/0x1a0 [ 349.704399][T11389] ? iovec_from_user.part.0+0xf3/0x130 [ 349.705843][T11389] __alloc_pages_noprof+0x194/0x2460 [ 349.707239][T11389] ? stack_access_ok+0xf9/0x270 [ 349.708529][T11389] ? __module_address+0x55/0x3c0 [ 349.709840][T11389] ? hlock_class+0x4e/0x130 [ 349.711043][T11389] ? mark_lock+0xb5/0xc60 [ 349.712210][T11389] ? hlock_class+0x4e/0x130 [ 349.713426][T11389] ? __pfx_mark_lock+0x10/0x10 [ 349.714696][T11389] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 349.716194][T11389] ? __pfx_mark_lock+0x10/0x10 [ 349.717496][T11389] ? hlock_class+0x4e/0x130 [ 349.718716][T11389] ? __lock_acquire+0xbdd/0x3cb0 [ 349.720040][T11389] ? hlock_class+0x4e/0x130 [ 349.721268][T11389] ? mark_lock+0xb5/0xc60 [ 349.722426][T11389] ? iovec_from_user.part.0+0xf3/0x130 [ 349.723870][T11389] ___kmalloc_large_node+0x7f/0x1a0 [ 349.725257][T11389] ? __pfx_mark_lock+0x10/0x10 [ 349.726554][T11389] __kmalloc_large_node_noprof+0x1c/0x70 [ 349.728056][T11389] __kmalloc_noprof.cold+0xc/0x61 [ 349.729427][T11389] iovec_from_user.part.0+0xf3/0x130 [ 349.730836][T11389] __import_iovec+0xdc/0x6e0 [ 349.732073][T11389] import_iovec+0x108/0x140 [ 349.733295][T11389] vfs_readv+0x19b/0x890 [ 349.734423][T11389] ? find_held_lock+0x2d/0x110 [ 349.735692][T11389] ? __pfx_vfs_readv+0x10/0x10 [ 349.736962][T11389] ? find_held_lock+0x2d/0x110 [ 349.738227][T11389] ? __pfx_lock_release+0x10/0x10 [ 349.739563][T11389] ? __fget_files+0x244/0x3f0 [ 349.740810][T11389] ? __x64_sys_preadv+0x22b/0x310 [ 349.742136][T11389] __x64_sys_preadv+0x22b/0x310 [ 349.743431][T11389] ? __pfx___x64_sys_preadv+0x10/0x10 [ 349.744848][T11389] do_syscall_64+0xcd/0x250 [ 349.746045][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.747604][T11389] RIP: 0033:0x7f35e0b7def9 [ 349.748792][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.753841][T11389] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 349.756014][T11389] RAX: ffffffffffffffda RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 349.758084][T11389] RDX: 00000000000003e8 RSI: 0000000020001300 RDI: 0000000000000004 [ 349.760143][T11389] RBP: 00007f35e189b090 R08: 0000000000000000 R09: 0000000000000000 [ 349.762219][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.764281][T11389] R13: 0000000000000000 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 349.766330][T11389] [ 349.767285][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.165746][T11395] input: syz0 as /devices/virtual/input/input71 [ 350.389312][ T39] audit: type=1400 audit(350.262:635): avc: denied { setopt } for pid=11399 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.394335][ T39] audit: type=1400 audit(350.272:636): avc: denied { write } for pid=11399 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.841795][T11407] mkiss: ax0: crc mode is auto. [ 351.117440][T11412] FAULT_INJECTION: forcing a failure. [ 351.117440][T11412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.136333][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.2.1912 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 351.139082][T11412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.141885][T11412] Call Trace: [ 351.142768][T11412] [ 351.143548][T11412] dump_stack_lvl+0x16c/0x1f0 [ 351.144788][T11412] should_fail_ex+0x497/0x5b0 [ 351.146033][T11412] _copy_from_user+0x30/0xf0 [ 351.147254][T11412] copy_msghdr_from_user+0x99/0x160 [ 351.148619][T11412] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 351.150146][T11412] ? __pfx___lock_acquire+0x10/0x10 [ 351.151517][T11412] ___sys_sendmsg+0xff/0x1e0 [ 351.152759][T11412] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.154132][T11412] ? find_held_lock+0x2d/0x110 [ 351.155401][T11412] ? ksys_write+0x21c/0x260 [ 351.156615][T11412] ? __fget_light+0x173/0x210 [ 351.157857][T11412] __sys_sendmsg+0x117/0x1f0 [ 351.159080][T11412] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.160436][T11412] do_syscall_64+0xcd/0x250 [ 351.161647][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.163195][T11412] RIP: 0033:0x7fc926f7def9 [ 351.164374][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.169367][T11412] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.171532][T11412] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 351.173592][T11412] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 351.175628][T11412] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 