last executing test programs: 3m14.354338168s ago: executing program 3 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x200480c1}, 0x11) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x3b9ac9ff, 0x8c) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m13.275856059s ago: executing program 3 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x80) 3m13.159127949s ago: executing program 3 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x66, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x3, 0x2b}, @fda={0x66646185, 0x8, 0x1, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x2a}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 3m13.15837617s ago: executing program 3 (id=877): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 3m13.050247239s ago: executing program 3 (id=878): openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0xc0089364, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3m13.049952453s ago: executing program 3 (id=879): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4}, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f00000006c0), 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x841) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto(r3, &(0x7f0000000540)="fc28315c64bae94bb60e0196fab6000d532f33225be8eea00c994d47e4fb305bdc0074cddab7bc1d05fb1da737f883037ab15c1bc553572a4db6b15764e732104f53f9265ba1ad015c60b478f811753015eb0ab6ef419a36d6fd3cc9bae96fb9e37bdd88121abc3052a8e46be05db996eb2a6ea876b9a517456a9b55400e0d1f889ad94acf2ec38cb9ed57c008a5febdebccd2bb3537ab69f1e7f96a8ccc950147c8bdcb27dc67a853e054838b0805002da2ba2c0a24b9d79db93564b83040b8e8567747652f2704d1f83a0f34024e4fc4680bf13cec112e2432fab8f7e368de61a103efbf8bed", 0xe7, 0x20000000, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0xced, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}}}, 0x80) 2m59.040338041s ago: executing program 1 (id=984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f000000", @ANYRES32=r3], 0x1c}, 0x1, 0x3000000}, 0x0) 2m58.630253632s ago: executing program 1 (id=987): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="fecd", 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}], 0x2, 0x20000) 2m58.630158211s ago: executing program 1 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="440f20c0663509000000440f22c066b9800000c00f326635000100000f3066b97203000066b80000000066ba000000800f300f794eea66b9ec0a00000f320fc799cfab66b90e0200000f32f3ae66b9850b000066b8af8a000066ba000000000f300f20d86635200000000f22d8", 0x6d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 2m57.736329145s ago: executing program 32 (id=879): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4}, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f00000006c0), 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x841) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendto(r3, &(0x7f0000000540)="fc28315c64bae94bb60e0196fab6000d532f33225be8eea00c994d47e4fb305bdc0074cddab7bc1d05fb1da737f883037ab15c1bc553572a4db6b15764e732104f53f9265ba1ad015c60b478f811753015eb0ab6ef419a36d6fd3cc9bae96fb9e37bdd88121abc3052a8e46be05db996eb2a6ea876b9a517456a9b55400e0d1f889ad94acf2ec38cb9ed57c008a5febdebccd2bb3537ab69f1e7f96a8ccc950147c8bdcb27dc67a853e054838b0805002da2ba2c0a24b9d79db93564b83040b8e8567747652f2704d1f83a0f34024e4fc4680bf13cec112e2432fab8f7e368de61a103efbf8bed", 0xe7, 0x20000000, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0xced, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}}}, 0x80) 2m57.629366292s ago: executing program 1 (id=991): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x44050) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x40}, 0x1c) 2m57.5732922s ago: executing program 1 (id=993): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x44, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000740)={0x0, 0x4c, r2, 0x0, 0x0, 0x1, 0x3, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0xdb, 0x6, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, "65366a50432b7ee2c7feddd91df8680200c6fa7272090000000000000023a260"}}) 2m57.388473243s ago: executing program 1 (id=995): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0) 2m57.355899426s ago: executing program 33 (id=995): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0) 2.710210859s ago: executing program 0 (id=2906): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x44, 0x4}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 2.639684571s ago: executing program 4 (id=2909): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x500, @mcast1}, 0x0, {[0x691]}}, 0x5c) 2.591996934s ago: executing program 4 (id=2910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 2.39881905s ago: executing program 0 (id=2913): socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3}, @l2cap_cid_signaling={{}, [@l2cap_move_chan_cfm={{0x10, 0x9}, {0x7f, 0x9}}, @l2cap_conf_req={{0x4, 0x6}, {0x3, 0xb143, [@l2cap_conf_fcs, @l2cap_conf_rfc={0x4, 0x0, {0x0, 0x2b, 0x7, 0xdc, 0x0, 0x7}}]}}, @l2cap_create_chan_rsp={{0xd, 0x8}, {0x7fff, 0x4, 0x100, 0x8}}, @l2cap_info_rsp={{0xb, 0xe}, {0x2d1c, 0x90a, "a19c64a4dde8750b707c830e76997b437d50a9f978491d09d1697db224888d30ab54bfb3ca7603688960847cc88ee758da0920df8986045aca25f2fa3e6315ad481e6f2b0646e871854039d0b03bbbd26558e6a92443730a8842009dca8c5d57c90d80f1240216ad941ded6bff19e5dbdbd0807c8229eec09b28edf660"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4}, {0x9}}, @l2cap_create_chan_rsp={{0xd, 0x1}, {0xdb, 0x1, 0x5, 0x9}}]}}, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 1.669542811s ago: executing program 4 (id=2920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x6e2800dbe011d519, 0x0, 0x1000, &(0x7f0000ff5000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xeeee8000, 0xd3, &(0x7f0000000400)=""/211}]}) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000270800283afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000000126b8fee1cd486ad0141f"], 0x0) mkdir(0x0, 0x4d) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r5, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}], 0x1) openat$cgroup_subtree(r5, 0x0, 0x201, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f0000001040)) accept4$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x80000) r8 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r8}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000040)="0f0966baf80cb848dc8b88ef66bafc0c66ed8fe9d0993d0078000066b80c000f00d8366746dc7b0266b8a4000f00d066430f3a22ba00500000000fc76f9e410f01f10fc79a88000000", 0x49}], 0x1, 0x8, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x15a) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0xfffffffc, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.499207951s ago: executing program 5 (id=2922): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) (fail_nth: 7) 1.498941437s ago: executing program 0 (id=2923): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) 1.498844999s ago: executing program 0 (id=2924): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 1.467593831s ago: executing program 5 (id=2925): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x4, "d69a5a861aaa8de09dbf70a7e3daab092148c641d9881d5c077252f49646aea3a6e9d3bdb6b8e1e550ba8c08f3a9e542ead79f6b104d357abcda41b7001796c3", {0x6, 0x9a}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) (fail_nth: 5) 1.36004005s ago: executing program 4 (id=2928): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000015c0)={0x0, "2b189592536d350a686e0f803643b6a20d511d24605c5d2881e6692bf720565f", 0x800, 0x9, 0xe, 0x8, 0x3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0xe, 0x6, 0x4, 0x0, 0xffff, {}, {0x2, 0x0, 0x6, 0x5, 0xff, 0x1, "1aa8d632"}, 0x5, 0x4, {}, 0x9, 0x0, r2}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x200}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x9, 0x8abe, 0x2e, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8, 0x700, 0x0, 0x1d}}) 1.2802708s ago: executing program 4 (id=2929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 1.220283252s ago: executing program 5 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000226bd7000faffffff02000000080005"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) r3 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r5, 0xd2a67000) io_uring_enter(r3, 0x0, 0x10a5, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) 1.220165779s ago: executing program 5 (id=2931): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x1, @empty, 0xf684}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (fail_nth: 7) 1.170191853s ago: executing program 5 (id=2933): socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) syz_open_pts(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x3}, @l2cap_cid_signaling={{}, [@l2cap_move_chan_cfm={{0x10, 0x9}, {0x7f, 0x9}}, @l2cap_conf_req={{0x4, 0x6}, {0x3, 0xb143, [@l2cap_conf_fcs, @l2cap_conf_rfc={0x4, 0x0, {0x0, 0x2b, 0x7, 0xdc, 0x0, 0x7}}]}}, @l2cap_create_chan_rsp={{0xd, 0x8}, {0x7fff, 0x4, 0x100, 0x8}}, @l2cap_info_rsp={{0xb, 0xe}, {0x2d1c, 0x90a, "a19c64a4dde8750b707c830e76997b437d50a9f978491d09d1697db224888d30ab54bfb3ca7603688960847cc88ee758da0920df8986045aca25f2fa3e6315ad481e6f2b0646e871854039d0b03bbbd26558e6a92443730a8842009dca8c5d57c90d80f1240216ad941ded6bff19e5dbdbd0807c8229eec09b28edf660"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4}, {0x9}}, @l2cap_create_chan_rsp={{0xd, 0x1}, {0xdb, 0x1, 0x5, 0x9}}]}}, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 880.125223ms ago: executing program 0 (id=2936): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x68000080) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r6, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_uring_enter(r1, 0x4be8, 0x562, 0x9, &(0x7f00000002c0)={[0xf]}, 0x8) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x14b6deac033214c2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000010006b04000000406e17aa31056b876c1d0000007ea60864160ada6d04001ac0080010000480020002000011ea64bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000140)="7de0d70b199a86a13b6ac221aa7dd0da50e5ca7cb085e39a11a8340a798d59f36bea77b70ad9830eecb2fb903ed82cb42e0ef17770af4f0a15451795b9ea", 0x3e, 0x20048804, &(0x7f0000000180)={0xa, 0x4e24, 0xf3af, @rand_addr=' \x01\x00', 0x29}, 0x1c) 769.935133ms ago: executing program 2 (id=2938): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x1d}}) (fail_nth: 7) 769.717543ms ago: executing program 2 (id=2939): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x20440) r2 = dup3(r0, r1, 0x0) r3 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x528d}, &(0x7f0000000380)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x3, 0x0, 0x100, 0x5}) io_uring_enter(r3, 0xce3, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) 690.569009ms ago: executing program 2 (id=2940): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000010006b04000000406e17aa31056b876c1d0000007ea60864160ada6d04001ac0080010000480020002000011ea64bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 690.157937ms ago: executing program 2 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@measure}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 630.026947ms ago: executing program 2 (id=2942): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000200)='V', 0x1) write$char_usb(r2, &(0x7f0000000000)='8', 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x200}]}}]}, 0x38}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000140)={0x100, r11}, 0x0) landlock_restrict_self(r10, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_getaddr={0x7c, 0x16, 0x20, 0x70bd2a, 0x25dfdbfe, {0x2, 0x78, 0x5d, 0xc8, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x8, 0xbc5, 0x2}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_CACHEINFO={0x14, 0x6, {0xfff, 0x4, 0x7, 0x81}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)={0x74, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4fabe73ae2865db8b724ef63cbb80117fd457f2badecf05d3b52f1977e5a470"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c8173dc7bca1cb2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bdab123dec1eff044b3ac3d9606c394edc9e969580d4f262"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 420.346361ms ago: executing program 4 (id=2943): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) tkill(r1, 0xa) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x3, 0x4c000) ioctl$I2C_RETRIES(r2, 0x701, 0x7) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x22080, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000240)=[{r2, 0x8000}, {r3, 0x84}, {r5, 0x80}, {r0, 0x200a}, {r2, 0x104}], 0x5, &(0x7f0000000280), &(0x7f00000002c0)={[0xf]}, 0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/255, 0xff) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000440)=r3, 0x1) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x7}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e24, 0x2c0d, @dev={0xfe, 0x80, '\x00', 0x28}, 0xa1f}}, 0x4, 0x8000, 0x800, 0x10, 0x83, 0x2, 0x72}, 0x9c) r8 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000600), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000640)={'netdevsim0', 0x32, 0x39}, 0xd) recvfrom$inet_nvme(r6, &(0x7f0000000680)=""/57, 0x39, 0x60, &(0x7f00000006c0)=@hci={0x1f, 0x3, 0x3}, 0x80) write$UHID_CREATE2(r2, &(0x7f0000000740)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xfd, 0xf97f, 0x4, 0x4, 0x2, 0x3ff, "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"}}, 0x215) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000980)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000009c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xe5f, '\x00', r9, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) fcntl$setown(r2, 0x8, r1) r10 = dup2(r4, r6) syz_usbip_server_init(0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000ac0)=0x0) sendmsg$nfc_llcp(r10, &(0x7f0000000d40)={&(0x7f0000000b00)={0x27, r11, 0x1, 0x7, 0x0, 0x45, "c3e64e6e2c58e4fb4c65b4bf9487f13e7ec0ff3ae3339422228a813acaccac9a31d05f84ae46adf8791216e14bcc897a4ff6211db7ef4748827404b6a44433", 0x1}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e5d8142be8cb1c9b4620c5c4ce27c70c683ff785c1b2df73482a4dc28ca584f5a23331786e7b3f15443a9d2793a7273907d18243cd021918be9e94f071b3ebc737d70515858d5271e9cc6138b33efcb5927c438f3b424fd0d579951ff0c0e72b9b3a16fc49b0e5566779b1423de03872c4641caae06618209676", 0x7a}], 0x1, &(0x7f0000000c40)={0xd0, 0x119, 0x7, "5aa97a249e5f22539f9a03dcc989174d8177063a6901cfa974332a5c6d2262b01c6e77830ced14c015563f603b58c9efc9e29b50f062eeb2b9bdb75e99fcafee6359319070659a81afe5fabdbb36b04334fc9e8dd86787d6c3283d23f67cf42d560650f0e3fdc36c737827690e923a2a1d72a3fd869714f75dde5a53b3ad5af774070f12bf3d3e612cd05f9ea44192f681388cef6e72a9dc2c29e07ca75f3e58f1259c68c8a38127c4476c8e608e5e26919ad663b32ec106bcadf4"}, 0xd0, 0x4000000}, 0x40084) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000d80)=r2) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00)=[0x3, 0xff, 0x2, 0x6, 0x6, 0x5, 0x1], &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x7, 0x800], 0x0, 0xc}) 270.392592ms ago: executing program 5 (id=2944): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 228.758µs ago: executing program 0 (id=2945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)="f8c21f4bc6399e4abef3caa95c18e756720b0e0d2ca0dfc6a7764ee163ed9b27210966662239d539b0b8979c58453bfe87a23b32e26af342b545adecbb34d6ec75fe8b831db2d585923e3ef4d58489bad96e5c71f3dee89d89fe1aaf5eb7199ac9c0da47a2ee58c7efa44ec58ce18a4ef43112bd575a539b40", 0x79}], 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x3, {r2}, {0xffffffffffffffff}, 0x9, 0x3}) write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) ptrace$setregs(0xd, r4, 0x2, &(0x7f0000000240)="18607651149d7b07b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda92df39ed4b41924dc225ad4028dd23defb87d698be5c749450b350a789dcfc6b2d6a696b5026c1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb2a178956ee39b4a7377e56f74103fe9e03a1a83a675b4b93a32fe61acddab72640f3c5aa65149e96468b1159a6e1f2e74843b6d82aa4da177c79abb5cc56a3b7b115aa") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x69, 0x0, 0xa, 0x0, 0x0, 0x4e, 0xa}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x103, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4040800) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "0ca474864549ddec", "cd402ed86aed3c69992e59471c31ead8", "6563aff3", "5ba3b7deb8fd11a3"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x57c, 0x0, 0x1, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) syz_open_procfs$userns(0x0, &(0x7f0000000000)) sendfile(r5, r7, 0x0, 0x8000002b) 0s ago: executing program 2 (id=2946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000440)=""/4069, &(0x7f0000000040)=0xfe5) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r1 = openat$pmem0(0xffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x5, 0x7, 0xa0, 0x3}, {0x8, 0x1, 0x82, 0xffff}]}) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000780)={0x7, &(0x7f0000000680)=[{0x3, 0x49, &(0x7f0000000100)="d105b270c5495e1ea73a2a01ebb838c37b5b5beb9286c2271ccbb82a222e2592840292d8b5b36c6ee378c8f9a27b7efbd4c4c2f5c01d7327800873a435d6c0ef4b8be8a348f943d09c"}, {0x4, 0xfe, &(0x7f0000000180)="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"}, {0x9, 0x76, &(0x7f00000002c0)="097ca983e207b1e8e98db3c617b4642b97fd50b43d6d6924b98f9daac598100b3c79c576d0c077e1245c5748358d0a5638a11d972f4111c0a2571cb3fb8336885f31d8a2e2f5098f545970413fd67c2b4a303f4976487246f58107aa2229e487b9ef1d93aa058bf169cf81eed252346f8300977bd32d", 0x1}, {0x1, 