last executing test programs: 1m14.660133435s ago: executing program 3 (id=2754): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0x0, r1, {0x7, 0x2b, 0x40, 0x8000, 0x2, 0x3, 0x2, 0x2, 0x0, 0x0, 0x8, 0xfa42}}, 0x50) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004140)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x4000080, 0xb, 0x7ff, 0x9c000000, 0x1, 0x0, 0x0, 0x8}}, 0x50) r6 = syz_usb_connect$cdc_ncm(0x1, 0x7f, &(0x7f00000041c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x5, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "d942c35e6c"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0x861f, 0x19}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0x9, 0x1, 0xb, 0x60}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x7, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x40, 0x3, 0x4}}}}}}}]}}, &(0x7f0000004340)={0xa, &(0x7f0000004240)={0xa, 0x6, 0x300, 0x8, 0x8, 0x0, 0xff, 0xc}, 0x54, &(0x7f0000004280)={0x5, 0xf, 0x54, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xad, 0x5, 0x10001, 0x1ef00, 0x5, [0xc0cf, 0xc0, 0x0, 0xa0c0, 0xff3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "33531096f22896ecc0b47c5b4f4a3d03"}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "71336615f77f115946f9fe86abe9561e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x6, 0x5}]}, 0x1, [{0x4, &(0x7f0000004300)=@lang_id={0x4, 0x3, 0x380b}}]}) syz_usb_control_io(r6, &(0x7f0000004740)={0x2c, &(0x7f0000004380)={0x40, 0x22, 0xe4, {0xe4, 0x21, "858927340458905482c353a3d126ac32fc1eda51839def501ee607ff3deb801f61b917a5793dbded2b3d790a193d74d25ea98c34cf78e088057665d383b380a1850fb87347bfe8867e2a7684ae940e4b138bb92f49396a94c5a12271ecbd364cafbf68fe6b0e00d046f2bc096668cc9006d80ecec523109c54402f3298334e299ad73cf00d4c23f18d184d9f264e64951f02a05b39842265d078061ed5b227f9a03d9d38fddd72e78555618014f99ce09bf340987b112f444a287dc3590a5561e59ed950cca24a8139d922cdfd45e0d4f5a3360ec2630389d3eebf4200cab41b583f"}}, &(0x7f0000004480)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "0e4ab7128181b6b4fa9f1dc40b1c49947518ded839ca04dfdef48ed2e4631b45555bd5d6e03f45dd4e6d07215d45b7573d9394e963b3aa8a42918f0a6fbc66ad57da95ad4ba529a33cddb35a7adc8591913f5e2f3f24436505383f5520c45dbe7f85bee57b7e9ba17cb00bd287a49cc7d07a7f763bee28c4c3e55e1528f020e867f55727b655366dbcdcc0396ebc17d2d5d28a3f50d5dc28641c1f32b6564b04a99504187fe622707b1ccc88cf2b778c2b8529fc0a2db61b14e7f40cd5192e4b3ea42702328afb6ccdce2945c9574af6292f8ad2b104d567005192e4fbba6cc57c28c22086fe2b2b80396ed816541395afa87d939c7e95334e"}}, &(0x7f00000045c0)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xb, 0x9, 0xa, 0xd}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "2b5d19cb01442cf4f95c70a742b86b19"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0xf, 0x2, [0xff30, 0xff0030]}, @generic={0x5c, 0x10, 0xa, "c57e82952605d73fd6df35f14a94cd2347629a5ac0e2bfaf99c5df70074efd5764a2d656ce75f365b2ab7904fe134c94588d4aae860da953022f37d30a20fbd79c3267c4f58ad440cf8e14fd0b55fbaeaa9f3b012f9fa02456"}, @generic={0x2d, 0x10, 0xa, "f0c0471c8c3727b1d7581a3c1bec933819d0666ed95f60aa1ecb0919bd58f4b9ba4c55c658765fe66378"}]}}, &(0x7f00000046c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0xfc, 0x2, "73441842", "622723e5"}}, &(0x7f0000004700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x60, 0x0, 0x6, 0x7, 0x7}}}, &(0x7f0000004c40)={0x84, &(0x7f0000004780)={0x0, 0xc, 0xc6, "7b925867aa5f10a2fdad5a002bae3f70db260583a6eaa758e77a8df199660658a4a011ef5e2aa2f20b8b3098b91da1de263659e1e8470a5cd0022d2735858d377284df7d31d6f1ecddec4fec2e6b0073364b9cfb48fc8d46123382d06e42383d0a445c428bb89bf34fe7c662c9175fedb659c806765638d4e375015d5be56c56e4778acc379cd263ffe68db5c81577f8ebb768077dee255d7d23dcc6a6e3c8aa2eedc75a3c68154235828d0b16b6f523759e1ed5d7dbdc2bc87192e0458b5eefa38a4cc30049"}, &(0x7f0000004880)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000048c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000004900)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000004940)={0x20, 0x0, 0x8, {0x100, 0x20, [0x78]}}, &(0x7f0000004980)={0x40, 0x7, 0x2, 0x53f0}, &(0x7f00000049c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000004a00)={0x40, 0xb, 0x2, "29fb"}, &(0x7f0000004a40)={0x40, 0xf, 0x2}, &(0x7f0000004a80)={0x40, 0x13, 0x6}, &(0x7f0000004ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000004b00)={0x40, 0x19, 0x2, "f412"}, &(0x7f0000004b40)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000004b80)={0x40, 0x1c, 0x1, 0x45}, &(0x7f0000004bc0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000004c00)={0x40, 0x21, 0x1, 0x2}}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000004f00)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004d40)={0x148, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb48}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xad}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8197}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="85cdaa686023"}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) write$FUSE_INIT(r0, &(0x7f0000004f40)={0x50, 0x0, r4, {0x7, 0x2b, 0xd7ff2b77, 0x4, 0x9, 0x3ff, 0xffff8000, 0x5, 0x0, 0x0, 0x4, 0xd}}, 0x50) read$FUSE(r0, &(0x7f0000004fc0)={0x2020}, 0x2020) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000007000)={0x1a0001, 0x0, [0x3393, 0x3, 0x410365b4, 0x8, 0x8, 0x65a, 0x304, 0x42e]}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000007080)={0xa0, 0x0, r1, {{0x0, 0x1, 0x1, 0xbdeb, 0x9, 0x0, {0x1, 0x6, 0x1, 0x2, 0x2, 0x5, 0x35, 0x7fffffff, 0x7, 0xa000, 0x7f, r2, r3, 0x3ec, 0x4}}, {0x0, 0x3}}}, 0xa0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000007140), 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000007180)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f00000071c0)={{r7}, r9, 0x4, @unused=[0xff, 0x3, 0xfffffffffffffbff, 0x1], @subvolid=0xe}) read$FUSE(r0, &(0x7f00000081c0)={0x2020}, 0x2020) io_setup(0x9fcd, &(0x7f000000a200)) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setown(r10, 0x8, r5) r11 = syz_genetlink_get_family_id$tipc(&(0x7f000000a280), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f000000a340)={&(0x7f000000a240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000a300)={&(0x7f000000a2c0)={0x30, r11, 0x521, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1000, 0x1, 0x8, 0xff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x8850) dup3(r0, r7, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f000000a380)={0x6, 0x7ff, 0x3, 0x3, 0x8d, "5dc5b0e7499e2905d9fc8555cee09cf451665f", 