351.177667][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.179712][T11412] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 351.181769][T11412] [ 351.182658][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.391250][T11422] FAULT_INJECTION: forcing a failure. [ 351.391250][T11422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.394694][T11422] CPU: 0 UID: 0 PID: 11422 Comm: syz.2.1916 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 351.397392][T11422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.400179][T11422] Call Trace: [ 351.401074][T11422] [ 351.401868][T11422] dump_stack_lvl+0x16c/0x1f0 [ 351.403123][T11422] should_fail_ex+0x497/0x5b0 [ 351.404384][T11422] _copy_from_user+0x30/0xf0 [ 351.405622][T11422] copy_msghdr_from_user+0x99/0x160 [ 351.406995][T11422] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 351.408547][T11422] ? __pfx___lock_acquire+0x10/0x10 [ 351.409921][T11422] ___sys_sendmsg+0xff/0x1e0 [ 351.411152][T11422] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.412547][T11422] ? find_held_lock+0x2d/0x110 [ 351.413817][T11422] ? ksys_write+0x21c/0x260 [ 351.415025][T11422] ? __fget_light+0x173/0x210 [ 351.416272][T11422] __sys_sendmsg+0x117/0x1f0 [ 351.417518][T11422] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.418883][T11422] do_syscall_64+0xcd/0x250 [ 351.420090][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.421663][T11422] RIP: 0033:0x7fc926f7def9 [ 351.422845][T11422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.427873][T11422] RSP: 002b:00007fc927e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.430065][T11422] RAX: ffffffffffffffda RBX: 00007fc927135f80 RCX: 00007fc926f7def9 [ 351.432143][T11422] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 351.434237][T11422] RBP: 00007fc927e05090 R08: 0000000000000000 R09: 0000000000000000 [ 351.436308][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.438386][T11422] R13: 0000000000000000 R14: 00007fc927135f80 R15: 00007ffc834efab8 [ 351.440457][T11422] [ 351.441343][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.637226][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 351.719888][ T39] audit: type=1400 audit(351.592:637): avc: denied { getopt } for pid=11426 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.840082][ T5374] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 351.868072][T11443] FAULT_INJECTION: forcing a failure. [ 351.868072][T11443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.891069][T11443] CPU: 0 UID: 0 PID: 11443 Comm: syz.0.1922 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 351.893838][T11443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.896448][T11443] Call Trace: [ 351.897299][T11443] [ 351.898061][T11443] dump_stack_lvl+0x16c/0x1f0 [ 351.899254][T11443] should_fail_ex+0x497/0x5b0 [ 351.900477][T11443] _copy_to_user+0x30/0xc0 [ 351.901638][T11443] simple_read_from_buffer+0xd0/0x160 [ 351.903010][T11443] proc_fail_nth_read+0x198/0x270 [ 351.904294][T11443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.905682][T11443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.907037][T11443] vfs_read+0x1ce/0xbd0 [ 351.908124][T11443] ? __fdget_pos+0xe8/0x170 [ 351.909318][T11443] ? __pfx_vfs_read+0x10/0x10 [ 351.910524][T11443] ? __pfx___mutex_lock+0x10/0x10 [ 351.911806][T11443] ? __fget_files+0x244/0x3f0 [ 351.913042][T11443] ksys_read+0x12f/0x260 [ 351.914140][T11443] ? __pfx_ksys_read+0x10/0x10 [ 351.915369][T11443] do_syscall_64+0xcd/0x250 [ 351.916517][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.918013][T11443] RIP: 0033:0x7fe24bd7c93c [ 351.919158][T11443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 351.923891][T11443] RSP: 002b:00007fe24cadb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.925997][T11443] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7c93c [ 351.927976][T11443] RDX: 000000000000000f RSI: 00007fe24cadb0a0 RDI: 0000000000000003 [ 351.929970][T11443] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 351.931989][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.934020][T11443] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 351.936036][T11443] [ 351.936895][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.061534][ T5374] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 352.064951][ T5374] usb 8-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 352.067305][ T5374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.072484][ T5374] usb 8-1: config 0 descriptor?? [ 352.085212][ T5374] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 353.348128][T11456] FAULT_INJECTION: forcing a failure. [ 353.348128][T11456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.376016][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.0.1926 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 353.378761][T11456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.381556][T11456] Call Trace: [ 353.382439][T11456] [ 353.383224][T11456] dump_stack_lvl+0x16c/0x1f0 [ 353.384488][T11456] should_fail_ex+0x497/0x5b0 [ 353.385750][T11456] _copy_from_user+0x30/0xf0 [ 353.386985][T11456] copy_msghdr_from_user+0x99/0x160 [ 353.388367][T11456] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.389920][T11456] ? __pfx___lock_acquire+0x10/0x10 [ 353.391301][T11456] ___sys_sendmsg+0xff/0x1e0 [ 353.392542][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.393913][T11456] ? find_held_lock+0x2d/0x110 [ 353.395200][T11456] ? ksys_write+0x21c/0x260 [ 353.396413][T11456] ? __fget_light+0x173/0x210 [ 353.397662][T11456] __sys_sendmsg+0x117/0x1f0 [ 353.398890][T11456] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.400252][T11456] do_syscall_64+0xcd/0x250 [ 353.401478][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.403045][T11456] RIP: 0033:0x7fe24bd7def9 [ 353.404229][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.409230][T11456] RSP: 002b:00007fe24cadb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.411401][T11456] RAX: ffffffffffffffda RBX: 00007fe24bf35f80 RCX: 00007fe24bd7def9 [ 353.413500][T11456] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 353.415531][T11456] RBP: 00007fe24cadb090 R08: 0000000000000000 R09: 0000000000000000 [ 353.417583][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.419641][T11456] R13: 0000000000000000 R14: 00007fe24bf35f80 R15: 00007ffc42d64068 [ 353.421725][T11456] [ 353.544515][ T39] audit: type=1400 audit(353.422:638): avc: denied { ioctl } for pid=11457 comm="syz.1.1927" path="/dev/ptyq7" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 354.159363][T11468] omfs: Invalid superblock (0) [ 354.261593][ T5374] usb 8-1: USB disconnect, device number 32 [ 354.596338][T11479] vivid-007: ================= START STATUS ================= [ 354.598868][T11479] vivid-007: Enable Output Cropping: true grabbed [ 354.664702][T11479] vivid-007: Enable Output Composing: true grabbed [ 354.666473][T11479] vivid-007: Enable Output Scaler: true grabbed [ 354.668112][T11479] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 354.692241][T11479] vivid-007: Transmit Mode: HDMI grabbed [ 354.693830][T11479] vivid-007: Hotplug Present: 0x00000000 [ 354.695408][T11479] vivid-007: RxSense Present: 0x00000000 [ 354.717300][T11479] vivid-007: EDID Present: 0x00000000 [ 354.718789][T11479] vivid-007: ================== END STATUS ================== [ 354.745379][ T39] audit: type=1400 audit(354.622:639): avc: denied { remount } for pid=11481 comm="syz.3.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.446930][T11494] FAULT_INJECTION: forcing a failure. [ 355.446930][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 355.472682][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.1.1937 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 355.475424][T11494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.478219][T11494] Call Trace: [ 355.479104][T11494] [ 355.479904][T11494] dump_stack_lvl+0x16c/0x1f0 [ 355.481160][T11494] should_fail_ex+0x497/0x5b0 [ 355.482405][T11494] ? fs_reclaim_acquire+0xae/0x160 [ 355.483753][T11494] should_failslab+0xc2/0x120 [ 355.485001][T11494] __kmalloc_noprof+0xcb/0x400 [ 355.486259][T11494] ? __pfx_lock_acquire+0x10/0x10 [ 355.487587][T11494] tomoyo_realpath_from_path+0xb9/0x720 [ 355.489040][T11494] ? tomoyo_profile+0x47/0x60 [ 355.490279][T11494] tomoyo_path_number_perm+0x245/0x590 [ 355.491703][T11494] ? tomoyo_path_number_perm+0x232/0x590 [ 355.493187][T11494] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.494765][T11494] ? __pfx_lock_release+0x10/0x10 [ 355.496086][T11494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.497663][T11494] ? __fget_files+0x244/0x3f0 [ 355.498903][T11494] security_file_ioctl+0x75/0xc0 [ 355.500211][T11494] __x64_sys_ioctl+0xbb/0x210 [ 355.501460][T11494] do_syscall_64+0xcd/0x250 [ 355.502661][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.504210][T11494] RIP: 0033:0x7fea2bf7def9 [ 355.505394][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.510349][T11494] RSP: 002b:00007fea2cd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.512524][T11494] RAX: ffffffffffffffda RBX: 00007fea2c136058 RCX: 00007fea2bf7def9 [ 355.514585][T11494] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 000000000000000a [ 355.516660][T11494] RBP: 00007fea2cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 355.518727][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.520789][T11494] R13: 0000000000000000 R14: 00007fea2c136058 R15: 00007ffc645b36d8 [ 355.522860][T11494] [ 355.540576][ T39] audit: type=1326 audit(355.422:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11481 comm="syz.3.1934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e0b7def9 code=0x7fc00000 [ 355.820647][T11494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.982552][ T39] audit: type=1400 audit(355.862:641): avc: denied { create } for pid=11503 comm="syz.3.1940" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 355.987630][ T39] audit: type=1400 audit(355.862:642): avc: denied { associate } for pid=11503 comm="syz.3.1940" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 356.051590][ T39] audit: type=1400 audit(355.932:643): avc: denied { create } for pid=11503 comm="syz.3.1940" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 356.169406][ T39] audit: type=1804 audit(356.042:644): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1940" name="/newroot/476/file0/bus/bus" dev="9p" ino=36701627 res=1 errno=0 [ 356.212768][T11504] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20aa2 pfn:0x41658 [ 356.215467][T11504] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 356.217479][T11504] page_type: 0xbfffffff(buddy) [ 356.253548][T11504] raw: 00fff00000000000 ffffea00015fb788 ffffea0000473408 0000000000000000 [ 356.255868][T11504] raw: 0000000000020aa2 0000000000000001 00000000bfffffff 0000000000000000 [ 356.258255][T11504] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 356.280149][T11504] page_owner tracks the page as freed [ 356.285303][T11504] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 11486, tgid 11485 (syz.2.1935), ts 355257086504, free_ts 355555243322 [ 356.299379][T11504] post_alloc_hook+0x2d1/0x350 [ 356.305509][T11504] get_page_from_freelist+0x1351/0x2e50 [ 356.309264][T11504] __alloc_pages_noprof+0x22b/0x2460 [ 356.311945][T11514] 9pnet_virtio: no channels available for device syz [ 356.313854][T11504] alloc_pages_mpol_noprof+0x275/0x610 [ 356.321241][ T39] audit: type=1400 audit(356.202:645): avc: denied { create } for pid=11513 comm="syz.2.1944" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.321856][T11504] folio_alloc_mpol_noprof+0x36/0xd0 [ 356.331012][ T39] audit: type=1400 audit(356.212:646): avc: denied { read } for pid=11513 comm="syz.2.1944" name="file1" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.338728][ T39] audit: type=1400 audit(356.212:647): avc: denied { open } for pid=11513 comm="syz.2.1944" path="/214/file0/bus/file1" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.355221][T11504] vma_alloc_folio_noprof+0xee/0x1b0 [ 356.355248][T11504] do_wp_page+0xfd7/0x3430 [ 356.355257][T11504] __handle_mm_fault+0x2474/0x5650 [ 356.355269][T11504] handle_mm_fault+0x498/0xa60 [ 356.355279][T11504] do_user_addr_fault+0x7a3/0x13f0 [ 356.355297][T11504] exc_page_fault+0x5c/0xc0 [ 356.355311][T11504] asm_exc_page_fault+0x26/0x30 [ 356.355324][T11504] page last free pid 11485 tgid 11485 stack trace: [ 356.355332][T11504] free_unref_folios+0x9e9/0x1390 [ 356.355343][T11504] folios_put_refs+0x560/0x760 [ 356.355354][T11504] free_pages_and_swap_cache+0x36d/0x510 [ 356.355368][T11504] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 356.355381][T11504] tlb_flush_mmu+0xe9/0x590 [ 356.355393][T11504] unmap_page_range+0x1d20/0x3d30 [ 356.355408][T11504] unmap_single_vma+0x194/0x2b0 [ 356.355423][T11504] unmap_vmas+0x22f/0x490 [ 356.355437][T11504] exit_mmap+0x1b8/0xb20 [ 356.355448][T11504] __mmput+0x12a/0x480 [ 356.355459][T11504] mmput+0x62/0x70 [ 356.355469][T11504] do_exit+0x9bf/0x2bb0 [ 356.355482][T11504] do_group_exit+0xd3/0x2a0 [ 356.355495][T11504] __x64_sys_exit_group+0x3e/0x50 [ 356.355509][T11504] x64_sys_call+0x14a9/0x16a0 [ 