0x60, &(0x7f0000000340)="4dedb33e08b37c4e52e02ee27b6cf070b6847e1fa93e921fc61124ff266e14cc117459352d233fdc4954ea01381aa278b569cd9b36157b1b72e253dfb56a417f465d24d01326ae544d841511d8d712059a9a05477580d2b415b643edef423dff", 0x1, 0x1}, {0x8000, 0xe9, &(0x7f00000007c0)="04684063d4cf443c672d313f615368b98ee7a843a6f8c3089a5c9cdfe4c22ea5664c9b6d4db29912b659ef6a189806e0c97c370fe5a3b563626dbb592e7e63f9ceea75f54ea213a8e330256c6c46093e0c15b3a346b27497504e93d1dfd95d3ef10fd680c325a953b9a2205ebbad65f01619f92cf2e35a2f3578e296f276d1a367767aabd122dbdd2b652096e1167b782e042a9351f6d241ee26056fc174af9af2ed40d62accdbff4d8646426cd0b074ef9e154ca3c6e50063df87768cbe1efeea67fe2516ccfaa3c3f81d72d65e446dfa67b9ad27bdfdd95c4b88c2448d2171cf62dfc4c4aafcfafc", 0x1, 0x1}, {0x5, 0x83, &(0x7f00000004c0)="da09b4b00d5aef9d09cacbed16c506b8c9c55ab9e47185b4cb1250bf1b9f1ccf951f6af385807943ba4b6e7a40610c71f13f048b07f804adf6ccaea1abccfc84697779ddb9e03a5f7763b44a2f19e6ff7683dd568e68a7e22fa72f83ba6345a4dd17ab8352b7fcbe21e38b204617f286f9706109db5b82e120f8c0bf6a50d96f6a6e07", 0x1}, {0xee, 0xed, &(0x7f0000000580)="d26c3b477427ed5cd02e7a2312b97077cf833413a77015ea35a813863c725c8ecff24d527ce8f7cf2b843d1d3f2402728c9d0ffaea37115b4225cd8f228cc30f307bdcb1a9eff2f08ee54de976152c8cf5d7f5c0412854a8131265266f343d71c739a80fd21c509302ccba78484ea6b28d2b91a493c0b939eb8446fca3a11bd8b034c8036a1b3f252344e94595121a45ba1d8b282c807b1e5a52b598eb0801bed23bebbac301a8924b5488bbc53ec41a9de0d017b29167b3e9214dce397e2ebdcaa822785f8b48b9486ea3586047642b45cd5e2ac316ac973cc94beee884106f8cec14999e05a6bac6ac648df4", 0x0, 0x1}]}) kernel console output (not intermixed with test programs): ][T14131] should_fail_ex+0x497/0x5b0 [ 306.398780][T14131] ? fs_reclaim_acquire+0xae/0x150 [ 306.400596][T14131] should_failslab+0xc2/0x120 [ 306.402247][T14131] __kmalloc_noprof+0xcb/0x510 [ 306.403973][T14131] ? d_absolute_path+0x137/0x1b0 [ 306.405719][T14131] ? rcu_is_watching+0x12/0xc0 [ 306.407368][T14131] tomoyo_encode2+0x100/0x3e0 [ 306.409012][T14131] tomoyo_encode+0x29/0x50 [ 306.410397][T14131] tomoyo_realpath_from_path+0x19d/0x720 [ 306.412325][T14131] tomoyo_path_number_perm+0x248/0x590 [ 306.414262][T14131] ? tomoyo_path_number_perm+0x235/0x590 [ 306.416332][T14131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.418547][T14131] ? __pfx_lock_release+0x10/0x10 [ 306.420409][T14131] ? trace_lock_acquire+0x14e/0x1f0 [ 306.422280][T14131] ? lock_acquire+0x2f/0xb0 [ 306.423901][T14131] ? __fget_files+0x40/0x3a0 [ 306.425577][T14131] ? __fget_files+0x206/0x3a0 [ 306.427325][T14131] security_file_ioctl+0x9b/0x240 [ 306.429174][T14131] __x64_sys_ioctl+0xb7/0x200 [ 306.430888][T14131] do_syscall_64+0xcd/0x250 [ 306.432510][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.434580][T14131] RIP: 0033:0x7f6ab9185d29 [ 306.436235][T14131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.443063][T14131] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.446050][T14131] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 306.448895][T14131] RDX: 0000000020000180 RSI: 0000000080284504 RDI: 0000000000000004 [ 306.451754][T14131] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.454607][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.457419][T14131] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 306.460277][T14131] [ 306.461948][ T6059] dvb-usb: bulk message failed: -22 (1/0) [ 306.463879][T14131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.464031][ T6059] dvb-usb: error while querying for an remote control event. [ 306.469669][ T5974] usb 7-1: USB disconnect, device number 45 [ 306.479708][ T5974] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 306.789435][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 306.789446][ T39] audit: type=1326 audit(2000000013.180:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14137 comm="syz.0.2706" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faac3385d29 code=0x0 [ 306.885549][T14139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.889575][T14139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.901010][T14139] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 306.986153][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 307.029243][T14148] FAULT_INJECTION: forcing a failure. [ 307.029243][T14148] name failslab, interval 1, probability 0, space 0, times 0 [ 307.032806][T14148] CPU: 3 UID: 0 PID: 14148 Comm: syz.5.2709 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 307.035876][T14148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.038713][T14148] Call Trace: [ 307.039616][T14148] [ 307.040450][T14148] dump_stack_lvl+0x16c/0x1f0 [ 307.041748][T14148] should_fail_ex+0x497/0x5b0 [ 307.043154][T14148] ? fs_reclaim_acquire+0xae/0x150 [ 307.044651][T14148] should_failslab+0xc2/0x120 [ 307.045908][T14148] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 307.047430][T14148] ? __alloc_skb+0x2b1/0x380 [ 307.048631][T14148] __alloc_skb+0x2b1/0x380 [ 307.049851][T14148] ? __pfx___alloc_skb+0x10/0x10 [ 307.051471][T14148] ? __mutex_trylock_common+0xea/0x250 [ 307.052947][T14148] ? __pfx___mutex_trylock_common+0x10/0x10 [ 307.054608][T14148] netlink_dump+0x699/0xd00 [ 307.055842][T14148] ? __mutex_lock+0x1cc/0xa60 [ 307.057058][T14148] ? __pfx_netlink_dump+0x10/0x10 [ 307.058344][T14148] ? __pfx_lock_release+0x10/0x10 [ 307.059651][T14148] ? __pfx_netlink_lookup+0x10/0x10 [ 307.061230][T14148] __netlink_dump_start+0x6ca/0x970 [ 307.062836][T14148] rdma_nl_rcv_msg+0x55a/0x6e0 [ 307.064368][T14148] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 307.065816][T14148] ? __pfx_nldev_res_get_dumpit+0x10/0x10 [ 307.067388][T14148] ? __pfx___lock_acquire+0x10/0x10 [ 307.068745][T14148] ? hlock_class+0x4e/0x130 [ 307.070021][T14148] ? __lock_acquire+0xcc5/0x3c40 [ 307.071533][T14148] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 307.071736][T14150] FAULT_INJECTION: forcing a failure. [ 307.071736][T14150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.073442][T14148] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 307.079758][T14148] ? netlink_deliver_tap+0x1ae/0xd30 [ 307.081434][T14148] netlink_unicast+0x53c/0x7f0 [ 307.082949][T14148] ? __pfx_netlink_unicast+0x10/0x10 [ 307.084481][T14148] netlink_sendmsg+0x8b8/0xd70 [ 307.085964][T14148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.087414][T14148] ____sys_sendmsg+0xaaf/0xc90 [ 307.088729][T14148] ? copy_msghdr_from_user+0x10b/0x160 [ 307.090160][T14148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.091810][T14148] ___sys_sendmsg+0x135/0x1e0 [ 307.093278][T14148] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.094776][T14148] ? __pfx_lock_release+0x10/0x10 [ 307.096144][T14148] ? trace_lock_acquire+0x14e/0x1f0 [ 307.097500][T14148] ? __fget_files+0x206/0x3a0 [ 307.098823][T14148] __sys_sendmsg+0x16e/0x220 [ 307.100543][T14148] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.102451][T14148] do_syscall_64+0xcd/0x250 [ 307.104166][T14148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.106109][T14148] RIP: 0033:0x7fe71dd85d29 [ 307.107369][T14148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.112561][T14148] RSP: 002b:00007fe71eade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.114895][T14148] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd85d29 [ 307.115633][ T30] usb 9-1: USB disconnect, device number 25 [ 307.117126][T14148] RDX: 0000000024048010 RSI: 0000000020002500 RDI: 0000000000000003 [ 307.117137][T14148] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 307.117144][T14148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.117151][T14148] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 307.117165][T14148] [ 307.117173][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz.2.2710 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 307.117199][T14150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.137605][T14150] Call Trace: [ 307.138606][T14150] [ 307.139391][T14150] dump_stack_lvl+0x16c/0x1f0 [ 307.140639][T14150] should_fail_ex+0x497/0x5b0 [ 307.141885][T14150] __fpu_restore_sig+0xf5/0x1430 [ 307.143204][T14150] ? __pfx___fpu_restore_sig+0x10/0x10 [ 307.144665][T14150] ? lock_acquire+0x2f/0xb0 [ 307.145864][T14150] ? __might_fault+0xe3/0x190 [ 307.147113][T14150] fpu__restore_sig+0x113/0x190 [ 307.148398][T14150] restore_sigcontext+0x4ca/0x6a0 [ 307.149732][T14150] ? __pfx_restore_sigcontext+0x10/0x10 [ 307.151228][T14150] ? __pfx_restore_altstack+0x10/0x10 [ 307.152659][T14150] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.154039][T14150] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.155435][T14150] __do_sys_rt_sigreturn+0x1bd/0x240 [ 307.156823][T14150] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 307.158359][T14150] do_syscall_64+0xcd/0x250 [ 307.159570][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.161119][T14150] RIP: 0033:0x7f6ab9185d27 [ 307.162293][T14150] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 307.167327][T14150] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 [ 307.168945][T14150] RAX: 0000000000000013 RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 307.171014][T14150] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000003 [ 307.173024][T14150] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.175091][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.177143][T14150] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 307.179210][T14150] [ 307.180116][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.182113][ T39] audit: type=1400 audit(2000000013.550:1072): avc: denied { append } for pid=14151 comm="syz.5.2711" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 307.333348][T14159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 307.666184][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'. [ 307.668765][T14164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2715'. [ 307.671533][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'. [ 307.674638][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'. [ 307.678061][T14164] FAULT_INJECTION: forcing a failure. [ 307.678061][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 307.681782][T14164] CPU: 0 UID: 0 PID: 14164 Comm: syz.0.2715 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 307.685875][T14164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.689716][T14164] Call Trace: [ 307.690948][T14164] [ 307.692042][T14164] dump_stack_lvl+0x16c/0x1f0 [ 307.693711][T14164] should_fail_ex+0x497/0x5b0 [ 307.695387][T14164] should_failslab+0xc2/0x120 [ 307.697102][T14164] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 307.699027][T14164] ? skb_clone+0x190/0x3f0 [ 307.700201][T14164] skb_clone+0x190/0x3f0 [ 307.701271][T14164] netlink_deliver_tap+0xabd/0xd30 [ 307.702822][T14164] netlink_unicast+0x5e1/0x7f0 [ 307.704312][T14164] ? __pfx_netlink_unicast+0x10/0x10 [ 307.705936][T14164] netlink_sendmsg+0x8b8/0xd70 [ 307.707575][T14164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.709422][T14164] ____sys_sendmsg+0xaaf/0xc90 [ 307.711039][T14164] ? copy_msghdr_from_user+0x10b/0x160 [ 307.712857][T14164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.714684][T14164] ___sys_sendmsg+0x135/0x1e0 [ 307.716328][T14164] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.718124][T14164] ? __pfx_lock_release+0x10/0x10 [ 307.719896][T14164] ? trace_lock_acquire+0x14e/0x1f0 [ 307.721703][T14164] ? __fget_files+0x206/0x3a0 [ 307.723060][T14164] __sys_sendmsg+0x16e/0x220 [ 307.724564][T14164] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.725867][T14164] do_syscall_64+0xcd/0x250 [ 307.727396][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.729331][T14164] RIP: 0033:0x7faac3385d29 [ 307.730682][T14164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.736448][T14164] RSP: 002b:00007faac40f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.738898][T14164] RAX: ffffffffffffffda RBX: 00007faac3575fa0 RCX: 00007faac3385d29 [ 307.740881][T14164] RDX: 0000000000000800 RSI: 0000000020000200 RDI: 0000000000000006 [ 307.743375][T14164] RBP: 00007faac40f4090 R08: 0000000000000000 R09: 0000000000000000 [ 307.746047][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.748746][T14164] R13: 0000000000000000 R14: 00007faac3575fa0 R15: 00007fff8fb20708 [ 307.751333][T14164] [ 307.752556][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.886378][T14174] overlayfs: missing 'lowerdir' [ 308.073150][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'. [ 308.076596][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2720'. [ 308.079994][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'. [ 308.083134][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2720'. [ 308.316871][T14193] binder: 14192:14193 unknown command 0 [ 308.318641][T14193] binder: 14192:14193 ioctl c0306201 20000080 returned -22 [ 308.326894][T14193] FAULT_INJECTION: forcing a failure. [ 308.326894][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 308.331263][T14193] CPU: 0 UID: 0 PID: 14193 Comm: syz.2.2725 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 308.334943][T14193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.338343][T14193] Call Trace: [ 308.339304][T14193] [ 308.340328][T14193] dump_stack_lvl+0x16c/0x1f0 [ 308.341979][T14193] should_fail_ex+0x497/0x5b0 [ 308.343621][T14193] ? fs_reclaim_acquire+0xae/0x150 [ 308.345441][T14193] should_failslab+0xc2/0x120 [ 308.346894][T14193] __kmalloc_cache_noprof+0x68/0x410 [ 308.348774][T14193] ? lock_acquire+0x2f/0xb0 [ 308.350156][T14193] binder_transaction+0xb92/0x9cb0 [ 308.351494][T14193] ? __pfx_mark_lock+0x10/0x10 [ 308.352686][T14193] ? __pfx___lock_acquire+0x10/0x10 [ 308.354002][T14193] ? find_held_lock+0x2d/0x110 [ 308.355262][T14193] ? hlock_class+0x4e/0x130 [ 308.356433][T14193] ? __pfx_binder_transaction+0x10/0x10 [ 308.357817][T14193] ? __pfx___lock_acquire+0x10/0x10 [ 308.359184][T14193] ? mark_lock+0xb5/0xc60 [ 308.360298][T14193] ? find_held_lock+0x2d/0x110 [ 308.361511][T14193] ? __might_fault+0x13b/0x190 [ 308.362713][T14193] ? __pfx_lock_release+0x10/0x10 [ 308.363985][T14193] ? trace_lock_acquire+0x14e/0x1f0 [ 308.365356][T14193] ? __pfx_lock_release+0x10/0x10 [ 308.366768][T14193] ? lock_acquire+0x2f/0xb0 [ 308.368398][T14193] ? __might_fault+0xe3/0x190 [ 308.370045][T14193] ? __might_fault+0xe3/0x190 [ 308.371614][T14193] binder_thread_write+0xab4/0x4c30 [ 308.373394][T14193] ? __pfx___lock_acquire+0x10/0x10 [ 308.375205][T14193] ? __pfx_binder_thread_write+0x10/0x10 [ 308.377032][T14193] ? find_held_lock+0x2d/0x110 [ 308.378215][T14193] ? binder_debug+0xdf/0x1b0 [ 308.379448][T14193] ? __pfx_binder_debug+0x10/0x10 [ 308.380749][T14193] ? lock_acquire+0x2f/0xb0 [ 308.381888][T14193] ? __might_fault+0xe3/0x190 [ 308.383095][T14193] binder_ioctl+0x2669/0x6fc0 [ 308.384294][T14193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.385813][T14193] ? __pfx_binder_ioctl+0x10/0x10 [ 308.387338][T14193] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 308.388992][T14193] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 308.390946][T14193] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 308.392556][T14193] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 308.394259][T14193] ? __pfx_lock_release+0x10/0x10 [ 308.395560][T14193] ? selinux_file_ioctl+0x180/0x270 [ 308.397240][T14193] ? selinux_file_ioctl+0xb4/0x270 [ 308.398480][T14193] ? __pfx_binder_ioctl+0x10/0x10 [ 308.399755][T14193] __x64_sys_ioctl+0x190/0x200 [ 308.400946][T14193] do_syscall_64+0xcd/0x250 [ 308.402115][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.403622][T14193] RIP: 0033:0x7f6ab9185d29 [ 308.404786][T14193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.410518][T14193] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.412661][T14193] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 308.414694][T14193] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 308.416747][T14193] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.418843][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.420976][T14193] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 308.423097][T14193] [ 308.423965][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.426434][ T39] audit: type=1400 audit(2000000014.810:1073): avc: denied { listen } for pid=14187 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.503927][T14199] ubi0: attaching mtd0 [ 308.507827][T14199] ubi0: scanning is finished [ 308.509426][T14199] ubi0: empty MTD device detected [ 308.525674][ T39] audit: type=1326 audit(2000000014.920:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.2.2726" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab9185d29 code=0x0 [ 308.556196][T14201] FAULT_INJECTION: forcing a failure. [ 308.556196][T14201] name failslab, interval 1, probability 0, space 0, times 0 [ 308.560448][T14201] CPU: 1 UID: 0 PID: 14201 Comm: syz.0.2728 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 308.564031][T14201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.567582][T14201] Call Trace: [ 308.568733][T14201] [ 308.569753][T14201] dump_stack_lvl+0x16c/0x1f0 [ 308.571347][T14201] should_fail_ex+0x497/0x5b0 [ 308.572909][T14201] ? fs_reclaim_acquire+0xae/0x150 [ 308.574527][T14201] should_failslab+0xc2/0x120 [ 308.576109][T14201] __kmalloc_cache_noprof+0x68/0x410 [ 308.577877][T14201] find_css_set+0x74e/0x1bb0 [ 308.579481][T14201] ? __pfx_find_css_set+0x10/0x10 [ 308.581194][T14201] ? __pfx_mark_lock+0x10/0x10 [ 308.582873][T14201] ? cgroup_attach_task+0x483/0x920 [ 308.584677][T14201] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 308.586610][T14201] cgroup_attach_task+0x48f/0x920 [ 