last executing test programs: 9.657511865s ago: executing program 2 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setfsuid(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000040020000000800", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ']'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '{+k%)@,&:'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '-:\\'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '-'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26048881}, 0x8004) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030004000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) 9.44171079s ago: executing program 2 (id=1023): r0 = socket(0x2, 0x0, 0xfffffffd) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) syz_emit_vhci(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) syz_io_uring_setup(0x5169, &(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f00000005c0)) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe54}) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = fcntl$getown(r0, 0x9) sched_setaffinity(r4, 0xfffffffffffffef8, &(0x7f0000000200)=0x800000400000bd2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_io_uring_setup(0x38, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f00000001c0)) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) io_uring_enter(r6, 0x6f91, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="03c800004009fea92eaf53dd5347d4d574d5282e3b685cd10a736511989d75f78d9a32674bd72bdaca0248de0cd21f36907f600f35cf0f627adf8b0df83ea9bbc27b283632091dbbf87d44ade9721a26b01644e240dcc3586313e73ba56baf119dcf2cd6292802c4648a2139f2afeb709eb762e9713336f01f3e28deea3b923cf7c88f91478eb08f1edfd4cfc0414f19cff94337f26de000a913d01802f1703e7921b06f16269fd61224052d44e056e02aeedbc752f31031a4b3f3a5127fb4876e095b1b823a43e9f672262b739d832869f7db64ff8f3899d90a8dbadc280ee35a4d0644a5c54bb948de33af224d96d5731a78b331e2337af38d35b497cacd30ef841cee99377e4424c532c6ea79c5632f0b9a21977c396b4ba46a2a48a67611c5c6c7030add6a77680127cc33794c86751a838c63ea300402bf02d1519923a1322b5a5692f07ac6f9191c06dd19b539417c430161d53c7018273a14115e675d56c3d8f2dd61af94caac4498ac720aae621f8e51fa6cfa1a50207c240a8b8990aff3d92dcb2961eb8772f386939e101fde3f7e7f5a2d42884083ed971baa0d464b146f03ab7b777206827fdc31af6f9ea0f39a936ac805f14f79d1982bb5aeb83c8d452e41b66a8fce3051bf17781212e99fa2541eb38dae2f86710672bdbf8928aa5d5d5e55b5416fc828f6ee0cfbece1d7ea7a9d0cce990b1732f761cd58eea854913396c45f0d4c6d426cb6bf163badf007f6f2a59a9ed87100d9b6eff2bd845d6b7277bfb25a2f89fdbbae298377c4a06dc2d7fa805ee7b2d8192c8de4247ee418b91b4630a93d846c911d4bd7a63f8186b8b122fa46984291dc5c80a7205f198d840a607e6a1f6b048d5ce534db327ef1145a3a32ba072fbedc36226a97499487d9282546c41d98fe89f62ac21a0f0f030ffddb8cdbca1380ecc53c5ad39b0775b08977e83a068530d70a36d0be5d90f7afe06ed4db85edbe2447e1c00d6ecdc9c4bb6d8c697c71b2c34716264d6f9e76b76278a68acdf60e3bfba9b40adb7831eae3cf43ac8d04563247c2d78f836be14fcb3f565e543fe12ae75e4a740d914601a03ce2e1be104577d7b8ad82dd841ce327a7f603c13f1255ec6a478544080c8a31368e9010ff9c73763a185cb460c16a01af598c64bd43d9e3bd0dddc5cbe5138822b4c83d1a61fb67c263583ef7984a9b4fc124367239045beb7bc62b5b6f1ff02f671f0bca097c5622e4d72cfa3a240044cbca0e8a964d34d2f7f9a2fa81fcf2c5b29bbc2efcf15682a8dfb2cd21ebc4592a4884206a50221acbf4456a65950077a185f5e6195d057a759c4fde09d786c5e7016240994236719326813682d5118f029e88ca866b965290222dfc1ec430b588dd89f995bd4fd1a7d64149cc42e0c3632efdc07da1da0bc9934a59f88b172557832f7b9b71dc550822a4f26f8dcb42b15ce0d31c13da57fdeb67a825b1c9a52e325a8fa8702d8670e90f23b35e999236c43412ff29cdfe7d3025e75d2a3dbee4be1682050f3136c3400611bd20c0b7f1c9548cb332e6dea9eeb5b045832057bbbfe07011c3c8bfb10cadcf2a2f0ffa5d0d9179dfefc4722628b7335262c58acd40910ca3c06b49df6934976db1e4b39efb540b454577b74abb9a10bd59f77324994d9448287f3ba627c3cb863c31f50267cdf1b1879bfac00b75cb2316b8fbbe39c887c275deac9bd5b6dc631337052f076d67cef6286b4dc6a5734adc1043490ace46a6bd8e00e9dab7b4d647e9767aa57688828be711ebb7e54559c91d6c9f2d417dac42dd34de649abf09810300605e095f52a5a7ad1366b29ca250fb9f1e374a9ff863f59b646bb9316ce01f560faaa30d52f08753d4e08886da15d6401c03ba424dfbd3820958a956d240fa806a71c26db44cd108c547ace861885f1615460936b79a903153b780fcb1e6bf02387ad025e8e97b75428e90c9b352d605fe1e4da3cecb5a0bf76b31c3bd8398531ade3f2e8019fa83a594c9f6026f613e3f02b898e5290284950f877f24467bab3c61b4af90afebe293e51e5b15228cf31939da06f60c7316c1eb67e5eb1345201bca03d2031998c383c7d0f001635803cf3e9104b502c81f64f0c1276f3ca1c2de0639ca38fc3f36df9ca8d89f9aa113bffec6e0d8a4a5b30631214bdb5941bef194135adbb2bd53d12e43a3979047ea02c39fa2a189173ad4959c3571b3dffe3ea601d10b8eb585be9268d7f59c96a83399a338caa2c12f29152954c8bad9396f1ac437e328079c1553b1a1e2e96651049aec5ede91a2da2b6a391c752dcb1173f61a254992f18e1cba5fa5ad7b8bee35930979961570eb5f51b144274de40dc932304ccd9ccad83c1c538feefa427d123160443db14fbec3aca58716c2265207948f6bcacb07ab724abfcd03449d376b1cd2c572586e9cee40b5498b241ce900aab2b9f6ba7f993f781eb947b09d1360acd7a7926f62782cb85f3da2e617f6fe244ad6492dba13dbff017e8066b0c55b2c9b81f3b737e65ea3672e15d18fa47b8cf07768739e66bf7cfd44629355fff8ba1bd6d0ba5f5929870ba6b7ce9576f26f2a6d99caf464007908e61181f629080deda78e998f9f6075473e1fdf13114ea92125c4b2b3ade60f5b821de6267867b097717ac15ce601b013bb23e5e9c6b00df93f03863eb640de06db6c71cde948bd9512893e2d56fad6eccc86cdd19b98d8a05c691e6944cbe7d88c5afe8d011183747e48a01fd431e57325cfe87badeed49e15910fba15057094061076d83b9910ca47065bfc5b62f24671b3c247d6b23c42baafedceb02b7f0a699b612a1b074d4e818551c67705713cdc3de004b8f19fda57c08cf2070cf6ae61ad042557f9b7bd2f004bb14f22627e25c5fc12ec270fdb2b30de99cbcc7cff7d51a1c4a9dd5592e684db8a60522662e957a8b370cafc8c1fef697de320fa780d0a10d165b48373e06f61e95855c2a07823b343d42f41d825a4cdcf6e3c084ee6d9c1f2d210148afaca6a66bade085a36dc5ea5180c7a0b732437152e154454aa4c6ad0ec894fb09bc81bc1124bdd13788e4b700b90498fa0a13fc4ebe862aee2691c7505343b106bfe2b4d935af53ca1463337fd1bd5bb58a6503d3427e387560e353a8047db327da634eae5803e8c0a33db874b31b33613d9f7ea1916c298f4ec3fb17c6abbb5d9d01fd92e02ddc331b6806ff34d389a1c1d5029029458002bd67f5d16e952e41808104ab6b3b17ec523d3572ceb892388fb08f72499e22f826963337e09fad54e849e7b870c81c58aa26d8bc553900f89a10375cad871e0a999f5bb141da1a31e8e51e1aa9b7f381bf42207d089fe5abc0d2a74c457564021dfd3789f00cbc3cbdcdcb32e12a43763b869656e5e008bf26e69d02537dc4cbdca315e9ed22851dc2d83913eb520eb0c79e1e1c25bb4bc4965bc80c28c54c424f9857579187df11d3930de24612fa0cdc17c2ec4ae5561d51db2d934a2b57759876dab9eadb347351903363ee53a9faa3bf8fcea8d411a3604e5ea2bc38619f87c00c5cf09c7c5bf52064ee4ef028e1ec1bdda49540b181ff73964a515da691d3044818077c2b7e2bc3c245be7077dcf14522d4ceb88677628c3264f2648b88e3bfb0ff03db6d029e3f8635a17e053e344b039e5ba4bb4853b524fa60616eb61eccc899212a21195da677a7b3b154d1d8a9eadacb4f8f864ab8059eda14ae0e51f19790088472e5a08bf799727d67b051df2c0a0afdcf6f3a976a880aa112188057d1242c3f1e60fcef9c9234b99c5a4657ea2289a5f474145ab67b1382e2ef61c4a469646cf942cab4f15d5842dcde7d73d5aa5bbf1a296eb099f1a2daf167a8eb44e3ed839502c3f836db83cfdec53b82d85b819b9266b6d2f324b8339e5eb150ce4863a3edde352c5f73508d6fea844ec0c5519986866fe16f237469de4f83b37c20e856576174b45ccbf9a527cb05067419d56321a5e32f9714c3e6e5d8c054ed274281e050eaa12a8a68db352ec6ac24741a373c9a921cd11791cb0d43f22f62da4a1702485a515815184ca48a1e15bc0d6cbadbe2fe504690ed33b40249de8b496fe98100175f5370c9f1f0f04b87746648aabcf2962ffe4137a5758e4695070c99a852a7b9225fdb401709cc4f6904266d2d37a871343c3a2952c425f992092c0ca3e7dd5932656023171492218231bd095a18ca15620146c2bc54eacbb50dd5a707ebc7f739f38b1be6412cfe3f322ad3e642bbe9510a9a49488bab68517cb58e06b9554effe6de86c6f455eccf6ce403af688439fd288848accfbf82dba6525d30bb5a297dc3b5366e76ba57469fc7164e63a94ca24796f7411ac031dfc06ef509d68346269385687dd199984023960b5435409f3943d6c2da7abceed2f92500869321caf6fb1017cabce96fdfc3f81afba901cbe0aba962ceee778e662dc379982907b6c0a5f5116510b5477ca359f1f660f38c49b455e5557ad4affc867831b5ad5b321c659fbf3ce3a9d95a3362b144f0a66cde2cb04caedd188917f235508e46854ef8dbeffb7e249cdfd47cd46b8c2a32856ec13f74d1256693b9224a417c3fb9561d0b73b43a6cb6b9e7bf18c37677166f51b1fe2c3e0ed184cf636e69e2574fab75e33f53d592d1f34284065b728acda0056b0a6169a6562a9138c1510cf233392b4a70db157b4d335875f201675a1a1ac36f768027d61fa5ac3a7d5aab4127a1837dcb56c60656431a3b420a87709d66394b5bb8f6cc82ea56988739f9226a7cfeaca45422b50f0bbf985ace971d03032a1a6f89f60a309cec00ac4e726d1db618bc954e9a89e38e027ff326ab4e0c275dd569dbf74dd11a34a3e5dbd2474ba4a6d41d311a743170d46090bf6e403f680333f76abc80e5c93c247d89b39d4b07b4f3350ce128eb2e45156ee02c7134e58589c923af807e7b5b1deccdfc8c4181e8ef9b2165c160fe081f6ae4fe7ed5e9445e432939c8b34bc0f448b1161e2048bf3cf205360a5e3a88f5c09b918ad873d7b01c92180b8c640c6e80aa435fe3f005658e21760bc7e85c5e322b69c717a53a721d2d200046f2412e2d09ed3f51540e4e8b6cd154c45ee7c70e639d672a88ac1db703e2716eb7cfcfc958b3eccf8d5d17c212ad5cb952474a9c36a27d6c579586e55113e247eaa201f58b89f14670d6ef50ddf0a061873ca316eab21ba9bffdafa3d6695acbc34e61750d0d2e9422cad34de7bd90d6213ddaaf4a0122e674e88d96e7abd763147a09712742901b3663234bb217a5e0b58d344f6922b5593ba36e6603eb58b7515c088ef7092427f58b7a9b2e3464d7eb2ea51fd32ee0189b463ed4e0ac3a716d748041108259a0f25ed41d800cd3a21d7f33a59db1cc8b0e657f7990e24e93663cbe465ed226d9c15fc7ab8ab6b4db60e0d0da0cd475e552b144da5f56ec9f810a969fbe6b231d24b0be364799d6ba3eb159f1a370f39ea305fc7ac97ba2d983b24630f0caed02a07beb718ca6c474b13bc61b3bd3818cc4e867893bb903774a8b189ba938e5a6879206520acc5115905094035ce5a40c09d05d6f78b410460dbb5b0b21b9fdb23be9cd3d2db90679ecbf9dd60e807bfc8d9a94cd7e169c34a4407b3cc9c514a87c6b9fe5219cd1c9acbad312acc4c8083445a34550d2bd41cc5842ccb63982b1c6306b71e838acf09ddee6b9d14f3f3a45155b85caf556927c157f0c8f1480f22a6a84cf6f536fef54edbb45de054fbf60c1c1b436464eda00e2acee41fcbd692afcc44ff19a7c6ac9cd6"], 0x1004) 6.350141739s ago: executing program 0 (id=1041): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e50, &(0x7f0000000180)={0x0, 0xa46b, 0x2}) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r3, 0x2f, 0x4608, @void}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x51) 6.116209033s ago: executing program 0 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = syz_io_uring_setup(0x7573, &(0x7f0000001280)={0x0, 0x0, 0x10100}, &(0x7f0000002000), &(0x7f0000000180)=0x0) syz_io_uring_setup(0xa95, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x48e9, 0x0, 0xfff5, 0x0, 0x0) 5.939617773s ago: executing program 0 (id=1045): removexattr(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x28}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001300)="92", 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4008c002, 0x0) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) 5.652002687s ago: executing program 2 (id=1048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) fremovexattr(r0, &(0x7f0000000480)=@known='system.posix_acl_access\x00') (fail_nth: 2) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 4.862903594s ago: executing program 2 (id=1051): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200318000aff6000000002000020d3"]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f0000000880), 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r2, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) r3 = syz_io_uring_setup(0x583d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xbc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000/0x2000)=nil, 0x2000}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.630041786s ago: executing program 2 (id=1053): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) timer_create(0x0, &(0x7f00000040c0)={0x0, 0x21}, &(0x7f0000004080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x40a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3c, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000d47a0100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001f0002800400060008000200ac1414aa"], 0x40}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x541b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000380)={0x0, 0x8}, 0x8) syz_open_dev$sndctrl(&(0x7f0000000040), 0x20, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, 0x0, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r3}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 3.539751491s ago: executing program 0 (id=1055): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) r2 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000200), 0xc0000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000e1443eb"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x49fd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x1}, 0xe) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)) r6 = syz_open_dev$video(&(0x7f0000000080), 0x9, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000440)={0xe, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) socket$unix(0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) io_uring_setup(0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x6ebb45045a604d29, 0x0, 0x12f, 0x0, r7}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x4008630a}], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x900, 0x0) syz_io_uring_setup(0x81a, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x2, 0x1c3}, &(0x7f0000000240), &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x184c, 0x4000, 0x0, 0x0, 0x0) bind$l2tp6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) 2.990242107s ago: executing program 3 (id=1058): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, &(0x7f0000000140)) 2.880143281s ago: executing program 3 (id=1059): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 2.645142108s ago: executing program 0 (id=1060): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000004e40)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x58}, 0x1, 0xf000, 0x0, 0x20000000}, 0x200008d1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0xffffffffffffff08) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ed) close(r8) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fchown(r9, 0x0, 0xffffffffffffffff) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="fa", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xff4}], 0x3, 0x0, 0x0, 0x8001}, 0x10) read$alg(r5, &(0x7f0000000900)=""/4106, 0x100a) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) 2.239155789s ago: executing program 3 (id=1061): syz_io_uring_setup(0x1070a2, &(0x7f00000003c0)={0x0, 0x6d54, 0x2, 0x4000010, 0x13c}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @random="038c0000500a"}) socket(0x0, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x4) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000}) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getpid() creat(0x0, 0x0) syz_emit_vhci(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000001580)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.917252368s ago: executing program 2 (id=1063): removexattr(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x28}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001300)="92", 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4008c002, 0x0) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) 1.719880815s ago: executing program 0 (id=1064): socket$netlink(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x56, 0x6, "9919b6426db15bd6f8fc52112bb8d94ca15d8fab81dee4d61e29aebc81066072f686165c240e4bc188c7548e6861c0c3771cb9aad4a384445a5634ce0ad235f41bdc6271eddcbd6b777c597a70fb6d7feee1"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "a1e3587eb83b7b1f68ffb6d33dd6fc96b94c9f3b889f445b2eee5b70cefb7e4cd9287f1883397a83d4bba776b32801ae9a7bbbcf6a45ac78de6bf13930db62d80a640b2a986261cb4bbe89a1297d977227ea69160cc56b807d36c42857cb83084d6aec863c3ed6fa3db453012466b2591c1404fbb168d5b298488da4c769044344a2a923d1a0835b2097dc96ac0d5a8c55826de5a40211540f8aeea2e12d24d2e3dba5325314db9cd4a6005f6e1ae0e018a66b271695986dcd1c67983c1f650dc35a727b89f12de4950113cf63cff0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x56, 0x6, "9919b6426db15bd6f8fc52112bb8d94ca15d8fab81dee4d61e29aebc81066072f686165c240e4bc188c7548e6861c0c3771cb9aad4a384445a5634ce0ad235f41bdc6271eddcbd6b777c597a70fb6d7feee1"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "a1e3587eb83b7b1f68ffb6d33dd6fc96b94c9f3b889f445b2eee5b70cefb7e4cd9287f1883397a83d4bba776b32801ae9a7bbbcf6a45ac78de6bf13930db62d80a640b2a986261cb4bbe89a1297d977227ea69160cc56b807d36c42857cb83084d6aec863c3ed6fa3db453012466b2591c1404fbb168d5b298488da4c769044344a2a923d1a0835b2097dc96ac0d5a8c55826de5a40211540f8aeea2e12d24d2e3dba5325314db9cd4a6005f6e1ae0e018a66b271695986dcd1c67983c1f650dc35a727b89f12de4950113cf63cff0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x1) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x80000000, 0x0, 0x0) socket(0x2, 0x3, 0xff) (async) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000880)="7ca96e1548a71479959840a77cbef0e6cb718637f1e83b075d9252f88ba1fe7b030a86b2faa396b928e893cba3625b1b", 0x30}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@ip_pktinfo={{0x2a, 0x0, 0x7, {0x0, @remote, @private}}}], 0x30}}], 0x2, 0x0) memfd_create(0x0, 0x0) (async) memfd_create(0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000002440)=""/150) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff8000/0x4000)=nil) msgsnd(0x0, 0x0, 0x1b, 0x800) (async) msgsnd(0x0, 0x0, 0x1b, 0x800) 1.104628856s ago: executing program 3 (id=1070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 929.221267ms ago: executing program 3 (id=1071): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c25000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x7, 0x22, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x9, 0xca, &(0x7f0000000ac0)=""/202, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x1, 0x15f97751}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x2000}, 0x90) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r4 = dup(r1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCFLSH(r4, 0x5420, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)="7aa086af1ecdee4baa71ac7ff96bdc34f81fedf7af4929e4b17b01a6533e5573ff74c7cd40fdfae537d3e4576b6b78abec3ba3480c793d1cdd6b78a238822ac5d3b7d98ef908d469a6d7", 0x4a}, 0x1, 0x0, 0x0, 0x4}, 0x4000) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 770.147536ms ago: executing program 1 (id=1072): timer_create(0x0, &(0x7f00000040c0)={0x0, 0x21}, &(0x7f0000004080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x415b4741, 0x0) read(r0, &(0x7f0000000040)=""/159, 0x9f) (fail_nth: 3) 489.949732ms ago: executing program 1 (id=1073): r0 = io_uring_setup(0x3c1e, &(0x7f0000000000)={0x0, 0x2e1a, 0x180, 0x1, 0x1e8}) r1 = syz_io_uring_setup(0x6c85, &(0x7f0000000080)={0x0, 0xd000, 0x2000, 0x2, 0x192, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0x1, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001780)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001480)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="45f2fc331704fe98dfa3fdbc8943198ddf57feb5cbd21c30529afec90fbfa5577d8634074e4c9f298718a490c6f52ae05112832f17a43cb5a9909b9d2b68355a0e9d3d69a27245", 0x47}, {&(0x7f0000001240)="77060abf9690da3a17c8e34ef0cd56a73c1f0614a59fc876e2c75479b54f3500bbdac2dc68fbcb5e2490f623ab869ecec30eb6dc1ec65f0e28f83b227f2c0d5b88a55adce8a4d0482647269673fd15687c3fb44601ecf24951b6b057", 0x5c}, {&(0x7f00000012c0)="37c6aebea58b256b", 