356.355524][T11504] do_syscall_64+0xcd/0x250 [ 356.356490][T11504] ------------[ cut here ]------------ [ 356.356522][T11504] kernel BUG at include/linux/mm.h:1460! [ 356.356570][T11504] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 356.356584][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.3.1940 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 356.356596][T11504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 356.356602][T11504] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356622][T11504] Code: b0 8b 48 89 df e8 12 f5 49 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 74 05 fd 48 c7 c6 00 b4 b0 8b 4c 89 e7 e8 f3 f4 49 fd 90 <0f> 0b e8 eb 73 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 356.356632][T11504] RSP: 0018:ffffc9002247efc8 EFLAGS: 00010202 [ 356.356641][T11504] RAX: 0000000000000003 RBX: 0000000000000006 RCX: 0000000000000000 [ 356.356648][T11504] RDX: ffff88804e04c880 RSI: ffffffff848664cd RDI: ffff88804e04ccc4 [ 356.356655][T11504] RBP: ffffea0001059634 R08: 0000000000000001 R09: fffffbfff2d24b19 [ 356.356661][T11504] R10: ffffffff969258cf R11: 000000000003fffc R12: ffffea0001059600 [ 356.356668][T11504] R13: ffff88802ab21c00 R14: 0000000000001000 R15: 0000000000001000 [ 356.356674][T11504] FS: 00007f35e189b6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 356.356694][T11504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.356704][T11504] CR2: 00007fea2cd8df98 CR3: 000000004c004000 CR4: 0000000000350ef0 [ 356.356711][T11504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.356717][T11504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.356723][T11504] Call Trace: [ 356.356728][T11504] [ 356.356732][T11504] ? show_regs+0x8c/0xa0 [ 356.356749][T11504] ? die+0x36/0xa0 [ 356.356763][T11504] ? do_trap+0x232/0x430 [ 356.356776][T11504] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356792][T11504] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356806][T11504] ? do_error_trap+0xf4/0x230 [ 356.356819][T11504] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356835][T11504] ? handle_invalid_op+0x34/0x40 [ 356.356847][T11504] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356862][T11504] ? exc_invalid_op+0x2e/0x50 [ 356.356874][T11504] ? asm_exc_invalid_op+0x1a/0x20 [ 356.356888][T11504] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 356.356903][T11504] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.356919][T11504] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 356.356936][T11504] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 356.356951][T11504] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 356.356969][T11504] ? delete_node+0x207/0x8e0 [ 356.356984][T11504] iov_iter_get_pages_alloc2+0x53/0xf0 [ 356.357000][T11504] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 356.357020][T11504] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 356.357038][T11504] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 356.357053][T11504] p9_virtio_zc_request+0x1be/0x1390 [ 356.357064][T11504] ? p9pdu_writef+0xc4/0x100 [ 356.357079][T11504] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 356.357089][T11504] ? __pfx_p9_tag_alloc+0x10/0x10 [ 356.357101][T11504] ? rcu_is_watching+0x12/0xc0 [ 356.357117][T11504] ? trace_9p_protocol_dump+0x192/0x220 [ 356.357132][T11504] ? rcu_is_watching+0x12/0xc0 [ 356.357147][T11504] ? p9_client_prepare_req+0x111/0x4d0 [ 356.357159][T11504] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 356.357172][T11504] ? hlock_class+0x4e/0x130 [ 356.357184][T11504] ? __pfx_stack_trace_save+0x10/0x10 [ 356.357198][T11504] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 356.357213][T11504] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 356.357228][T11504] ? __pfx___lock_acquire+0x10/0x10 [ 356.357247][T11504] ? hlock_class+0x4e/0x130 [ 356.357259][T11504] ? mark_lock+0xb5/0xc60 [ 356.357272][T11504] ? __pfx_mark_lock+0x10/0x10 [ 356.357287][T11504] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 356.357296][T11504] p9_client_write+0x447/0x680 [ 356.357312][T11504] ? __pfx_p9_client_write+0x10/0x10 [ 356.357326][T11504] ? mark_held_locks+0x9f/0xe0 [ 356.357341][T11504] v9fs_issue_write+0xe2/0x180 [ 356.357353][T11504] ? __pfx_v9fs_issue_write+0x10/0x10 [ 356.357365][T11504] ? rcu_is_watching+0x12/0xc0 [ 356.357380][T11504] ? trace_netfs_sreq+0x193/0x220 [ 356.357397][T11504] netfs_do_issue_write+0x92/0x110 [ 356.357412][T11504] netfs_advance_write+0x384/0xbd0 [ 356.357428][T11504] ? netfs_buffer_append_folio+0x569/0x750 [ 356.357443][T11504] netfs_write_folio+0xc44/0x18f0 [ 356.357462][T11504] netfs_writepages+0x2ba/0xb90 [ 356.357473][T11504] ? __pfx_netfs_writepages+0x10/0x10 [ 356.357489][T11504] ? __pfx___lock_acquire+0x10/0x10 [ 356.357504][T11504] ? stack_access_ok+0xf9/0x270 [ 356.357515][T11504] ? __pfx___lock_acquire+0x10/0x10 [ 356.357530][T11504] ? __pfx_netfs_writepages+0x10/0x10 [ 356.357545][T11504] do_writepages+0x1a3/0x7f0 [ 356.357561][T11504] ? __pfx_do_writepages+0x10/0x10 [ 356.357575][T11504] ? __pfx_lock_acquire+0x10/0x10 [ 356.357590][T11504] ? do_raw_spin_lock+0x12d/0x2c0 [ 356.357616][T11504] ? do_raw_spin_unlock+0x172/0x230 [ 356.357627][T11504] ? _raw_spin_unlock+0x28/0x50 [ 356.357641][T11504] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 356.357657][T11504] filemap_fdatawrite_wbc+0x148/0x1c0 [ 356.357672][T11504] ? make_vfsgid+0xe0/0x130 [ 356.357685][T11504] __filemap_fdatawrite_range+0xba/0x100 [ 356.357696][T11504] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 356.357717][T11504] v9fs_dir_release+0x429/0x590 [ 356.357730][T11504] ? __pfx_v9fs_dir_release+0x10/0x10 [ 356.357743][T11504] ? evm_file_release+0x15c/0x1d0 [ 356.357758][T11504] ? __pfx_v9fs_dir_release+0x10/0x10 [ 356.357770][T11504] __fput+0x3f6/0xb60 [ 356.357785][T11504] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.357800][T11504] task_work_run+0x14e/0x250 [ 356.357817][T11504] ? __pfx_task_work_run+0x10/0x10 [ 356.357834][T11504] syscall_exit_to_user_mode+0x27b/0x2a0 [ 356.357850][T11504] do_syscall_64+0xda/0x250 [ 356.357861][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.357873][T11504] RIP: 0033:0x7f35e0b7def9 [ 356.357882][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.357892][T11504] RSP: 002b:00007f35e189b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 356.357902][T11504] RAX: 0000000000000004 RBX: 00007f35e0d35f80 RCX: 00007f35e0b7def9 [ 356.357909][T11504] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 356.357915][T11504] RBP: 00007f35e0bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 356.357922][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.357928][T11504] R13: 0000000000000000 R14: 00007f35e0d35f80 R15: 00007ffe78d0fe98 [ 356.357938][T11504] [ 356.357942][T11504] Modules linked in: [ 356.361165][T11504] ---[ end trace 0000000000000000 ]--- [ 356.361173][T11504] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 356.361194][T11504] Code: b0 8b 48 89 df e8 12 f5 49 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 02 74 05 fd 48 c7 c6 00 b4 b0 8b 4c 89 e7 e8 f3 f4 49 fd 90 <0f> 0b e8 eb 73 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 356.361204][T11504] RSP: 0018:ffffc9002247efc8 EFLAGS: 00010202 [ 356.361213][T11504] RAX: 0000000000000003 RBX: 0000000000000006 RCX: 0000000000000000 [ 356.361219][T11504] RDX: ffff88804e04c880 RSI: ffffffff848664cd RDI: ffff88804e04ccc4 [ 356.361226][T11504] RBP: ffffea0001059634 R08: 0000000000000001 R09: fffffbfff2d24b19 [ 356.361233][T11504] R10: ffffffff969258cf R11: 000000000003fffc R12: ffffea0001059600 [ 356.361244][T11504] R13: ffff88802ab21c00 R14: 0000000000001000 R15: 0000000000001000 [ 356.361251][T11504] FS: 00007f35e189b6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 356.361272][T11504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.361281][T11504] CR2: 00007fea2cd8df98 CR3: 000000004c004000 CR4: 0000000000350ef0 [ 356.361288][T11504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.361295][T11504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.361302][T11504] Kernel panic - not syncing: Fatal exception [ 356.361857][T11504] Kernel Offset: disabled VM DIAGNOSIS: 20:29:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85027625 RDI=ffffffff9a5b5f80 RBP=ffffffff9a5b5f40 RSP=ffffc9002247ea18 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000003fffc R12=0000000000000000 R13=0000000000000035 R14=ffffffff850275c0 R15=0000000000000000 RIP=ffffffff8502764f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f35e189b6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fea2cd8df98 CR3=000000004c004000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000003fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 ffffffff8b0a4f55 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000002 