308.588321][T14201] ? __pfx_cgroup_attach_task+0x10/0x10 [ 308.590201][T14201] ? cgroup_attach_permissions+0x2aa/0x7b0 [ 308.592191][T14201] ? __cgroup_procs_write+0x30f/0x540 [ 308.594026][T14201] __cgroup_procs_write+0x30f/0x540 [ 308.595833][T14201] ? __pfx___cgroup_procs_write+0x10/0x10 [ 308.597746][T14201] cgroup_procs_write+0x26/0x60 [ 308.599412][T14201] cgroup_file_write+0x211/0x7d0 [ 308.601103][T14201] ? __pfx_cgroup_procs_write+0x10/0x10 [ 308.602984][T14201] ? __pfx_cgroup_file_write+0x10/0x10 [ 308.604850][T14201] ? lock_acquire+0x2f/0xb0 [ 308.606404][T14201] kernfs_fop_write_iter+0x33d/0x500 [ 308.608199][T14201] ? __pfx_cgroup_file_write+0x10/0x10 [ 308.610058][T14201] vfs_write+0x5ae/0x1150 [ 308.611546][T14201] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 308.613529][T14201] ? __pfx___mutex_lock+0x10/0x10 [ 308.615258][T14201] ? __pfx_vfs_write+0x10/0x10 [ 308.616881][T14201] ksys_write+0x12b/0x250 [ 308.618324][T14201] ? __pfx_ksys_write+0x10/0x10 [ 308.620000][T14201] do_syscall_64+0xcd/0x250 [ 308.621558][T14201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.623569][T14201] RIP: 0033:0x7faac3385d29 [ 308.625103][T14201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.631506][T14201] RSP: 002b:00007faac40d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.634308][T14201] RAX: ffffffffffffffda RBX: 00007faac3576080 RCX: 00007faac3385d29 [ 308.636701][T14201] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000007 [ 308.639042][T14201] RBP: 00007faac40d3090 R08: 0000000000000000 R09: 0000000000000000 [ 308.641319][T14201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.643987][T14201] R13: 0000000000000000 R14: 00007faac3576080 R15: 00007fff8fb20708 [ 308.646736][T14201] [ 308.727065][T14204] binder: 14203:14204 unknown command 0 [ 308.728653][T14204] binder: 14203:14204 ioctl c0306201 20000080 returned -22 [ 308.748547][T14199] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 308.750492][T14199] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 308.752387][T14199] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 308.754232][T14199] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 308.758987][T14199] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 308.760787][T14199] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 308.762884][T14199] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2103344490 [ 308.766337][T14199] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 308.770275][T14205] ubi0: background thread "ubi_bgt0d" started, PID 14205 [ 308.779116][T14207] smc: removing ib device syz2 [ 308.811969][T14209] FAULT_INJECTION: forcing a failure. [ 308.811969][T14209] name failslab, interval 1, probability 0, space 0, times 0 [ 308.815422][T14209] CPU: 3 UID: 0 PID: 14209 Comm: syz.5.2731 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 308.818961][T14209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.822547][T14209] Call Trace: [ 308.823560][T14209] [ 308.824584][T14209] dump_stack_lvl+0x16c/0x1f0 [ 308.826246][T14209] should_fail_ex+0x497/0x5b0 [ 308.827966][T14209] ? fs_reclaim_acquire+0xae/0x150 [ 308.829813][T14209] should_failslab+0xc2/0x120 [ 308.831477][T14209] __kmalloc_noprof+0xcb/0x510 [ 308.833233][T14209] ? __might_fault+0xe3/0x190 [ 308.834981][T14209] sk_prot_alloc+0x1a8/0x2a0 [ 308.836612][T14209] sk_alloc+0x36/0xb90 [ 308.838102][T14209] bpf_prog_test_run_skb+0x32b/0x2270 [ 308.839726][T14209] ? lock_acquire+0x2f/0xb0 [ 308.840980][T14209] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 308.843028][T14209] ? fput+0x67/0x440 [ 308.844344][T14209] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 308.846254][T14209] __sys_bpf+0xfc6/0x49c0 [ 308.847601][T14209] ? __pfx_lock_release+0x10/0x10 [ 308.849184][T14209] ? __pfx___sys_bpf+0x10/0x10 [ 308.850826][T14209] ? vfs_write+0x306/0x1150 [ 308.852416][T14209] ? __mutex_unlock_slowpath+0x164/0x690 [ 308.854181][T14209] ? fput+0x67/0x440 [ 308.855271][T14209] ? ksys_write+0x1ba/0x250 [ 308.856463][T14209] ? __pfx_ksys_write+0x10/0x10 [ 308.858161][T14209] __x64_sys_bpf+0x78/0xc0 [ 308.859792][T14209] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.861683][T14209] do_syscall_64+0xcd/0x250 [ 308.863309][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.865440][T14209] RIP: 0033:0x7fe71dd85d29 [ 308.867058][T14209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.873781][T14209] RSP: 002b:00007fe71eade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.876759][T14209] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd85d29 [ 308.879618][T14209] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 308.882438][T14209] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 308.885273][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.888103][T14209] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 308.890925][T14209] [ 309.078008][T14218] bad cache= option: no¯lEèÚÁ¡_cg€šÁ^nerˆKÂdÇsšsd“Pãbå˜3q‡~‡é—FŒ6cP1j¹¨ ³¯–mÓ#¥ùðß2? [ 309.078008][T14218] [ 309.086106][T14218] CIFS: VFS: bad cache= option: no¯lEèÚÁ¡_cg€šÁ^nerˆKÂdÇsšsd“Pãbå˜3q‡~‡é—FŒ6cP1j¹¨ ³¯–mÓ#¥ùðß2? [ 309.096152][T14218] raw_sendmsg: syz.5.2734 forgot to set AF_INET. Fix it! [ 309.146959][ T39] audit: type=1400 audit(2000000015.540:1075): avc: denied { append } for pid=14219 comm="syz.5.2735" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.184475][T14222] syzkaller1: entered promiscuous mode [ 309.185977][T14222] syzkaller1: entered allmulticast mode [ 309.189002][T14222] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 309.189434][ T6400] udevd[6400]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 310.225389][T14249] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 311.487046][ T5947] Bluetooth: hci0: command 0x0405 tx timeout [ 311.489865][T14226] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 311.543367][ T39] audit: type=1326 audit(2000000017.930:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.5.2747" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe71dd85d29 code=0x0 [ 312.331552][T14226] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 312.335179][T14226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.336839][T14226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.340350][T14226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.343518][T14226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.345382][T14226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 312.348563][T14226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 312.364279][T14242] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 312.397197][T14261] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 312.403185][T14261] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 312.622275][T14280] FAULT_INJECTION: forcing a failure. [ 312.622275][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.625718][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.2.2757 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 312.628380][T14280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 312.631256][T14280] Call Trace: [ 312.632452][T14280] [ 312.633239][T14280] dump_stack_lvl+0x16c/0x1f0 [ 312.634480][T14280] should_fail_ex+0x497/0x5b0 [ 312.635733][T14280] _copy_from_iter+0x2a1/0x1560 [ 312.637007][T14280] ? trace_lock_acquire+0x14e/0x1f0 [ 312.638364][T14280] ? __alloc_skb+0x1fe/0x380 [ 312.639587][T14280] ? __pfx__copy_from_iter+0x10/0x10 [ 312.641062][T14280] ? __virt_addr_valid+0x1a4/0x590 [ 312.642952][T14280] ? __virt_addr_valid+0x5e/0x590 [ 312.644477][T14280] ? __phys_addr_symbol+0x30/0x80 [ 312.645788][T14280] ? __check_object_size+0x488/0x710 [ 312.647160][T14280] netlink_sendmsg+0x813/0xd70 [ 312.648416][T14280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.649875][T14280] ____sys_sendmsg+0xaaf/0xc90 [ 312.651374][T14280] ? copy_msghdr_from_user+0x10b/0x160 [ 312.652785][T14280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.654182][T14280] ___sys_sendmsg+0x135/0x1e0 [ 312.655440][T14280] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.656797][T14280] ? __pfx_lock_release+0x10/0x10 [ 312.658106][T14280] ? trace_lock_acquire+0x14e/0x1f0 [ 312.659477][T14280] ? __fget_files+0x206/0x3a0 [ 312.660712][T14280] __sys_sendmsg+0x16e/0x220 [ 312.662146][T14280] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.663548][T14280] do_syscall_64+0xcd/0x250 [ 312.664931][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.666478][T14280] RIP: 0033:0x7f6ab9185d29 [ 312.667659][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.672611][T14280] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.674964][T14280] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 312.677069][T14280] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 312.679243][T14280] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.679770][T14285] trusted_key: encrypted_key: keylen parameter is missing [ 312.681412][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.681422][T14280] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 312.681436][T14280] [ 312.701975][T14285] syzkaller0: entered allmulticast mode [ 312.706252][T14284] syzkaller0: left allmulticast mode [ 312.710404][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'. [ 312.795381][ T39] audit: type=1400 audit(2000000019.190:1077): avc: denied { connect } for pid=14292 comm="syz.0.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.824479][ T6001] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 312.837919][T14296] netlink: 'syz.0.2764': attribute type 1 has an invalid length. [ 312.840583][T14296] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2764'. [ 312.954283][ T6001] usb 10-1: device descriptor read/64, error -71 [ 312.994262][ T30] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 313.016446][T14305] FAULT_INJECTION: forcing a failure. [ 313.016446][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 313.020825][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.0.2768 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 313.024620][T14305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.028350][T14305] Call Trace: [ 313.029540][T14305] [ 313.030610][T14305] dump_stack_lvl+0x16c/0x1f0 [ 313.032257][T14305] should_fail_ex+0x497/0x5b0 [ 313.033994][T14305] ? fs_reclaim_acquire+0xae/0x150 [ 313.035883][T14305] should_failslab+0xc2/0x120 [ 313.037586][T14305] __kmalloc_noprof+0xcb/0x510 [ 313.039323][T14305] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 313.041431][T14305] _ib_alloc_device+0x3a/0x800 [ 313.042905][T14305] rxe_net_add+0x1d/0x110 [ 313.044046][T14305] rxe_newlink+0x6f/0x190 [ 313.045195][T14305] nldev_newlink+0x38e/0x660 [ 313.046407][T14305] ? __pfx_nldev_newlink+0x10/0x10 [ 313.047873][T14305] ? cred_has_capability.isra.0+0x192/0x2f0 [ 313.049417][T14305] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 313.051111][T14305] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 313.052601][T14305] ? __pfx_stack_trace_save+0x10/0x10 [ 313.054028][T14305] ? rdma_nl_rcv_msg+0x16a/0x6e0 [ 313.055360][T14305] ? rdma_nl_rcv_msg+0x16a/0x6e0 [ 313.056664][T14305] ? security_capable+0x7e/0x260 [ 313.058086][T14305] ? ns_capable+0xd7/0x110 [ 313.059283][T14305] ? __pfx_nldev_newlink+0x10/0x10 [ 313.060676][T14305] rdma_nl_rcv_msg+0x388/0x6e0 [ 313.061946][T14305] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 313.063741][T14305] ? __pfx___lock_acquire+0x10/0x10 [ 313.065548][T14305] ? __pfx___lock_acquire+0x10/0x10 [ 313.066931][T14305] ? hlock_class+0x4e/0x130 [ 313.068536][T14305] ? __lock_acquire+0xcc5/0x3c40 [ 313.070375][T14305] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 313.072737][T14305] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 313.075328][T14305] ? netlink_deliver_tap+0x1ae/0xd30 [ 313.077292][T14305] netlink_unicast+0x53c/0x7f0 [ 313.079216][T14305] ? __pfx_netlink_unicast+0x10/0x10 [ 313.081212][T14305] netlink_sendmsg+0x8b8/0xd70 [ 313.083037][T14305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.084983][T14305] ____sys_sendmsg+0xaaf/0xc90 [ 313.086788][T14305] ? copy_msghdr_from_user+0x10b/0x160 [ 313.088814][T14305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.090830][T14305] ? get_pid_task+0xfc/0x250 [ 313.092587][T14305] ___sys_sendmsg+0x135/0x1e0 [ 313.094368][T14305] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.096341][T14305] ? __pfx_vfs_write+0x10/0x10 [ 313.098123][T14305] ? do_sys_openat2+0xb1/0x1e0 [ 313.099936][T14305] __sys_sendmsg+0x16e/0x220 [ 313.101671][T14305] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.103365][T14305] do_syscall_64+0xcd/0x250 [ 313.104580][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.106712][T14305] RIP: 0033:0x7faac3385d29 [ 313.108369][T14305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.115462][T14305] RSP: 002b:00007faac40f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.118423][T14305] RAX: ffffffffffffffda RBX: 00007faac3575fa0 RCX: 00007faac3385d29 [ 313.120741][T14305] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000005 [ 313.122853][T14305] RBP: 00007faac40f4090 R08: 0000000000000000 R09: 0000000000000000 [ 313.125010][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.127090][T14305] R13: 0000000000000000 R14: 00007faac3575fa0 R15: 00007fff8fb20708 [ 313.129349][T14305] [ 313.131556][T14305] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 313.204260][ T6001] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 313.214258][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 313.217516][ T30] usb 7-1: config 210 has an invalid descriptor of length 71, skipping remainder of the config [ 313.220237][ T30] usb 7-1: config 210 has 0 interfaces, different from the descriptor's value: 1 [ 313.222816][ T30] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 313.226124][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.334268][ T6001] usb 10-1: device descriptor read/64, error -71 [ 313.433286][T14291] binder: 14289:14291 unknown command 0 [ 313.434989][T14291] binder: 14289:14291 ioctl c0306201 20000080 returned -22 [ 313.444561][ T6001] usb usb10-port1: attempt power cycle [ 313.446091][ T30] usb 7-1: string descriptor 0 read error: -71 [ 313.452217][ T30] usb 7-1: USB disconnect, device number 46 [ 313.564340][ T5947] Bluetooth: hci0: command 0x0405 tx timeout [ 313.685629][ T39] audit: type=1400 audit(2000000020.070:1078): avc: denied { mount } for pid=14309 comm="syz.0.2770" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 313.689829][T14310] netlink: 'syz.0.2770': attribute type 2 has an invalid length. [ 313.693888][ T39] audit: type=1800 audit(2000000020.080:1079): pid=14310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2770" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 313.697344][T14310] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 313.794283][ T6001] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 313.814737][ T6001] usb 10-1: device descriptor read/8, error -71 [ 313.828308][T14317] CIFS mount error: No usable UNC path provided in device string! [ 313.828308][T14317] [ 313.831048][T14317] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 313.890836][T14324] FAULT_INJECTION: forcing a failure. [ 313.890836][T14324] name failslab, interval 1, probability 0, space 0, times 0 [ 313.895216][T14324] CPU: 2 UID: 0 PID: 14324 Comm: syz.0.2774 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 313.897956][T14324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.900709][T14324] Call Trace: [ 313.901622][T14324] [ 313.902555][T14324] dump_stack_lvl+0x16c/0x1f0 [ 313.904077][T14324] should_fail_ex+0x497/0x5b0 [ 313.905347][T14324] ? fs_reclaim_acquire+0xae/0x150 [ 313.906691][T14324] should_failslab+0xc2/0x120 [ 313.907913][T14324] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 313.909303][T14324] ? ptlock_alloc+0x1f/0x70 [ 313.910489][T14324] ptlock_alloc+0x1f/0x70 [ 313.911662][T14324] pte_alloc_one+0x74/0x390 [ 313.912875][T14324] __pte_alloc+0x6e/0x3b0 [ 313.914015][T14324] ? __pfx___pte_alloc+0x10/0x10 [ 313.915337][T14324] ? __pfx_lock_release+0x10/0x10 [ 313.916655][T14324] ? do_raw_spin_lock+0x12d/0x2c0 [ 313.917985][T14324] do_pte_missing+0x2810/0x3e00 [ 313.919278][T14324] ? _raw_spin_unlock+0x28/0x50 [ 313.920545][T14324] ? __pmd_alloc+0x380/0x860 [ 313.921779][T14324] __handle_mm_fault+0x103c/0x2a40 [ 313.923186][T14324] ? __pfx___handle_mm_fault+0x10/0x10 [ 313.924609][T14324] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.926063][T14324] ? find_vma+0xc0/0x140 [ 313.927180][T14324] ? __pfx_find_vma+0x10/0x10 [ 313.928406][T14324] handle_mm_fault+0x3fa/0xaa0 [ 313.929657][T14324] do_user_addr_fault+0x7a3/0x13f0 [ 313.931047][T14324] exc_page_fault+0x5c/0xc0 [ 313.932367][T14324] asm_exc_page_fault+0x26/0x30 [ 313.933862][T14324] RIP: 0010:_copy_from_iter+0x384/0x1560 [ 313.935370][T14324] Code: fc 4d 85 f6 0f 85 4e ff ff ff e8 67 5c fc fc 4c 8b 74 24 18 89 de 4c 89 f7 e8 58 12 5f fd 0f 01 cb 48 89 d9 4c 89 f7 48 89 ee a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 1e ff ff ff [ 313.940309][T14324] RSP: 0018:ffffc900047377c0 EFLAGS: 00050246 [ 313.942302][T14324] RAX: 0000000000000001 RBX: 0000000000000036 RCX: 0000000000000036 [ 313.944912][T14324] RDX: ffffed10084ec00f RSI: 0000000020000100 RDI: ffff888042760040 [ 313.946968][T14324] RBP: 0000000020000100 R08: 0000000000000001 R09: ffffed10084ec00e [ 313.949007][T14324] R10: ffff888042760075 R11: 0000000000000000 R12: ffffc90004737da0 [ 313.951053][T14324] R13: 0000000020000136 R14: ffff888042760040 R15: 00007ffffffff000 [ 