0x8}, {&(0x7f0000001300)="0afd4c107acddd223ca520efed9b530f41eed98220a137dc87789dee30320dd2a58ec8b926b4cf4bfdfd0cf347ad8c3d80d56c09fa37bb2d077bc4894fb6f28de491f870", 0x44}, {&(0x7f0000001380)="cb865fa9dc11f51db5d7564b80383e362c3850e370e3f38d5565e24016aae16d2b3e3075f0979429069d10b8603f2a79c3524e88d99bcc70d527fff2c594dc5b11a2e4a05fcb6bd1fd9316c4dd63b592a82d277c6626416836d85e20e1b0eeced7ab8fd03d52b26d1f6a8c8f56b11d84407386d06a91aa04fb8a9b685797c7828b6dd4a9889d2f757c146ad627c6b956df80bf0a6e0b3f1196664c0fb1c8cd8f20dd262b7e62fce6812bf805fa85f90019f0030a783b52eec7aecb2ff8586bc742eb2ce07c460d5c32ae5d9093e87ec60073be5cebcd0c998bc6de6452543d2306eea5437e", 0xe5}], 0x6, &(0x7f00000015c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x79, 0x0, 0x2, [0xc]}, @timestamp_prespec={0x44, 0x3c, 0x47, 0x3, 0x7, [{@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4}, {@remote, 0x8}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast1, 0x10}, {@rand_addr=0x64010101}]}, @end, @generic={0x88, 0x5, "da5fb8"}]}}}, @ip_retopts={{0x11c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x5c, [@broadcast, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x77, 0x1, 0x3, [{@multicast2, 0x8000}, {@rand_addr=0x64010101, 0x1000}, {@local, 0x8}]}, @timestamp={0x44, 0x20, 0x43, 0x0, 0x7, [0xf, 0x97, 0x4, 0x9, 0x6, 0x0, 0x8]}, @rr={0x7, 0x23, 0x19, [@multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, @broadcast, @multicast1, @remote, @private=0xa010100]}, @cipso={0x86, 0x1a, 0x1, [{0x0, 0x6, "05d5ae46"}, {0x1, 0xe, "d74914c6ca7387b0a69f2feb"}]}, @lsrr={0x83, 0xb, 0x77, [@loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x4, 0xdb, 0x1, 0x4}, @rr={0x7, 0x7, 0x83, [@private=0xa010102]}, @cipso={0x86, 0x41, 0x2, [{0x2, 0x11, "b12edca38b97f3db7a1d6c97c98331"}, {0x1, 0xa, "83db86ef456359e4"}, {0x7, 0x7, "3cca71acc8"}, {0x5, 0x5, "e91eee"}, {0x7, 0x9, "637ceca2e2f1da"}, {0x5, 0xb, "560549aae6fb0d6b74"}]}, @cipso={0x86, 0x2f, 0x3, [{0x1, 0x6, "cdcb4dfa"}, {0x0, 0xa, "f2a3e52e82344a0a"}, {0x6, 0xd, "7f8012298d054cdd178029"}, {0x5, 0xc, "575f72787a26018c8dff"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x1b8}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000001800), r4) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000001840)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f00000018c0)=0x1, 0x4) accept4(r2, &(0x7f0000001900)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001980)=0x80, 0xc00) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r9 = openat$cgroup_ro(r5, &(0x7f0000001b40)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001b80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000001c00)={r10, 0x2, r2, 0x7, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c80)={&(0x7f0000001c40)='mctp_key_release\x00', r9}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001d80)={0x0, 0xb0, &(0x7f0000001cc0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x6, @private0, 0x1}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe9}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @local, 0x380}, @in6={0xa, 0x4e24, 0xfffff001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x12000}]}, &(0x7f0000001dc0)=0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r3, r9, 0x1, 0x5, 0x9}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x0, '\x00', r6, r9, 0x2, 0x4}, 0x48) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r12 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r12, 0x4008af75, &(0x7f0000001f40)={0x0, 0x9}) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001f80), 0x115002, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r13, 0x810c9365, &(0x7f0000001fc0)={{0x72, 0x5}, 0x100, './file0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000002140)='vegas\x00', 0x6) 379.935836ms ago: executing program 1 (id=1074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) 333.91145ms ago: executing program 1 (id=1075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)=""/163, 0xa3}], 0x1}}], 0x1, 0x0, 0x0) (fail_nth: 1) 157.033306ms ago: executing program 1 (id=1076): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 79.137462ms ago: executing program 1 (id=1077): io_setup(0x8, &(0x7f00000005c0)=0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = epoll_create(0x401) r5 = fanotify_init(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100f15e0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) eventfd2(0xc7, 0x801) r8 = timerfd_create(0x6, 0x0) timerfd_settime(r8, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) pipe2$watch_queue(&(0x7f00000019c0)={0xffffffffffffffff}, 0x80) r10 = fsmount(0xffffffffffffffff, 0x0, 0x65) r11 = eventfd(0xb14) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x84, 0xa90176b, 0x5d6f, 0x2008, r10, 0xc, '\x00', 0x0, r2, 0x4, 0x5, 0x5}, 0x48) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, r16}) pipe2$watch_queue(0x0, 0x80) sendmsg$nl_route(r15, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="300100001200010027bd7000fddbdf2500000012", @ANYRES32=r16, @ANYBLOB="8b2003008000001f4cbe62026e143012840005002700070000006c001980080001000080000014000400cb31506bd6335f906be6e0700a7c136c1400050055fa170606f5b66b78d1e66274e6fb1114000400c34627c98e7579ecb6145550f2672d6a35620004007ae9a0574f433e9dc1ed0883ffff7fcc0002007369", @ANYRES32, @ANYBLOB="5b0020ef2edfca85ba473492ca40fd259a21f5f822d2a061a7d60cf2b688a1d4e6df9c75c16d90134ed1664033a20ede8bdb0325d70e3ec5b7cb6d29a2039b946e12955508053a8e81fec60fb0b3bb76161f66c98d1af5c513fee4ba6f3b416a447d8c1f9516dff199bbc5159ed5f42d392f2bee8061dae142b62d9b87125f6e0a63d9cd9c1de6626479692b6b89403503c39f97685df8f0b29997eed5123e1c449eb1936f398a1246901a93794648fb13c053cd8aedf4947040ba7e6d41baa1828154b3c551cc1c389e86de6f83265735ac8896aec3f67d9ecb6599e4988fe87e56736bc945ee537b88f5b38c163464a68134d863652a5500ad683f2c45c3be394301b42727dd00152a09ee50b954e898f124b7f77d5e67a6dc4ad3cf1ad2704bef0fc7d57adda6d456b959", @ANYRES32, @ANYRESHEX=r14, @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030004000000080003000b000000600019801400050002babaf139ea1926c1b8d027d7ab876705000600000000000800010008000000080001005f030000080001006400000014000400b0d3121400040061378bee5130d4cfbb9a5813bc"], 0x130}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) io_submit(r0, 0x9, &(0x7f0000001dc0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000600)="f3cdfe2cf4bd034bbcdf34a47d96c28352c2aec78ec43a2fee864fd5176633cbb9edc90e4651f8f0f67d7b9bcd56ad0f6c35284da05aabc6204793108afd90cee3f120f32d89bb7b47ed0f0bc9f4f25cf32db0b7fc1ca630f600585ba0e30862cf4a0d83a1", 0x65, 0xffff, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0x240, r3, &(0x7f0000001f00)="dffabcec18a26f7c72bb5f7750ed78ffc2acf903e0881e60ffb09e78bf90278b92e7f40f7ac244b33953151fcdadac95c96454eb19e940179863ace25d2fe6f0613e80af4a3372eef2e36288e083c2010fa2f71f7da72fb72d780469946b5942e3ac84a27bfa58987d9c9ee350e47afd2e7d0ef49bec04b255ec735748140482aa6e38f479f8c212051c3e845fd36c127b5a0768bf35b5e259532a591c94f4ca8577fefb860db81183334572cee44cbfaa00df1b59", 0xb5, 0x4b, 0x0, 0x3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x1, 0x3, r5, &(0x7f0000001fc0)="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", 0xe0c, 0x9, 0x0, 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0xd, 0x20, r6, &(0x7f0000001800)="9d5d459d67a239f43380967396619bd6edd93ba663664318609e6dc20ddc7bfe862bbc7ba66dbf11b501254877de1e4b77fef0cd8a2dbe7eb05f77417878310aec83e447c48b9914f5f5072fc27df54f75b4c24cd17c8b273bcc6f658c29e97a4e2a0b8d6955127184e778a5d56244f06dbed2d22b9bd7234367258576651f201a173180e630653344869891f21200f3d6f3bd1fdd7eb1ad2b8e4b95af3d12f568222179f932ea4fd0817f82d2864722a9daf92f270790b2", 0xb8, 0x55a4, 0x0, 0x3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x1, r7, &(0x7f0000001900)="fa17e226161ded78a1feb0b53e3236c483e60b4dca7497fb380a7396b776fea3798f50139189b23fbc244e6d329925791bdc7af9dbda1dbc0280675c93158d905778f434213319be4c178a701cc8f38d3959", 0x52, 0x4}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x2, 0x29, r9, &(0x7f0000001a00)="389a18bec4c3375f495e26e417e228172e974c58910450d696ba7f2793e921a8507317fcbe8153cf7ffda3fdc6e7141ae4fc9e86054f6046d96d733be86690e2", 0x40, 0x4, 0x0, 0x3, r10}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x80, r13, &(0x7f0000001b40)="0346c29f04d4c1d28d001a8cae10c8e458ff67dc2bb5bb71dc6ea7fb3432766f555874f2fd45d44c06628887d1c9f4d2e00183c96a3bd8b15d1ef09e5d34fe63ce9c7416", 0x44, 0xb, 0x0, 0x0, r11}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x6, 0xff00, r12, &(0x7f0000001c00)="ece763c7f7f4d73a0fa269ad4a21249e54e33b7fa045876274cbb1154a42b25aef50f82dd6beb264e0616c87e5bb43236a0c525c93a235b80a59d791374f5192b40a0f4f1598b50c13539861a56e8ec87ddc98f898c92fc70921235879aeed2fe15fb5d8ea465b4bae157754370d49548e08ab28280c45d8e072776414005ce5dbd54e438b07ef3b26059161c8f0aa3e50a74feeb954cf87a4c77e6c99f31cc7a541b0a27e089b0862ee710e017f71bd2ba0631505cf0252bfdd5d4aa506a2b006f74e1c6b0786891c70f2724445f7fe424bbd0b58af", 0xd6, 0x3, 0x0, 0x1}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x5, r13, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x2}]) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x24000000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 0s ago: executing program 3 (id=1078): r0 = open(&(0x7f0000000200)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x0, 0x230880) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000600)={0x0, 0x0, '\x00', {0x0, @reserved}}) (async) r4 = dup(r2) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x220000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRES8], 0xfffffe01) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) (async) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="04060310c9001ca8345e1e83b7b3362f00b45782b0a13ac6e52c64d14068b978ef96f7460f8fa2e9aa194145d51f450b93f390187e1280dc6fbd7e0dc855a9a9523e21e9df808535ce9409365107c9d593328f20625f9d46c84199cc422345bafc5590b6035597a8adfaffffffffffffff35730b98d08333f99769ec992df3dd12"], 0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x208500, 0x0) (async) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x0, 0x2, 0x414d6714bf78e135}, 0x9c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11}, 0x40) (async) syz_emit_ethernet(0xe80, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780004000000000000005b29427713634805"], 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r8, 0x6}, &(0x7f00000000c0)=0x8) (async, rerun: 32) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x7c8) (async, rerun: 32) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=r13]) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') (rerun: 64) kernel console output (not intermixed with test programs): [ 235.833854][ T832] usb-storage 7-1:0.0: USB Mass Storage device detected [ 235.835982][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.851173][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.858691][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.859657][ T8226] trusted_key: encrypted_key: keyword 'updaÏÂ?efaul`' not recognized [ 235.863529][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.878449][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.882517][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.886565][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.895455][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.899970][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.904199][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.908004][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.911427][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.915819][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.919804][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.925694][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.938888][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.943885][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.948147][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.953641][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.957866][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.963055][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.967266][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.971853][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.976038][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.980555][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.985456][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.989997][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.997081][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.002025][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.006246][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.010741][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.014999][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.019345][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.023211][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.027190][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.030943][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.035784][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.040057][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.044574][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.048619][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.052888][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.056195][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.059604][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.068606][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.072897][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.076661][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.080899][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.086338][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.104393][ T8059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.107498][ T8059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.110895][ T8059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.119082][ T8059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.229707][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.235339][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.267526][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.273420][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.490152][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 236.505223][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 236.626803][ T8] usb 7-1: USB disconnect, device number 8 [ 236.868212][ T5341] Bluetooth: hci17: command tx timeout [ 237.785727][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.948580][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 238.025483][ T30] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.030482][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.047595][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.055227][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.072297][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 238.077141][ T30] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 238.080983][ T30] usb 5-1: Manufacturer: syz [ 238.093260][ T30] usb 5-1: config 0 descriptor?? [ 238.141958][ T5341] Bluetooth: hci1: command 0x0406 tx timeout [ 238.307518][ T8302] tmpfs: Bad value for 'mpol' [ 238.321399][ T8307] FAULT_INJECTION: forcing a failure. [ 238.321399][ T8307] name failslab, interval 1, probability 0, space 0, times 0 [ 238.327833][ T8307] CPU: 2 UID: 0 PID: 8307 Comm: syz.3.720 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 238.332088][ T8307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.336836][ T8307] Call Trace: [ 238.338297][ T8307] [ 238.339608][ T8307] dump_stack_lvl+0x16c/0x1f0 [ 238.341877][ T8307] should_fail_ex+0x497/0x5b0 [ 238.344011][ T8307] ? fs_reclaim_acquire+0xae/0x160 [ 238.346284][ T8307] should_failslab+0xc2/0x120 [ 238.348440][ T8307] __kmalloc_cache_noprof+0x6b/0x300 [ 238.350681][ T8307] ? selinux_sk_alloc_security+0x87/0x210 [ 238.353129][ T8307] selinux_sk_alloc_security+0x87/0x210 [ 238.356066][ T8307] security_sk_alloc+0x75/0xc0 [ 238.359283][ T8307] sk_prot_alloc+0xfb/0x2a0 [ 238.361587][ T8307] sk_alloc+0x36/0xb90 [ 238.363597][ T8307] inet6_create+0x380/0x12e0 [ 238.366491][ T8307] ? inet6_create+0x5d/0x12e0 [ 238.369153][ T8307] __sock_create+0x32e/0x800 [ 238.371539][ T8307] udp_sock_create6+0xc8/0x6a0 [ 238.373708][ T8307] ? __pfx_lock_release+0x10/0x10 [ 238.375945][ T8307] ? __pfx_udp_sock_create6+0x10/0x10 [ 238.378204][ T8307] ? mark_held_locks+0x9f/0xe0 [ 238.380236][ T8307] ? crng_make_state+0x46e/0x6d0 [ 238.382608][ T8307] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.385110][ T8307] ? crng_make_state+0x48e/0x6d0 [ 238.387748][ T8307] rxrpc_open_socket+0x20c/0x6c0 [ 238.390256][ T8307] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 238.393239][ T8307] ? __pfx_lock_release+0x10/0x10 [ 238.395815][ T8307] ? lockdep_init_map_type+0x16d/0x7d0 [ 238.398595][ T8307] ? rcu_is_watching+0x12/0xc0 [ 238.401086][ T8307] rxrpc_lookup_local+0xa02/0x1220 [ 238.403187][ T8307] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 238.405535][ T8307] ? rxrpc_sendmsg+0x113/0x5f0 [ 238.407546][ T8307] ? __local_bh_enable_ip+0xa4/0x120 [ 238.409676][ T8307] rxrpc_sendmsg+0x375/0x5f0 [ 238.411558][ T8307] ____sys_sendmsg+0xab5/0xc90 [ 238.413502][ T8307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.415821][ T8307] ? find_held_lock+0x2d/0x110 [ 238.417925][ T8307] ? __pfx___lock_acquire+0x10/0x10 [ 238.420230][ T8307] ___sys_sendmsg+0x135/0x1e0 [ 238.422508][ T8307] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.424790][ T8307] ? ksys_write+0x21c/0x260 [ 238.426845][ T8307] ? __fget_light+0x173/0x210 [ 238.429066][ T8307] __sys_sendmsg+0x117/0x1f0 [ 238.431143][ T8307] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.433476][ T8307] do_syscall_64+0xcd/0x250 [ 238.435728][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.438577][ T8307] RIP: 0033:0x7f0c3b577299 [ 238.440605][ T8307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.449223][ T8307] RSP: 002b:00007f0c3c293048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.453066][ T8307] RAX: ffffffffffffffda RBX: 00007f0c3b705f80 RCX: 00007f0c3b577299 [ 238.456539][ T8307] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 238.460060][ T8307] RBP: 00007f0c3c2930a0 R08: 0000000000000000 R09: 0000000000000000 [ 238.463775][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.468259][ T8307] R13: 000000000000000b R14: 00007f0c3b705f80 R15: 00007ffe3ba7af48 [ 238.471991][ T8307] [ 238.525300][ T30] appleir 0003:05AC:8243.0007: item fetching failed at offset 0/1 [ 238.534897][ T30] appleir 0003:05AC:8243.0007: parse failed [ 238.537637][ T30] appleir 0003:05AC:8243.0007: probe with driver appleir failed with error -22 [ 239.689282][ T39] audit: type=1400 audit(1722066676.527:563): avc: denied { mount } for pid=8341 comm="syz.3.731" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 239.880307][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.733'. [ 240.274223][ T39] audit: type=1400 audit(1722066677.117:564): avc: denied { lock } for pid=8354 comm="syz.1.735" path="socket:[36417]" dev="sockfs" ino=36417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 