0xfffffff9, 0x6}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f000000a3c0)=0x2) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f000000a400)={0x18, 0x0, 0x1, 0x0, 0x0, 0x9}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f000000a480), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f000000a540)={&(0x7f000000a440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000a500)={&(0x7f000000a4c0)={0x1c, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004) io_uring_enter(r0, 0x6bea, 0x9a59, 0x31, &(0x7f000000a580)={[0x7]}, 0x8) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f000000a700)={&(0x7f000000a5c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000a6c0)={&(0x7f000000a640)={0x68, 0x0, 0x400, 0x70bd27, 0x5, {{}, {@void, @val={0xc, 0x99, {0x2, 0x50}}}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b234f6b2d2"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ff08b8bfaa7af3f7005a617ab5"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) 1m11.671468362s ago: executing program 3 (id=2785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'ip6gretap0\x00', {0x2, 0x0, @local}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './file0\x00'}) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/205, 0xcd}], 0x1}, 0x200}], 0x1, 0x40000040, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x4d4, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) r6 = socket$inet(0x2, 0x2, 0x1) shutdown(r6, 0x1) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010025bd700001dcdf250000", @ANYBLOB="15ec31", @ANYBLOB="00000001000000000a000100aaaaaaaaaa330000"], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) setresgid(r2, r2, 0xffffffffffffffff) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) 1m11.570291545s ago: executing program 3 (id=2786): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m10.71008246s ago: executing program 3 (id=2790): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0xfffffffc) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x10001, 0x3, 0x5, 0x8, 0xed4}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1154}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x3, 0x3, 0xfffffffe, 0x2, 0x5}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r9], 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r11, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 1m9.779687143s ago: executing program 3 (id=2792): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x1, 0x6, 0xb, 0x5, 0xffffffffffffffe0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ldst={0x1, 0x3, 0x2, 0x1, 0x1, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000001c0)='GPL\x00', 0xca0, 0xa4, &(0x7f0000000480)=""/164, 0x41000, 0x8, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x6, 0x4, 0x1}, 0x10, 0xc90d, r0, 0x2, &(0x7f0000000540)=[r6], &(0x7f0000000580)=[{0x5, 0x2, 0x5, 0x4}, {0x2, 0x5, 0x4}], 0x10, 0x3}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xfff) syz_emit_ethernet(0x32, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008000000000000000000000000000890780200000000000000bb61562d3a62cc25ca61b8fbc1807a0c8ca5fc6c2cac9a00"/73], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01082cbd7000fbdbdf250b00000008000300", @ANYRES32=r12, @ANYBLOB="0400280008006e"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m8.850688621s ago: executing program 3 (id=2802): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) connect$unix(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x9c, 0xfffdfffffffffffa, 0x0, 0x2, 0x0, 0x6, 0x11, 0x3, 0x0, 0x1, 0x3ff, 0xf, 0x2, 0x4, 0x5999, 0xfffffffffffffffc, 0x400400, 0x6, 0x2be, 0xffffffffffffffef}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x3, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r2) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 53.718658606s ago: executing program 32 (id=2802): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) connect$unix(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x9c, 0xfffdfffffffffffa, 0x0, 0x2, 0x0, 0x6, 0x11, 0x3, 0x0, 0x1, 0x3ff, 0xf, 0x2, 0x4, 0x5999, 0xfffffffffffffffc, 0x400400, 0x6, 0x2be, 0xffffffffffffffef}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x3, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r2) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"1ae30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) 8.399899681s ago: executing program 1 (id=3655): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6}}, 0x0, 0x0, 0x2}}) 8.398969197s ago: executing program 1 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2113) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x2) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x20}}, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r8}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) writev(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000000480)="43977c0b24045376d1d992b958f6e8de1b3f9650f2c0c84ebffcd7841e9b90d42e8ba064aaa8b8a4ec1c46c6c09a6200ba413ff90f905536a63a979f106211ea3bc07ca8cdf2dd24a49f1e6f49a309ad687c4e", 0x53}], 0x1) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x2, 0x9, '\x00', 0x2}) r10 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r10, 0x0, 0x0, 0x40010122, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r13, 0x5411, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_SB_GET(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$KVM_SET_MSRS(r11, 0xc048aeca, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100"]) setitimer(0x2, 0x0, &(0x7f0000000180)) 3.249553985s ago: executing program 1 (id=3717): io_setup(0x409, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x3f, 0x0, 0x97, 0x1, 0x0, r1, 0x0}]) 3.128405339s ago: executing program 1 (id=3721): r0 = fanotify_init(0x16, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000f5ffd49ff3bc0000020000000900010073797a3200000000140002"], 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r3 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xb5\xa7\xd4S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13g\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8e\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x3) ftruncate(r3, 0x3) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, 0x464, 0x20, 0x70bd2d, 0x25dfdbfe, "b7862736e8a207ae2dbe95a6ed352dfb8c9794a9ab3fd543aad19420e9bfb22f5e65f514a3fa6e1c18", ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r9 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x0, 