313.953118][T14324] ? __pfx__copy_from_iter+0x10/0x10 [ 313.954491][T14324] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 313.956194][T14324] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 313.957725][T14324] ? __pfx_lock_release+0x10/0x10 [ 313.959046][T14324] ? trace_lock_acquire+0x14e/0x1f0 [ 313.960402][T14324] ? __pfx_lock_release+0x10/0x10 [ 313.961713][T14324] copy_page_from_iter+0xa5/0x120 [ 313.963025][T14324] tun_build_skb.constprop.0+0x294/0x1120 [ 313.964451][T14324] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 313.966066][T14324] ? __pfx___lock_acquire+0x10/0x10 [ 313.967422][T14324] ? register_lock_class+0xb1/0x1240 [ 313.968800][T14324] ? __lock_acquire+0xcc5/0x3c40 [ 313.970094][T14324] tun_get_user+0x870/0x3e40 [ 313.971343][T14324] ? find_held_lock+0x2d/0x110 [ 313.972757][T14324] ? __pfx_tun_get_user+0x10/0x10 [ 313.974075][T14324] ? find_held_lock+0x2d/0x110 [ 313.975361][T14324] ? __pfx_lock_release+0x10/0x10 [ 313.976673][T14324] tun_chr_write_iter+0xdc/0x210 [ 313.978012][T14324] vfs_write+0x5ae/0x1150 [ 313.979150][T14324] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 313.980585][T14324] ? __pfx_vfs_write+0x10/0x10 [ 313.982192][T14324] ? __fget_files+0x40/0x3a0 [ 313.983968][T14324] ksys_write+0x12b/0x250 [ 313.985303][T14324] ? __pfx_ksys_write+0x10/0x10 [ 313.986589][T14324] do_syscall_64+0xcd/0x250 [ 313.987776][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.989309][T14324] RIP: 0033:0x7faac33847df [ 313.990474][T14324] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 313.995523][T14324] RSP: 002b:00007faac40f4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 313.997659][T14324] RAX: ffffffffffffffda RBX: 00007faac3575fa0 RCX: 00007faac33847df [ 313.999719][T14324] RDX: 0000000000000036 RSI: 0000000020000100 RDI: 00000000000000c8 [ 314.002142][T14324] RBP: 00007faac40f4090 R08: 0000000000000000 R09: 0000000000000000 [ 314.004994][T14324] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 314.007048][T14324] R13: 0000000000000001 R14: 00007faac3575fa0 R15: 00007fff8fb20708 [ 314.009106][T14324] [ 314.134153][ T6001] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 314.134551][ T39] audit: type=1326 audit(2000000020.530:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.0.2777" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faac3385d29 code=0x0 [ 314.154625][ T6001] usb 10-1: device descriptor read/8, error -71 [ 314.264365][ T6001] usb usb10-port1: unable to enumerate USB device [ 314.374213][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.375869][ T5947] Bluetooth: hci4: command 0x0405 tx timeout [ 314.453513][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2781'. [ 315.103011][T14352] ip6t_REJECT: ECHOREPLY is not supported [ 315.404032][ T5985] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 315.571851][T14358] loop2: detected capacity change from 0 to 7 [ 315.578445][T14358] Dev loop2: unable to read RDB block 7 [ 315.580776][T14358] loop2: AHDI p1 p2 p3 [ 315.582432][T14358] loop2: partition table partially beyond EOD, truncated [ 315.584075][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 315.588468][ T5985] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 315.590501][T14358] loop2: p1 start 3324968437 is beyond EOD, [ 315.592414][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 315.592446][ T5985] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.592472][ T5985] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.595192][T14358] truncated [ 315.604100][ T5985] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.609108][T14358] loop2: p2 start 764098818 is beyond EOD, [ 315.610370][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.611960][T14358] truncated [ 315.828080][T14367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 315.829371][ T39] audit: type=1400 audit(2000000022.220:1081): avc: denied { bind } for pid=14353 comm="syz.0.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 315.829958][T14367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 315.836154][ T39] audit: type=1400 audit(2000000022.220:1082): avc: denied { write } for pid=14353 comm="syz.0.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 315.836183][ T5985] usb 5-1: GET_CAPABILITIES returned 0 [ 315.836207][ T5985] usbtmc 5-1:16.0: can't read capabilities [ 315.844183][T14367] vhci_hcd vhci_hcd.0: Device attached [ 315.864063][ T832] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 315.882091][T14367] vhci_hcd vhci_hcd.0: port 0 already used [ 315.884854][T14369] vhci_hcd: connection closed [ 315.886658][ T70] vhci_hcd: stop threads [ 315.889506][ T70] vhci_hcd: release socket [ 315.890695][ T70] vhci_hcd: disconnect device [ 316.014044][ T832] usb 10-1: Using ep0 maxpacket: 32 [ 316.017094][ T832] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 316.019272][ T832] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 316.021544][ T832] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 316.023895][ T832] usb 10-1: config 1 has no interface number 0 [ 316.025562][ T832] usb 10-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.028409][ T832] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 316.032420][ T832] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 316.035685][ T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.038904][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.042480][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.045891][ T832] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 316.047634][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.047749][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.053823][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 316.056820][T14354] usbtmc 5-1:16.0: Unable to send data, error -71 [ 316.059359][ T5985] usb 5-1: USB disconnect, device number 29 [ 316.247404][ T832] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 316.249639][ T832] snd_usb_pod 10-1:1.1: invalid control EP [ 316.251167][ T832] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 316.253117][ T832] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 316.255254][ T832] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 316.444049][ T5287] Bluetooth: hci4: command 0x0405 tx timeout [ 316.444073][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 316.449749][ T5985] usb 10-1: USB disconnect, device number 31 [ 316.511651][T14381] FAULT_INJECTION: forcing a failure. [ 316.511651][T14381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.515177][T14381] CPU: 2 UID: 0 PID: 14381 Comm: syz.4.2794 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 316.517956][T14381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.520758][T14381] Call Trace: [ 316.521676][T14381] [ 316.522461][T14381] dump_stack_lvl+0x16c/0x1f0 [ 316.523693][T14381] should_fail_ex+0x497/0x5b0 [ 316.525042][T14381] _copy_from_user+0x2e/0xd0 [ 316.526315][T14381] dev_ethtool+0x4007/0x57e0 [ 316.527534][T14381] ? __pfx_mark_lock+0x10/0x10 [ 316.528777][T14381] ? __pfx_dev_ethtool+0x10/0x10 [ 316.530055][T14381] ? hlock_class+0x4e/0x130 [ 316.531439][T14381] ? hlock_class+0x4e/0x130 [ 316.533077][T14381] ? mark_lock+0xb5/0xc60 [ 316.534699][T14381] ? __pfx_mark_lock+0x10/0x10 [ 316.536216][T14381] ? __pfx_mark_lock+0x10/0x10 [ 316.537458][T14381] ? __pfx___lock_acquire+0x10/0x10 [ 316.538819][T14381] ? __pfx___lock_acquire+0x10/0x10 [ 316.540167][T14381] ? hlock_class+0x4e/0x130 [ 316.541405][T14381] ? __lock_acquire+0xcc5/0x3c40 [ 316.542709][T14381] ? __pfx___lock_acquire+0x10/0x10 [ 316.544081][T14381] ? __pfx___lock_acquire+0x10/0x10 [ 316.545640][T14381] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 316.547084][T14381] ? lock_acquire+0x2f/0xb0 [ 316.548271][T14381] ? find_held_lock+0x2d/0x110 [ 316.549527][T14381] ? dev_load+0x8e/0x240 [ 316.550646][T14381] ? __pfx_lock_release+0x10/0x10 [ 316.552236][T14381] ? trace_lock_acquire+0x14e/0x1f0 [ 316.553608][T14381] ? full_name_hash+0xbc/0x110 [ 316.554898][T14381] dev_ioctl+0x2a2/0x10c0 [ 316.556065][T14381] sock_do_ioctl+0x19e/0x280 [ 316.557278][T14381] ? __pfx_sock_do_ioctl+0x10/0x10 [ 316.558619][T14381] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 316.560291][T14381] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 316.562006][T14381] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 316.563770][T14381] sock_ioctl+0x228/0x6c0 [ 316.564939][T14381] ? __pfx_sock_ioctl+0x10/0x10 [ 316.566308][T14381] ? selinux_file_ioctl+0x180/0x270 [ 316.568201][T14381] ? selinux_file_ioctl+0xb4/0x270 [ 316.570066][T14381] ? __pfx_sock_ioctl+0x10/0x10 [ 316.571832][T14381] __x64_sys_ioctl+0x190/0x200 [ 316.573599][T14381] do_syscall_64+0xcd/0x250 [ 316.575257][T14381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.577373][T14381] RIP: 0033:0x7fbc2a185d29 [ 316.578978][T14381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.585705][T14381] RSP: 002b:00007fbc2afcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.588728][T14381] RAX: ffffffffffffffda RBX: 00007fbc2a375fa0 RCX: 00007fbc2a185d29 [ 316.591565][T14381] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 316.594383][T14381] RBP: 00007fbc2afcc090 R08: 0000000000000000 R09: 0000000000000000 [ 316.596821][T14381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.599256][T14381] R13: 0000000000000000 R14: 00007fbc2a375fa0 R15: 00007fffa02ddc38 [ 316.601408][T14381] [ 316.766551][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.884056][ T6059] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 316.913965][ T833] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 317.034389][ T6059] usb 9-1: Using ep0 maxpacket: 8 [ 317.037310][ T6059] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.040042][ T6059] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.042353][ T6059] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.045717][ T6059] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 317.049469][ T6059] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 317.053280][ T6059] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.057154][ T6059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.061062][T14388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.064301][ T6059] hub 9-1:1.0: bad descriptor, ignoring hub [ 317.066163][ T6059] hub 9-1:1.0: probe with driver hub failed with error -5 [ 317.068125][ T6059] cdc_wdm 9-1:1.0: skipping garbage [ 317.069448][ T6059] cdc_wdm 9-1:1.0: skipping garbage [ 317.073010][ T6059] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 317.074664][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 317.075983][ T6059] cdc_wdm 9-1:1.0: Unknown control protocol [ 317.078463][ T833] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 317.081036][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.086120][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.089441][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.092810][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.097448][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.100491][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.305015][ T833] usb 5-1: usb_control_msg returned -32 [ 317.307161][ T833] usbtmc 5-1:16.0: can't read capabilities [ 317.327638][T14404] FAULT_INJECTION: forcing a failure. [ 317.327638][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 317.332114][T14404] CPU: 3 UID: 0 PID: 14404 Comm: syz.2.2802 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 317.334798][T14404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.337578][T14404] Call Trace: [ 317.338446][T14404] [ 317.339480][T14404] dump_stack_lvl+0x16c/0x1f0 [ 317.341081][T14404] should_fail_ex+0x497/0x5b0 [ 317.342824][T14404] should_failslab+0xc2/0x120 [ 317.344537][T14404] __kmalloc_cache_noprof+0x68/0x410 [ 317.346429][T14404] ? rcu_is_watching+0x12/0xc0 [ 317.348189][T14404] ? trace_lock_acquire+0x14e/0x1f0 [ 317.350075][T14404] sctp_add_bind_addr+0x9a/0x3d0 [ 317.351793][T14404] sctp_copy_local_addr_list+0x39e/0x5a0 [ 317.353600][T14404] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 317.355586][T14404] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 317.357446][T14404] ? sctp_bind_addr_copy+0xe0/0x530 [ 317.359270][T14404] sctp_bind_addr_copy+0xe0/0x530 [ 317.360964][T14404] sctp_connect_new_asoc+0x1d8/0x790 [ 317.362612][T14404] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 317.364115][T14404] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 317.365654][T14404] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 317.367188][T14404] sctp_sendmsg+0x1610/0x1eb0 [ 317.368751][T14404] ? avc_has_perm+0x11b/0x1c0 [ 317.370463][T14404] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.372300][T14404] ? __pfx_sock_has_perm+0x10/0x10 [ 317.374159][T14404] ? import_ubuf+0x1b6/0x220 [ 317.375845][T14404] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.377527][T14404] inet_sendmsg+0x119/0x140 [ 317.379131][T14404] ____sys_sendmsg+0x98c/0xc90 [ 317.380809][T14404] ? copy_msghdr_from_user+0x10b/0x160 [ 317.382556][T14404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.384092][T14404] ___sys_sendmsg+0x135/0x1e0 [ 317.385799][T14404] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.387665][T14404] ? __pfx_lock_release+0x10/0x10 [ 317.389007][T14404] ? trace_lock_acquire+0x14e/0x1f0 [ 317.390380][T14404] ? __fget_files+0x206/0x3a0 [ 317.392004][T14404] __sys_sendmsg+0x16e/0x220 [ 317.393473][T14404] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.394981][T14404] do_syscall_64+0xcd/0x250 [ 317.396184][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.397818][T14404] RIP: 0033:0x7f6ab9185d29 [ 317.398994][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.404034][T14404] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.406248][T14404] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 317.408592][T14404] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 317.410988][T14404] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 317.413694][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.416486][T14404] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 317.419164][T14404] [ 317.482655][ T39] audit: type=1400 audit(2000000023.870:1083): avc: denied { watch } for pid=14406 comm="syz.2.2803" path="/104/file1" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 317.485941][T14408] binder: BC_ACQUIRE_RESULT not supported [ 317.491644][T14408] binder: 14406:14408 ioctl c0306201 20000600 returned -22 [ 317.895807][ T5985] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 318.050394][ T5985] usb 10-1: Using ep0 maxpacket: 8 [ 318.055296][ T5985] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 318.058277][ T5985] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.061913][ T5985] usb 10-1: config 0 has no interface number 0 [ 318.068549][ T5985] usb 10-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xED, changing to 0x8D [ 318.072717][ T5985] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8D has an invalid bInterval 224, changing to 11 [ 318.076945][ T5985] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8D has invalid maxpacket 42086, setting to 1024 [ 318.080822][ T5985] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.085573][ T5985] usb 10-1: config 0 interface 52 has no altsetting 0 [ 318.089379][ T5985] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 318.092685][ T5985] usb 10-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 318.096344][ T5985] usb 10-1: Product: syz [ 318.098407][ T5985] usb 10-1: SerialNumber: syz [ 318.101729][ T5985] usb 10-1: config 0 descriptor?? [ 318.305379][ T5985] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.52/input/input27 [ 318.505978][T14421] FAULT_INJECTION: forcing a failure. [ 318.505978][T14421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.509784][T14421] CPU: 2 UID: 0 PID: 14421 Comm: syz.5.2808 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 318.512713][T14421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.516246][T14421] Call Trace: [ 318.517489][T14421] [ 318.518598][T14421] dump_stack_lvl+0x16c/0x1f0 [ 318.520354][T14421] should_fail_ex+0x497/0x5b0 [ 318.522114][T14421] strncpy_from_user+0x3b/0x2d0 [ 318.523936][T14421] getname_flags.part.0+0x8f/0x550 [ 318.523965][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.525857][T14421] getname+0x8d/0xe0 [ 318.529443][T14421] do_sys_openat2+0x104/0x1e0 [ 318.531207][T14421] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.533146][T14421] ? __fget_files+0x206/0x3a0 [ 318.533999][ T5947] Bluetooth: hci4: command 0x0405 tx timeout [ 318.534936][T14421] __x64_sys_openat+0x175/0x210 [ 318.538792][T14421] ? __pfx___x64_sys_openat+0x10/0x10 [ 318.540778][T14421] ? ksys_write+0x1ba/0x250 [ 318.542478][T14421] do_syscall_64+0xcd/0x250 [ 318.544203][T14421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.546290][T14421] RIP: 0033:0x7fe71dd85d29 [ 318.547958][T14421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.554957][T14421] RSP: 002b:00007fe71eade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.557984][T14421] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd85d29 [ 318.560892][T14421] RDX: 0000000000006002 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 318.563773][T14421] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 318.566675][T14421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.569564][T14421] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 318.572471][T14421] [ 318.577062][ T63] usb 10-1: USB disconnect, device number 32 [ 318.703917][ T5985] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 318.853858][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 318.856905][ T5985] usb 7-1: config 210 has an invalid descriptor of length 71, skipping remainder of the config [ 318.860456][ T5985] usb 7-1: config 210 has 0 interfaces, different from the descriptor's value: 1 [ 318.863565][ T5985] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 318.866762][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.077416][T14426] binder: 14425:14426 unknown command 0 [ 319.079538][T14426] binder: 14425:14426 ioctl c0306201 20000080 returned -22 [ 319.088733][ T5985] usb 7-1: string descriptor 0 read error: -71 [ 319.093101][ T5985] usb 7-1: USB disconnect, device number 47 [ 319.232441][T14432] xt_hashlimit: size too large, truncated to 1048576 [ 319.284526][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'. [ 319.286891][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 319.742598][ T39] audit: type=1400 audit(2000000026.131:1084): avc: denied { accept } for pid=14437 comm="syz.2.