240.512458][ T8] usb 5-1: USB disconnect, device number 17 [ 240.575190][ T8368] netlink: 'syz.3.738': attribute type 3 has an invalid length. [ 240.579013][ T8368] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.738'. [ 240.677533][ T8375] fuse: Bad value for 'source' [ 240.852022][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'. [ 241.476268][ T8404] evm: overlay not supported [ 241.477375][ T8405] fuse: Bad value for 'fd' [ 241.501350][ T39] audit: type=1800 audit(1722066678.337:565): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.749" name="bus" dev="overlay" ino=399 res=0 errno=0 [ 241.517145][ T39] audit: type=1800 audit(1722066678.347:566): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.749" name="bus" dev="overlay" ino=399 res=0 errno=0 [ 241.769105][ T8407] FAULT_INJECTION: forcing a failure. [ 241.769105][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 241.775759][ T8407] CPU: 3 UID: 0 PID: 8407 Comm: syz.2.750 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 241.780228][ T8407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.785043][ T8407] Call Trace: [ 241.786463][ T8407] [ 241.787823][ T8407] dump_stack_lvl+0x16c/0x1f0 [ 241.789994][ T8407] should_fail_ex+0x497/0x5b0 [ 241.792136][ T8407] ? fs_reclaim_acquire+0xae/0x160 [ 241.794742][ T8407] should_failslab+0xc2/0x120 [ 241.796758][ T8407] __kmalloc_noprof+0xcb/0x400 [ 241.798803][ T8407] ? __pfx_make_vfsuid+0x10/0x10 [ 241.801003][ T8407] fuse_set_acl+0x2cf/0x5e0 [ 241.803057][ T8407] set_posix_acl+0x25c/0x320 [ 241.805150][ T8407] vfs_set_acl+0x53d/0x940 [ 241.807149][ T8407] do_set_acl+0xd9/0x1b0 [ 241.808974][ T8407] do_setxattr+0xeb/0x170 [ 241.810834][ T8407] path_setxattr+0x221/0x280 [ 241.812601][ T8407] ? __pfx_path_setxattr+0x10/0x10 [ 241.814523][ T8407] ? __pfx_lock_release+0x10/0x10 [ 241.816085][ T8407] ? fput+0x32/0x390 [ 241.817631][ T8407] ? ksys_write+0x1ab/0x260 [ 241.819364][ T8407] ? __pfx_ksys_write+0x10/0x10 [ 241.821568][ T8407] __x64_sys_lsetxattr+0xc1/0x160 [ 241.823703][ T8407] ? do_syscall_64+0x91/0x250 [ 241.825762][ T8407] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.828151][ T8407] do_syscall_64+0xcd/0x250 [ 241.830229][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.832652][ T8407] RIP: 0033:0x7fad2df77299 [ 241.834622][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.843596][ T8407] RSP: 002b:00007fad2ec93048 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 241.847371][ T8407] RAX: ffffffffffffffda RBX: 00007fad2e105f80 RCX: 00007fad2df77299 [ 241.852324][ T8407] RDX: 0000000020000280 RSI: 0000000020000340 RDI: 0000000020000000 [ 241.857041][ T8407] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.861362][ T8407] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 241.865535][ T8407] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 241.870712][ T8407] [ 241.879162][ T6549] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 242.083366][ T6549] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.088594][ T6549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 242.096062][ T6549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.102142][ T6549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.109317][ T6549] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.115321][ T6549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.122627][ T6549] usb 6-1: config 0 descriptor?? [ 242.125433][ T8403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.159122][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 242.338001][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.753'. [ 242.535308][ T6549] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 242.541950][ T6549] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 242.554785][ T6549] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.671788][ T39] audit: type=1400 audit(1722066679.507:567): avc: denied { watch watch_reads } for pid=8431 comm="syz.0.760" path="/10/cpuacct.usage_sys" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.688026][ T39] audit: type=1326 audit(1722066679.527:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.0.760" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb195377299 code=0x0 [ 242.794764][ T8434] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.798601][ T8439] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.930772][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.762'. [ 243.261827][ T5341] Bluetooth: hci4: command 0x0406 tx timeout [ 243.545124][ T8455] 9pnet_fd: Insufficient options for proto=fd [ 244.491651][ T25] usb 6-1: USB disconnect, device number 14 [ 244.712822][ T4766] Bluetooth: hci17: command tx timeout [ 244.800092][ T39] audit: type=1400 audit(1722066681.637:569): avc: denied { create } for pid=8469 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 244.805840][ T8468] raw_sendmsg: syz.1.770 forgot to set AF_INET. Fix it! [ 244.841634][ T39] audit: type=1400 audit(1722066681.657:570): avc: denied { write } for pid=8469 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 244.891350][ T39] audit: type=1400 audit(1722066681.697:571): avc: denied { append } for pid=8469 comm="syz.0.771" name="fb1" dev="devtmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 245.288899][ T39] audit: type=1400 audit(1722066682.127:572): avc: denied { view } for pid=8477 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 245.432045][ T39] audit: type=1400 audit(1722066682.267:573): avc: denied { listen } for pid=8484 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.452044][ T8491] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 245.456615][ T8486] sp0: Synchronizing with TNC [ 245.594640][ T8488] 9pnet_fd: Insufficient options for proto=fd [ 245.618594][ T5407] hid (null): invalid report_size 12459 [ 245.626199][ T5407] hid-generic 0009:2192:0003.0009: invalid report_size 12459 [ 245.648989][ T5407] hid-generic 0009:2192:0003.0009: item 0 2 1 7 parsing failed [ 245.669858][ T5407] hid-generic 0009:2192:0003.0009: probe with driver hid-generic failed with error -22 [ 245.694715][ T39] audit: type=1400 audit(1722066682.537:574): avc: denied { ioctl } for pid=8494 comm="syz.3.778" path="/87/file0/file0" dev="fuse" ino=0 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.822898][ T8505] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.779'. [ 245.830779][ T8500] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.779'. [ 245.842248][ T8500] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 245.850888][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.779'. [ 246.863141][ T8518] FAULT_INJECTION: forcing a failure. [ 246.863141][ T8518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.880081][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.0.784 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 246.884645][ T8518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.889442][ T8518] Call Trace: [ 246.890935][ T8518] [ 246.892213][ T8518] dump_stack_lvl+0x16c/0x1f0 [ 246.894293][ T8518] should_fail_ex+0x497/0x5b0 [ 246.896436][ T8518] _copy_to_user+0x30/0xc0 [ 246.898440][ T8518] simple_read_from_buffer+0xd0/0x160 [ 246.900852][ T8518] proc_fail_nth_read+0x1b0/0x290 [ 246.903105][ T8518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.905583][ T8518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.908067][ T8518] vfs_read+0x1d4/0xbd0 [ 246.909741][ T8518] ? __fdget_pos+0xeb/0x180 [ 246.911547][ T8518] ? __pfx_lock_release+0x10/0x10 [ 246.913553][ T8518] ? __pfx_vfs_read+0x10/0x10 [ 246.915461][ T8518] ? __pfx___mutex_lock+0x10/0x10 [ 246.917729][ T8518] ? __fget_files+0x256/0x400 [ 246.919853][ T8518] ksys_read+0x12f/0x260 [ 246.921762][ T8518] ? __pfx_ksys_read+0x10/0x10 [ 246.923918][ T8518] do_syscall_64+0xcd/0x250 [ 246.926132][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.929097][ T8518] RIP: 0033:0x7fb195375d7c [ 246.931132][ T8518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 246.939539][ T8518] RSP: 002b:00007fb1961c7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.943184][ T8518] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195375d7c [ 246.946666][ T8518] RDX: 000000000000000f RSI: 00007fb1961c70b0 RDI: 0000000000000004 [ 246.950134][ T8518] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.953592][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.956797][ T8518] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 246.959909][ T8518] [ 246.995687][ T39] audit: type=1400 audit(1722066683.837:575): avc: denied { unmount } for pid=7533 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 247.221670][ T8526] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 247.370518][ T8531] pimreg: entered allmulticast mode [ 247.409269][ T8531] dvmrp1: entered allmulticast mode [ 247.468317][ T39] audit: type=1400 audit(1722066684.307:576): avc: denied { mounton } for pid=8530 comm="syz.3.789" path="/91/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 247.480276][ T8531] syz.3.789: attempt to access beyond end of device [ 247.480276][ T8531] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 247.505228][ T8531] syz.3.789: attempt to access beyond end of device [ 247.505228][ T8531] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 247.521346][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 247.525898][ T8533] 9pnet_fd: Insufficient options for proto=fd [ 247.536734][ T8531] syz.3.789: attempt to access beyond end of device [ 247.536734][ T8531] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 247.561558][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 247.578324][ T8531] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 247.586238][ T8531] UDF-fs: Scanning with blocksize 512 failed [ 247.613967][ T8531] syz.3.789: attempt to access beyond end of device [ 247.613967][ T8531] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 247.619997][ T8531] syz.3.789: attempt to access beyond end of device [ 247.619997][ T8531] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 247.625989][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 247.638880][ T8531] syz.3.789: attempt to access beyond end of device [ 247.638880][ T8531] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 247.651851][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 247.663299][ T8531] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 247.666651][ T8531] UDF-fs: Scanning with blocksize 1024 failed [ 247.673385][ T8531] syz.3.789: attempt to access beyond end of device [ 247.673385][ T8531] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 247.678396][ T8531] syz.3.789: attempt to access beyond end of device [ 247.678396][ T8531] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 247.684242][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 247.688939][ T8531] syz.3.789: attempt to access beyond end of device [ 247.688939][ T8531] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 247.693917][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 247.698222][ T8531] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 247.701957][ T8531] UDF-fs: Scanning with blocksize 2048 failed [ 247.705209][ T8531] syz.3.789: attempt to access beyond end of device [ 247.705209][ T8531] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 247.727273][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 247.731334][ T8531] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 247.735446][ T8531] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 247.738738][ T8531] UDF-fs: Scanning with blocksize 4096 failed [ 247.758487][ T8531] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 247.886160][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.019233][ T8548] FAULT_INJECTION: forcing a failure. [ 248.019233][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 248.029118][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.0.795 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 248.033904][ T8548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.038597][ T8548] Call Trace: [ 248.040021][ T8548] [ 248.041282][ T8548] dump_stack_lvl+0x16c/0x1f0 [ 248.043284][ T8548] should_fail_ex+0x497/0x5b0 [ 248.045376][ T8548] should_failslab+0xc2/0x120 [ 248.047414][ T8548] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 248.049774][ T8548] ? skb_clone+0x190/0x3f0 [ 248.051684][ T8548] skb_clone+0x190/0x3f0 [ 248.053607][ T8548] netlink_deliver_tap+0xab3/0xd90 [ 248.056136][ T8548] netlink_unicast+0x606/0x830 [ 248.058301][ T8548] ? __pfx_netlink_unicast+0x10/0x10 [ 248.060657][ T8548] netlink_sendmsg+0x8b8/0xd70 [ 248.063121][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.066071][ T8548] ? __import_iovec+0x1fd/0x6e0 [ 248.068207][ T8548] ____sys_sendmsg+0xab5/0xc90 [ 248.070316][ T8548] ? copy_msghdr_from_user+0x10b/0x160 [ 248.072762][ T8548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.075399][ T8548] ? find_held_lock+0x2d/0x110 [ 248.077475][ T8548] ? __pfx___lock_acquire+0x10/0x10 [ 248.079698][ T8548] ___sys_sendmsg+0x135/0x1e0 [ 248.081654][ T8548] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.083991][ T8548] ? ksys_write+0x21c/0x260 [ 248.086207][ T8548] ? __fget_light+0x173/0x210 [ 248.088435][ T8548] __sys_sendmsg+0x117/0x1f0 [ 248.090148][ T8548] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.092352][ T8548] do_syscall_64+0xcd/0x250 [ 248.093989][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.096590][ T8548] RIP: 0033:0x7fb195377299 [ 248.098584][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.105967][ T8548] RSP: 002b:00007fb1961c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.109489][ T8548] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195377299 [ 248.112778][ T8548] RDX: 0000000000000000 RSI: 0000000020003900 RDI: 0000000000000003 [ 248.115793][ T8548] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.119711][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.122751][ T8548] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 248.125424][ T8548] [ 248.165147][ T991] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 248.303847][ T39] audit: type=1400 audit(1722066685.127:577): avc: denied { remount } for pid=8551 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.335991][ T991] usb 8-1: device descriptor read/64, error -71 [ 248.621732][ T991] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 248.781709][ T991] usb 8-1: device descriptor read/64, error -71 [ 248.838535][ T8566] 9pnet_fd: Insufficient options for proto=fd [ 248.956981][ T991] usb usb8-port1: attempt power cycle [ 249.186341][ T39] audit: type=1400 audit(1722066686.027:578): avc: denied { ioctl } for pid=8579 comm="syz.1.803" path="socket:[36974]" dev="sockfs" ino=36974 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 249.193546][ T8578] o2cb: This node has not been configured. [ 249.199732][ T8578] o2cb: Cluster check failed. Fix errors before retrying. [ 249.206051][ T8578] (syz.0.802,8578,2):user_dlm_register:674 ERROR: status = -22 [ 249.209510][ T8578] (syz.0.802,8578,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "control" [ 249.214905][ T39] audit: type=1400 audit(1722066686.027:579): avc: denied { connect } for pid=8577 comm="syz.0.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.225300][ T39] audit: type=1400 audit(1722066686.027:580): avc: denied { write } for pid=8577 comm="syz.0.802" name="/" dev="ocfs2_dlmfs" ino=36975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.235240][ T39] audit: type=1400 audit(1722066686.027:581): avc: denied { add_name } for pid=8577 comm="syz.0.802" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.244494][ T39] audit: type=1400 audit(1722066686.027:582): avc: denied { create } for pid=8577 comm="syz.0.802" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 249.252239][ T39] audit: type=1400 audit(1722066686.037:583): avc: denied { associate } for pid=8577 comm="syz.0.802" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 249.299525][ T39] audit: type=1400 audit(1722066686.137:584): avc: denied { setopt } for pid=8583 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.320647][ T8584] input: syz0 as /devices/virtual/input/input19 [ 249.363601][ T8586] FAULT_INJECTION: forcing a failure. [ 249.363601][ T8586] name failslab, interval 1, probability 0, space 0, times 0 [ 249.369659][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.0.806 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 249.374327][ T8586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.378937][ T8586] Call Trace: [ 249.380589][ T8586] [ 249.381911][ T8586] dump_stack_lvl+0x16c/0x1f0 [ 249.384015][ T8586] should_fail_ex+0x497/0x5b0 [ 249.385875][ T8586] should_failslab+0xc2/0x120 [ 249.387766][ T8586] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 249.390480][ T8586] ? skb_clone+0x190/0x3f0 [ 249.392596][ T8586] skb_clone+0x190/0x3f0 [ 249.394671][ T8586] netlink_deliver_tap+0xab3/0xd90 [ 249.397069][ T8586] netlink_unicast+0x606/0x830 [ 249.399279][ T8586] ? __pfx_netlink_unicast+0x10/0x10 [ 249.401703][ T8586] netlink_sendmsg+0x8b8/0xd70 [ 249.403964][ T8586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.406463][ T8586] ? __import_iovec+0x1fd/0x6e0 [ 249.408703][ T8586] ____sys_sendmsg+0xab5/0xc90 [ 249.410861][ T8586] ? copy_msghdr_from_user+0x10b/0x160 [ 249.413294][ T8586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.415730][ T8586] ? find_held_lock+0x2d/0x110 [ 249.418071][ T8586] ? __pfx___lock_acquire+0x10/0x10 [ 249.420450][ T8586] ___sys_sendmsg+0x135/0x1e0 [ 249.422630][ T8586] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.425038][ T8586] ? ksys_write+0x21c/0x260 [ 249.427139][ T8586] ? __fget_light+0x173/0x210 [ 249.429312][ T8586] __sys_sendmsg+0x117/0x1f0 [ 249.431457][ T8586] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.434282][ T8586] do_syscall_64+0xcd/0x250 [ 249.436640][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.439498][ T8586] RIP: 0033:0x7fb195377299 [ 249.441557][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.450492][ T8586] RSP: 002b:00007fb1961c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.454284][ T8586] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195377299 [ 249.457962][ T8586] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 249.461665][ T8586] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 249.465361][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.468917][ T8586] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 249.472510][ T8586] [ 249.474050][ T991] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 249.513039][ T991] usb 8-1: device descriptor read/8, error -71 [ 249.541699][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 249.721963][ T8593] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.808'. [ 249.726492][ T8592] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.808'. [ 249.753681][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.759074][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.763837][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.769713][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.775731][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.779970][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.790356][ T25] usb 6-1: config 0 descriptor?? [ 249.793986][ T8580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.811808][ T991] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 249.842365][ T991] usb 8-1: device descriptor read/8, error -71 [ 249.972024][ T991] usb usb8-port1: unable to enumerate USB device [ 250.202774][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 250.208151][ T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 250.217526][ T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 250.296845][ T8601] sp0: Synchronizing with TNC [ 250.510261][ T5381] usb 6-1: USB disconnect, device number 15 [ 250.649205][ T4766] Bluetooth: hci13: Malformed Event: 0x2f [ 250.907208][ T8630] netlink: 84 bytes leftover after parsing attributes in process `syz.2.818'. [ 250.918601][ T8630] veth0_vlan: left promiscuous mode [ 250.921303][ T8630] veth0_vlan: entered allmulticast mode [ 250.933217][ T8630] veth0_vlan: entered promiscuous mode [ 251.085226][ T30] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 251.197738][ T8638] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 251.295480][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.300223][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 251.306793][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 251.313193][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 251.327800][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.338477][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.342824][ T30] usb 6-1: SerialNumber: syz [ 251.348642][ T8627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.357134][ T8627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.368260][ T30] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 251.385914][ T8646] FAULT_INJECTION: forcing a failure. [ 251.385914][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 251.391907][ T8646] CPU: 2 UID: 0 PID: 8646 Comm: syz.2.824 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 251.395980][ T8646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.399658][ T8646] Call Trace: [ 251.401208][ T8646] [ 251.402650][ T8646] dump_stack_lvl+0x16c/0x1f0 [ 251.404598][ T8646] should_fail_ex+0x497/0x5b0 [ 251.406438][ T8646] ? fs_reclaim_acquire+0xae/0x160 [ 251.408841][ T8646] should_failslab+0xc2/0x120 [ 251.410764][ T8646] __kmalloc_noprof+0xcb/0x400 [ 251.412866][ T8646] ? __pfx_lock_acquire+0x10/0x10 [ 251.412924][ T8648] FAULT_INJECTION: forcing a failure. [ 251.412924][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 251.415098][ T8646] tomoyo_realpath_from_path+0xb9/0x720 [ 251.422495][ T8646] ? tomoyo_profile+0x47/0x60 [ 251.424556][ T8646] tomoyo_path_number_perm+0x245/0x590 [ 251.426576][ T8646] ? tomoyo_path_number_perm+0x232/0x590 [ 251.428940][ T8646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 251.431455][ T8646] ? find_held_lock+0x2d/0x110 [ 251.433487][ T8646] ? do_raw_spin_unlock+0x172/0x230 [ 251.435758][ T8646] ? _raw_spin_unlock+0x28/0x50 [ 251.437823][ T8646] ? d_add+0x43c/0x730 [ 251.439745][ T8646] ? do_raw_spin_unlock+0x172/0x230 [ 251.441715][ T8646] ? simple_lookup+0xd6/0x110 [ 251.443479][ T8646] tomoyo_path_mkdir+0x9c/0xe0 [ 251.445339][ T8646] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 251.447410][ T8646] ? get_current_fs_domain+0x188/0x1f0 [ 251.449486][ T8646] security_path_mkdir+0x111/0x170 [ 251.451438][ T8646] do_mkdirat+0x176/0x3a0 [ 251.452946][ T8646] ? __pfx_do_mkdirat+0x10/0x10 [ 251.454691][ T8646] ? getname_flags.part.0+0x1c5/0x550 [ 251.457022][ T8646] __x64_sys_mkdir+0xef/0x140 [ 251.459054][ T8646] do_syscall_64+0xcd/0x250 [ 251.461058][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.463635][ T8646] RIP: 0033:0x7fad2df77299 [ 251.465556][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.474402][ T8646] RSP: 002b:00007fad2ec93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 251.478051][ T8646] RAX: ffffffffffffffda RBX: 00007fad2e105f80 RCX: 00007fad2df77299 [ 251.481501][ T8646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 251.484929][ T8646] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.488386][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.491795][ T8646] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 251.495164][ T8646] [ 251.496536][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.3.825 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 251.496579][ C2] vkms_vblank_simulate: vblank timer overrun [ 251.500859][ T8648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.508105][ T8648] Call Trace: [ 251.509534][ T8648] [ 251.510803][ T8648] dump_stack_lvl+0x16c/0x1f0 [ 251.513201][ T8648] should_fail_ex+0x497/0x5b0 [ 251.515668][ T8648] should_failslab+0xc2/0x120 [ 251.517735][ T8648] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 251.520450][ T8648] ? nf_ct_ext_add+0x1a7/0x420 [ 251.522510][ T8648] krealloc_noprof+0x5d/0x100 [ 251.524791][ T8648] nf_ct_ext_add+0x1a7/0x420 [ 251.527108][ T8648] init_conntrack.constprop.0+0x5af/0x1080 [ 251.530208][ T8648] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 251.533668][ T8648] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 251.536442][ T8648] ? ip6t_do_table+0xd20/0x1d40 [ 251.538756][ T8648] ? __local_bh_enable_ip+0xa4/0x120 [ 251.541468][ T8648] ? ip6t_do_table+0xd50/0x1d40 [ 251.544206][ T8648] nf_conntrack_in+0xa50/0x1860 [ 251.546561][ T8648] ? __pfx_nf_conntrack_in+0x10/0x10 [ 251.549435][ T8648] ? lock_acquire+0x1b1/0x560 [ 251.551803][ T8648] ? __do_replace+0x8e6/0x9c0 [ 251.554503][ T8648] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 251.557847][ T8648] nf_hook_slow+0xbb/0x200 [ 251.560556][ T8648] nf_hook.constprop.0+0x42e/0x750 [ 251.562843][ T8648] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 251.565392][ T8648] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 251.567911][ T8648] ? sock_wfree+0x113/0x850 [ 251.569961][ T8648] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 251.572068][ T8646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.572309][ T8648] ? __pfx_ipv6_rcv+0x10/0x10 [ 251.575185][ T8646] o2cb: This node has not been configured. [ 251.577318][ T8648] ipv6_rcv+0xa4/0x680 [ 251.577342][ T8648] ? __pfx_ipv6_rcv+0x10/0x10 [ 251.577360][ T8648] __netif_receive_skb_one_core+0x12e/0x1e0 [ 251.579658][ T8646] o2cb: Cluster check failed. Fix errors before retrying. [ 251.581650][ T8648] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 251.581675][ T8648] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 251.581698][ T8648] __netif_receive_skb+0x1d/0x160 [ 251.581717][ T8648] netif_receive_skb+0x13f/0x7b0 [ 251.581736][ T8648] ? __pfx_netif_receive_skb+0x10/0x10 [ 251.587248][ T8646] (syz.2.824,8646,3):user_dlm_register:674 ERROR: status = -22 [ 251.587341][ T8648] ? __pfx___lock_acquire+0x10/0x10 [ 251.606632][ T8648] tun_rx_batched+0x429/0x780 [ 251.608737][ T8648] ? __pfx_tun_rx_batched+0x10/0x10 [ 251.611059][ T8648] ? tun_get_user+0x1d81/0x3c30 [ 251.613312][ T8648] tun_get_user+0x2a5c/0x3c30 [ 251.615291][ T8648] ? __pfx_tun_get_user+0x10/0x10 [ 251.615350][ T8646] (syz.2.824,8646,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "control" [ 251.617196][ T8648] ? find_held_lock+0x2d/0x110 [ 251.617229][ T8648] ? __pfx_lock_release+0x10/0x10 [ 251.625911][ T8648] tun_chr_write_iter+0xe8/0x210 [ 251.627824][ T8648] vfs_write+0x6b6/0x1140 [ 251.629652][ T8648] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 251.631994][ T8648] ? __pfx_vfs_write+0x10/0x10 [ 251.634006][ T8648] ? __fget_files+0x256/0x400 [ 251.636020][ T8648] ? __fget_light+0x173/0x210 [ 251.638108][ T8648] ksys_write+0x12f/0x260 [ 251.639960][ T8648] ? __pfx_ksys_write+0x10/0x10 [ 251.641998][ T8648] do_syscall_64+0xcd/0x250 [ 251.643895][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.646232][ T8648] RIP: 0033:0x7f0c3b575e1f [ 251.647990][ T8648] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 251.655825][ T8648] RSP: 002b:00007f0c3c293010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 251.659392][ T8648] RAX: ffffffffffffffda RBX: 00007f0c3b705f80 RCX: 00007f0c3b575e1f [ 251.662497][ T8648] RDX: 0000000000000052 RSI: 00000000200000c0 RDI: 00000000000000c8 [ 251.665439][ T8648] RBP: 00007f0c3c2930a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.668444][ T8648] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 251.671428][ T8648] R13: 000000000000000b R14: 00007f0c3b705f80 R15: 00007ffe3ba7af48 [ 251.675162][ T8648] [ 251.722609][ T30] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 251.731917][ T30] usb 6-1: USB disconnect, device number 16 [ 251.841406][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.826'. [ 251.862119][ T66] Bluetooth: hci16: unexpected cc 0x0403 length: 65 > 1 [ 252.388861][ T8660] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.828'. [ 252.394365][ T8658] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.828'. [ 252.511305][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 252.511319][ T39] audit: type=1804 audit(1722066689.347:597): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.829" name="/" dev="pidfs" ino=8962 res=1 errno=0 [ 252.641934][ T66] block nbd3: Wrong magic (0xec000000) [ 252.736940][ T6120] block nbd3: shutting down sockets [ 252.810196][ T8678] o2cb: This node has not been configured. [ 252.821532][ T8678] o2cb: Cluster check failed. Fix errors before retrying. [ 252.824473][ T8678] (syz.2.834,8678,0):user_dlm_register:674 ERROR: status = -22 [ 252.827587][ T8678] (syz.2.834,8678,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "control" [ 252.883018][ T8682] FAULT_INJECTION: forcing a failure. [ 252.883018][ T8682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.902277][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.3.838 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 252.906879][ T8682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 252.911687][ T8682] Call Trace: [ 252.913191][ T8682] [ 252.914603][ T8682] dump_stack_lvl+0x16c/0x1f0 [ 252.915890][ T66] Bluetooth: hci15: Malformed Event: 0x2f [ 252.916933][ T8682] should_fail_ex+0x497/0x5b0 [ 252.921608][ T8682] _copy_to_user+0x30/0xc0 [ 252.923562][ T8682] simple_read_from_buffer+0xd0/0x160 [ 252.925891][ T8682] proc_fail_nth_read+0x1b0/0x290 [ 252.928135][ T8682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.930567][ T8682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.932936][ T8682] vfs_read+0x1d4/0xbd0 [ 252.934816][ T8682] ? __fdget_pos+0xeb/0x180 [ 252.936755][ T8682] ? __pfx_vfs_read+0x10/0x10 [ 252.939068][ T8682] ? __pfx___mutex_lock+0x10/0x10 [ 252.941362][ T8682] ? __fget_files+0x256/0x400 [ 252.943874][ T8682] ksys_read+0x12f/0x260 [ 252.946247][ T8682] ? __pfx_ksys_read+0x10/0x10 [ 252.949041][ T8682] do_syscall_64+0xcd/0x250 [ 252.951202][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.954719][ T8682] RIP: 0033:0x7f0c3b575d7c [ 252.956929][ T8682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 252.965876][ T8682] RSP: 002b:00007f0c3c293040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.970665][ T8682] RAX: ffffffffffffffda RBX: 00007f0c3b705f80 RCX: 00007f0c3b575d7c [ 252.974447][ T8682] RDX: 000000000000000f RSI: 00007f0c3c2930b0 RDI: 0000000000000005 [ 252.978767][ T8682] RBP: 00007f0c3c2930a0 R08: 0000000000000000 R09: 0000000000000000 [ 252.982120][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.985529][ T8682] R13: 000000000000000b R14: 00007f0c3b705f80 R15: 00007ffe3ba7af48 [ 252.988873][ T8682] [ 253.008617][ T39] audit: type=1326 audit(1722066689.847:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.836" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3692777299 code=0x0 [ 253.247690][ T8694] veth0_vlan: entered allmulticast mode [ 253.286317][ T8694] tipc: Resetting bearer [ 253.341243][ T8694] veth0_vlan: left promiscuous mode [ 253.346405][ T8694] veth0_vlan: entered promiscuous mode [ 253.478742][ T39] audit: type=1326 audit(1722066690.317:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8701 comm="syz.1.842" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3692777299 code=0x0 [ 253.559225][ T8704] veth0_vlan: left allmulticast mode [ 253.566917][ T8704] tipc: Resetting bearer [ 253.575839][ T6457] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 253.591917][ T66] Bluetooth: hci6: command 0x0406 tx timeout [ 253.597888][ T66] Bluetooth: hci5: command 0x0406 tx timeout [ 253.612258][ T8706] FAULT_INJECTION: forcing a failure. [ 253.612258][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 253.618175][ T8706] CPU: 2 UID: 0 PID: 8706 Comm: syz.3.843 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 253.622768][ T8706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.627364][ T8706] Call Trace: [ 253.628820][ T8706] [ 253.630106][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 253.631937][ T8706] should_fail_ex+0x497/0x5b0 [ 253.633980][ T8706] should_failslab+0xc2/0x120 [ 253.636000][ T8706] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 253.638231][ T8706] ? skb_clone+0x190/0x3f0 [ 253.640137][ T8706] skb_clone+0x190/0x3f0 [ 253.642088][ T8706] netlink_deliver_tap+0xab3/0xd90 [ 253.644835][ T8706] netlink_unicast+0x606/0x830 [ 253.646907][ T8706] ? __pfx_netlink_unicast+0x10/0x10 [ 253.649180][ T8706] netlink_sendmsg+0x8b8/0xd70 [ 253.651256][ T8706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.653576][ T8706] ? __import_iovec+0x1fd/0x6e0 [ 253.655480][ T8706] ____sys_sendmsg+0xab5/0xc90 [ 253.657590][ T8706] ? copy_msghdr_from_user+0x10b/0x160 [ 253.660025][ T8706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.662352][ T8706] ? find_held_lock+0x2d/0x110 [ 253.664537][ T8706] ? __pfx___lock_acquire+0x10/0x10 [ 253.666851][ T8706] ___sys_sendmsg+0x135/0x1e0 [ 253.668808][ T8706] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.670769][ T8706] ? ksys_write+0x21c/0x260 [ 253.672434][ T8706] ? __fget_light+0x173/0x210 [ 253.674224][ T8706] __sys_sendmsg+0x117/0x1f0 [ 253.676023][ T8706] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.677951][ T8706] do_syscall_64+0xcd/0x250 [ 253.691834][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.694389][ T8706] RIP: 0033:0x7f0c3b577299 [ 253.696395][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.703816][ T8706] RSP: 002b:00007f0c3c272048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.707799][ T8706] RAX: ffffffffffffffda RBX: 00007f0c3b706058 RCX: 00007f0c3b577299 [ 253.711132][ T8706] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 253.714649][ T8706] RBP: 00007f0c3c2720a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.718104][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.721592][ T8706] R13: 000000000000006e R14: 00007f0c3b706058 R15: 00007ffe3ba7af48 [ 253.725063][ T8706] [ 253.755359][ T8706] netlink: 84 bytes leftover after parsing attributes in process `syz.3.843'. [ 253.766008][ T8706] veth0_vlan: left promiscuous mode [ 253.768495][ T8706] veth0_vlan: entered allmulticast mode [ 253.774931][ T8706] veth0_vlan: entered promiscuous mode [ 253.782478][ T6457] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.787365][ T6457] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 253.802603][ T6457] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 253.807180][ T6457] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 253.824769][ T6457] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.828585][ T6457] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.832702][ T6457] usb 7-1: SerialNumber: syz [ 253.838957][ T8689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.853793][ T8689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.902679][ T6457] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 253.924528][ T8710] fuse: Bad value for 'fd' [ 254.311610][ T6457] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 254.317407][ T6457] usb 7-1: USB disconnect, device number 9 [ 254.902216][ T8731] FAULT_INJECTION: forcing a failure. [ 254.902216][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 254.911231][ T8731] CPU: 0 UID: 0 PID: 8731 Comm: syz.2.852 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 254.916108][ T8731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.920891][ T8731] Call Trace: [ 254.922313][ T8731] [ 254.923565][ T8731] dump_stack_lvl+0x16c/0x1f0 [ 254.925472][ T8731] should_fail_ex+0x497/0x5b0 [ 254.927353][ T8731] ? fs_reclaim_acquire+0xae/0x160 [ 254.929419][ T8731] should_failslab+0xc2/0x120 [ 254.931309][ T8731] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 254.934280][ T8731] ? kvasprintf_const+0x66/0x1a0 [ 254.936638][ T8731] kvasprintf+0xbd/0x160 [ 254.938536][ T8731] ? __pfx_kvasprintf+0x10/0x10 [ 254.940917][ T8731] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.943291][ T8731] ? __debug_object_init+0x34a/0x480 [ 254.945696][ T8731] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 254.948172][ T8731] kvasprintf_const+0x66/0x1a0 [ 254.950374][ T8731] kobject_set_name_vargs+0x5a/0x140 [ 254.952962][ T8731] dev_set_name+0xc8/0x100 [ 254.954907][ T8731] ? __pfx_dev_set_name+0x10/0x10 [ 254.957120][ T8731] ? __init_waitqueue_head+0xca/0x150 [ 254.959525][ T8731] ? input_allocate_device+0x271/0x350 [ 254.961935][ T8731] input_allocate_device+0x293/0x350 [ 254.964718][ T8731] uinput_ioctl_handler.isra.0+0x897/0x1d70 [ 254.968887][ T8731] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 254.971721][ T8731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.974495][ T8731] ? selinux_file_ioctl+0xb4/0x270 [ 254.977014][ T8731] ? __pfx_uinput_ioctl+0x10/0x10 [ 254.979422][ T8731] __x64_sys_ioctl+0x193/0x220 [ 254.981647][ T8731] do_syscall_64+0xcd/0x250 [ 254.983706][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.986445][ T8731] RIP: 0033:0x7fad2df77299 [ 254.988535][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.997687][ T8731] RSP: 002b:00007fad2ec93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.001445][ T8731] RAX: ffffffffffffffda RBX: 00007fad2e105f80 RCX: 00007fad2df77299 [ 255.004457][ T8731] RDX: 0000000000000000 RSI: 000000008004552d RDI: 0000000000000003 [ 255.008042][ T8731] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 255.011599][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.015426][ T8731] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 255.019226][ T8731] [ 255.057906][ T8729] tipc: Resetting bearer [ 255.095837][ T8729] veth0_vlan: left promiscuous mode [ 255.103187][ T8729] veth0_vlan: entered promiscuous mode [ 255.199793][ T8737] xt_cgroup: path and classid specified [ 255.365435][ T8739] vivid-002: disconnect [ 255.535090][ T8748] netlink: 'syz.0.857': attribute type 29 has an invalid length. [ 255.539925][ T8748] netlink: 'syz.0.857': attribute type 29 has an invalid length. [ 255.547788][ T8748] netlink: 'syz.0.857': attribute type 29 has an invalid length. [ 255.551365][ T8748] netlink: 'syz.0.857': attribute type 29 has an invalid length. [ 255.633267][ T4766] Bluetooth: hci17: Malformed Event: 0x2f [ 255.910044][ T4766] Bluetooth: hci16: Controller not accepting commands anymore: ncmd = 0 [ 255.915540][ T4766] Bluetooth: hci16: Injecting HCI hardware error event [ 255.922707][ T4766] Bluetooth: hci16: hardware error 0x00 [ 256.056030][ T8738] vivid-002: reconnect [ 256.113922][ T991] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 256.323643][ T991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.328637][ T991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 256.348484][ T991] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 256.354309][ T991] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 256.382978][ T991] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.392242][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.395724][ T991] usb 5-1: SerialNumber: syz [ 256.413021][ T8751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.416800][ T8751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.427594][ T991] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 256.789388][ T991] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 256.803101][ T991] usb 5-1: USB disconnect, device number 18 [ 257.014462][ T8763] veth0_vlan: entered allmulticast mode [ 257.124170][ T8763] veth0_vlan: left promiscuous mode [ 257.127449][ T8763] veth0_vlan: entered promiscuous mode [ 257.326582][ T39] audit: type=1400 audit(1722066694.157:600): avc: denied { accept } for pid=8769 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.340207][ T39] audit: type=1400 audit(1722066694.157:601): avc: denied { bind } for pid=8769 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 257.360729][ T39] audit: type=1400 audit(1722066694.167:602): avc: denied { ioctl } for pid=8769 comm="syz.1.865" path="socket:[39091]" dev="sockfs" ino=39091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 257.442935][ T39] audit: type=1400 audit(1722066694.287:603): avc: denied { write } for pid=8769 comm="syz.1.865" name="ppp" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 257.768893][ T8781] netlink: 'syz.0.869': attribute type 4 has an invalid length. [ 257.772429][ T8781] netlink: 17 bytes leftover after parsing attributes in process `syz.0.869'. [ 257.828414][ T39] audit: type=1400 audit(1722066694.657:604): avc: denied { block_suspend } for pid=8785 comm="syz.2.868" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.841760][ T39] audit: type=1400 audit(1722066694.677:605): avc: denied { module_load } for pid=8785 comm="syz.2.868" path="/sys/power/wakeup_count" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 257.952835][ T39] audit: type=1400 audit(1722066694.797:606): avc: denied { bind } for pid=8787 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.981697][ T4766] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 258.005255][ T8798] tipc: Started in network mode [ 258.007832][ T8798] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 258.020299][ T8798] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 258.025173][ T8798] tipc: Enabled bearer , priority 10 [ 258.087527][ T8800] veth0_vlan: entered allmulticast mode [ 258.106875][ T4766] Bluetooth: hci13: Malformed Event: 0x2f [ 258.129976][ T8804] veth0_vlan: left promiscuous mode [ 258.136588][ T8804] veth0_vlan: entered promiscuous mode [ 258.346006][ T8809] nicvf0: renamed from bridge_slave_1 (while UP) [ 258.359977][ T8809] netlink: 'syz.0.877': attribute type 2 has an invalid length. [ 258.364850][ T8809] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 258.401771][ T8809] Driver unsupported XDP return value 0 on prog (id 235) dev N/A, expect packet loss! [ 258.561675][ T8] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 258.645537][ T8817] FAULT_INJECTION: forcing a failure. [ 258.645537][ T8817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.652397][ T8817] CPU: 3 UID: 0 PID: 8817 Comm: syz.0.879 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 258.657105][ T8817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 258.662087][ T8817] Call Trace: [ 258.663588][ T8817] [ 258.665017][ T8817] dump_stack_lvl+0x16c/0x1f0 [ 258.667196][ T8817] should_fail_ex+0x497/0x5b0 [ 258.669253][ T8817] _copy_to_user+0x30/0xc0 [ 258.671220][ T8817] simple_read_from_buffer+0xd0/0x160 [ 258.673653][ T8817] proc_fail_nth_read+0x1b0/0x290 [ 258.675910][ T8817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.678575][ T8817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.681014][ T8817] vfs_read+0x1d4/0xbd0 [ 258.682450][ T8817] ? __fdget_pos+0xeb/0x180 [ 258.684468][ T8817] ? __pfx_vfs_read+0x10/0x10 [ 258.686371][ T8817] ? __pfx___mutex_lock+0x10/0x10 [ 258.688398][ T8817] ? __fget_files+0x256/0x400 [ 258.690211][ T8817] ksys_read+0x12f/0x260 [ 258.692131][ T8817] ? __pfx_ksys_read+0x10/0x10 [ 258.694005][ T8817] do_syscall_64+0xcd/0x250 [ 258.695787][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.698054][ T8817] RIP: 0033:0x7fb195375d7c [ 258.699781][ T8817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 258.708299][ T8817] RSP: 002b:00007fb1961c7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.711912][ T8817] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195375d7c [ 258.715747][ T8817] RDX: 000000000000000f RSI: 00007fb1961c70b0 RDI: 0000000000000003 [ 258.718944][ T8817] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.721911][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.725202][ T8817] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 258.728385][ T8817] [ 258.788707][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.804325][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 258.809145][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 258.825095][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 258.857197][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.861204][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.874323][ T8] usb 6-1: SerialNumber: syz [ 258.883383][ T8805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.886820][ T8805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.901765][ T8] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 259.033125][ T6457] tipc: Node number set to 1 [ 259.052555][ T39] audit: type=1400 audit(1722066695.897:607): avc: denied { setopt } for pid=8818 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.140465][ T8] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 259.154942][ T8] usb 6-1: USB disconnect, device number 17 [ 259.164753][ T8830] tipc: Started in network mode [ 259.167114][ T8830] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 259.172633][ T8830] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 259.176823][ T8830] tipc: Enabled bearer , priority 10 [ 259.430124][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 259.441730][ T39] audit: type=1400 audit(1722066696.267:608): avc: denied { listen } for pid=8833 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 259.919740][ T8849] FAULT_INJECTION: forcing a failure. [ 259.919740][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 259.926794][ T8849] CPU: 2 UID: 0 PID: 8849 Comm: syz.1.889 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 259.933039][ T8849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.937720][ T8849] Call Trace: [ 259.939193][ T8849] [ 259.940505][ T8849] dump_stack_lvl+0x16c/0x1f0 [ 259.942618][ T8849] should_fail_ex+0x497/0x5b0 [ 259.944838][ T8849] ? fs_reclaim_acquire+0xae/0x160 [ 259.947128][ T8849] should_failslab+0xc2/0x120 [ 259.948235][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 259.949658][ T8849] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 259.955259][ T8849] ? sk_prot_alloc+0x60/0x2a0 [ 259.957384][ T8849] sk_prot_alloc+0x60/0x2a0 [ 259.959415][ T8849] sk_alloc+0x36/0xb90 [ 259.961262][ T8849] inet6_create+0x380/0x12e0 [ 259.963348][ T8849] ? inet6_create+0x5d/0x12e0 [ 259.965493][ T8849] __sock_create+0x32e/0x800 [ 259.967628][ T8849] mptcp_subflow_create_socket+0xf6/0x10a0 [ 259.970211][ T8849] ? __pfx_mark_lock+0x10/0x10 [ 259.972360][ T8849] ? lock_acquire+0x1b1/0x560 [ 259.974410][ T8849] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 259.977265][ T8849] ? find_held_lock+0x2d/0x110 [ 259.979572][ T8849] __mptcp_nmpc_sk+0x184/0x7d0 [ 259.981718][ T8849] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 259.984499][ T8849] ? mptcp_bind+0x9b/0x1e0 [ 259.986522][ T8849] ? __local_bh_enable_ip+0xa4/0x120 [ 259.988912][ T8849] mptcp_bind+0xa3/0x1e0 [ 259.990814][ T8849] __sys_bind+0x1eb/0x220 [ 259.992931][ T8849] ? __pfx___sys_bind+0x10/0x10 [ 259.995100][ T8849] ? __pfx_ksys_write+0x10/0x10 [ 259.997336][ T8849] __x64_sys_bind+0x72/0xb0 [ 259.999359][ T8849] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.001692][ T8849] do_syscall_64+0xcd/0x250 [ 260.003763][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.006448][ T8849] RIP: 0033:0x7f3692777299 [ 260.008449][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.016866][ T8849] RSP: 002b:00007f36935a8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 260.020437][ T8849] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692777299 [ 260.023895][ T8849] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 260.027391][ T8849] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 260.030654][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.034152][ T8849] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 260.037742][ T8849] [ 260.178080][ T8857] netlink: 196 bytes leftover after parsing attributes in process `syz.1.891'. [ 260.181747][ T30] tipc: Node number set to 1 [ 260.268764][ T39] audit: type=1400 audit(1722066697.107:609): avc: denied { module_load } for pid=8860 comm="syz.0.893" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 260.268782][ T8861] Invalid ELF section header size [ 260.268940][ T8861] Invalid ELF section header size [ 260.313121][ T8861] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 260.328569][ T8855] fuseblk: Bad value for 'group_id' [ 260.330959][ T8855] fuseblk: Bad value for 'group_id' [ 260.491573][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 260.647149][ T4766] Bluetooth: unknown link type 32 [ 260.650802][ T4766] Bluetooth: hci15: connection err: -111 [ 260.741860][ T8] usb 6-1: device descriptor read/64, error -71 [ 260.857951][ T8874] fuse: Bad value for 'fd' [ 261.143582][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 261.421156][ T8] usb 6-1: device descriptor read/64, error -71 [ 261.543847][ T8] usb usb6-port1: attempt power cycle [ 261.676578][ T1383] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.679628][ T1383] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.911644][ T5381] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 261.961800][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 262.031873][ T8] usb 6-1: device descriptor read/8, error -71 [ 262.130659][ T5381] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.135864][ T5381] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 262.151596][ T5381] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 262.156547][ T5381] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 262.183308][ T5381] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.191656][ T5381] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.195121][ T5381] usb 8-1: SerialNumber: syz [ 262.205482][ T8878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.210583][ T8878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.218957][ T5381] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 262.322189][ T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 262.352678][ T8] usb 6-1: device descriptor read/8, error -71 [ 262.478295][ T5381] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 262.481857][ T8] usb usb6-port1: unable to enumerate USB device [ 262.484467][ T5381] usb 8-1: USB disconnect, device number 11 [ 263.289687][ T39] audit: type=1326 audit(1722066929.127:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8888 comm="syz.1.901" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3692777299 code=0x0 [ 264.301289][ T8915] dummy0: entered promiscuous mode [ 264.304819][ T8915] vlan2: entered promiscuous mode [ 264.323594][ T8915] dummy0: left promiscuous mode [ 264.643209][ T8918] block nbd3: shutting down sockets [ 265.090724][ T39] audit: type=1400 audit(1722066930.927:611): avc: denied { set_context_mgr } for pid=8919 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 265.347045][ T39] audit: type=1326 audit(1722066931.187:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3b577299 code=0x7ffc0000 [ 265.348349][ T8928] FAULT_INJECTION: forcing a failure. [ 265.348349][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 265.381644][ T39] audit: type=1326 audit(1722066931.187:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3b577299 code=0x7ffc0000 [ 265.395266][ T8928] CPU: 3 UID: 0 PID: 8928 Comm: syz.3.913 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 265.399943][ T8928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.405207][ T8928] Call Trace: [ 265.406705][ T8928] [ 265.408045][ T8928] dump_stack_lvl+0x16c/0x1f0 [ 265.410157][ T8928] should_fail_ex+0x497/0x5b0 [ 265.412231][ T8928] ? fs_reclaim_acquire+0xae/0x160 [ 265.414236][ T8928] should_failslab+0xc2/0x120 [ 265.416098][ T8928] __kmalloc_cache_noprof+0x6b/0x300 [ 265.418166][ T8928] ? audit_log_d_path+0xce/0x1e0 [ 265.420267][ T8928] audit_log_d_path+0xce/0x1e0 [ 265.422378][ T8928] audit_log_d_path_exe+0x46/0x70 [ 265.424719][ T8928] audit_log_task+0x279/0x300 [ 265.426753][ T8928] ? __pfx_audit_log_task+0x10/0x10 [ 265.429056][ T8928] ? migrate_enable+0x1a8/0x260 [ 265.431215][ T8928] ? __pfx_migrate_enable+0x10/0x10 [ 265.433339][ T8928] audit_seccomp+0x7a/0x280 [ 265.435107][ T8928] __seccomp_filter+0x816/0xf40 [ 265.437007][ T8928] ? __pfx___seccomp_filter+0x10/0x10 [ 265.439060][ T8928] ? fput+0x32/0x390 [ 265.440878][ T8928] ? ksys_write+0x1ab/0x260 [ 265.442899][ T8928] __secure_computing+0x26c/0x3f0 [ 265.445184][ T8928] syscall_trace_enter+0x8b/0x240 [ 265.447355][ T8928] do_syscall_64+0x1ee/0x250 [ 265.449364][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.451908][ T8928] RIP: 0033:0x7f0c3b577299 [ 265.453885][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.462517][ T8928] RSP: 002b:00007f0c3c293048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b6 [ 265.466311][ T8928] RAX: ffffffffffffffda RBX: 00007f0c3b705f80 RCX: 00007f0c3b577299 [ 265.469757][ T8928] RDX: 00000000000000fe RSI: ffffffffffffffff RDI: ffffffffffffffff [ 265.472826][ T8928] RBP: 00007f0c3c2930a0 R08: 0000000000000000 R09: 0000000000000000 [ 265.476603][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.480237][ T8928] R13: 000000000000000b R14: 00007f0c3b705f80 R15: 00007ffe3ba7af48 [ 265.483727][ T8928] [ 265.489562][ T39] audit: type=1326 audit(1722066931.187:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0c3b577299 code=0x7ffc0000 [ 265.499782][ T39] audit: type=1326 audit(1722066931.187:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3b577299 code=0x7ffc0000 [ 265.511258][ T39] audit: type=1326 audit(1722066931.187:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c3b575cd0 code=0x7ffc0000 [ 265.521918][ T39] audit: type=1326 audit(1722066931.187:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c3b575e1f code=0x7ffc0000 [ 265.534661][ T39] audit: type=1326 audit(1722066931.187:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f0c3b577299 code=0x7ffc0000 [ 265.544610][ T39] audit: type=1326 audit(1722066931.387:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8927 comm="syz.3.913" exe="/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0c3b575d7c code=0x7ffc0000 [ 265.923537][ T8934] fuse: Bad value for 'group_id' [ 265.926859][ T8934] fuse: Bad value for 'group_id' [ 267.182835][ T8949] FAULT_INJECTION: forcing a failure. [ 267.182835][ T8949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.191364][ T8949] CPU: 2 UID: 0 PID: 8949 Comm: syz.2.920 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 267.200137][ T8949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.204770][ T8949] Call Trace: [ 267.206296][ T8949] [ 267.207781][ T8949] dump_stack_lvl+0x16c/0x1f0 [ 267.210012][ T8949] should_fail_ex+0x497/0x5b0 [ 267.212300][ T8949] _copy_from_user+0x30/0xf0 [ 267.214330][ T8949] kstrtouint_from_user+0xd7/0x1c0 [ 267.216674][ T8949] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.219285][ T8949] ? __pfx_lock_acquire+0x10/0x10 [ 267.221479][ T8949] proc_fail_nth_write+0x84/0x270 [ 267.223708][ T8949] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.226374][ T8949] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.229520][ T8949] vfs_write+0x29a/0x1140 [ 267.231518][ T8949] ? __fdget_pos+0xeb/0x180 [ 267.233569][ T8949] ? __pfx_vfs_write+0x10/0x10 [ 267.235502][ T8949] ? __pfx___mutex_lock+0x10/0x10 [ 267.237591][ T8949] ? __fget_files+0x256/0x400 [ 267.239566][ T8949] ksys_write+0x12f/0x260 [ 267.241410][ T8949] ? __pfx_ksys_write+0x10/0x10 [ 267.243227][ T8949] do_syscall_64+0xcd/0x250 [ 267.245049][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.247574][ T8949] RIP: 0033:0x7fad2df75e1f [ 267.249648][ T8949] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 267.259724][ T8949] RSP: 002b:00007fad2ec93040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.264346][ T8949] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad2df75e1f [ 267.267753][ T8949] RDX: 0000000000000001 RSI: 00007fad2ec930b0 RDI: 0000000000000004 [ 267.271654][ T8949] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.275193][ T8949] R10: 0000000020000140 R11: 0000000000000293 R12: 0000000000000001 [ 267.278550][ T8949] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 267.281696][ T8949] [ 267.678603][ T8970] FAULT_INJECTION: forcing a failure. [ 267.678603][ T8970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.696525][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.2.927 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 267.702539][ T8970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.708618][ T8970] Call Trace: [ 267.710708][ T8970] [ 267.712761][ T8970] dump_stack_lvl+0x16c/0x1f0 [ 267.716030][ T8970] should_fail_ex+0x497/0x5b0 [ 267.719291][ T8970] _copy_from_user+0x30/0xf0 [ 267.722981][ T8970] kstrtouint_from_user+0xd7/0x1c0 [ 267.726723][ T8970] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.730647][ T8970] ? __pfx_lock_acquire+0x10/0x10 [ 267.734368][ T8970] proc_fail_nth_write+0x84/0x270 [ 267.736822][ T8970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.739325][ T8970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.741817][ T8970] vfs_write+0x29a/0x1140 [ 267.743906][ T8970] ? __fdget_pos+0xeb/0x180 [ 267.746129][ T8970] ? __pfx_vfs_write+0x10/0x10 [ 267.748394][ T8970] ? __pfx___mutex_lock+0x10/0x10 [ 267.750448][ T8970] ? __fget_files+0x256/0x400 [ 267.752616][ T8970] ksys_write+0x12f/0x260 [ 267.754943][ T8970] ? __pfx_ksys_write+0x10/0x10 [ 267.758569][ T8970] do_syscall_64+0xcd/0x250 [ 267.761650][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.764964][ T8970] RIP: 0033:0x7fad2df75e1f [ 267.767186][ T8970] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 