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 000000000000003f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81690e92 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffff600000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e0bf1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35e0bf1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffff600000 00007f35e0b7d000 ffffffff8100a0c8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffff000400000000 0000000b000c000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffffffff81341b38 ffffffff813cf424 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffffffff81341b38 ffffffff813cf424 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffffffff81341b38 ffffffff813cf424 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffffffff81341b35 ffffffff813cf424 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81341be1 ffffffff81341b20 ffffffff813cf424 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132bf70 RDX=ffff88801d6c4880 RSI=ffffffff8132bfb8 RDI=ffffffff93277880 RBP=0000000000000001 RSP=ffffc900008b0fd0 R8 =0000000000000001 R9 =fffffbfff264ef10 R10=ffffffff93277887 R11=ffffc900008b0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132bfb9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4297d5f148 CR3=000000002a4de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cbfc534 000055558cbfc530 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cbf9490 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558cc06c9d 000055558cc06b70 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff586696f0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f308028003001000 0980040100000408 06060150a2003165 6c69662f2e01ffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffff308000300 1000028004040603 c0007375622f2e01 ffffffffffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060806060152f8 0010000010000004 06082cfa00737562 2f2e01ffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000010000060806 0100000808060601 03d00000020707f8 f810001380040100 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001000006 0806010000080806 060103d000000207 07f8f81000138004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000608060601 52f8001000001000 000406082cfa0073 75622f2e01ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff30800 0300100002800404 0603c0007375622f 2e01ffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff30802800300 1000098004010000 040806060150a200 31656c69662f2e01 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff8132bf70 RDX=ffff88801d6d8000 RSI=ffffffff8132bfb8 RDI=ffffffff93277880 RBP=0000000000000002 RSP=ffffc90000858fd0 R8 =0000000000000001 R9 =fffffbfff264ef10 R10=ffffffff93277887 R11=ffffc90000858ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132bfb9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d97b760a0 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000200100 Opmask01=00000000ffffffff Opmask02=00000000fff80008 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc23fdc590 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff8132bf70 RDX=ffff88802ae2c880 RSI=ffffffff8132bfb8 RDI=ffffffff93277880 RBP=0000000000000003 RSP=ffffc90000908fd0 R8 =0000000000000001 R9 =fffffbfff264ef10 R10=ffffffff93277887 R11=ffffc90000908ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8132bfb9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3f02884500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7897601440 CR3=000000002b0e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000400000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd280befc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616d765f70616d 6e7520205d343035 3131545b5d333234 3535332e36353300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361677655706167 6475202057343035 3131545157333234 3535332436353300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 352e353520202039 34313100395d3031 323430322e353533 20203a3333300020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e302f20202030 2b31200039573031 3234303224353533 2020203300000020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7c637979636778 6f7a2a6f66636c55 7862693779796b66 697e2a7e55796c7a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 305a43582a573e33 3e3b3b5e51573a3b 383e3a3f243f3f39 2a2a51343e360a6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000