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 320.223855][ T25] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 320.374861][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 320.377886][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.381378][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.389028][ T25] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.393026][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 320.396884][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 320.400711][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 320.403985][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.409021][T14443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.412010][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 320.414263][ T25] hub 7-1:1.0: probe with driver hub failed with error -5 [ 320.417064][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 320.418880][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 320.568647][T14388] cdc_wdm 9-1:1.0: Error autopm - -16 [ 320.568901][ T6001] usb 9-1: USB disconnect, device number 26 [ 320.573043][T14423] cdc_wdm 9-1:1.0: Error autopm - -16 [ 320.578775][ T25] cdc_wdm 7-1:1.0: cdc-wdm2: USB WDM device [ 320.580828][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 320.585915][ T833] usb 5-1: USB disconnect, device number 30 [ 320.609162][T14449] openvswitch: netlink: EtherType 0 is less than min 600 [ 320.616482][ T25] usb 7-1: USB disconnect, device number 48 [ 320.953819][ T6001] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 321.043802][ T833] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 321.113863][ T6001] usb 9-1: Using ep0 maxpacket: 32 [ 321.116529][ T6001] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 321.118728][ T6001] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 321.121089][ T6001] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 321.123574][ T6001] usb 9-1: config 1 has no interface number 0 [ 321.125392][ T6001] usb 9-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.128245][ T6001] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 321.131722][ T6001] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 321.134260][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.139483][ T6001] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 321.203747][ T833] usb 5-1: Using ep0 maxpacket: 16 [ 321.206837][ T833] usb 5-1: config 210 has an invalid descriptor of length 71, skipping remainder of the config [ 321.209895][ T833] usb 5-1: config 210 has 0 interfaces, different from the descriptor's value: 1 [ 321.212827][ T833] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 321.215829][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.355614][T14449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.358161][T14449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.369730][ T6001] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 321.372692][ T6001] snd_usb_pod 9-1:1.1: invalid control EP [ 321.374702][ T6001] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 321.376915][ T6001] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 321.379430][ T6001] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 321.422705][T14455] binder: 14454:14455 unknown command 0 [ 321.424307][T14455] binder: 14454:14455 ioctl c0306201 20000080 returned -22 [ 321.428980][ T833] usb 5-1: string descriptor 0 read error: -71 [ 321.432403][ T833] usb 5-1: USB disconnect, device number 31 [ 321.624373][ T39] audit: type=1400 audit(2000000028.021:1085): avc: denied { getopt } for pid=14462 comm="syz.5.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.630604][ T39] audit: type=1400 audit(2000000028.021:1086): avc: denied { ioctl } for pid=14462 comm="syz.5.2824" path="pid:[4026533729]" dev="nsfs" ino=4026533729 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 322.083315][ T39] audit: type=1400 audit(2000000028.471:1087): avc: denied { accept } for pid=14468 comm="syz.0.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.091421][T14469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 322.245521][T14477] FAULT_INJECTION: forcing a failure. [ 322.245521][T14477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.250206][T14477] CPU: 0 UID: 0 PID: 14477 Comm: syz.0.2830 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 322.253976][T14477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.257809][T14477] Call Trace: [ 322.259032][T14477] [ 322.260115][T14477] dump_stack_lvl+0x16c/0x1f0 [ 322.261825][T14477] should_fail_ex+0x497/0x5b0 [ 322.263562][T14477] _copy_to_user+0x32/0xd0 [ 322.265193][T14477] simple_read_from_buffer+0xd0/0x160 [ 322.267067][T14477] proc_fail_nth_read+0x198/0x270 [ 322.268755][T14477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.270724][T14477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.272646][T14477] vfs_read+0x1df/0xbe0 [ 322.274077][T14477] ? __fget_files+0x1fc/0x3a0 [ 322.275684][T14477] ? __pfx___mutex_lock+0x10/0x10 [ 322.277421][T14477] ? __pfx_vfs_read+0x10/0x10 [ 322.279065][T14477] ? __fget_files+0x206/0x3a0 [ 322.280681][T14477] ksys_read+0x12b/0x250 [ 322.282138][T14477] ? __pfx_ksys_read+0x10/0x10 [ 322.283851][T14477] do_syscall_64+0xcd/0x250 [ 322.285493][T14477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.287533][T14477] RIP: 0033:0x7faac338473c [ 322.289053][T14477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.295640][T14477] RSP: 002b:00007faac40f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.298499][T14477] RAX: ffffffffffffffda RBX: 00007faac3575fa0 RCX: 00007faac338473c [ 322.301200][T14477] RDX: 000000000000000f RSI: 00007faac40f40a0 RDI: 0000000000000004 [ 322.303923][T14477] RBP: 00007faac40f4090 R08: 0000000000000000 R09: 0000000000000000 [ 322.306646][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.308683][T14477] R13: 0000000000000000 R14: 00007faac3575fa0 R15: 00007fff8fb20708 [ 322.310748][T14477] [ 322.497231][T14487] vxcan1: tx address claim with dest, not broadcast [ 322.962096][T14493] FAULT_INJECTION: forcing a failure. [ 322.962096][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 322.966614][T14493] CPU: 2 UID: 60928 PID: 14493 Comm: syz.2.2838 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 322.970322][T14493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 322.973920][T14493] Call Trace: [ 322.975110][T14493] [ 322.976128][T14493] dump_stack_lvl+0x16c/0x1f0 [ 322.977752][T14493] should_fail_ex+0x497/0x5b0 [ 322.979379][T14493] ? fs_reclaim_acquire+0xae/0x150 [ 322.981139][T14493] should_failslab+0xc2/0x120 [ 322.982754][T14493] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 322.984663][T14493] ? security_file_alloc+0x34/0x2b0 [ 322.986502][T14493] security_file_alloc+0x34/0x2b0 [ 322.988191][T14493] init_file+0x93/0x480 [ 322.989640][T14493] alloc_empty_file+0x91/0x1e0 [ 322.991307][T14493] path_openat+0xe1/0x2d60 [ 322.992861][T14493] ? hlock_class+0x4e/0x130 [ 322.994479][T14493] ? __lock_acquire+0x15a9/0x3c40 [ 322.996217][T14493] ? __pfx_path_openat+0x10/0x10 [ 322.997926][T14493] ? __pfx___lock_acquire+0x10/0x10 [ 322.999728][T14493] ? lock_acquire.part.0+0x11b/0x380 [ 323.001556][T14493] ? find_held_lock+0x2d/0x110 [ 323.003202][T14493] do_filp_open+0x20c/0x470 [ 323.004774][T14493] ? __pfx_do_filp_open+0x10/0x10 [ 323.006515][T14493] ? find_held_lock+0x2d/0x110 [ 323.008185][T14493] ? alloc_fd+0x41f/0x760 [ 323.009680][T14493] do_sys_openat2+0x17a/0x1e0 [ 323.011311][T14493] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.013228][T14493] ? __fget_files+0x206/0x3a0 [ 323.014886][T14493] __x64_sys_openat+0x175/0x210 [ 323.016568][T14493] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.018406][T14493] ? ksys_write+0x1ba/0x250 [ 323.019976][T14493] do_syscall_64+0xcd/0x250 [ 323.021562][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.023639][T14493] RIP: 0033:0x7f6ab9185d29 [ 323.025176][T14493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.031637][T14493] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.034487][T14493] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 323.037153][T14493] RDX: 000000000000275a RSI: 0000000020000000 RDI: ffffffffffffff9c [ 323.039813][T14493] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.042479][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.045222][T14493] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 323.047927][T14493] [ 323.238733][ T39] audit: type=1400 audit(2000000029.631:1088): avc: denied { read } for pid=14505 comm="syz.2.2843" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 323.247648][ T39] audit: type=1400 audit(2000000029.631:1089): avc: denied { open } for pid=14505 comm="syz.2.2843" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 323.542769][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2847'. [ 323.551355][ T5947] Bluetooth: hci3: ACL packet too small [ 323.580853][T14506] overlayfs: conflicting options: nfs_export=on,index=off [ 323.589343][ T39] audit: type=1400 audit(2000000029.981:1090): avc: denied { read } for pid=14505 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 323.603249][ T39] audit: type=1400 audit(2000000029.991:1091): avc: denied { module_load } for pid=14518 comm="syz.5.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 323.644806][ T832] usb 9-1: USB disconnect, device number 27 [ 323.873694][ T9098] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 324.025656][ T9098] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.029173][ T9098] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 324.032124][ T9098] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 324.036143][ T9098] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.040511][ T9098] usb 10-1: config 0 descriptor?? [ 324.046191][ T9098] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 324.048615][ T9098] dvb-usb: bulk message failed: -22 (3/0) [ 324.050681][ T9098] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 324.054766][ T9098] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 324.057351][ T9098] usb 10-1: media controller created [ 324.060117][ T9098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.071167][ T9098] dvb-usb: bulk message failed: -22 (6/0) [ 324.073280][ T9098] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 324.077738][ T9098] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input28 [ 324.083236][ T9098] dvb-usb: schedule remote query interval to 150 msecs. [ 324.089192][ T9098] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 324.250692][ T25] usb 10-1: USB disconnect, device number 33 [ 324.254062][ T9098] dvb-usb: bulk message failed: -22 (1/0) [ 324.255965][ T9098] dvb-usb: error while querying for an remote control event. [ 324.271243][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 324.385398][ T39] audit: type=1400 audit(2000000030.781:1092): avc: denied { append } for pid=14527 comm="syz.0.2851" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 324.392890][ T1140] Bluetooth: Error in BCSP hdr checksum [ 324.396631][ T39] audit: type=1400 audit(2000000030.781:1093): avc: denied { open } for pid=14527 comm="syz.0.2851" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 324.623377][T14548] FAULT_INJECTION: forcing a failure. [ 324.623377][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.628247][T14548] CPU: 0 UID: 0 PID: 14548 Comm: syz.2.2854 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 324.631518][T14548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.635483][T14548] Call Trace: [ 324.636526][T14548] [ 324.637595][T14548] dump_stack_lvl+0x16c/0x1f0 [ 324.639352][T14548] should_fail_ex+0x497/0x5b0 [ 324.641071][T14548] copy_fpstate_to_sigframe+0x894/0xb20 [ 324.643080][T14548] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 324.645064][T14548] ? posixtimer_deliver_signal+0x1ad/0x650 [ 324.647155][T14548] ? posixtimer_deliver_signal+0x1ad/0x650 [ 324.649100][T14548] ? find_held_lock+0x2d/0x110 [ 324.650356][T14548] get_sigframe+0x4aa/0x9c0 [ 324.651721][T14548] ? __pfx_get_sigframe+0x10/0x10 [ 324.653612][T14548] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.655480][T14548] ? siginfo_layout+0x177/0x290 [ 324.657229][T14548] x64_setup_rt_frame+0x129/0xcf0 [ 324.658893][T14548] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 324.660616][T14548] arch_do_signal_or_restart+0x5e6/0x7e0 [ 324.662243][T14548] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 324.663855][T14548] ? __pfx_do_readv+0x10/0x10 [ 324.665084][T14548] syscall_exit_to_user_mode+0x150/0x2a0 [ 324.666741][T14548] do_syscall_64+0xda/0x250 [ 324.668083][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.669578][T14548] RIP: 0033:0x7f6ab9185d27 [ 324.670816][T14548] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 324.675821][T14548] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 324.678650][T14548] RAX: 0000000000000013 RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 324.681384][T14548] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000003 [ 324.684066][T14548] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.686920][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.689109][T14548] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 324.691684][T14548] [ 324.763572][ T833] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 324.916027][ T833] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.918737][ T833] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 324.921155][ T833] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 324.923762][ T833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.931542][ T833] usb 9-1: config 0 descriptor?? [ 324.935779][ T833] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 324.937597][ T833] dvb-usb: bulk message failed: -22 (3/0) [ 324.944548][ T833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 324.946854][ T833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 324.949169][ T833] usb 9-1: media controller created [ 324.951046][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.957617][ T833] dvb-usb: bulk message failed: -22 (6/0) [ 324.959290][ T833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 324.969891][ T833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input29 [ 324.976883][ T833] dvb-usb: schedule remote query interval to 150 msecs. [ 324.979229][ T833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 325.133631][ T833] dvb-usb: bulk message failed: -22 (1/0) [ 325.137991][T14540] FAULT_INJECTION: forcing a failure. [ 325.137991][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.142418][ T833] dvb-usb: error while querying for an remote control event. [ 325.143771][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.4.2852 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 325.147468][T14540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 325.150246][T14540] Call Trace: [ 325.151136][T14540] [ 325.151919][T14540] dump_stack_lvl+0x16c/0x1f0 [ 325.153184][T14540] should_fail_ex+0x497/0x5b0 [ 325.154459][T14540] _copy_from_user+0x2e/0xd0 [ 325.155655][T14540] evdev_handle_get_keycode_v2+0xb3/0x170 [ 325.157029][T14540] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 325.158539][T14540] ? __mutex_trylock_common+0xea/0x250 [ 325.159851][T14540] ? evdev_ioctl+0x80/0x1a0 [ 325.161022][T14540] ? rcu_is_watching+0x12/0xc0 [ 325.162258][T14540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 325.163708][T14540] evdev_do_ioctl+0x445/0x1ae0 [ 325.164901][T14540] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 325.166164][T14540] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 325.167973][T14540] ? __pfx_evdev_ioctl+0x10/0x10 [ 325.169272][T14540] evdev_ioctl+0x16a/0x1a0 [ 325.170455][T14540] ? __pfx_evdev_ioctl+0x10/0x10 [ 325.171746][T14540] __x64_sys_ioctl+0x190/0x200 [ 325.172991][T14540] do_syscall_64+0xcd/0x250 [ 325.174133][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.175705][T14540] RIP: 0033:0x7fbc2a185d29 [ 325.176878][T14540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.181861][T14540] RSP: 002b:00007fbc2afcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.184028][T14540] RAX: ffffffffffffffda RBX: 00007fbc2a375fa0 RCX: 00007fbc2a185d29 [ 325.186100][T14540] RDX: 0000000020000180 RSI: 0000000080284504 RDI: 0000000000000004 [ 325.188183][T14540] RBP: 00007fbc2afcc090 R08: 0000000000000000 R09: 0000000000000000 [ 325.190235][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.192294][T14540] R13: 