267.775930][ T8970] RSP: 002b:00007fad2ec93040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.780428][ T8970] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad2df75e1f [ 267.784889][ T8970] RDX: 0000000000000001 RSI: 00007fad2ec930b0 RDI: 0000000000000003 [ 267.788688][ T8970] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.792894][ T8970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 267.796820][ T8970] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 267.801505][ T8970] [ 268.871539][ T4766] Bluetooth: hci7: command 0x0406 tx timeout [ 268.924399][ T8995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.021654][ T9005] FAULT_INJECTION: forcing a failure. [ 269.021654][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.047810][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.1.936 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 269.052292][ T9005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.057631][ T9005] Call Trace: [ 269.059158][ T9005] [ 269.060907][ T9005] dump_stack_lvl+0x16c/0x1f0 [ 269.063676][ T9005] should_fail_ex+0x497/0x5b0 [ 269.065778][ T9005] _copy_to_user+0x30/0xc0 [ 269.067545][ T9005] simple_read_from_buffer+0xd0/0x160 [ 269.069704][ T9005] proc_fail_nth_read+0x1b0/0x290 [ 269.071786][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.074227][ T9005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 269.076620][ T9005] vfs_read+0x1d4/0xbd0 [ 269.078742][ T9005] ? __fdget_pos+0xeb/0x180 [ 269.081160][ T9005] ? __pfx_vfs_read+0x10/0x10 [ 269.084112][ T9005] ? __pfx___mutex_lock+0x10/0x10 [ 269.086738][ T9005] ? __fget_files+0x256/0x400 [ 269.088770][ T9005] ksys_read+0x12f/0x260 [ 269.090578][ T9005] ? __pfx_ksys_read+0x10/0x10 [ 269.092365][ T9005] do_syscall_64+0xcd/0x250 [ 269.094477][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.097303][ T9005] RIP: 0033:0x7f3692775d7c [ 269.099613][ T9005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 269.111557][ T9005] RSP: 002b:00007f36935a8040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.115377][ T9005] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692775d7c [ 269.118823][ T9005] RDX: 000000000000000f RSI: 00007f36935a80b0 RDI: 0000000000000004 [ 269.122354][ T9005] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.125901][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.130128][ T9005] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 269.133469][ T9005] [ 269.295978][ T9017] fuse: Bad value for 'fd' [ 269.318353][ T9019] FAULT_INJECTION: forcing a failure. [ 269.318353][ T9019] name failslab, interval 1, probability 0, space 0, times 0 [ 269.324679][ T9019] CPU: 3 UID: 0 PID: 9019 Comm: syz.1.939 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 269.329297][ T9019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.334006][ T9019] Call Trace: [ 269.335504][ T9019] [ 269.336826][ T9019] dump_stack_lvl+0x16c/0x1f0 [ 269.338908][ T9019] should_fail_ex+0x497/0x5b0 [ 269.340978][ T9019] should_failslab+0xc2/0x120 [ 269.343142][ T9019] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 269.345622][ T9019] ? skb_clone+0x190/0x3f0 [ 269.347626][ T9019] skb_clone+0x190/0x3f0 [ 269.349768][ T9019] netlink_deliver_tap+0xab3/0xd90 [ 269.352105][ T9019] netlink_unicast+0x606/0x830 [ 269.354490][ T9019] ? __pfx_netlink_unicast+0x10/0x10 [ 269.356982][ T9019] netlink_sendmsg+0x8b8/0xd70 [ 269.359160][ T9019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.361543][ T9019] ? __import_iovec+0x1fd/0x6e0 [ 269.363744][ T9019] ____sys_sendmsg+0xab5/0xc90 [ 269.365910][ T9019] ? copy_msghdr_from_user+0x10b/0x160 [ 269.368404][ T9019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.371159][ T9019] ? find_held_lock+0x2d/0x110 [ 269.373358][ T9019] ? __pfx___lock_acquire+0x10/0x10 [ 269.375999][ T9019] ___sys_sendmsg+0x135/0x1e0 [ 269.378282][ T9019] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.380535][ T9019] ? ksys_write+0x21c/0x260 [ 269.382305][ T9019] ? __fget_light+0x173/0x210 [ 269.384171][ T9019] __sys_sendmsg+0x117/0x1f0 [ 269.385893][ T9019] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.387669][ T9019] do_syscall_64+0xcd/0x250 [ 269.389424][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.391691][ T9019] RIP: 0033:0x7f3692777299 [ 269.393908][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.403289][ T9019] RSP: 002b:00007f36935a8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.407459][ T9019] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692777299 [ 269.411055][ T9019] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 269.414687][ T9019] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.418162][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.421354][ T9019] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 269.424440][ T9019] [ 269.434753][ T9016] netlink: 140 bytes leftover after parsing attributes in process `syz.0.940'. [ 269.438293][ T9016] netlink: 'syz.0.940': attribute type 2 has an invalid length. [ 269.441878][ T9016] netlink: 'syz.0.940': attribute type 2 has an invalid length. [ 269.445488][ T9016] netlink: 'syz.0.940': attribute type 4 has an invalid length. [ 269.449329][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 269.767392][ T9030] FAULT_INJECTION: forcing a failure. [ 269.767392][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 269.773394][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.2.945 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 269.778054][ T9030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.782779][ T9030] Call Trace: [ 269.784380][ T9030] [ 269.785785][ T9030] dump_stack_lvl+0x16c/0x1f0 [ 269.787858][ T9030] should_fail_ex+0x497/0x5b0 [ 269.789956][ T9030] ? fs_reclaim_acquire+0xae/0x160 [ 269.792256][ T9030] should_failslab+0xc2/0x120 [ 269.794384][ T9030] __kmalloc_noprof+0xcb/0x400 [ 269.796236][ T9030] ? __pfx_lock_acquire+0x10/0x10 [ 269.798153][ T9030] tomoyo_realpath_from_path+0xb9/0x720 [ 269.800194][ T9030] ? tomoyo_profile+0x47/0x60 [ 269.801922][ T9030] tomoyo_path_number_perm+0x245/0x590 [ 269.803929][ T9030] ? tomoyo_path_number_perm+0x232/0x590 [ 269.805914][ T9030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.808079][ T9030] ? find_held_lock+0x2d/0x110 [ 269.809976][ T9030] ? do_raw_spin_unlock+0x172/0x230 [ 269.811980][ T9030] ? _raw_spin_unlock+0x28/0x50 [ 269.813887][ T9030] ? d_add+0x43c/0x730 [ 269.815428][ T9030] ? do_raw_spin_unlock+0x172/0x230 [ 269.817378][ T9030] ? simple_lookup+0xd6/0x110 [ 269.819148][ T9030] tomoyo_path_mkdir+0x9c/0xe0 [ 269.821181][ T9030] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 269.823709][ T9030] ? get_current_fs_domain+0x188/0x1f0 [ 269.826159][ T9030] security_path_mkdir+0x111/0x170 [ 269.828461][ T9030] do_mkdirat+0x176/0x3a0 [ 269.830370][ T9030] ? __pfx_do_mkdirat+0x10/0x10 [ 269.832521][ T9030] ? getname_flags.part.0+0x1c5/0x550 [ 269.834859][ T9030] __x64_sys_mkdir+0xef/0x140 [ 269.836971][ T9030] do_syscall_64+0xcd/0x250 [ 269.838980][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.841345][ T9030] RIP: 0033:0x7fad2df77299 [ 269.843108][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.852676][ T9030] RSP: 002b:00007fad2ec93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 269.856553][ T9030] RAX: ffffffffffffffda RBX: 00007fad2e105f80 RCX: 00007fad2df77299 [ 269.860081][ T9030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 269.863142][ T9030] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.866320][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.869456][ T9030] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 269.872491][ T9030] [ 269.880624][ T9030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.886512][ T9030] o2cb: This node has not been configured. [ 269.892341][ T9030] o2cb: Cluster check failed. Fix errors before retrying. [ 269.895150][ T9030] (syz.2.945,9030,1):user_dlm_register:674 ERROR: status = -22 [ 269.900402][ T9030] (syz.2.945,9030,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 270.220931][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 270.220946][ T39] audit: type=1400 audit(1722066936.057:627): avc: denied { write } for pid=9040 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.541785][ T5341] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0 [ 270.551247][ T5341] Bluetooth: hci13: Injecting HCI hardware error event [ 270.557563][ T5341] Bluetooth: hci13: hardware error 0x00 [ 270.627475][ T9046] o2cb: This node has not been configured. [ 270.630080][ T9046] o2cb: Cluster check failed. Fix errors before retrying. [ 270.636272][ T9046] (syz.0.949,9046,1):user_dlm_register:674 ERROR: status = -22 [ 270.639609][ T9046] (syz.0.949,9046,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 270.747716][ T9048] bridge0: port 2(nicvf0) entered disabled state [ 270.751252][ T9048] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.756861][ T9048] bridge0: entered allmulticast mode [ 270.770395][ T9048] bridge0: port 2(nicvf0) entered blocking state [ 270.773355][ T9048] bridge0: port 2(nicvf0) entered forwarding state [ 270.776483][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.781145][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.784875][ T9048] bridge0: entered promiscuous mode [ 271.352786][ T58] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 271.562531][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 271.569807][ T58] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 271.574018][ T58] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 271.577762][ T58] usb 6-1: Product: syz [ 271.579961][ T58] usb 6-1: Manufacturer: syz [ 271.584034][ T58] usb 6-1: SerialNumber: syz [ 271.603571][ T58] usb 6-1: config 0 descriptor?? [ 271.815250][ T9076] o2cb: This node has not been configured. [ 271.817897][ T9076] o2cb: Cluster check failed. Fix errors before retrying. [ 271.821084][ T9076] (syz.2.958,9076,2):user_dlm_register:674 ERROR: status = -22 [ 271.826883][ T9076] (syz.2.958,9076,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 271.830247][ T9075] FAULT_INJECTION: forcing a failure. [ 271.830247][ T9075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.840035][ T9075] CPU: 3 UID: 0 PID: 9075 Comm: syz.0.957 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 271.844972][ T9075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.849704][ T9075] Call Trace: [ 271.851201][ T9075] [ 271.852552][ T9075] dump_stack_lvl+0x16c/0x1f0 [ 271.854653][ T9075] should_fail_ex+0x497/0x5b0 [ 271.856808][ T9075] _copy_to_user+0x30/0xc0 [ 271.858786][ T9075] simple_read_from_buffer+0xd0/0x160 [ 271.861187][ T9075] proc_fail_nth_read+0x1b0/0x290 [ 271.863415][ T9075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.865872][ T9075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.868411][ T9075] vfs_read+0x1d4/0xbd0 [ 271.870276][ T9075] ? __fdget_pos+0xeb/0x180 [ 271.872315][ T9075] ? __pfx_vfs_read+0x10/0x10 [ 271.874463][ T9075] ? __pfx___mutex_lock+0x10/0x10 [ 271.876727][ T9075] ? __fget_files+0x256/0x400 [ 271.878969][ T9075] ksys_read+0x12f/0x260 [ 271.880862][ T9075] ? __pfx_ksys_read+0x10/0x10 [ 271.883050][ T9075] do_syscall_64+0xcd/0x250 [ 271.885272][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.887951][ T9075] RIP: 0033:0x7fb195375d7c [ 271.889956][ T9075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 271.898498][ T9075] RSP: 002b:00007fb1961c7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.902194][ T9075] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195375d7c [ 271.905704][ T9075] RDX: 000000000000000f RSI: 00007fb1961c70b0 RDI: 0000000000000006 [ 271.909421][ T9075] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.912894][ T9075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.916668][ T9075] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 271.920341][ T9075] [ 272.477614][ T39] audit: type=1326 audit(1722066938.307:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb195377299 code=0x7ffc0000 [ 272.491897][ T39] audit: type=1326 audit(1722066938.307:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb19536e2e7 code=0x7ffc0000 [ 272.511583][ T39] audit: type=1326 audit(1722066938.307:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb195312cb9 code=0x7ffc0000 [ 272.520013][ T39] audit: type=1326 audit(1722066938.307:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb19536e2e7 code=0x7ffc0000 [ 272.541570][ T39] audit: type=1326 audit(1722066938.307:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb195312cb9 code=0x7ffc0000 [ 272.555584][ T39] audit: type=1326 audit(1722066938.307:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb19536e2e7 code=0x7ffc0000 [ 272.573145][ T39] audit: type=1326 audit(1722066938.307:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb195312cb9 code=0x7ffc0000 [ 272.608929][ T39] audit: type=1326 audit(1722066938.307:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb19536e2e7 code=0x7ffc0000 [ 272.622117][ T5341] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 272.628600][ T39] audit: type=1326 audit(1722066938.307:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9083 comm="syz.0.961" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb195312cb9 code=0x7ffc0000 [ 272.853781][ T9109] o2cb: This node has not been configured. [ 272.856397][ T9109] o2cb: Cluster check failed. Fix errors before retrying. [ 272.871200][ T9109] (syz.3.967,9109,2):user_dlm_register:674 ERROR: status = -22 [ 272.875197][ T9109] (syz.3.967,9109,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 272.985735][ T9112] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 272.990041][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 272.996788][ T9112] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 273.014144][ T9112] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 273.052101][ T9084] tipc: Can't bind to reserved service type 0 [ 273.139012][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.446530][ T9128] FAULT_INJECTION: forcing a failure. [ 273.446530][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 273.452354][ T9128] CPU: 2 UID: 0 PID: 9128 Comm: syz.0.974 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 273.456841][ T9128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.461833][ T9128] Call Trace: [ 273.463338][ T9128] [ 273.464686][ T9128] dump_stack_lvl+0x16c/0x1f0 [ 273.466859][ T9128] should_fail_ex+0x497/0x5b0 [ 273.469180][ T9128] should_failslab+0xc2/0x120 [ 273.471286][ T9128] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 273.473699][ T9128] ? __nf_conntrack_alloc+0xd1/0x5e0 [ 273.476058][ T9128] __nf_conntrack_alloc+0xd1/0x5e0 [ 273.478085][ T9128] init_conntrack.constprop.0+0xd3e/0x1080 [ 273.480468][ T9128] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 273.482926][ T9128] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 273.485477][ T9128] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.487813][ T9128] ? ipt_do_table+0xd4c/0x1aa0 [ 273.489942][ T9128] ? __local_bh_enable_ip+0xa4/0x120 [ 273.492312][ T9128] nf_conntrack_in+0xa50/0x1860 [ 273.494527][ T9128] ? __pfx_nf_conntrack_in+0x10/0x10 [ 273.496852][ T9128] ? lock_acquire+0x1b1/0x560 [ 273.498949][ T9128] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 273.501326][ T9128] nf_hook_slow+0xbb/0x200 [ 273.503217][ T9128] nf_hook.constprop.0+0x42e/0x750 [ 273.505283][ T9128] ? __pfx_ip_rcv_finish+0x10/0x10 [ 273.507285][ T9128] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 273.509520][ T9128] ? __pfx_ip_rcv_finish+0x10/0x10 [ 273.511557][ T9128] ? ip_rcv_core+0x93f/0xea0 [ 273.513662][ T9128] ? __pfx_ip_rcv+0x10/0x10 [ 273.515805][ T9128] ip_rcv+0x7d/0x5d0 [ 273.517637][ T9128] ? __pfx_ip_rcv+0x10/0x10 [ 273.519676][ T9128] __netif_receive_skb_one_core+0x199/0x1e0 [ 273.522322][ T9128] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 273.525176][ T9128] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 273.527669][ T9128] __netif_receive_skb+0x1d/0x160 [ 273.529899][ T9128] netif_receive_skb+0x13f/0x7b0 [ 273.532139][ T9128] ? __pfx_netif_receive_skb+0x10/0x10 [ 273.534592][ T9128] ? __pfx___lock_acquire+0x10/0x10 [ 273.536911][ T9128] tun_rx_batched+0x429/0x780 [ 273.539074][ T9128] ? __pfx_tun_rx_batched+0x10/0x10 [ 273.541383][ T9128] ? tun_get_user+0x1d81/0x3c30 [ 273.543564][ T9128] tun_get_user+0x2a5c/0x3c30 [ 273.545679][ T9128] ? __pfx_tun_get_user+0x10/0x10 [ 273.547920][ T9128] ? find_held_lock+0x2d/0x110 [ 273.550114][ T9128] ? __pfx_lock_release+0x10/0x10 [ 273.552319][ T9128] tun_chr_write_iter+0xe8/0x210 [ 273.554444][ T9128] vfs_write+0x6b6/0x1140 [ 273.556265][ T9128] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 273.558655][ T9128] ? __pfx_vfs_write+0x10/0x10 [ 273.560788][ T9128] ? __fget_files+0x256/0x400 [ 273.562884][ T9128] ? __fget_light+0x173/0x210 [ 273.565001][ T9128] ksys_write+0x12f/0x260 [ 273.566917][ T9128] ? __pfx_ksys_write+0x10/0x10 [ 273.569094][ T9128] do_syscall_64+0xcd/0x250 [ 273.571110][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.573732][ T9128] RIP: 0033:0x7fb195375e1f [ 273.575741][ T9128] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 273.584031][ T9128] RSP: 002b:00007fb1961c7010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 273.587685][ T9128] RAX: ffffffffffffffda RBX: 00007fb195505f80 RCX: 00007fb195375e1f [ 273.591151][ T9128] RDX: 00000000000005eb RSI: 00000000200012c0 RDI: 00000000000000c8 [ 273.594241][ T9128] RBP: 00007fb1961c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.597617][ T9128] R10: 00000000000005eb R11: 0000000000000293 R12: 0000000000000001 [ 273.601048][ T9128] R13: 000000000000000b R14: 00007fb195505f80 R15: 00007ffc8624c9f8 [ 273.604497][ T9128] [ 273.606042][ C2] vkms_vblank_simulate: vblank timer overrun [ 273.821738][ T9136] o2cb: This node has not been configured. [ 273.824923][ T9136] o2cb: Cluster check failed. Fix errors before retrying. [ 273.828218][ T9136] (syz.3.976,9136,3):user_dlm_register:674 ERROR: status = -22 [ 273.834002][ T9136] (syz.3.976,9136,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 274.061367][ T5407] usb 6-1: USB disconnect, device number 22 [ 274.731583][ T58] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 274.758007][ T9164] vivid-000: ================= START STATUS ================= [ 274.773947][ T9164] vivid-000: Test Pattern: 75% Colorbar [ 274.776718][ T9164] vivid-000: Fill Percentage of Frame: 100 [ 274.778986][ T9164] vivid-000: Horizontal Movement: No Movement [ 274.781413][ T9164] vivid-000: Vertical Movement: No Movement [ 274.786465][ T9164] vivid-000: OSD Text Mode: All [ 274.789282][ T9164] vivid-000: Show Border: false [ 274.792664][ T9164] vivid-000: Show Square: false [ 274.794953][ T9164] vivid-000: Sensor Flipped Horizontally: false [ 274.798134][ T9164] vivid-000: Sensor Flipped Vertically: false [ 274.801050][ T9164] vivid-000: Insert SAV Code in Image: false [ 274.805531][ T9164] vivid-000: Insert EAV Code in Image: false [ 274.816019][ T9164] vivid-000: Insert Video Guard Band: false [ 274.818682][ T9164] vivid-000: Reduced Framerate: false [ 274.821127][ T9164] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 274.825484][ T9164] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 274.829617][ T9164] vivid-000: Enable Capture Cropping: true grabbed [ 274.833174][ T9164] vivid-000: Enable Capture Composing: true grabbed [ 274.836708][ T9164] vivid-000: Enable Capture Scaler: true grabbed [ 274.839649][ T9164] vivid-000: Timestamp Source: End of Frame [ 274.843481][ T9164] vivid-000: Colorspace: sRGB [ 274.845721][ T9164] vivid-000: Transfer Function: Default [ 274.848193][ T9164] vivid-000: Y'CbCr Encoding: Default [ 274.850814][ T9164] vivid-000: HSV Encoding: Hue 0-179 [ 274.853743][ T9164] vivid-000: Quantization: Default [ 274.856858][ T9164] vivid-000: Apply Alpha To Red Only: false [ 274.859738][ T9164] vivid-000: Standard Aspect Ratio: 4x3 [ 274.862962][ T9164] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 274.866393][ T9164] vivid-000: DV Timings: 640x480p59 inactive [ 274.882024][ T9164] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 274.885396][ T9164] vivid-000: Maximum EDID Blocks: 2 [ 274.887734][ T9164] vivid-000: Limited RGB Range (16-235): false [ 274.890464][ T9164] vivid-000: Rx RGB Quantization Range: Automatic [ 274.893424][ T9164] vivid-000: Power Present: 0x00000001 [ 274.921107][ T9164] tpg source WxH: 320x180 (R'G'B) [ 274.924428][ T9164] tpg field: 1 [ 274.926006][ T9164] tpg crop: 320x180@0x0 [ 274.927863][ T9164] tpg compose: 320x180@0x0 [ 274.930228][ T9164] tpg colorspace: 8 [ 274.932138][ T9164] tpg transfer function: 0/2 [ 274.934195][ T9164] tpg quantization: 0/1 [ 274.936179][ T9164] tpg RGB range: 0/2 [ 274.937908][ T9164] vivid-000: ================== END STATUS ================== [ 274.942043][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 274.948432][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 274.951861][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 274.957845][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 274.966872][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.973839][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 274.977169][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 274.987122][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 274.993079][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.999100][ T58] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 275.003339][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 275.011055][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 275.016325][ T58] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.025881][ T58] usb 6-1: string descriptor 0 read error: -22 [ 275.029341][ T58] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 275.036162][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.047818][ T58] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 275.179672][ T9173] ALSA: mixer_oss: invalid OSS volume '' [ 275.190471][ T9173] ALSA: mixer_oss: invalid OSS volume '' [ 275.268608][ T39] kauditd_printk_skb: 714 callbacks suppressed [ 275.268625][ T39] audit: type=1400 audit(1722066941.107:1351): avc: denied { accept } for pid=9171 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.283465][ T39] audit: type=1400 audit(1722066941.127:1352): avc: denied { shutdown } for pid=9161 comm="syz.1.984" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.098984][ T9183] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 276.182881][ T9184] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 276.432031][ T9194] FAULT_INJECTION: forcing a failure. [ 276.432031][ T9194] name failslab, interval 1, probability 0, space 0, times 0 [ 276.437656][ T9194] CPU: 3 UID: 0 PID: 9194 Comm: syz.2.991 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 276.441488][ T9194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 276.448906][ T9194] Call Trace: [ 276.450330][ T9194] [ 276.451577][ T9194] dump_stack_lvl+0x16c/0x1f0 [ 276.453510][ T9194] should_fail_ex+0x497/0x5b0 [ 276.455577][ T9194] should_failslab+0xc2/0x120 [ 276.457504][ T9194] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 276.459693][ T9194] ? skb_clone+0x190/0x3f0 [ 276.461523][ T9194] skb_clone+0x190/0x3f0 [ 276.463604][ T9194] netlink_deliver_tap+0xab3/0xd90 [ 276.465701][ T9194] netlink_unicast+0x606/0x830 [ 276.467974][ T9194] ? __pfx_netlink_unicast+0x10/0x10 [ 276.470143][ T9194] netlink_sendmsg+0x8b8/0xd70 [ 276.472579][ T9194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.474642][ T9194] ? __import_iovec+0x1fd/0x6e0 [ 276.476624][ T9194] ____sys_sendmsg+0xab5/0xc90 [ 276.478709][ T9194] ? copy_msghdr_from_user+0x10b/0x160 [ 276.482720][ T9194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.484833][ T9194] ? find_held_lock+0x2d/0x110 [ 276.486881][ T9194] ? __pfx___lock_acquire+0x10/0x10 [ 276.488973][ T9194] ___sys_sendmsg+0x135/0x1e0 [ 276.490785][ T9194] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.494350][ T9194] ? ksys_write+0x21c/0x260 [ 276.498238][ T9194] ? __fget_light+0x173/0x210 [ 276.500427][ T9194] __sys_sendmsg+0x117/0x1f0 [ 276.502569][ T9194] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.504956][ T9194] do_syscall_64+0xcd/0x250 [ 276.507677][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.511641][ T9194] RIP: 0033:0x7fad2df77299 [ 276.514018][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.523834][ T9194] RSP: 002b:00007fad2ec93048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.528462][ T9194] RAX: ffffffffffffffda RBX: 00007fad2e105f80 RCX: 00007fad2df77299 [ 276.535181][ T9194] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000008 [ 276.538653][ T9194] RBP: 00007fad2ec930a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.542177][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.547346][ T9194] R13: 000000000000000b R14: 00007fad2e105f80 R15: 00007fff5a7f5ed8 [ 276.551409][ T9194] [ 276.819043][ T9210] ALSA: mixer_oss: invalid OSS volume '' [ 276.822257][ T9210] ALSA: mixer_oss: invalid OSS volume '' [ 277.511974][ T834] usb 6-1: USB disconnect, device number 23 [ 278.401439][ T9229] netlink: 'syz.1.1002': attribute type 12 has an invalid length. [ 278.502157][ T9229] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 278.519841][ T9229] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1002'. [ 278.525098][ T9229] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 278.788615][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 278.976408][ T39] audit: type=1400 audit(1722066944.807:1353): avc: denied { create } for pid=9238 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.990717][ T39] audit: type=1400 audit(1722066944.807:1354): avc: denied { setopt } for pid=9238 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 279.044574][ T39] audit: type=1400 audit(1722066944.887:1355): avc: denied { create } for pid=9241 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.050973][ T9242] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 279.054447][ T39] audit: type=1400 audit(1722066944.887:1356): avc: denied { ioctl } for pid=9241 comm="syz.3.1006" path="socket:[41176]" dev="sockfs" ino=41176 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 279.070358][ T9242] netlink: 9388 bytes leftover after parsing attributes in process `syz.3.1006'. [ 279.084305][ T39] audit: type=1400 audit(1722066944.887:1357): avc: denied { ioctl } for pid=9241 comm="syz.3.1006" path="socket:[41171]" dev="sockfs" ino=41171 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.101771][ T5351] Bluetooth: hci8: command 0x0406 tx timeout [ 279.335685][ T9245] ALSA: mixer_oss: invalid OSS volume '' [ 279.339788][ T9245] ALSA: mixer_oss: invalid OSS volume '' [ 280.350011][ T9250] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 280.383881][ T9250] FAULT_INJECTION: forcing a failure. [ 280.383881][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.389191][ T9250] CPU: 2 UID: 0 PID: 9250 Comm: syz.3.1009 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 280.393545][ T9250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.398265][ T9250] Call Trace: [ 280.399661][ T9250] [ 280.400921][ T9250] dump_stack_lvl+0x16c/0x1f0 [ 280.402919][ T9250] should_fail_ex+0x497/0x5b0 [ 280.405030][ T9250] _copy_to_user+0x30/0xc0 [ 280.406981][ T9250] simple_read_from_buffer+0xd0/0x160 [ 280.409396][ T9250] proc_fail_nth_read+0x1b0/0x290 [ 280.411591][ T9250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.414309][ T9250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.417003][ T9250] vfs_read+0x1d4/0xbd0 [ 280.418815][ T9250] ? __fdget_pos+0xeb/0x180 [ 280.420639][ T9250] ? __pfx_vfs_read+0x10/0x10 [ 280.422498][ T9250] ? __pfx___mutex_lock+0x10/0x10 [ 280.424783][ T9250] ? __fget_files+0x256/0x400 [ 280.426941][ T9250] ksys_read+0x12f/0x260 [ 280.428806][ T9250] ? __pfx_ksys_read+0x10/0x10 [ 280.430688][ T9250] do_syscall_64+0xcd/0x250 [ 280.432680][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.435610][ T9250] RIP: 0033:0x7f0c3b575d7c [ 280.438498][ T9250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 280.447323][ T9250] RSP: 002b:00007f0c3c272040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.451117][ T9250] RAX: ffffffffffffffda RBX: 00007f0c3b706058 RCX: 00007f0c3b575d7c [ 280.454401][ T9250] RDX: 000000000000000f RSI: 00007f0c3c2720b0 RDI: 0000000000000005 [ 280.457927][ T9250] RBP: 00007f0c3c2720a0 R08: 0000000000000000 R09: 0000000000000000 [ 280.460993][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.464419][ T9250] R13: 000000000000006e R14: 00007f0c3b706058 R15: 00007ffe3ba7af48 [ 280.467908][ T9250] [ 280.663245][ T9254] netlink: 'syz.3.1011': attribute type 12 has an invalid length. [ 280.701404][ T9254] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 280.706725][ T9254] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1011'. [ 280.712613][ T9254] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 281.123954][ T9269] ALSA: mixer_oss: invalid OSS volume '' [ 281.126507][ T9269] ALSA: mixer_oss: invalid OSS volume '' [ 281.628413][ T39] audit: type=1400 audit(1722066947.467:1358): avc: denied { map } for pid=9272 comm="syz.1.1018" path="socket:[41240]" dev="sockfs" ino=41240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 281.848963][ T9284] netlink: 'syz.2.1021': attribute type 12 has an invalid length. [ 281.875268][ T9290] FAULT_INJECTION: forcing a failure. [ 281.875268][ T9290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.881408][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.1.1020 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 281.886600][ T9290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.891325][ T9290] Call Trace: [ 281.892952][ T9290] [ 281.893925][ T9284] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 281.894141][ T9290] dump_stack_lvl+0x16c/0x1f0 [ 281.896766][ T9284] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1021'. [ 281.898622][ T9290] should_fail_ex+0x497/0x5b0 [ 281.898650][ T9290] _copy_from_iter+0x2a1/0x1150 [ 281.902990][ T9284] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 281.903850][ T9290] ? __pfx__copy_from_iter+0x10/0x10 [ 281.911836][ T9290] ? __virt_addr_valid+0x5e/0x590 [ 281.913998][ T9290] ? __phys_addr_symbol+0x30/0x80 [ 281.915949][ T9290] ? __check_object_size+0x497/0x720 [ 281.918035][ T9290] pfkey_sendmsg+0x1e0/0x840 [ 281.920118][ T9290] ____sys_sendmsg+0xab5/0xc90 [ 281.922196][ T9290] ? copy_msghdr_from_user+0x10b/0x160 [ 281.924545][ T9290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.927030][ T9290] ? find_held_lock+0x2d/0x110 [ 281.929550][ T9290] ? __pfx___lock_acquire+0x10/0x10 [ 281.932080][ T9290] ___sys_sendmsg+0x135/0x1e0 [ 281.934184][ T9290] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.936668][ T9290] ? ksys_write+0x21c/0x260 [ 281.939244][ T9290] ? __fget_light+0x173/0x210 [ 281.941292][ T9290] __sys_sendmsg+0x117/0x1f0 [ 281.943310][ T9290] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.946093][ T9290] do_syscall_64+0xcd/0x250 [ 281.948116][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.950581][ T9290] RIP: 0033:0x7f3692777299 [ 281.952765][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.962492][ T9290] RSP: 002b:00007f36935a8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.966423][ T9290] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692777299 [ 281.969562][ T9290] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 281.973374][ T9290] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 281.977478][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.981439][ T9290] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 281.985714][ T9290] [ 282.330954][ T9311] nft_compat: unsupported protocol 5 [ 282.337470][ T39] audit: type=1400 audit(1722066948.177:1359): avc: denied { sqpoll } for pid=9307 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 282.629127][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 282.740433][ T9323] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1032'. [ 282.832870][ T9326] ALSA: mixer_oss: invalid OSS volume '' [ 282.861949][ T9326] ALSA: mixer_oss: invalid OSS volume '' [ 283.425458][ T39] audit: type=1400 audit(1722066949.247:1360): avc: denied { ioctl } for pid=9337 comm="syz.3.1034" path="socket:[40610]" dev="sockfs" ino=40610 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.427158][ T9339] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 284.221741][ T5351] Bluetooth: hci9: command 0x0406 tx timeout [ 285.333970][ T9365] validate_nla: 3 callbacks suppressed [ 285.333987][ T9365] netlink: 'syz.3.1042': attribute type 12 has an invalid length. [ 285.441036][ T9365] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 285.444469][ T9365] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1042'. [ 285.448487][ T9365] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 285.882304][ T5407] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.086790][ T5407] usb 5-1: Using ep0 maxpacket: 8 [ 286.090922][ T5407] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.102989][ T5407] usb 5-1: config 0 has no interface number 0 [ 286.105839][ T5407] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.110865][ T5407] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.115720][ T5407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.122418][ T5407] usb 5-1: config 0 descriptor?? [ 286.130171][ T5407] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 286.351768][ T9385] FAULT_INJECTION: forcing a failure. [ 286.351768][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.359427][ T9385] CPU: 2 UID: 0 PID: 9385 Comm: syz.2.1048 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 286.364537][ T9385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.370193][ T9385] Call Trace: [ 286.371831][ T9385] [ 286.373462][ T9385] dump_stack_lvl+0x16c/0x1f0 [ 286.377010][ T9385] should_fail_ex+0x497/0x5b0 [ 286.379851][ T9385] _copy_to_user+0x30/0xc0 [ 286.382379][ T9385] simple_read_from_buffer+0xd0/0x160 [ 286.384229][ T9385] proc_fail_nth_read+0x1b0/0x290 [ 286.385930][ T9385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.387924][ T9385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.390320][ T9385] vfs_read+0x1d4/0xbd0 [ 286.392227][ T9385] ? __fdget_pos+0xeb/0x180 [ 286.394277][ T9385] ? __pfx_vfs_read+0x10/0x10 [ 286.396323][ T9385] ? __pfx___mutex_lock+0x10/0x10 [ 286.398523][ T9385] ? __fget_files+0x256/0x400 [ 286.400612][ T9385] ksys_read+0x12f/0x260 [ 286.403334][ T9385] ? __pfx_ksys_read+0x10/0x10 [ 286.406541][ T9385] do_syscall_64+0xcd/0x250 [ 286.409253][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.411767][ T9385] RIP: 0033:0x7fad2df75d7c [ 286.413630][ T9385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 286.423288][ T9385] RSP: 002b:00007fad2ec72040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.427724][ T9385] RAX: ffffffffffffffda RBX: 00007fad2e106058 RCX: 00007fad2df75d7c [ 286.431293][ T9385] RDX: 000000000000000f RSI: 00007fad2ec720b0 RDI: 0000000000000004 [ 286.434719][ T9385] RBP: 00007fad2ec720a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.438020][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.441234][ T9385] R13: 000000000000006e R14: 00007fad2e106058 R15: 00007fff5a7f5ed8 [ 286.444116][ T9385] [ 286.462514][ T9391] netlink: 'syz.0.1045': attribute type 29 has an invalid length. [ 286.482908][ T9391] netlink: 'syz.0.1045': attribute type 29 has an invalid length. [ 286.488370][ T9391] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1045'. [ 286.505985][ T9391] unsupported nla_type 40 [ 286.670689][ T9397] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.357958][ T58] usb 5-1: USB disconnect, device number 19 [ 287.377985][ T58] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 287.960505][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 288.169733][ T9410] binder: BC_ATTEMPT_ACQUIRE not supported [ 288.182853][ T9410] binder: 9407:9410 ioctl c0306201 20000040 returned -22 [ 288.914069][ T39] audit: type=1400 audit(1722066954.757:1361): avc: denied { read } for pid=9425 comm="syz.0.1060" path="socket:[39929]" dev="sockfs" ino=39929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.976602][ T9428] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1060'. [ 289.831595][ T991] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 290.031673][ T991] usb 7-1: Using ep0 maxpacket: 8 [ 290.036971][ T991] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.040807][ T991] usb 7-1: config 0 has no interface number 0 [ 290.044086][ T991] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.050032][ T991] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.055166][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.064192][ T991] usb 7-1: config 0 descriptor?? [ 290.092308][ T991] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 290.172415][ T9452] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 290.198924][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.346568][ T9456] netlink: 'syz.2.1063': attribute type 29 has an invalid length. [ 290.373654][ T9456] netlink: 'syz.2.1063': attribute type 29 has an invalid length. [ 290.384278][ T9456] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1063'. [ 290.590184][ T9462] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 290.730653][ T9465] FAULT_INJECTION: forcing a failure. [ 290.730653][ T9465] name failslab, interval 1, probability 0, space 0, times 0 [ 290.739338][ T9465] CPU: 3 UID: 0 PID: 9465 Comm: syz.1.1072 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 290.743693][ T9465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.748019][ T9465] Call Trace: [ 290.749525][ T9465] [ 290.750770][ T9465] dump_stack_lvl+0x16c/0x1f0 [ 290.752807][ T9465] should_fail_ex+0x497/0x5b0 [ 290.755148][ T9465] ? fs_reclaim_acquire+0xae/0x160 [ 290.757445][ T9465] should_failslab+0xc2/0x120 [ 290.759671][ T9465] __kmalloc_noprof+0xcb/0x400 [ 290.762011][ T9465] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 290.764911][ T9465] vb2_core_reqbufs+0x381/0xfb0 [ 290.767427][ T9465] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 290.769920][ T9465] __vb2_init_fileio+0x3f3/0x1110 [ 290.772200][ T9465] ? trace_contention_end+0xea/0x140 [ 290.774462][ T9465] __vb2_perform_fileio+0x9e7/0x1620 [ 290.776821][ T9465] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 290.779017][ T9465] vb2_fop_read+0x21f/0x3e0 [ 290.780918][ T9465] v4l2_read+0x22c/0x360 [ 290.782763][ T9465] ? __pfx_v4l2_read+0x10/0x10 [ 290.784877][ T9465] vfs_read+0x1d4/0xbd0 [ 290.786737][ T9465] ? __pfx_vfs_read+0x10/0x10 [ 290.788799][ T9465] ? __fget_files+0x256/0x400 [ 290.790894][ T9465] ? __fget_light+0x173/0x210 [ 290.793056][ T9465] ksys_read+0x12f/0x260 [ 290.795159][ T9465] ? __pfx_ksys_read+0x10/0x10 [ 290.797262][ T9465] do_syscall_64+0xcd/0x250 [ 290.799301][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.801860][ T9465] RIP: 0033:0x7f3692777299 [ 290.803804][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.811916][ T9465] RSP: 002b:00007f36935a8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.815367][ T9465] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692777299 [ 290.818765][ T9465] RDX: 000000000000009f RSI: 0000000020000040 RDI: 0000000000000003 [ 290.822218][ T9465] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 290.825916][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.829479][ T9465] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 290.833279][ T9465] [ 290.976841][ T39] audit: type=1400 audit(1722066956.817:1362): avc: denied { write } for pid=9466 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.039409][ T39] audit: type=1400 audit(1722066956.877:1363): avc: denied { ioctl } for pid=9466 comm="syz.1.1073" path="/dev/vhost-net" dev="devtmpfs" ino=1117 ioctlcmd=0xaf75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 291.156244][ T9471] FAULT_INJECTION: forcing a failure. [ 291.156244][ T9471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.164198][ T9471] CPU: 3 UID: 0 PID: 9471 Comm: syz.1.1075 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 291.169658][ T9471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.174586][ T9471] Call Trace: [ 291.176119][ T9471] [ 291.177394][ T9471] dump_stack_lvl+0x16c/0x1f0 [ 291.179543][ T9471] should_fail_ex+0x497/0x5b0 [ 291.181855][ T9471] _copy_from_user+0x30/0xf0 [ 291.184342][ T9471] copy_msghdr_from_user+0x99/0x160 [ 291.186747][ T9471] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 291.189637][ T9471] ? find_held_lock+0x2d/0x110 [ 291.191808][ T9471] ___sys_recvmsg+0xdc/0x1a0 [ 291.193859][ T9471] ? __pfx____sys_recvmsg+0x10/0x10 [ 291.196248][ T9471] ? __fget_light+0x173/0x210 [ 291.198304][ T9471] do_recvmmsg+0x2ba/0x750 [ 291.200319][ T9471] ? __pfx_do_recvmmsg+0x10/0x10 [ 291.202514][ T9471] ? vfs_write+0x14d/0x1140 [ 291.204651][ T9471] ? __mutex_unlock_slowpath+0x164/0x650 [ 291.208207][ T9471] __x64_sys_recvmmsg+0x239/0x290 [ 291.210151][ T9471] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 291.212256][ T9471] do_syscall_64+0xcd/0x250 [ 291.214015][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.216635][ T9471] RIP: 0033:0x7f3692777299 [ 291.219336][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.228093][ T9471] RSP: 002b:00007f36935a8048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 291.231942][ T9471] RAX: ffffffffffffffda RBX: 00007f3692905f80 RCX: 00007f3692777299 [ 291.235338][ T9471] RDX: 0000000000000001 RSI: 00000000200008c0 RDI: 0000000000000004 [ 291.239237][ T9471] RBP: 00007f36935a80a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.243015][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.246538][ T9471] R13: 000000000000000b R14: 00007f3692905f80 R15: 00007ffc99754468 [ 291.250022][ T9471] [ 291.348991][ T7816] usb 7-1: USB disconnect, device number 10 [ 291.361162][ T7816] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 291.482980][ C1] ================================================================== [ 291.486541][ C1] BUG: KASAN: stack-out-of-bounds in __xsk_map_flush+0x267/0x310 [ 291.489960][ C1] Read of size 8 at addr ffffc90005467c18 by task syz.3.1078/9478 [ 291.495009][ C1] [ 291.496722][ C1] CPU: 1 UID: 0 PID: 9478 Comm: syz.3.1078 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 291.501553][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.506337][ C1] Call Trace: [ 291.507866][ C1] [ 291.509165][ C1] dump_stack_lvl+0x116/0x1f0 [ 291.511301][ C1] print_report+0xc3/0x620 [ 291.513614][ C1] ? __virt_addr_valid+0x5e/0x590 [ 291.515837][ C1] kasan_report+0xd9/0x110 [ 291.517928][ C1] ? __xsk_map_flush+0x267/0x310 [ 291.520406][ C1] ? __xsk_map_flush+0x267/0x310 [ 291.522828][ C1] __xsk_map_flush+0x267/0x310 [ 291.525194][ C1] xdp_do_check_flushed+0x175/0x4e0 [ 291.527730][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 291.530180][ C1] net_rx_action+0xa92/0x1010 [ 291.532321][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 291.534873][ C1] ? __pfx_mark_lock+0x10/0x10 [ 291.537064][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 291.539479][ C1] ? sched_clock+0x38/0x60 [ 291.541445][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 291.544502][ C1] ? mark_held_locks+0x9f/0xe0 [ 291.547416][ C1] handle_softirqs+0x216/0x8f0 [ 291.549498][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.551831][ C1] irq_exit_rcu+0xbb/0x120 [ 291.554020][ C1] common_interrupt+0xb0/0xd0 [ 291.556171][ C1] [ 291.557522][ C1] [ 291.558879][ C1] asm_common_interrupt+0x26/0x40 [ 291.561140][ C1] RIP: 0010:tomoyo_path_matches_pattern+0x196/0x280 [ 291.564100][ C1] Code: c6 e8 2e d7 45 fd 85 db 75 94 e8 25 dc 45 fd 49 8d 34 2e 49 8d 7c 2d 00 e8 b7 d9 ff ff 41 89 c4 e9 7c ff ff ff e8 0a dc 45 fd <48> 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f [ 291.572541][ C1] RSP: 0018:ffffc90005467688 EFLAGS: 00000293 [ 291.575191][ C1] RAX: 0000000000000000 RBX: ffff88801dddfd98 RCX: ffffffff8444b5be [ 291.578600][ C1] RDX: ffff888111ea4880 RSI: ffffffff8444b6c6 RDI: 0000000000000001 [ 291.582060][ C1] RBP: ffffc900054677b8 R08: 0000000000000001 R09: 0000000000000000 [ 291.585611][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 291.589172][ C1] R13: ffff888032df4300 R14: ffff88801dddfda8 R15: 0000000000000000 [ 291.592607][ C1] ? tomoyo_path_matches_pattern+0x8e/0x280 [ 291.595169][ C1] ? tomoyo_path_matches_pattern+0x196/0x280 [ 291.598026][ C1] ? tomoyo_path_matches_pattern+0x196/0x280 [ 291.600608][ C1] tomoyo_check_path_acl+0x184/0x210 [ 291.602921][ C1] tomoyo_check_acl+0x140/0x410 [ 291.605187][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 291.607891][ C1] tomoyo_path_permission+0x1ff/0x3b0 [ 291.610295][ C1] tomoyo_check_open_permission+0x345/0x3b0 [ 291.612957][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 291.615840][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 291.618199][ C1] ? __pfx_hook_file_open+0x10/0x10 [ 291.620457][ C1] ? path_get+0x61/0x80 [ 291.622250][ C1] tomoyo_file_open+0x71/0x90 [ 291.624378][ C1] security_file_open+0x78/0x8b0 [ 291.626642][ C1] ? mnt_get_write_access+0x20c/0x300 [ 291.629302][ C1] do_dentry_open+0x5c7/0x15f0 [ 291.631397][ C1] ? inode_permission+0xdd/0x5f0 [ 291.633773][ C1] vfs_open+0x82/0x3f0 [ 291.635905][ C1] ? may_open+0x1f2/0x400 [ 291.638385][ C1] path_openat+0x2141/0x2d20 [ 291.640512][ C1] ? __pfx_path_openat+0x10/0x10 [ 291.642847][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 291.645313][ C1] ? find_held_lock+0x2d/0x110 [ 291.647269][ C1] do_filp_open+0x1dc/0x430 [ 291.649310][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 291.651600][ C1] ? find_held_lock+0x2d/0x110 [ 291.653657][ C1] ? __pfx_kfree_link+0x10/0x10 [ 291.655568][ C1] ? _raw_spin_unlock+0x28/0x50 [ 291.657502][ C1] ? alloc_fd+0x2d7/0x6c0 [ 291.659351][ C1] do_sys_openat2+0x17a/0x1e0 [ 291.661404][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.663671][ C1] ? __pfx___do_sys_newstat+0x10/0x10 [ 291.666027][ C1] __x64_sys_openat+0x175/0x210 [ 291.668202][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.670727][ C1] do_syscall_64+0xcd/0x250 [ 291.672763][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.675328][ C1] RIP: 0033:0x7f0c3b575cd0 [ 291.677345][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 291.685859][ C1] RSP: 002b:00007f0c3c271f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 291.689622][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0c3b575cd0 [ 291.693716][ C1] RDX: 0000000000000002 RSI: 00007f0c3c271fb0 RDI: 00000000ffffff9c [ 291.697203][ C1] RBP: 00007f0c3c271fb0 R08: 0000000000000000 R09: 0000000000000000 [ 291.700559][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 291.703864][ C1] R13: 000000000000000b R14: 00007f0c3b706058 R15: 00007ffe3ba7af48 [ 291.707130][ C1] [ 291.708385][ C1] [ 291.709361][ C1] The buggy address belongs to stack of task syz.3.1078/9478 [ 291.712393][ C1] and is located at offset 24 in frame: [ 291.715015][ C1] do_filp_open+0x0/0x430 [ 291.716981][ C1] [ 291.718033][ C1] This frame has 1 object: [ 291.720045][ C1] [48, 280) 'nd' [ 291.720057][ C1] [ 291.722783][ C1] The buggy address belongs to the virtual mapping at [ 291.722783][ C1] [ffffc90005460000, ffffc90005469000) created by: [ 291.722783][ C1] kernel_clone+0xfd/0x980 [ 291.730801][ C1] [ 291.731887][ C1] The buggy address belongs to the physical page: [ 291.734867][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200ac pfn:0x5fbaf [ 291.738646][ C1] memcg:ffff88802e3cc382 [ 291.740415][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 291.743525][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 291.750315][ C1] raw: 00000000000200ac 0000000000000000 00000001ffffffff ffff88802e3cc382 [ 291.754261][ C1] page dumped because: kasan: bad access detected [ 291.757173][ C1] page_owner tracks the page as allocated [ 291.759645][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 9407, tgid 9407 (syz.0.1055), ts 288028659788, free_ts 287851897431 [ 291.767381][ C1] post_alloc_hook+0x2d1/0x350 [ 291.769301][ C1] get_page_from_freelist+0x1351/0x2e50 [ 291.771767][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 291.774132][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 291.776656][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 291.779337][ C1] copy_process+0x2f3b/0x8de0 [ 291.781485][ C1] kernel_clone+0xfd/0x980 [ 291.783502][ C1] __do_sys_clone3+0x1f5/0x270 [ 291.785644][ C1] do_syscall_64+0xcd/0x250 [ 291.787490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.789986][ C1] page last free pid 9403 tgid 9402 stack trace: [ 291.792735][ C1] free_unref_page+0x64a/0xe40 [ 291.794816][ C1] __folio_put+0x31c/0x3e0 [ 291.796734][ C1] free_page_and_swap_cache+0x249/0x2c0 [ 291.799126][ C1] tlb_remove_table_rcu+0x89/0xe0 [ 291.801161][ C1] rcu_core+0x828/0x16b0 [ 291.802851][ C1] handle_softirqs+0x216/0x8f0 [ 291.804955][ C1] irq_exit_rcu+0xbb/0x120 [ 291.806862][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 291.809367][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.811858][ C1] [ 291.812813][ C1] Memory state around the buggy address: [ 291.815019][ C1] ffffc90005467b00: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 [ 291.818157][ C1] ffffc90005467b80: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.821333][ C1] >ffffc90005467c00: f1 f1 f1 f1 f1 f1 00 00 00 00 00 00 00 00 00 00 [ 291.824450][ C1] ^ [ 291.826386][ C1] ffffc90005467c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.829920][ C1] ffffc90005467d00: 00 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 291.833473][ C1] ================================================================== [ 291.837630][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.840900][ C1] CPU: 1 UID: 0 PID: 9478 Comm: syz.3.1078 Not tainted 6.10.0-syzkaller-12708-g2f8c4f506285 #0 [ 291.845346][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.849920][ C1] Call Trace: [ 291.851394][ C1] [ 291.852698][ C1] dump_stack_lvl+0x3d/0x1f0 [ 291.854804][ C1] panic+0x6f5/0x7a0 [ 291.856676][ C1] ? mark_held_locks+0x9f/0xe0 [ 291.858863][ C1] ? __pfx_panic+0x10/0x10 [ 291.860919][ C1] ? irqentry_exit+0x3b/0x90 [ 291.863009][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.866138][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 291.868992][ C1] check_panic_on_warn+0xab/0xb0 [ 291.871139][ C1] end_report+0x117/0x180 [ 291.873042][ C1] kasan_report+0xe9/0x110 [ 291.874995][ C1] ? __xsk_map_flush+0x267/0x310 [ 291.877174][ C1] ? __xsk_map_flush+0x267/0x310 [ 291.879370][ C1] __xsk_map_flush+0x267/0x310 [ 291.881433][ C1] xdp_do_check_flushed+0x175/0x4e0 [ 291.883674][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 291.886126][ C1] net_rx_action+0xa92/0x1010 [ 291.888280][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 291.890597][ C1] ? __pfx_mark_lock+0x10/0x10 [ 291.892710][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 291.895232][ C1] ? sched_clock+0x38/0x60 [ 291.897637][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 291.900182][ C1] ? mark_held_locks+0x9f/0xe0 [ 291.902358][ C1] handle_softirqs+0x216/0x8f0 [ 291.904548][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.906916][ C1] irq_exit_rcu+0xbb/0x120 [ 291.908907][ C1] common_interrupt+0xb0/0xd0 [ 291.911053][ C1] [ 291.912421][ C1] [ 291.913769][ C1] asm_common_interrupt+0x26/0x40 [ 291.916069][ C1] RIP: 0010:tomoyo_path_matches_pattern+0x196/0x280 [ 291.918947][ C1] Code: c6 e8 2e d7 45 fd 85 db 75 94 e8 25 dc 45 fd 49 8d 34 2e 49 8d 7c 2d 00 e8 b7 d9 ff ff 41 89 c4 e9 7c ff ff ff e8 0a dc 45 fd <48> 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f [ 291.927023][ C1] RSP: 0018:ffffc90005467688 EFLAGS: 00000293 [ 291.929698][ C1] RAX: 0000000000000000 RBX: ffff88801dddfd98 RCX: ffffffff8444b5be [ 291.933202][ C1] RDX: ffff888111ea4880 RSI: ffffffff8444b6c6 RDI: 0000000000000001 [ 291.937106][ C1] RBP: ffffc900054677b8 R08: 0000000000000001 R09: 0000000000000000 [ 291.941294][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 291.945411][ C1] R13: ffff888032df4300 R14: ffff88801dddfda8 R15: 0000000000000000 [ 291.948959][ C1] ? tomoyo_path_matches_pattern+0x8e/0x280 [ 291.960592][ C1] ? tomoyo_path_matches_pattern+0x196/0x280 [ 291.963165][ C1] ? tomoyo_path_matches_pattern+0x196/0x280 [ 291.967600][ C1] tomoyo_check_path_acl+0x184/0x210 [ 291.969991][ C1] tomoyo_check_acl+0x140/0x410 [ 291.972167][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 291.974789][ C1] tomoyo_path_permission+0x1ff/0x3b0 [ 291.977246][ C1] tomoyo_check_open_permission+0x345/0x3b0 [ 291.979873][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 291.982696][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 291.985013][ C1] ? __pfx_hook_file_open+0x10/0x10 [ 291.987255][ C1] ? path_get+0x61/0x80 [ 291.988924][ C1] tomoyo_file_open+0x71/0x90 [ 291.990901][ C1] security_file_open+0x78/0x8b0 [ 291.993216][ C1] ? mnt_get_write_access+0x20c/0x300 [ 291.995865][ C1] do_dentry_open+0x5c7/0x15f0 [ 291.997784][ C1] ? inode_permission+0xdd/0x5f0 [ 292.000616][ C1] vfs_open+0x82/0x3f0 [ 292.003129][ C1] ? may_open+0x1f2/0x400 [ 292.005085][ C1] path_openat+0x2141/0x2d20 [ 292.007088][ C1] ? __pfx_path_openat+0x10/0x10 [ 292.009184][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 292.011175][ C1] ? find_held_lock+0x2d/0x110 [ 292.012898][ C1] do_filp_open+0x1dc/0x430 [ 292.014730][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 292.016765][ C1] ? find_held_lock+0x2d/0x110 [ 292.019034][ C1] ? __pfx_kfree_link+0x10/0x10 [ 292.021306][ C1] ? _raw_spin_unlock+0x28/0x50 [ 292.023507][ C1] ? alloc_fd+0x2d7/0x6c0 [ 292.025307][ C1] do_sys_openat2+0x17a/0x1e0 [ 292.027377][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.029645][ C1] ? __pfx___do_sys_newstat+0x10/0x10 [ 292.031950][ C1] __x64_sys_openat+0x175/0x210 [ 292.034045][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.036444][ C1] do_syscall_64+0xcd/0x250 [ 292.038464][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.041109][ C1] RIP: 0033:0x7f0c3b575cd0 [ 292.043137][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 292.051689][ C1] RSP: 002b:00007f0c3c271f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 292.055429][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0c3b575cd0 [ 292.058978][ C1] RDX: 0000000000000002 RSI: 00007f0c3c271fb0 RDI: 00000000ffffff9c [ 292.063118][ C1] RBP: 00007f0c3c271fb0 R08: 0000000000000000 R09: 0000000000000000 [ 292.067263][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 292.070776][ C1] R13: 000000000000000b R14: 00007f0c3b706058 R15: 00007ffe3ba7af48 [ 292.074277][ C1] [ 292.076319][ C1] Kernel Offset: disabled [ 292.078271][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:52:08 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88801829a440 RCX=1ffffffff29e0a24 RDX=0000000000000000 RSI=ffffffff8bb08b80 RDI=ffff88801829a46c RBP=0000000000000000 RSP=ffffc90000007fe8 R8 =0000000000000000 R9 =fffffbfff20254b3 R10=ffffffff9012a59f R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814ecdc8 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0c3affefa8 CR3=000000010a71c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8624cd80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb1953e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fdd9f5 RDI=ffffffff95198720 RBP=ffffffff951986e0 RSP=ffffc900008b0740 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=ffffffff84fdd990 R15=0000000000000000 RIP=ffffffff84fdda1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0c3c2726c0 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0c3afffd58 CR3=00000000337b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020520001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3c271fa0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c3b5e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2973252865746972 770073252f64252f 6b7361742f666c65 732f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c56000d40514c57 520056000a41000a 4e5644510a434940 560a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8b4cc880 RDI=ffffffff8bb08c00 RBP=0000000000000200 RSP=ffffc90000d17a78 R8 =0000000000000000 R9 =fffffbfff28c4cd8 R10=ffffffff946266c7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8ddb5220 R15=0000000000000000 RIP=ffffffff8b115cce RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555571191808 CR3=00000000377fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5a7f6260 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad2dfe5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc90000908168 RCX=ffffffff813cd8b7 RDX=ffff8880182da440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90000908140 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc900009081b0 R13=ffffffff81762720 R14=ffffc90000908228 R15=ffff8880182da440 RIP=ffffffff813cd8b7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31600ff8 CR3=000000004727c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc997547f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e56c5 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e56d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e56cc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e56e0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e5766 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f36927e5844 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000