0x1}, 0x6, 0x65, &(0x7f00000002c0)="ae073d17dd37423583d2dbe9d720b67700522968c2ac35c28772690a7927e7bb39ccf6ba6319ecb701781da6bd69362997c0e15a8d6faa9d779b7362941949cca452199e5f81f92f98033dd47fdce303787a19f412a312b37a2e68b8f9af6629aef705b7d0d12e424cac74", 0x6b, 0x12d, 0x9, 0x7, 0x9, 0x6, &(0x7f0000000380)="8c44a82212adc76da23a7dfa01de63924965524af84385cb19d0cdc7b5fdcb4b50e7c1d2e94920ccbb853fd410f8f05ebe0992281f039c6402c16ebdf48992a325a7586144af1583171018889ae90e1c2144e1bb"}) readv(r5, &(0x7f0000000880)=[{&(0x7f0000001d00)=""/4106, 0x100a}], 0x1) r10 = dup(r3) fanotify_mark(r0, 0x1, 0x40000010, r10, 0x0) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) 2.547875239s ago: executing program 2 (id=3730): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r5], 0xb8}}, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000001600001eb30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x76}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, {{0xa, 0x0, 0x0, @private0, 0x1010}}}, 0x108) 2.379505424s ago: executing program 2 (id=3731): r0 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x200, 0x800) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40, r0, &(0x7f0000000280)='L', 0x1, 0x0, 0x0, 0x1, r2}]) (fail_nth: 4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x391, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000001080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 1.809519774s ago: executing program 4 (id=3734): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x4f27, 0x5, 0x7, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x7fffffff, 0x2, 0x3, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r0, 0x8cbab000) (fail_nth: 4) 1.809428208s ago: executing program 4 (id=3735): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}) 1.649148808s ago: executing program 4 (id=3736): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x40141) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000100)={r5, 0x0, 0x6, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0xfffffffffffffffc, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000300)={r5, 0x3, 0x0, 0x0, 0x1, [], [0x3, 0x6, 0x0, 0x84000001], [0x4000000, 0x20005, 0x12], [0x4, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r7}) (fail_nth: 4) 1.648955088s ago: executing program 4 (id=3737): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x6) read$char_usb(r1, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x2}, {0x6}]}) mkdir(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES8=r1, @ANYBLOB="01002bbd7000ffdbdf254500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000810) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.339847622s ago: executing program 2 (id=3738): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002500), 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x400464d1, &(0x7f0000000400)=0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r2}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x4f27, 0x5, 0x7, 0x4, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x5, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x7fffffff, 0x2, 0x3, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r0, 0x8cbab000) 1.338785693s ago: executing program 2 (id=3739): r0 = socket$igmp(0x2, 0x3, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x3, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x545}, {0x4, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x24040014) r3 = eventfd2(0x200, 0x800) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x40, r0, &(0x7f0000000280)='L', 0x1, 0x0, 0x0, 0x1, r3}]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x391, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000001080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) 589.426815ms ago: executing program 0 (id=3749): syslog(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0xf, &(0x7f0000000140)='contention_end\x00'}, 0x30) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x5) move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7, 0x5], &(0x7f0000000780), 0x2) inotify_init() r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) 589.297264ms ago: executing program 0 (id=3750): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 530.088516ms ago: executing program 0 (id=3751): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (fail_nth: 4) 349.939202ms ago: executing program 0 (id=3752): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1befffff1c00010000000000000000000700000020e08b940b04b51e1a02a93d57d9406eae7e26de6bba46d67744cc989311d200fa330ac996d0efef057ceae59e8f0fd9382f98b10d042b65df9f038da0ec6e5981b91df0ffd748fabd8d6417f8717e9c6bd1010a6a3033be12c555309c588f37c388268e6fe5e21e3a01c9556eaec9f4663765f19b7ccc87d0e781b6624a9af8e7ee00c3d2ef289689be8a9c5bd1fe993f4ddc63b59ad064b7c8f45ce5f2de44d2a96c0b3b1585237c8872a62dccd48a39dd941aa023a274f4705d7a5b1bd901b0d6897da2675515510a84eaa6cec569b73d60b463e56bf16a4e2319c2c9946e78f251283b2909a7c531b244640084206b51b875f0b3bb05e17129899601a8c0687418937bca47a4153d708fa157056dd29057fbf3816ec86df78a500906e6a727b45e6e4125ee0b53acb86ed0ab5d1818a471fcba7bef1fa9f2e3b838287c5bc549356685827d1279b2e29cff427dc52e9b95a84b3ebaf1bc53d0e2cf929b", @ANYRES32=0x0, @ANYBLOB="00009600"], 0x1c}}, 0x0) (async) r1 = io_uring_setup(0x45e, &(0x7f0000000040)={0x0, 0x6fa5, 0x10, 0x0, 0x7b}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x1, 0xfffffffd, 0x8bd0, 0xffff, 0x0, "4a073b267df2e98c69ba36c5095c911abad88f", 0x4, 0x7}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 349.757439ms ago: executing program 0 (id=3753): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000740)={0x0, 0x1d, "29f27d92770fe67aa12294ea63f28d3d27b1b117ce9f067c88337cd9bf"}, &(0x7f0000000780)=0x25) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) 238.898356ms ago: executing program 0 (id=3754): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x25dfdbff, {0x25, 0x0, 0x3c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 238.752265ms ago: executing program 2 (id=3755): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x8) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 109.992597ms ago: executing program 4 (id=3756): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x11) 59.359977ms ago: executing program 1 (id=3757): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x1b, 0x0, 0x8800000) 58.97695ms ago: executing program 2 (id=3758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x9d8517b3d42f08da, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0xff0d, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c010000100001000000000800000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a0026bd700025bd70000500000000000100736d332d6365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048f7414ddd986bee1c92af572707c2a8544dc674388cba354e165f86f7e5c1f658ec5fb21789f9fa6e571dfb8a0d206b65e98da383b13aaa5062ecaf60f1a54c619fc9f409ee3d148afd28fe20deed30e74bc3b400d93395dc6013542673d6427bcc41777c46cc631315f4a92ffdce7e86143fd5"], 0x16c}}, 0x20000000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="64dbe20f01c2bad004ed650f0f4a009e0fc75b00b85b0d8ee0640f3801f7baf80c66b8305de68566efbafc0c66b84dd7611d66efba4200b80000ef0f32", 0x3d}], 0x1, 0xa, &(0x7f0000000140)=[@flags={0x3, 0x20016}], 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x7db8, &(0x7f0000000080)={0x0, 0x63c4, 0x2, 0x5, 0x2}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000280)) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, 0x0, 0x0) r11 = fcntl$dupfd(r7, 0x0, r8) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000080)={0x0, r9}) close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa838f799c3801b318dd0000103afffee000000000000000000000000000bbff02000000000000000000000000000186009078000301046300000008000000"], 0x0) 58.577662ms ago: executing program 1 (id=3759): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x108060a, 0x5, 0x0, 0x5, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff625c, {{0x7, 0x56, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x1000000}) 0s ago: executing program 4 (id=3760): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r4, 0x80140912, 0x8) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) kernel console output (not intermixed with test programs): : type=1400 audit(1754623828.686:931): avc: denied { ioctl } for pid=22561 comm="syz.0.3458" path="socket:[59010]" dev="sockfs" ino=59010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 295.094763][T22577] FAULT_INJECTION: forcing a failure. [ 295.094763][T22577] name failslab, interval 1, probability 0, space 0, times 0 [ 295.099005][T22577] CPU: 2 UID: 0 PID: 22577 Comm: syz.0.3463 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 295.099022][T22577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.099029][T22577] Call Trace: [ 295.099033][T22577] [ 295.099038][T22577] dump_stack_lvl+0x16c/0x1f0 [ 295.099059][T22577] should_fail_ex+0x512/0x640 [ 295.099072][T22577] should_failslab+0xc2/0x120 [ 295.099087][T22577] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.099099][T22577] ? skb_clone+0x190/0x3f0 [ 295.099119][T22577] skb_clone+0x190/0x3f0 [ 295.099135][T22577] netlink_deliver_tap+0xabd/0xd30 [ 295.099155][T22577] netlink_unicast+0x71f/0x870 [ 295.099168][T22577] ? __pfx_netlink_unicast+0x10/0x10 [ 295.099183][T22577] netlink_ack+0x696/0xb80 [ 295.099197][T22577] netlink_rcv_skb+0x332/0x420 [ 295.099207][T22577] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 295.099222][T22577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.099238][T22577] ? ns_capable+0xd7/0x110 [ 295.099253][T22577] nfnetlink_rcv+0x1b3/0x430 [ 295.099267][T22577] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 295.099279][T22577] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.099298][T22577] netlink_unicast+0x5a7/0x870 [ 295.099310][T22577] ? __pfx_netlink_unicast+0x10/0x10 [ 295.099320][T22577] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 295.099341][T22577] netlink_sendmsg+0x8d1/0xdd0 [ 295.099353][T22577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.099369][T22577] ____sys_sendmsg+0xa98/0xc70 [ 295.099382][T22577] ? copy_msghdr_from_user+0x10a/0x160 [ 295.099398][T22577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.099416][T22577] ___sys_sendmsg+0x134/0x1d0 [ 295.099433][T22577] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.099461][T22577] ? __mutex_unlock_slowpath+0x100/0x800 [ 295.099483][T22577] __sys_sendmsg+0x16d/0x220 [ 295.099499][T22577] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.099524][T22577] do_syscall_64+0xcd/0x4c0 [ 295.099539][T22577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.099561][T22577] RIP: 0033:0x7f3a1538ebe9 [ 295.099574][T22577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.099588][T22577] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.099602][T22577] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 295.099611][T22577] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 295.099620][T22577] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.099629][T22577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.099638][T22577] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 295.099658][T22577] [ 295.186134][ C2] vkms_vblank_simulate: vblank timer overrun [ 295.222923][T22579] FAULT_INJECTION: forcing a failure. [ 295.222923][T22579] name failslab, interval 1, probability 0, space 0, times 0 [ 295.226974][T22579] CPU: 2 UID: 0 PID: 22579 Comm: syz.1.3464 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 295.226990][T22579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.226997][T22579] Call Trace: [ 295.227002][T22579] [ 295.227006][T22579] dump_stack_lvl+0x16c/0x1f0 [ 295.227027][T22579] should_fail_ex+0x512/0x640 [ 295.227037][T22579] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.227050][T22579] should_failslab+0xc2/0x120 [ 295.227063][T22579] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.227074][T22579] ? posix_lock_inode+0x1b7/0x2280 [ 295.227088][T22579] posix_lock_inode+0x1b7/0x2280 [ 295.227101][T22579] ? file_has_perm+0x27d/0x350 [ 295.227113][T22579] ? __pfx_posix_lock_inode+0x10/0x10 [ 295.227125][T22579] ? lockdep_init_map_type+0x5c/0x280 [ 295.227135][T22579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.227150][T22579] vfs_lock_file+0xfb/0x150 [ 295.227161][T22579] fcntl_setlk+0x3ff/0xe20 [ 295.227173][T22579] ? __pfx_fcntl_setlk+0x10/0x10 [ 295.227186][T22579] ? __might_fault+0xe3/0x190 [ 295.227197][T22579] ? __might_fault+0xe3/0x190 [ 295.227206][T22579] ? __might_fault+0x13b/0x190 [ 295.227222][T22579] do_fcntl+0xbce/0x15a0 [ 295.227237][T22579] ? __pfx_do_fcntl+0x10/0x10 [ 295.227254][T22579] ? selinux_file_fcntl+0x93/0x170 [ 295.227267][T22579] __x64_sys_fcntl+0x163/0x200 [ 295.227284][T22579] do_syscall_64+0xcd/0x4c0 [ 295.227295][T22579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.227306][T22579] RIP: 