0000000000000000 R14: 00007fbc2a375fa0 R15: 00007fffa02ddc38 [ 325.194390][T14540] [ 325.198062][ T57] usb 9-1: USB disconnect, device number 28 [ 325.206719][ T57] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 325.243510][ T9098] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 325.395165][ T9098] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.397763][ T9098] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 325.400473][ T9098] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 325.402865][ T9098] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.407065][ T9098] usb 10-1: config 0 descriptor?? [ 325.411090][ T9098] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 325.413856][ T9098] dvb-usb: bulk message failed: -22 (3/0) [ 325.417850][ T9098] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 325.421112][ T9098] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 325.423829][ T9098] usb 10-1: media controller created [ 325.426171][ T9098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.430328][ T9098] dvb-usb: bulk message failed: -22 (6/0) [ 325.431874][ T9098] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 325.437138][ T9098] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input30 [ 325.442852][ T9098] dvb-usb: schedule remote query interval to 150 msecs. [ 325.444796][ T9098] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 325.611451][ T9098] usb 10-1: USB disconnect, device number 34 [ 325.613492][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 325.615840][ T57] dvb-usb: error while querying for an remote control event. [ 325.633109][ T9098] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 325.736932][ T39] audit: type=1326 audit(2000000032.131:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14567 comm="syz.4.2860" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc2a185d29 code=0x0 [ 326.212697][T14580] binder: 14579:14580 unknown command 0 [ 326.219816][T14580] binder: 14579:14580 ioctl c0306201 20000080 returned -22 [ 326.224343][T14580] binder: BINDER_SET_CONTEXT_MGR already set [ 326.226668][T14580] binder: 14579:14580 ioctl 4018620d 20000040 returned -16 [ 326.230177][T14580] FAULT_INJECTION: forcing a failure. [ 326.230177][T14580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.235008][T14580] CPU: 2 UID: 0 PID: 14580 Comm: syz.5.2864 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 326.238878][T14580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.242757][T14580] Call Trace: [ 326.244001][T14580] [ 326.245116][T14580] dump_stack_lvl+0x16c/0x1f0 [ 326.246879][T14580] should_fail_ex+0x497/0x5b0 [ 326.248628][T14580] _copy_to_user+0x32/0xd0 [ 326.250286][T14580] simple_read_from_buffer+0xd0/0x160 [ 326.252270][T14580] proc_fail_nth_read+0x198/0x270 [ 326.254113][T14580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.255897][T14580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.257692][T14580] vfs_read+0x1df/0xbe0 [ 326.259154][T14580] ? __fget_files+0x1fc/0x3a0 [ 326.260751][T14580] ? __pfx___mutex_lock+0x10/0x10 [ 326.262120][T14580] ? __pfx_vfs_read+0x10/0x10 [ 326.263444][T14580] ? __fget_files+0x206/0x3a0 [ 326.264745][T14580] ksys_read+0x12b/0x250 [ 326.265883][T14580] ? __pfx_ksys_read+0x10/0x10 [ 326.267186][T14580] do_syscall_64+0xcd/0x250 [ 326.268439][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.270012][T14580] RIP: 0033:0x7fe71dd8473c [ 326.271373][T14580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.276469][T14580] RSP: 002b:00007fe71eade030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.278748][T14580] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd8473c [ 326.280926][T14580] RDX: 000000000000000f RSI: 00007fe71eade0a0 RDI: 0000000000000006 [ 326.283035][T14580] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 326.285552][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.288190][T14580] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 326.291045][T14580] [ 326.334345][T14589] FAULT_INJECTION: forcing a failure. [ 326.334345][T14589] name failslab, interval 1, probability 0, space 0, times 0 [ 326.337576][T14589] CPU: 3 UID: 0 PID: 14589 Comm: syz.2.2867 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 326.340355][T14589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.343132][T14589] Call Trace: [ 326.344021][T14589] [ 326.344828][T14589] dump_stack_lvl+0x16c/0x1f0 [ 326.346069][T14589] should_fail_ex+0x497/0x5b0 [ 326.347330][T14589] ? fs_reclaim_acquire+0xae/0x150 [ 326.348671][T14589] should_failslab+0xc2/0x120 [ 326.349911][T14589] __kmalloc_noprof+0xcb/0x510 [ 326.351174][T14589] lsm_blob_alloc+0x68/0x90 [ 326.352379][T14589] security_sk_alloc+0x30/0x270 [ 326.353641][T14589] sk_prot_alloc+0x1c7/0x2a0 [ 326.354741][T14589] sk_alloc+0x36/0xb90 [ 326.355812][T14589] bpf_prog_test_run_skb+0x32b/0x2270 [ 326.357244][T14589] ? lock_acquire+0x2f/0xb0 [ 326.358469][T14589] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 326.359994][T14589] ? fput+0x67/0x440 [ 326.361052][T14589] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 326.362592][T14589] __sys_bpf+0xfc6/0x49c0 [ 326.363744][T14589] ? __pfx_lock_release+0x10/0x10 [ 326.365088][T14589] ? __pfx___sys_bpf+0x10/0x10 [ 326.366365][T14589] ? vfs_write+0x306/0x1150 [ 326.367570][T14589] ? __mutex_unlock_slowpath+0x164/0x690 [ 326.369287][T14589] ? fput+0x67/0x440 [ 326.370360][T14589] ? ksys_write+0x1ba/0x250 [ 326.371661][T14589] ? __pfx_ksys_write+0x10/0x10 [ 326.372967][T14589] __x64_sys_bpf+0x78/0xc0 [ 326.374348][T14589] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.375864][T14589] do_syscall_64+0xcd/0x250 [ 326.377077][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.378640][T14589] RIP: 0033:0x7f6ab9185d29 [ 326.379947][T14589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.386010][T14589] RSP: 002b:00007f6ab9ed6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.388747][T14589] RAX: ffffffffffffffda RBX: 00007f6ab9375fa0 RCX: 00007f6ab9185d29 [ 326.391267][T14589] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 326.393167][T14589] RBP: 00007f6ab9ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.395161][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.397618][T14589] R13: 0000000000000000 R14: 00007f6ab9375fa0 R15: 00007ffd80e690d8 [ 326.400279][T14589] [ 326.410106][T14588] FAULT_INJECTION: forcing a failure. [ 326.410106][T14588] name failslab, interval 1, probability 0, space 0, times 0 [ 326.413779][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.5.2866 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 326.417411][T14588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.421079][T14588] Call Trace: [ 326.422223][T14588] [ 326.423238][T14588] dump_stack_lvl+0x16c/0x1f0 [ 326.424642][T14588] should_fail_ex+0x497/0x5b0 [ 326.426239][T14588] ? fs_reclaim_acquire+0xae/0x150 [ 326.427682][T14588] should_failslab+0xc2/0x120 [ 326.428928][T14588] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 326.430305][T14588] ? __pfx_mark_lock+0x10/0x10 [ 326.431595][T14588] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 326.433200][T14588] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 326.434815][T14588] mmu_topup_memory_caches+0x22/0xd0 [ 326.436359][T14588] kvm_mmu_load+0xda/0x21f0 [ 326.437587][T14588] ? mark_held_locks+0x9f/0xe0 [ 326.438807][T14588] ? kvm_apic_has_interrupt+0xb6/0x190 [ 326.440248][T14588] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 326.441813][T14588] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 326.443302][T14588] ? __pfx_kvm_mmu_load+0x10/0x10 [ 326.444668][T14588] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 326.446544][T14588] ? kvm_check_and_inject_events+0x725/0x12e0 [ 326.448535][T14588] ? kvm_setup_guest_pvclock+0x701/0x730 [ 326.450016][T14588] vcpu_run+0x33a4/0x4f50 [ 326.451269][T14588] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 326.453343][T14588] ? __pfx_vcpu_run+0x10/0x10 [ 326.455102][T14588] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 326.456672][T14588] ? rcu_is_watching+0x12/0xc0 [ 326.457976][T14588] ? trace_lock_acquire+0x14e/0x1f0 [ 326.459368][T14588] ? __local_bh_enable_ip+0xa4/0x120 [ 326.460821][T14588] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.462755][T14588] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 326.464805][T14588] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 326.466937][T14588] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 326.469037][T14588] kvm_vcpu_ioctl+0x6ce/0x1520 [ 326.470850][T14588] ? do_vfs_ioctl+0x513/0x1990 [ 326.472474][T14588] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 326.474067][T14588] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 326.476032][T14588] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 326.477967][T14588] ? __pfx_lock_release+0x10/0x10 [ 326.479476][T14588] ? selinux_file_ioctl+0x180/0x270 [ 326.481273][T14588] ? selinux_file_ioctl+0xb4/0x270 [ 326.483042][T14588] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 326.484808][T14588] __x64_sys_ioctl+0x190/0x200 [ 326.486512][T14588] do_syscall_64+0xcd/0x250 [ 326.488078][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.490175][T14588] RIP: 0033:0x7fe71dd85d29 [ 326.491852][T14588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.498889][T14588] RSP: 002b:00007fe71eade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.501963][T14588] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd85d29 [ 326.504900][T14588] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 326.507806][T14588] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 326.510712][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.513649][T14588] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 326.516600][T14588] [ 326.518083][ T5287] Bluetooth: hci2: command 0x1003 tx timeout [ 326.518585][ T5947] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 326.518912][T14593] FAULT_INJECTION: forcing a failure. [ 326.518912][T14593] name failslab, interval 1, probability 0, space 0, times 0 [ 326.518984][T14593] CPU: 2 UID: 0 PID: 14593 Comm: syz.2.2868 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 326.518998][T14593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.519005][T14593] Call Trace: [ 326.519009][T14593] [ 326.519014][T14593] dump_stack_lvl+0x16c/0x1f0 [ 326.519032][T14593] should_fail_ex+0x497/0x5b0 [ 326.519048][T14593] ? fs_reclaim_acquire+0xae/0x150 [ 326.519067][T14593] should_failslab+0xc2/0x120 [ 326.519082][T14593] __kmalloc_cache_noprof+0x68/0x410 [ 326.519097][T14593] allocate_cgrp_cset_links+0xc6/0x240 [ 326.519115][T14593] find_css_set+0x775/0x1bb0 [ 326.519130][T14593] ? __pfx_find_css_set+0x10/0x10 [ 326.519141][T14593] ? __pfx_mark_lock+0x10/0x10 [ 326.519159][T14593] ? cgroup_attach_task+0x483/0x920 [ 326.519174][T14593] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 326.519189][T14593] cgroup_attach_task+0x48f/0x920 [ 326.519203][T14593] ? __pfx_cgroup_attach_task+0x10/0x10 [ 326.519221][T14593] ? cgroup_attach_permissions+0x2aa/0x7b0 [ 326.519238][T14593] ? __cgroup_procs_write+0x30f/0x540 [ 326.519251][T14593] __cgroup_procs_write+0x30f/0x540 [ 326.519266][T14593] ? __pfx___cgroup_procs_write+0x10/0x10 [ 326.519285][T14593] cgroup_procs_write+0x26/0x60 [ 326.519298][T14593] cgroup_file_write+0x211/0x7d0 [ 326.519314][T14593] ? __pfx_cgroup_procs_write+0x10/0x10 [ 326.519328][T14593] ? __pfx_cgroup_file_write+0x10/0x10 [ 326.519344][T14593] ? lock_acquire+0x2f/0xb0 [ 326.519359][T14593] kernfs_fop_write_iter+0x33d/0x500 [ 326.519374][T14593] ? __pfx_cgroup_file_write+0x10/0x10 [ 326.519391][T14593] vfs_write+0x5ae/0x1150 [ 326.519403][T14593] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 326.519418][T14593] ? __pfx___mutex_lock+0x10/0x10 [ 326.519432][T14593] ? __pfx_vfs_write+0x10/0x10 [ 326.519466][T14593] ksys_write+0x12b/0x250 [ 326.519479][T14593] ? __pfx_ksys_write+0x10/0x10 [ 326.519494][T14593] do_syscall_64+0xcd/0x250 [ 326.519509][T14593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.519524][T14593] RIP: 0033:0x7f6ab9185d29 [ 326.519535][T14593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.519546][T14593] RSP: 002b:00007f6ab6ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.519558][T14593] RAX: ffffffffffffffda RBX: 00007f6ab9376080 RCX: 00007f6ab9185d29 [ 326.519566][T14593] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000007 [ 326.519574][T14593] RBP: 00007f6ab6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.519581][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.519588][T14593] R13: 0000000000000000 R14: 00007f6ab9376080 R15: 00007ffd80e690d8 [ 326.519603][T14593] [ 326.600335][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2869'. [ 326.608113][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2869'. [ 326.610558][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2869'. [ 326.612819][T14595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2869'. [ 326.859307][T14610] FAULT_INJECTION: forcing a failure. [ 326.859307][T14610] name failslab, interval 1, probability 0, space 0, times 0 [ 326.863754][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.4.2875 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 326.867259][T14610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.870125][T14610] Call Trace: [ 326.871200][T14610] [ 326.872276][T14610] dump_stack_lvl+0x16c/0x1f0 [ 326.874029][T14610] should_fail_ex+0x497/0x5b0 [ 326.875757][T14610] ? fs_reclaim_acquire+0xae/0x150 [ 326.877618][T14610] should_failslab+0xc2/0x120 [ 326.879291][T14610] __kmalloc_cache_noprof+0x68/0x410 [ 326.881035][T14610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 326.883230][T14610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 326.885944][T14610] genl_start+0x1e7/0x960 [ 326.887769][T14610] __netlink_dump_start+0x607/0x970 [ 326.889581][T14610] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 326.891462][T14610] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 326.893618][T14610] ? __pfx_genl_get_cmd+0x10/0x10 [ 326.895382][T14610] ? __pfx_genl_start+0x10/0x10 [ 326.897142][T14610] ? __pfx_genl_dumpit+0x10/0x10 [ 326.898705][T14610] ? __pfx_genl_done+0x10/0x10 [ 326.900002][T14610] ? bpf_lsm_capable+0x9/0x10 [ 326.901265][T14610] ? security_capable+0x7e/0x260 [ 326.902946][T14610] genl_rcv_msg+0x470/0x800 [ 326.904597][T14610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.906428][T14610] ? __pfx_nl802154_dump_llsec_seclevel+0x10/0x10 [ 326.908691][T14610] ? __pfx___lock_acquire+0x10/0x10 [ 326.910598][T14610] netlink_rcv_skb+0x16b/0x440 [ 326.912250][T14610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.913502][ T39] audit: type=1400 audit(2000000033.271:1095): avc: denied { setopt } for pid=14601 comm="syz.0.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.914044][T14610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.922131][T14610] ? down_read+0xc9/0x330 [ 326.923688][T14610] ? __pfx_down_read+0x10/0x10 [ 326.925482][T14610] ? netlink_deliver_tap+0x1ae/0xd30 [ 326.927357][T14610] genl_rcv+0x28/0x40 [ 326.928756][T14610] netlink_unicast+0x53c/0x7f0 [ 326.930482][T14610] ? __pfx_netlink_unicast+0x10/0x10 [ 326.932403][T14610] netlink_sendmsg+0x8b8/0xd70 [ 326.934207][T14610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.936129][T14610] ____sys_sendmsg+0xaaf/0xc90 [ 326.937833][T14610] ? copy_msghdr_from_user+0x10b/0x160 [ 326.939746][T14610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.941626][T14610] ___sys_sendmsg+0x135/0x1e0 [ 326.943172][T14610] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.944874][T14610] ? __pfx_lock_release+0x10/0x10 [ 326.946639][T14610] ? trace_lock_acquire+0x14e/0x1f0 [ 326.947776][T14608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4625 sclass=netlink_route_socket pid=14608 comm=syz.0.2872 [ 326.948511][T14610] ? __fget_files+0x206/0x3a0 [ 326.953465][T14610] __sys_sendmsg+0x16e/0x220 [ 326.954920][T14610] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.956629][T14610] do_syscall_64+0xcd/0x250 [ 326.958038][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.959615][T14610] RIP: 0033:0x7fbc2a185d29 [ 326.960794][T14610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.966095][T14610] RSP: 002b:00007fbc2afcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.968496][T14610] RAX: ffffffffffffffda RBX: 00007fbc2a375fa0 RCX: 00007fbc2a185d29 [ 326.970572][T14610] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 326.972680][T14610] RBP: 00007fbc2afcc090 R08: 0000000000000000 R09: 0000000000000000 [ 326.974823][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.976915][T14610] R13: 0000000000000000 R14: 00007fbc2a375fa0 R15: 00007fffa02ddc38 [ 326.979033][T14610] [ 327.037967][T14615] FAULT_INJECTION: forcing a failure. [ 327.037967][T14615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.041096][T14616] FAULT_INJECTION: forcing a failure. [ 327.041096][T14616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.042496][T14615] CPU: 1 UID: 0 PID: 14615 Comm: syz.0.2877 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 327.050694][T14615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.054395][T14615] Call Trace: [ 327.055579][T14615] [ 327.056674][T14615] dump_stack_lvl+0x16c/0x1f0 [ 327.058394][T14615] should_fail_ex+0x497/0x5b0 [ 327.060075][T14615] _copy_to_user+0x32/0xd0 [ 327.061673][T14615] simple_read_from_buffer+0xd0/0x160 [ 327.063673][T14615] proc_fail_nth_read+0x198/0x270 [ 327.065540][T14615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.067071][T14615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.068556][T14615] vfs_read+0x1df/0xbe0 [ 327.069693][T14615] ? __fget_files+0x1fc/0x3a0 [ 327.071000][T14615] ? __pfx___mutex_lock+0x10/0x10 [ 327.072650][T14615] ? __pfx_vfs_read+0x10/0x10 [ 327.074440][T14615] ? __fget_files+0x206/0x3a0 [ 327.076007][T14615] ksys_read+0x12b/0x250 [ 327.077146][T14615] ? __pfx_ksys_read+0x10/0x10 [ 327.078473][T14615] do_syscall_64+0xcd/0x250 [ 327.079714][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.081285][T14615] RIP: 0033:0x7faac338473c [ 327.082695][T14615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.088567][T14615] RSP: 002b:00007faac40f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.090823][T14615] RAX: ffffffffffffffda RBX: 00007faac3575fa0 RCX: 00007faac338473c [ 327.093027][T14615] RDX: 000000000000000f RSI: 00007faac40f40a0 RDI: 0000000000000003 [ 327.095164][T14615] RBP: 00007faac40f4090 R08: 0000000000000000 R09: 0000000000000000 [ 327.097270][T14615] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 327.099390][T14615] R13: 0000000000000001 R14: 00007faac3575fa0 R15: 00007fff8fb20708 [ 327.101586][T14615] [ 327.102658][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.105435][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.4.2878 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 327.108342][T14616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.111607][T14616] Call Trace: [ 327.112736][T14616] [ 327.113675][T14616] dump_stack_lvl+0x16c/0x1f0 [ 327.115613][T14616] should_fail_ex+0x497/0x5b0 [ 327.117278][T14616] strncpy_from_user+0x3b/0x2d0 [ 327.118797][T14616] getname_flags.part.0+0x8f/0x550 [ 327.120204][T14616] ? __pfx_ksys_write+0x10/0x10 [ 327.121562][T14616] getname_flags+0x93/0xf0 [ 327.122839][T14616] __x64_sys_mknodat+0x9f/0xe0 [ 327.124124][T14616] do_syscall_64+0xcd/0x250 [ 327.125401][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.127320][T14616] RIP: 0033:0x7fbc2a185d29 [ 327.128611][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.134325][T14616] RSP: 002b:00007fbc2afcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 327.136774][T14616] RAX: ffffffffffffffda RBX: 00007fbc2a375fa0 RCX: 00007fbc2a185d29 [ 327.138881][T14616] RDX: 000000003b9ac9ff RSI: 0000000020000000 RDI: ffffffffffffff9c [ 327.141040][T14616] RBP: 00007fbc2afcc090 R08: 0000000000000000 R09: 0000000000000000 [ 327.143224][T14616] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 327.145313][T14616] R13: 0000000000000000 R14: 00007fbc2a375fa0 R15: 00007fffa02ddc38 [ 327.147439][T14616] [ 327.327873][T14626] FAULT_INJECTION: forcing a failure. [ 327.327873][T14626] name failslab, interval 1, probability 0, space 0, times 0 [ 327.331314][T14626] CPU: 0 UID: 0 PID: 14626 Comm: syz.2.2882 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 327.334254][T14626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.337126][T14626] Call Trace: [ 327.338030][T14626] [ 327.338844][T14626] dump_stack_lvl+0x16c/0x1f0 [ 327.340137][T14626] should_fail_ex+0x497/0x5b0 [ 327.341462][T14626] ? fs_reclaim_acquire+0xae/0x150 [ 327.342884][T14626] should_failslab+0xc2/0x120 [ 327.344115][T14626] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 327.345687][T14626] ? idr_get_next_ul+0x197/0x2e0 [ 327.346994][T14626] ? __alloc_skb+0x2b1/0x380 [ 327.348200][T14626] __alloc_skb+0x2b1/0x380 [ 327.349386][T14626] ? __pfx___alloc_skb+0x10/0x10 [ 327.350748][T14626] ? idr_get_next+0xed/0x150 [ 327.352045][T14626] ? __pfx_idr_get_next+0x10/0x10 [ 327.353393][T14626] ctrl_build_family_msg+0x36/0xa0 [ 327.354823][T14626] ctrl_getfamily+0x355/0x540 [ 327.356085][T14626] ? __pfx_ctrl_getfamily+0x10/0x10 [ 327.357462][T14626] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 327.359410][T14626] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 327.361437][T14626] genl_family_rcv_msg_doit+0x202/0x2f0 [ 327.362978][T14626] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 327.364500][T14626] ? __pfx___mutex_lock+0x10/0x10 [ 327.365754][T14626] ? genl_get_cmd+0x195/0x580 [ 327.366965][T14626] ? __radix_tree_lookup+0x21f/0x2c0 [ 327.368323][T14626] genl_rcv_msg+0x565/0x800 [ 327.369535][T14626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.370875][T14626] ? __pfx_ctrl_getfamily+0x10/0x10 [ 327.372188][T14626] ? __pfx___lock_acquire+0x10/0x10 [ 327.373506][T14626] netlink_rcv_skb+0x16b/0x440 [ 327.374724][T14626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.376007][T14626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.377382][T14626] ? down_read+0xc9/0x330 [ 327.378516][T14626] ? __pfx_down_read+0x10/0x10 [ 327.379807][T14626] ? netlink_deliver_tap+0x1ae/0xd30 [ 327.381252][T14626] genl_rcv+0x28/0x40 [ 327.382298][T14626] netlink_unicast+0x53c/0x7f0 [ 327.383558][T14626] ? __pfx_netlink_unicast+0x10/0x10 [ 327.384958][T14626] netlink_sendmsg+0x8b8/0xd70 [ 327.386206][T14626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.387602][T14626] __sys_sendto+0x488/0x4f0 [ 327.388791][T14626] ? __pfx___sys_sendto+0x10/0x10 [ 327.390160][T14626] ? ksys_write+0x1ba/0x250 [ 327.391485][T14626] ? __pfx_ksys_write+0x10/0x10 [ 327.392743][T14626] __x64_sys_sendto+0xe0/0x1c0 [ 327.394004][T14626] ? do_syscall_64+0x91/0x250 [ 327.395254][T14626] ? lockdep_hardirqs_on+0x7c/0x110 [ 327.396596][T14626] do_syscall_64+0xcd/0x250 [ 327.397777][T14626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.399323][T14626] RIP: 0033:0x7f6ab9187bbc [ 327.400537][T14626] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 327.405696][T14626] RSP: 002b:00007f6ab9ed4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 327.407923][T14626] RAX: ffffffffffffffda RBX: 00007f6ab9ed4fc0 RCX: 00007f6ab9187bbc [ 327.410034][T14626] RDX: 0000000000000024 RSI: 00007f6ab9ed5010 RDI: 0000000000000004 [ 327.412253][T14626] RBP: 0000000000000000 R08: 00007f6ab9ed4f14 R09: 000000000000000c [ 327.414368][T14626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 327.416460][T14626] R13: 00007f6ab9ed4f68 R14: 00007f6ab9ed5010 R15: 0000000000000000 [ 327.418574][T14626] [ 327.919220][ T39] audit: type=1400 audit(2000000034.311:1096): avc: denied { write } for pid=14635 comm="syz.4.2886" name="file0" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 327.925223][ T39] audit: type=1400 audit(2000000034.311:1097): avc: denied { open } for pid=14635 comm="syz.4.2886" path="/473/file0" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.015202][T14640] infiniband syz2: set active [ 328.016876][T14640] infiniband syz2: added team_slave_1 [ 328.028770][T14640] RDS/IB: syz2: added [ 328.029856][T14640] smc: adding ib device syz2 with port count 1 [ 328.031490][T14640] smc: ib device syz2 port 1 has pnetid [ 328.379814][T14647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14647 comm=syz.2.2889 [ 328.477220][T14651] openvswitch: netlink: EtherType 0 is less than min 600 [ 328.713758][ T5974] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 328.883597][ T5974] usb 7-1: Using ep0 maxpacket: 32 [ 328.889464][ T5974] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 328.891664][ T5974] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 328.894549][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 328.896837][ T5974] usb 7-1: config 1 has no interface number 0 [ 328.898330][ T5974] usb 7-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.900860][ T5974] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 328.904421][ T5974] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 328.906833][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.916745][ T5974] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 329.130791][ T5974] snd_usb_pod 7-1:1.1: set_interface failed [ 329.136359][ T5974] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 329.142839][ T5974] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 329.148365][ T5974] usb 7-1: USB disconnect, device number 49 [ 329.398085][ T39] audit: type=1400 audit(2000000035.791:1098): avc: denied { bind } for pid=14663 comm="syz.5.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.766436][ T39] audit: type=1326 audit(2000000036.161:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.0.2897" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faac3385d29 code=0x0 [ 329.857288][T14676] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2898'. [ 329.944068][T14681] overlayfs: missing 'workdir' [ 329.944155][ T39] audit: type=1400 audit(2000000036.341:1100): avc: denied { mounton } for pid=14680 comm="syz.2.2900" path="/134/file0/bus" dev="ramfs" ino=55988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 330.108768][T14690] FAULT_INJECTION: forcing a failure. [ 330.108768][T14690] name failslab, interval 1, probability 0, space 0, times 0 [ 330.112391][T14690] CPU: 0 UID: 0 PID: 14690 Comm: syz.5.2903 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 330.115245][T14690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 330.118027][T14690] Call Trace: [ 330.118906][T14690] [ 330.119658][T14690] dump_stack_lvl+0x16c/0x1f0 [ 330.120857][T14690] should_fail_ex+0x497/0x5b0 [ 330.122036][T14690] should_failslab+0xc2/0x120 [ 330.123582][T14690] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 330.125202][T14690] ? skb_clone+0x190/0x3f0 [ 330.126404][T14690] skb_clone+0x190/0x3f0 [ 330.127528][T14690] netlink_deliver_tap+0xabd/0xd30 [ 330.128882][T14690] netlink_unicast+0x5e1/0x7f0 [ 330.130152][T14690] ? __pfx_netlink_unicast+0x10/0x10 [ 330.131541][T14690] netlink_sendmsg+0x8b8/0xd70 [ 330.132790][T14690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.134130][T14690] ____sys_sendmsg+0xaaf/0xc90 [ 330.135400][T14690] ? copy_msghdr_from_user+0x10b/0x160 [ 330.136780][T14690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.138120][T14690] ___sys_sendmsg+0x135/0x1e0 [ 330.139337][T14690] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.140705][T14690] ? __pfx_lock_release+0x10/0x10 [ 330.141999][T14690] ? trace_lock_acquire+0x14e/0x1f0 [ 330.143339][T14690] ? __fget_files+0x206/0x3a0 [ 330.144738][T14690] __sys_sendmsg+0x16e/0x220 [ 330.145971][T14690] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.147285][T14690] do_syscall_64+0xcd/0x250 [ 330.148446][T14690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.149942][T14690] RIP: 0033:0x7fe71dd85d29 [ 330.151109][T14690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.156117][T14690] RSP: 002b:00007fe71eade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.158398][T14690] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd85d29 [ 330.160461][T14690] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 330.162527][T14690] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 330.164597][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.166670][T14690] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 [ 330.168729][T14690] [ 330.639495][ T39] audit: type=1400 audit(2000000037.031:1101): avc: denied { getopt } for pid=14696 comm="syz.0.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.643614][T14657] kexec: Could not allocate control_code_buffer [ 330.677356][T14699] fuse: Unknown parameter 'rootmode' [ 330.725403][T14702] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 330.727902][T14702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2908'. [ 331.012959][ T5947] Bluetooth: hci3: ACL packet too small [ 331.142219][ T5287] Bluetooth: hci0: unexpected event for opcode 0x9263 [ 331.709977][ T39] audit: type=1404 audit(2000000038.101:1102): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 331.717958][ T39] audit: type=1400 audit(2000000038.111:1103): avc: denied { read write } for pid=9061 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 331.727123][ T39] audit: type=1400 audit(2000000038.121:1104): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.709977][ T39] AUDIT: TYPE=1404 AUDIT(2000000038.101:1102): ENFORCING=1 OLD_ENFORCING=0 AUID=4294967295 SES=4294967295 ENAB[ 331.741270][ T39] audit: type=1400 audit(2000000038.131:1105): avc: denied { getopt } for pid=14729 comm="syz.4.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 LED=1 OLD-ENABLED=1 LSM=SELINUX RES=1 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.717958][ T39] AUDIT: TYPE=1400 A[ 331.753318][ T39] audit: type=1400 audit(2000000038.131:1106): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 UDIT(2000000038.111:1103): AVC: DENIED { READ WRITE } FOR PID=9061 COMM="SYZ-EXECUTOR" NAME="LOOP5" DEV="DEVTMPFS" INO=663 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=SYSTEM_U:OBJECT_R:FI MAY 1[ 331.779811][ T39] audit: type=1400 audit(2000000038.131:1107): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="socket:[56091]" dev="sockfs" ino=56091 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 331.784739][T14740] FAULT_INJECTION: forcing a failure. [ 331.784739][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.788918][ T39] audit: type=1400 audit(2000000038.141:1108): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="socket:[56091]" dev="sockfs" ino=56091 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 331.793442][T14740] CPU: 3 UID: 0 PID: 14740 Comm: syz.5.2922 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 331.804418][T14740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.807757][T14740] Call Trace: [ 331.808665][T14740] [ 331.809498][T14740] dump_stack_lvl+0x16c/0x1f0 8 [ 331.810992][T14740] should_fail_ex+0x497/0x5b0 [ 331.812360][T14740] _copy_to_user+0x32/0xd0 [ 331.813247][ T39] audit: type=1400 audit(2000000038.141:1109): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="socket:[56091]" dev="sockfs" ino=56091 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 331.813753][T14740] simple_read_from_buffer+0xd0/0x160 0[ 331.821381][ T39] audit: type=1400 audit(2000000038.141:1110): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="socket:[56091]" dev="sockfs" ino=56091 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 331.822982][T14740] proc_fail_nth_read+0x198/0x270 [ 331.833145][ T39] audit: type=1400 audit(2000000038.141:1111): avc: denied { ioctl } for pid=14729 comm="syz.4.2920" path="socket:[56091]" dev="sockfs" ino=56091 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 331.833470][T14740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.833508][T14740] ? __pfx_proc_fail_nth_read+0x10/0x10 3[ 331.844627][T14740] vfs_read+0x1df/0xbe0 [ 331.845827][T14740] ? __fget_files+0x1fc/0x3a0 :33:[ 331.847215][T14740] ? __pfx___mutex_lock+0x10/0x10 [ 331.848724][T14740] ? __pfx_vfs_read+0x10/0x10 5[ 331.850182][T14740] ? __fget_files+0x206/0x3a0 [ 331.851950][T14740] ksys_read+0x12b/0x250 [ 331.853375][T14740] ? __pfx_ksys_read+0x10/0x10 8 SYZ[ 331.854730][T14740] do_syscall_64+0xcd/0x250 [ 331.856103][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.858003][T14740] RIP: 0033:0x7fe71dd8473c [ 331.859705][T14740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 K[ 331.864912][T14740] RSP: 002b:00007fe71eade030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.867440][T14740] RAX: ffffffffffffffda RBX: 00007fe71df75fa0 RCX: 00007fe71dd8473c [ 331.870191][T14740] RDX: 000000000000000f RSI: 00007fe71eade0a0 RDI: 0000000000000003 A[ 331.873077][T14740] RBP: 00007fe71eade090 R08: 0000000000000000 R09: 0000000000000000 [ 331.876030][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.878819][T14740] R13: 0000000000000000 R14: 00007fe71df75fa0 R15: 00007ffd4edcf788 L[ 331.880928][T14740] LER KERN.NOTICE KERNEL: [ 331.727123][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.121:1104): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.741270][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.131:1105): AVC: DENIED { GETOPT } FOR PID=14729 COMM="SYZ.4.2920" SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=ROOT:SYSADM_R:SYSADM_T TCLASS=SMC_SOCKET PERMISSIVE=0 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.753318][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.131:1106): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="/DEV/VHOST-NET" DEV="DEVTMPFS" INO=1300 IOCTLCMD=0XAF30 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT= MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.779811][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.131:1107): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="SOCKET:[56091]" DEV="SOCKFS" INO=56091 IOCTLCMD=0XAE83 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=R MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.784739][T14740] FAULT_INJECTION: FORCING A FAILURE. MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.784739][T14740] NAME FAIL_USERCOPY, INTERVAL 1, PROBABILITY 0, SPACE 0, TIMES 0 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.788918][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.141:1108): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="SOCKET:[56091]" D[ 331.975464][T14749] FAULT_INJECTION: forcing a failure. [ 331.975464][T14749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.979772][T14749] CPU: 2 UID: 0 PID: 14749 Comm: syz.5.2925 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 331.983163][T14749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 E[ 331.986633][T14749] Call Trace: [ 331.987795][T14749] [ 331.988783][T14749] dump_stack_lvl+0x16c/0x1f0 V=[ 331.990390][T14749] should_fail_ex+0x497/0x5b0 [ 331.992071][T14749] _copy_to_user+0x32/0xd0 "[ 331.993589][T14749] simple_read_from_buffer+0xd0/0x160 [ 331.995481][T14749] proc_fail_nth_read+0x198/0x270 [ 331.997140][T14749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.999059][T14749] ? __pfx_proc_fail_nth_read+0x10/0x10 SO[ 332.000864][T14749] vfs_read+0x1df/0xbe0 [ 332.002309][T14749] ? __fget_files+0x1fc/0x3a0 [ 332.003900][T14749] ? __pfx___mutex_lock+0x10/0x10 C[ 332.005515][T14749] ? __pfx_vfs_read+0x10/0x10 [ 332.007045][T14749] ? __fget_files+0x206/0x3a0 KFS[ 332.008517][T14749] ksys_read+0x12b/0x250 [ 332.009990][T14749] ? __pfx_ksys_read+0x10/0x10 " [ 332.011599][T14749] do_syscall_64+0xcd/0x250 [ 332.013145][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.015045][T14749] RIP: 0033:0x7fe71dd8473c [ 332.016486][T14749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 I[ 332.022394][T14749] RSP: 002b:00007fe71bbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.025076][T14749] RAX: ffffffffffffffda RBX: 00007fe71df76080 RCX: 00007fe71dd8473c [ 332.027613][T14749] RDX: 000000000000000f RSI: 00007fe71bbf60a0 RDI: 0000000000000006 N[ 332.030164][T14749] RBP: 00007fe71bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.032760][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.035218][T14749] R13: 0000000000000000 R14: 00007fe71df76080 R15: 00007ffd4edcf788 [ 332.037641][T14749] O=56091 IOCTLCMD=0XAE46 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=R MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.793442][T14740] CPU: 3 UID: 0 PID: 14740 COMM: SYZ.5.2922 NOT TAINTED 6.13.0-RC3-SYZKALLER-00017-GF44D154D6E3D #0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.804418][T14740] HARDWARE NAME: QEMU STANDARD PC (Q35 + ICH9, 2009), BIOS 1.16.3-DEBIAN-1.16.3-2~BPO12+1 04/01/2014 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.807757][T14740] CALL TRACE: MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.808665][T14740] MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.809498][T14740] DUMP_STACK_LVL+0X16C/0X1F0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.810992][T14740] SHOULD_FAIL_EX+0X497/0X5B0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.812360][T14740] _COPY_TO_USER+0X32/0XD0 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.813247][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.141:1109): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="SOCKET:[56091]" DEV="SOCKFS" INO=56091 IOCTLCMD=0XAE46 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=R MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.813753][T14740] SIMPLE_READ_FROM_BUFFER+0XD0/0X160 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.821381][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.141:1110): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="SOCKET:[56091]" DEV="SOCKFS" INO=56091 IOCTLCMD=0XAE46 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=R MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.822982][T14740] PROC_FAIL_NTH_READ+0X198/0X270 MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.833145][ T39] AUDIT: TYPE=1400 AUDIT(2000000038.141:1111): AVC: DENIED { IOCTL } FOR PID=14729 COMM="SYZ.4.2920" PATH="SOCKET:[56091]" DEV="SOCKFS" INO=56091 IOCTLCMD=0XAE46 SCONTEXT=ROOT:SYSADM_R:SYSADM_T TCONTEXT=R MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.833470][T14740] ? __PFX_PROC_FAIL_NTH_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.833508][T14740] ? __PFX_PROC_FAIL_NTH_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.844627][T14740] VFS_READ+0X1DF/0XBE0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.845827][T14740] ? __FGET_FILES+0X1FC/0X3A0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.847215][T14740] ? __PFX___MUTEX_LOCK+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.848724][T14740] ? __PFX_VFS_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.850182][T14740] ? __FGET_FILES+0X206/0X3A0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.851950][T14740] KSYS_READ+0X12B/0X250 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.853375][T14740] ? __PFX_KSYS_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.854730][T14740] DO_SYSCALL_64+0XCD/0X250 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.856103][T14740] ENTRY_SYSCALL_64_AFTER_HWFRAME+0X77/0X7F MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.858003][T14740] RIP: 0033:0X7FE71DD8473C MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.859705][T14740] CODE: EC 28 48 89 54 24 18 48 89 74 24 10 89 7C 24 08 E8 99 93 02 00 48 8B 54 24 18 48 8B 74 24 10 41 89 C0 8B 7C 24 08 31 C0 0F 05 <48> 3D 00 F0 FF FF 77 34 44 89 C7 48 89 44 24 08 E8 EF 93 02 00 48 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.864912][T14740] RSP: 002B:00007FE71EADE030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.867440][T14740] RAX: FFFFFFFFFFFFFFDA RBX: 00007FE71DF75FA0 RCX: 00007FE71DD8473C MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.870191][T14740] RDX: 000000000000000F RSI: 00007FE71EADE0A0 RDI: 0000000000000003 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.873077][T14740] RBP: 00007FE71EADE090 R08: 0000000000000000 R09: 0000000000000000 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.876030][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.878819][T14740] R13: 0000000000000000 R14: 00007FE71DF75FA0 R15: 00007FFD4EDCF788 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.880928][T14740] MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.975464][T14749] FAULT_INJECTION: FORCING A FAILURE. MAY 18 03:33:58 SYZKALLER KERN.NOTICE KERNEL: [ 331.975464][T14749] NAME FAIL_USERCOPY, INTERVAL 1, PROBABILITY 0, SPACE 0, TIMES 0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.979772][T14749] CPU: 2 UID: 0 PID: 14749 COMM: SYZ.5.2925 NOT TAINTED 6.13.0-RC3-SYZKALLER-00017-GF44D154D6E3D #0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.983163][T14749] HARDWARE NAME: QEMU STANDARD PC [ 332.278818][ T5947] Bluetooth: hci0: ACL packet too small (Q35 + ICH9, 2009), BIOS 1.16.3-DEBIAN-1.16.3-2~BPO12+1 04/01/2014 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.986633][T14749] CALL TRACE: MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.987795][T14749] MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.988783][T14749] DUMP_STACK_LVL+0X16C/0X1F0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.990390][T14749] SHOULD_FAIL_EX+0X497/0X5B0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.992071][T14749] _COPY_TO_USER+0X32/0XD0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.993589][T14749] SIMPLE_READ_FROM_BUFFER+0XD0/0X160 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.995481][T14749] PROC_FAIL_NTH_READ+0X198/0X270 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.997140][T14749] ? __PFX_PROC_FAIL_NTH_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 331.999059][T14749] ? __PFX_PROC_FAIL_NTH_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.000864][T14749] VFS_READ+0X1DF/0XBE0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.002309][T14749] ? __FGET_FILES+0X1FC/0X3A0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.003900][T14749] ? __PFX___MUTEX_LOCK+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.005515][T14749] ? __PFX_VFS_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.007045][T14749] ? __FGET_FILES+0X206/0X3A0 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.008517][T14749] KSYS_READ+0X12B/0X250 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.009990][T14749] ? __PFX_KSYS_READ+0X10/0X10 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.011599][T14749] DO_SYSCALL_64+0XCD/0X250 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.013145][T14749] ENTRY_SYSCALL_64_AFTER_HWFRAME+0X77/0X7F MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.015045][T14749] RIP: 0033:0X7FE71DD8473C MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.016486][T14749] CODE: EC 28 48 89 54 24 18 48 89 74 24 10 89 7C 24 08 E8 99 93 02 00 48 8B 54 24 18 48 8B 74 24 10 41 89 C0 8B 7C 24 08 31 C0 0F 05 <48> 3D 00 F0 FF FF 77 34 44 89 C7 48 89 44 24 08 E8 EF 93 02 00 48 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.022394][T14749] RSP: 002B:00007FE71BBF6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.025076][T14749] RAX: FFFFFFFFFFFFFFDA RBX: 00007FE71DF76080 RCX: 00007FE71DD8473C MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.027613][T14749] RDX: 000000000000000F RSI: 00007FE71BBF60A0 RDI: 0000000000000006 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.030164][T14749] RBP: 00007FE71BBF6090 R08: 0000000000000000 R09: 0000000000000000 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.032760][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.035218][T14749] R13: 0000000000000000 R14: 00007FE71DF76080 R15: 00007FFD4EDCF788 MAY 18 03:33:58 SYZKALLER KERN.WARN KERNEL: [ 332.037641][T14749] MAY 18 03:33:58 SYZKALLER KERN.ERR KERNEL: [ 332.278818][ T5947] BLUETOOTH: HCI0: ACL PACKET TOO SMALL [ 332.945390][T14786] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 332.947135][T14786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.949650][T14786] vhci_hcd vhci_hcd.0: Device attached MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.945390][T14786] VHCI_HCD VHCI_HCD.0: PDEV(4) RHPORT(0) SOCKFD(5) MAY 18 03:33:59 SYZKALLER KERN.[ 332.952172][T14787] vhci_hcd: connection closed [ 332.963248][ T70] vhci_hcd: stop threads [ 332.965953][ T70] vhci_hcd: release socket [ 332.967276][ T70] vhci_hcd: disconnect device INFO KERNEL: [ 332.947135][T14786] VHCI_HCD VHCI_HCD.0: DEVID(0) SPEED(1) SPEED_STR(LOW-SPEED) MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.949650][T14786] VHCI_HCD VHCI_HCD.0: DEVICE ATTACHED MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.952172][T14787] VHCI_HCD: CONNECTION CLOSED MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.963248][ T70] VHCI_HCD: STOP THREADS MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.965953][ T70] VHCI_HCD: RELEASE SOCKET MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 332.967276][ T70] VHCI_HCD: DISCONNECT DEVICE [ 333.371301][T14795] capability: warning: `syz.2.2946' uses 32-bit capabilities (legacy support in use) MAY 18 03:33:59 SYZKALLER KERN.INFO KERNEL: [ 333.371301][T14795] CAPABILITY: WARNING: `SYZ.2.2946' USES 32-BIT CAPABILITIES (LEGACY SUPPORT IN USE) MAY 18 03:34:00 SYZKALLER DAEMON.ERR DHCPCD[14799]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT MAY 18 03:34:00 SYZKALLER DAEMON.ERR DHCPCD[14799]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 339.747149][ T39] kauditd_printk_skb: 193 callbacks suppressed [ 339.747166][ T39] audit: type=1400 audit(2000000046.142:1305): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER DAEMON.ERR DHCPCD[14800]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT MAY 18 03:34:06 SYZKALLER DAEMON.ERR DHCPCD[14800]: PS_ROOT_RECVMSG: INVALID ARGUMENT [ 339.763299][ T39] audit: type=1400 audit(2000000046.152:1306): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 339.770067][ T39] audit: type=1400 audit(2000000046.162:1307): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.WARN KERNEL: [ 339.747149][ T39] KAUDITD_PRINTK_SKB: 193 CALLBACKS SUPPRESSED [ 339.781771][ T39] audit: type=1400 audit(2000000046.172:1308): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.747166][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.142:1305): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNE[ 339.802970][ T39] audit: type=1400 audit(2000000046.192:1309): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 L: [ 339.763299][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.152:1306): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 339.819610][ T39] audit: type=1400 audit(2000000046.212:1310): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.770067][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.162:1307): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 339.840066][ T39] audit: type=1400 audit(2000000046.232:1311): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.781771][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.172:1308): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 339.859019][ T39] audit: type=1400 audit(2000000046.252:1312): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.802970][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.192:1309): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 339.890044][ T39] audit: type=1400 audit(2000000046.282:1313): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.819610][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.212:1310): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= [ 339.919233][ T39] audit: type=1400 audit(2000000046.312:1314): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.840066][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.232:1311): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.859019][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.252:1312): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.890044][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.282:1313): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:34:06 SYZKALLER KERN.NOTICE KERNEL: [ 339.919233][ T39] AUDIT: TYPE=1400 AUDIT(2000000046.312:1314): AVC: DENIED { READ } FOR PID=5330 COMM="SYSLOGD" NAME="LOG" DEV="SDA1" INO=1915 SCONTEXT=SYSTEM_U:SYSTEM_R:SYSLOGD_T TCONTEXT=SYSTEM_U:OBJECT_R:VAR_T TCLASS= MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14801]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14801]: PS_ROOT_RECVMSG: INVALID ARGUMENT MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14802]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14802]: PS_ROOT_RECVMSG: INVALID ARGUMENT MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14803]: PS_BPF_START_BPF: BPF_OPEN: INVALID ARGUMENT MAY 18 03:34:08 SYZKALLER DAEMON.ERR DHCPCD[14803]: PS_ROOT_RECVMSG: INVALID ARGUMENT VM DIAGNOSIS: 16:48:38 Registers: info registers vcpu 0 CPU#0 RAX=00000000008d9791 RBX=0000000000000000 RCX=ffffffff8b293679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1e860 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f2c90 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002000 CR3=000000003217a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab9ed5bf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab92029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab92029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab92029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab92029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab9202a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ab9202b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff888030b6e010 RDX=ffff888050aa0000 RSI=ffffffff81f3d1bb RDI=ffffea0001185108 RBP=ffffea0001185100 RSP=ffffc900043cf570 R8 =0000000000000004 R9 =00000000000001fd R10=0000000000000185 R11=0000000000000001 R12=0000000000000185 R13=ffff888030b6ec38 R14=ffffea0001185100 R15=00000000000001fd RIP=ffffffff81f3d1fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a48c2 CR3=0000000030a4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556cad1365 000055556cad1290 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556cad0e24 000055556cad0e20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556cadcfdb 000055556cadce10 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a800300080008 030399c08ce00800 0003018004118004 0284080002880800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800520800010800 0a01579600080001 b80300040001b403 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000316e 616c7701ffffffff ffffffffdf080180 0340100001800440 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000610003e1000 06105dde01800404 a4e6080001080006 012d8e0000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0110808080d61000 03ffffffff040100 000e08060100000a 0806080144ea0004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080004015fbe00 726573752f736e01 ffffffffffffffff ef0800031ffffff6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba10000480040100 000e080606016680 1402000486032021 2301ffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff90804800301 800404ace4080001 000010080606010b 8a0210000610003e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000923f49 RBX=0000000000000002 RCX=ffffffff8b293679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1e860 RBP=ffffed1003ad4000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f2c90 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faac40f49c8 CR3=000000004a68e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8fb20aa0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac34029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac34029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac34029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac34029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac3402a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faac3402b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000009c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 000000000000009c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000891abd RBX=0000000000000003 RCX=ffffffff8b293679 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1e860 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f2c90 R15=0000000000000000 RIP=ffffffff8b294a5f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003ff6 CR3=000000002993a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=00000000ffffffff Opmask02=00000000fff80800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb5628410 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000