0033:0x7f065a78ebe9 [ 295.227316][T22579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.227326][T22579] RSP: 002b:00007f065b65e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 295.227337][T22579] RAX: ffffffffffffffda RBX: 00007f065a9b5fa0 RCX: 00007f065a78ebe9 [ 295.227344][T22579] RDX: 0000200000000180 RSI: 0000000000000007 RDI: 0000000000000008 [ 295.227351][T22579] RBP: 00007f065b65e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.227357][T22579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.227363][T22579] R13: 00007f065a9b6038 R14: 00007f065a9b5fa0 R15: 00007fff589eb448 [ 295.227376][T22579] [ 295.246794][T22582] FAULT_INJECTION: forcing a failure. [ 295.246794][T22582] name failslab, interval 1, probability 0, space 0, times 0 [ 295.307659][T22582] CPU: 1 UID: 0 PID: 22582 Comm: syz.4.3465 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 295.307677][T22582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.307684][T22582] Call Trace: [ 295.307689][T22582] [ 295.307693][T22582] dump_stack_lvl+0x16c/0x1f0 [ 295.307727][T22582] should_fail_ex+0x512/0x640 [ 295.307737][T22582] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.307751][T22582] should_failslab+0xc2/0x120 [ 295.307765][T22582] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.307775][T22582] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 295.307792][T22582] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 295.307808][T22582] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 295.307827][T22582] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 295.307848][T22582] mmu_topup_memory_caches+0x25/0x170 [ 295.307861][T22582] kvm_mmu_load+0xd6/0x23c0 [ 295.307871][T22582] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 295.307884][T22582] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 295.307896][T22582] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 295.307912][T22582] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 295.307925][T22582] ? __pfx_kvm_mmu_load+0x10/0x10 [ 295.307935][T22582] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 295.307952][T22582] ? kvm_check_and_inject_events+0x71c/0x1310 [ 295.307970][T22582] vcpu_run+0x358c/0x5580 [ 295.307985][T22582] ? __lock_acquire+0xb97/0x1ce0 [ 295.308006][T22582] ? __pfx_vcpu_run+0x10/0x10 [ 295.308023][T22582] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 295.308037][T22582] ? __local_bh_enable_ip+0xa4/0x120 [ 295.308054][T22582] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 295.308069][T22582] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 295.308088][T22582] kvm_vcpu_ioctl+0x5eb/0x1690 [ 295.308104][T22582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 295.308119][T22582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.308132][T22582] ? do_vfs_ioctl+0x128/0x14f0 [ 295.308149][T22582] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.308165][T22582] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 295.308186][T22582] ? hook_file_ioctl_common+0x145/0x410 [ 295.308206][T22582] ? selinux_file_ioctl+0x180/0x270 [ 295.308219][T22582] ? selinux_file_ioctl+0xb4/0x270 [ 295.308233][T22582] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 295.308248][T22582] __x64_sys_ioctl+0x18e/0x210 [ 295.308266][T22582] do_syscall_64+0xcd/0x4c0 [ 295.308277][T22582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.308288][T22582] RIP: 0033:0x7f8df018ebe9 [ 295.308297][T22582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.308308][T22582] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.308319][T22582] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 295.308326][T22582] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 295.308332][T22582] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 295.308339][T22582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.308345][T22582] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 295.308363][T22582] [ 295.312970][T22589] team0: Device gtp0 is of different type [ 295.530468][T22603] 9pnet_virtio: no channels available for device ./file0 [ 295.535580][T22603] ùÿÿÿ: renamed from gretap0 (while UP) [ 295.911392][T22641] Mount JFS Failure: -22 [ 296.001524][T22646] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 296.009440][T22646] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 296.061304][T22650] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 296.067754][T22650] syz_tun: left promiscuous mode [ 296.069537][T22650] bridge0: port 3(syz_tun) entered disabled state [ 296.075486][T22650] bridge_slave_0: left allmulticast mode [ 296.077337][T22650] bridge_slave_0: left promiscuous mode [ 296.079190][T22650] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.084978][T22650] bridge_slave_1: left allmulticast mode [ 296.086812][T22650] bridge_slave_1: left promiscuous mode [ 296.088655][T22650] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.093182][T22650] bond0: (slave bond_slave_0): Releasing backup interface [ 296.097752][T22650] bond0: (slave bond_slave_1): Releasing backup interface [ 296.101820][T22650] team0: Port device team_slave_0 removed [ 296.105004][T22650] team0: Port device team_slave_1 removed [ 296.107154][T22650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.110588][T22650] bond1: (slave batadv_slave_1): Releasing active interface [ 296.170428][T22650] vlan0: entered promiscuous mode [ 296.670724][T22673] FAULT_INJECTION: forcing a failure. [ 296.670724][T22673] name failslab, interval 1, probability 0, space 0, times 0 [ 296.674963][T22673] CPU: 0 UID: 0 PID: 22673 Comm: syz.2.3488 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 296.674980][T22673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.674987][T22673] Call Trace: [ 296.674992][T22673] [ 296.674997][T22673] dump_stack_lvl+0x16c/0x1f0 [ 296.675019][T22673] should_fail_ex+0x512/0x640 [ 296.675031][T22673] should_failslab+0xc2/0x120 [ 296.675045][T22673] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 296.675057][T22673] ? __alloc_skb+0x2b2/0x380 [ 296.675075][T22673] __alloc_skb+0x2b2/0x380 [ 296.675090][T22673] ? __pfx___alloc_skb+0x10/0x10 [ 296.675105][T22673] ? __alloc_skb+0x200/0x380 [ 296.675120][T22673] ? __pfx___alloc_skb+0x10/0x10 [ 296.675152][T22673] create_monitor_ctrl_event+0x3b/0x450 [ 296.675170][T22673] mgmt_cmd_complete+0x2de/0x550 [ 296.675186][T22673] read_local_oob_ext_data+0x41b/0x12b0 [ 296.675201][T22673] ? __pfx_read_local_oob_ext_data+0x10/0x10 [ 296.675215][T22673] ? lock_acquire+0x179/0x350 [ 296.675232][T22673] ? find_held_lock+0x2b/0x80 [ 296.675247][T22673] ? __hci_dev_get+0x16a/0x270 [ 296.675263][T22673] ? do_raw_read_unlock+0x44/0xe0 [ 296.675275][T22673] ? _raw_read_unlock+0x28/0x50 [ 296.675291][T22673] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 296.675307][T22673] hci_sock_sendmsg+0x1522/0x25f0 [ 296.675325][T22673] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 296.675348][T22673] sock_write_iter+0x4fc/0x5b0 [ 296.675361][T22673] ? __pfx_sock_write_iter+0x10/0x10 [ 296.675378][T22673] ? bpf_lsm_file_permission+0x9/0x10 [ 296.675393][T22673] ? security_file_permission+0x71/0x210 [ 296.675409][T22673] ? rw_verify_area+0xcf/0x6c0 [ 296.675427][T22673] vfs_write+0x6c4/0x1150 [ 296.675439][T22673] ? __pfx_sock_write_iter+0x10/0x10 [ 296.675452][T22673] ? __pfx_vfs_write+0x10/0x10 [ 296.675462][T22673] ? find_held_lock+0x2b/0x80 [ 296.675484][T22673] ksys_write+0x1f8/0x250 [ 296.675495][T22673] ? __pfx_ksys_write+0x10/0x10 [ 296.675510][T22673] do_syscall_64+0xcd/0x4c0 [ 296.675522][T22673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.675534][T22673] RIP: 0033:0x7fb52378ebe9 [ 296.675543][T22673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.675554][T22673] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.675565][T22673] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 296.675572][T22673] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 296.675579][T22673] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 296.675585][T22673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.675592][T22673] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 296.675606][T22673] [ 296.817566][T22676] syzkaller0: entered promiscuous mode [ 296.819311][T22676] syzkaller0: entered allmulticast mode [ 296.928957][T22686] FAULT_INJECTION: forcing a failure. [ 296.928957][T22686] name failslab, interval 1, probability 0, space 0, times 0 [ 296.933081][T22686] CPU: 1 UID: 0 PID: 22686 Comm: syz.4.3492 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 296.933097][T22686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.933105][T22686] Call Trace: [ 296.933109][T22686] [ 296.933114][T22686] dump_stack_lvl+0x16c/0x1f0 [ 296.933136][T22686] should_fail_ex+0x512/0x640 [ 296.933146][T22686] ? fs_reclaim_acquire+0xae/0x150 [ 296.933163][T22686] ? tomoyo_encode2+0x100/0x3e0 [ 296.933177][T22686] should_failslab+0xc2/0x120 [ 296.933191][T22686] __kmalloc_noprof+0xd2/0x510 [ 296.933202][T22686] ? d_absolute_path+0x136/0x1a0 [ 296.933220][T22686] tomoyo_encode2+0x100/0x3e0 [ 296.933236][T22686] tomoyo_encode+0x29/0x50 [ 296.933250][T22686] tomoyo_realpath_from_path+0x18f/0x6e0 [ 296.933282][T22686] tomoyo_path2_perm+0x36a/0x710 [ 296.933295][T22686] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 296.933332][T22686] tomoyo_path_rename+0xfc/0x1a0 [ 296.933348][T22686] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 296.933366][T22686] ? _raw_spin_unlock+0x28/0x50 [ 296.933383][T22686] security_path_rename+0x18e/0x3c0 [ 296.933398][T22686] do_renameat2+0x735/0xc50 [ 296.933417][T22686] ? __pfx_do_renameat2+0x10/0x10 [ 296.933432][T22686] ? find_held_lock+0x2b/0x80 [ 296.933445][T22686] ? __might_fault+0xe3/0x190 [ 296.933456][T22686] ? __might_fault+0x13b/0x190 [ 296.933474][T22686] ? getname_flags.part.0+0x1c5/0x550 [ 296.933493][T22686] __x64_sys_rename+0x7d/0xa0 [ 296.933507][T22686] do_syscall_64+0xcd/0x4c0 [ 296.933519][T22686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.933530][T22686] RIP: 0033:0x7f8df018ebe9 [ 296.933539][T22686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.933550][T22686] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 296.933561][T22686] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 296.933567][T22686] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000500 [ 296.933574][T22686] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 296.933580][T22686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.933586][T22686] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 296.933600][T22686] [ 297.015210][T22686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.824490][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 297.824503][ T40] audit: type=1400 audit(1754623831.566:936): avc: denied { map } for pid=22702 comm="syz.4.3497" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.021559][T22721] FAULT_INJECTION: forcing a failure. [ 298.021559][T22721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.027336][T22721] CPU: 2 UID: 0 PID: 22721 Comm: syz.0.3499 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 298.027358][T22721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.027365][T22721] Call Trace: [ 298.027369][T22721] [ 298.027373][T22721] dump_stack_lvl+0x16c/0x1f0 [ 298.027395][T22721] should_fail_ex+0x512/0x640 [ 298.027407][T22721] should_fail_alloc_page+0xe7/0x130 [ 298.027423][T22721] prepare_alloc_pages+0x3c2/0x610 [ 298.027439][T22721] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 298.027454][T22721] ? mark_held_locks+0x49/0x80 [ 298.027472][T22721] ? __lock_acquire+0x62e/0x1ce0 [ 298.027490][T22721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.027503][T22721] ? __lock_acquire+0xb97/0x1ce0 [ 298.027524][T22721] ? __lock_acquire+0xb97/0x1ce0 [ 298.027540][T22721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.027554][T22721] ? policy_nodemask+0xea/0x4e0 [ 298.027568][T22721] alloc_pages_mpol+0x1fb/0x550 [ 298.027581][T22721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.027593][T22721] ? find_held_lock+0x2b/0x80 [ 298.027606][T22721] ? d_find_alias+0x161/0x250 [ 298.027622][T22721] alloc_pages_noprof+0x131/0x390 [ 298.027635][T22721] get_free_pages_noprof+0x10/0xb0 [ 298.027648][T22721] inode_doinit_with_dentry+0x8d6/0x12e0 [ 298.027665][T22721] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 298.027692][T22721] ? __pfx___might_resched+0x10/0x10 [ 298.027709][T22721] selinux_inode_permission+0xb0f/0x10c0 [ 298.027724][T22721] ? make_vfsuid+0xec/0x140 [ 298.027739][T22721] ? __up_read+0x1f8/0x750 [ 298.027750][T22721] ? __pfx_selinux_inode_permission+0x10/0x10 [ 298.027763][T22721] ? __pfx___up_read+0x10/0x10 [ 298.027774][T22721] ? kernfs_iop_permission+0x94/0xc0 [ 298.027791][T22721] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 298.027805][T22721] security_inode_permission+0xda/0x260 [ 298.027820][T22721] inode_permission+0x14e/0x630 [ 298.027837][T22721] may_open+0x111/0x470 [ 298.027854][T22721] path_openat+0x1354/0x2cb0 [ 298.027871][T22721] ? __pfx_path_openat+0x10/0x10 [ 298.027887][T22721] do_filp_open+0x20b/0x470 [ 298.027899][T22721] ? __pfx_do_filp_open+0x10/0x10 [ 298.027922][T22721] ? alloc_fd+0x471/0x7d0 [ 298.027937][T22721] do_sys_openat2+0x11b/0x1d0 [ 298.027952][T22721] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.027968][T22721] ? __fget_files+0x20e/0x3c0 [ 298.027983][T22721] __x64_sys_openat+0x174/0x210 [ 298.027998][T22721] ? __pfx___x64_sys_openat+0x10/0x10 [ 298.028012][T22721] ? ksys_write+0x1ac/0x250 [ 298.028028][T22721] do_syscall_64+0xcd/0x4c0 [ 298.028040][T22721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.028051][T22721] RIP: 0033:0x7f3a1538ebe9 [ 298.028060][T22721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.028071][T22721] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.028082][T22721] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 298.028088][T22721] RDX: 0000000000000201 RSI: 0000200000003000 RDI: 0000000000000003 [ 298.028095][T22721] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 298.028101][T22721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.028107][T22721] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 298.028121][T22721] [ 298.137436][ C2] vkms_vblank_simulate: vblank timer overrun [ 298.225073][T22733] debugfs: 'ttyS3' already exists in 'caif_serial' [ 298.333333][ T6054] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 298.441840][T22748] FAULT_INJECTION: forcing a failure. [ 298.441840][T22748] name failslab, interval 1, probability 0, space 0, times 0 [ 298.447030][T22748] CPU: 0 UID: 0 PID: 22748 Comm: syz.4.3504 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 298.447047][T22748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.447053][T22748] Call Trace: [ 298.447057][T22748] [ 298.447062][T22748] dump_stack_lvl+0x16c/0x1f0 [ 298.447083][T22748] should_fail_ex+0x512/0x640 [ 298.447093][T22748] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.447108][T22748] should_failslab+0xc2/0x120 [ 298.447120][T22748] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.447131][T22748] ? __pfx___might_resched+0x10/0x10 [ 298.447145][T22748] ? alloc_vmap_area+0x645/0x29c0 [ 298.447161][T22748] alloc_vmap_area+0x645/0x29c0 [ 298.447180][T22748] ? __pfx_alloc_vmap_area+0x10/0x10 [ 298.447198][T22748] __get_vm_area_node+0x1ca/0x330 [ 298.447215][T22748] __vmalloc_node_range_noprof+0x271/0x14b0 [ 298.447232][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.447249][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.447265][T22748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.447285][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.447298][T22748] vmalloc_user_noprof+0x9e/0xe0 [ 298.447313][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.447326][T22748] vb2_vmalloc_alloc+0x135/0x3f0 [ 298.447339][T22748] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 298.447352][T22748] __vb2_queue_alloc+0x8c9/0x1280 [ 298.447370][T22748] vb2_core_reqbufs+0xa90/0xfe0 [ 298.447385][T22748] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 298.447398][T22748] ? __pfx___might_resched+0x10/0x10 [ 298.447414][T22748] ? __mutex_lock+0x1c4/0x10b0 [ 298.447423][T22748] ? avc_has_extended_perms+0x47c/0x1090 [ 298.447443][T22748] vb2_reqbufs+0x1a3/0x1f0 [ 298.447453][T22748] ? __pfx_vb2_reqbufs+0x10/0x10 [ 298.447461][T22748] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 298.447479][T22748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.447493][T22748] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 298.447506][T22748] v4l_reqbufs+0x152/0x1e0 [ 298.447520][T22748] __video_do_ioctl+0xb40/0xfc0 [ 298.447538][T22748] ? __might_fault+0xe3/0x190 [ 298.447549][T22748] ? __pfx___video_do_ioctl+0x10/0x10 [ 298.447569][T22748] video_usercopy+0x4d0/0x1720 [ 298.447586][T22748] ? __pfx___video_do_ioctl+0x10/0x10 [ 298.447601][T22748] ? selinux_kernel_read_file+0xc0/0x130 [ 298.447615][T22748] ? __pfx_video_usercopy+0x10/0x10 [ 298.447645][T22748] v4l2_ioctl+0x1bd/0x250 [ 298.447660][T22748] ? __pfx_v4l2_ioctl+0x10/0x10 [ 298.447675][T22748] __x64_sys_ioctl+0x18e/0x210 [ 298.447693][T22748] do_syscall_64+0xcd/0x4c0 [ 298.447705][T22748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.447716][T22748] RIP: 0033:0x7f8df018ebe9 [ 298.447725][T22748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.447736][T22748] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.447747][T22748] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 298.447754][T22748] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000008 [ 298.447761][T22748] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 298.447767][T22748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.447773][T22748] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 298.447787][T22748] [ 298.447800][T22748] syz.4.3504: vmalloc error: size 1384448, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 298.562123][ T6054] usb 6-1: device descriptor read/64, error -71 [ 298.562851][T22748] ,cpuset=/,mems_allowed=0-1 [ 298.570122][T22748] CPU: 2 UID: 0 PID: 22748 Comm: syz.4.3504 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 298.570138][T22748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.570144][T22748] Call Trace: [ 298.570149][T22748] [ 298.570154][T22748] dump_stack_lvl+0x16c/0x1f0 [ 298.570174][T22748] warn_alloc+0x248/0x3a0 [ 298.570187][T22748] ? __pfx_warn_alloc+0x10/0x10 [ 298.570199][T22748] ? kfree+0x2b4/0x4d0 [ 298.570218][T22748] ? __get_vm_area_node+0x208/0x330 [ 298.570236][T22748] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 298.570257][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.570274][T22748] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.570298][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.570311][T22748] vmalloc_user_noprof+0x9e/0xe0 [ 298.570326][T22748] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 298.570339][T22748] vb2_vmalloc_alloc+0x135/0x3f0 [ 298.570352][T22748] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 298.570365][T22748] __vb2_queue_alloc+0x8c9/0x1280 [ 298.570384][T22748] vb2_core_reqbufs+0xa90/0xfe0 [ 298.570398][T22748] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 298.570411][T22748] ? __pfx___might_resched+0x10/0x10 [ 298.570428][T22748] ? __mutex_lock+0x1c4/0x10b0 [ 298.570438][T22748] ? avc_has_extended_perms+0x47c/0x1090 [ 298.570457][T22748] vb2_reqbufs+0x1a3/0x1f0 [ 298.570466][T22748] ? __pfx_vb2_reqbufs+0x10/0x10 [ 298.570475][T22748] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 298.570493][T22748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.570507][T22748] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 298.570520][T22748] v4l_reqbufs+0x152/0x1e0 [ 298.570535][T22748] __video_do_ioctl+0xb40/0xfc0 [ 298.570552][T22748] ? __might_fault+0xe3/0x190 [ 298.570563][T22748] ? __pfx___video_do_ioctl+0x10/0x10 [ 298.570584][T22748] video_usercopy+0x4d0/0x1720 [ 298.570601][T22748] ? __pfx___video_do_ioctl+0x10/0x10 [ 298.570616][T22748] ? selinux_kernel_read_file+0xc0/0x130 [ 298.570630][T22748] ? __pfx_video_usercopy+0x10/0x10 [ 298.570655][T22748] v4l2_ioctl+0x1bd/0x250 [ 298.570670][T22748] ? __pfx_v4l2_ioctl+0x10/0x10 [ 298.570685][T22748] __x64_sys_ioctl+0x18e/0x210 [ 298.570703][T22748] do_syscall_64+0xcd/0x4c0 [ 298.570715][T22748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.570726][T22748] RIP: 0033:0x7f8df018ebe9 [ 298.570736][T22748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.570746][T22748] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.570757][T22748] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 298.570764][T22748] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000008 [ 298.570770][T22748] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 298.570777][T22748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.570783][T22748] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 298.570796][T22748] [ 298.570800][T22748] Mem-Info: [ 298.664610][T22748] active_anon:20668 inactive_anon:0 isolated_anon:0 [ 298.664610][T22748] active_file:6076 inactive_file:46840 isolated_file:0 [ 298.664610][T22748] unevictable:1768 dirty:1652 writeback:0 [ 298.664610][T22748] slab_reclaimable:9715 slab_unreclaimable:78880 [ 298.664610][T22748] mapped:26813 shmem:18707 pagetables:1015 [ 298.664610][T22748] sec_pagetables:316 bounce:0 [ 298.664610][T22748] kernel_misc_reclaimable:0 [ 298.664610][T22748] free:431465 free_pcp:14869 free_cma:0 [ 298.680841][T22748] Node 0 active_anon:81688kB inactive_anon:0kB active_file:22940kB inactive_file:187156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98324kB dirty:6608kB writeback:0kB shmem:71292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15312kB pagetables:3692kB sec_pagetables:1284kB all_unreclaimable? yes Balloon:0kB [ 298.691612][T22748] Node 1 active_anon:1008kB inactive_anon:0kB active_file:1364kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8736kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:240kB pagetables:248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 298.701615][T22748] Node 0 DMA free:13948kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:768kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:20kB free_cma:0kB [ 298.711285][T22748] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 298.713405][T22748] Node 0 DMA32 free:128876kB boost:24576kB min:52092kB low:58968kB high:65844kB reserved_highatomic:4096KB free_highatomic:996KB active_anon:81684kB inactive_anon:0kB active_file:22172kB inactive_file:187156kB unevictable:3536kB writepending:6608kB present:2080628kB managed:1263548kB mlocked:0kB bounce:0kB free_pcp:41168kB local_pcp:5328kB free_cma:0kB [ 298.723740][T22748] lowmem_reserve[]: 0 0 0 0 0 [ 298.725254][T22748] Node 1 Normal free:1584544kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1008kB inactive_anon:0kB active_file:1364kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16496kB local_pcp:6688kB free_cma:0kB [ 298.735007][T22748] lowmem_reserve[]: 0 0 0 0 0 [ 298.736542][T22748] Node 0 DMA: 25*4kB (UM) 33*8kB (UM) 29*16kB (UM) 26*32kB (UM) 8*64kB (UM) 2*128kB (UM) 3*256kB (M) 3*512kB (U) 3*1024kB (UM) 1*2048kB (M) 1*4096kB (M) = 13948kB [ 298.741623][T22748] Node 0 DMA32: 254*4kB (UMEH) 169*8kB (UMH) 365*16kB (UMEH) 216*32kB (UMEH) 116*64kB (UMH) 56*128kB (UM) 42*256kB (UME) 29*512kB (UME) 12*1024kB (UM) 10*2048kB (UME) 10*4096kB (UM) = 129040kB [ 298.747699][T22748] Node 1 Normal: 120*4kB (UME) 85*8kB (UME) 104*16kB (UME) 107*32kB (UME) 37*64kB (UME) 18*128kB (UME) 9*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 8*2048kB (UM) 378*4096kB (UM) = 1584552kB [ 298.753604][T22748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.756592][T22748] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 298.759464][T22748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.762407][T22748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 298.765331][T22748] 71620 total pagecache pages [ 298.766846][T22748] 0 pages in swap cache [ 298.768150][T22748] Free swap = 124996kB [ 298.769454][T22748] Total swap = 124996kB [ 298.770770][T22748] 1048443 pages RAM [ 298.771986][T22748] 0 pages HighMem/MovableOnly [ 298.773530][T22748] 283243 pages reserved [ 298.774846][T22748] 0 pages cma reserved [ 298.803436][ T6054] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 298.805721][ T40] audit: type=1400 audit(1754623832.546:937): avc: denied { name_connect } for pid=22757 comm="syz.4.3506" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 298.814500][T22758] __nla_validate_parse: 4 callbacks suppressed [ 298.814510][T22758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3506'. [ 298.852666][ T40] audit: type=1400 audit(1754623832.586:938): avc: denied { append } for pid=22759 comm="syz.4.3507" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 298.879846][T22762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3508'. [ 298.908768][T22770] : renamed from bridge_slave_0 [ 298.911225][T22770] FAULT_INJECTION: forcing a failure. [ 298.911225][T22770] name failslab, interval 1, probability 0, space 0, times 0 [ 298.918287][T22770] CPU: 2 UID: 0 PID: 22770 Comm: syz.2.3510 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 298.918307][T22770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.918314][T22770] Call Trace: [ 298.918319][T22770] [ 298.918324][T22770] dump_stack_lvl+0x16c/0x1f0 [ 298.918346][T22770] should_fail_ex+0x512/0x640 [ 298.918356][T22770] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 298.918371][T22770] should_failslab+0xc2/0x120 [ 298.918386][T22770] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 298.918402][T22770] ? kstrdup_const+0x63/0x80 [ 298.918416][T22770] kstrdup+0x53/0x100 [ 298.918428][T22770] kstrdup_const+0x63/0x80 [ 298.918439][T22770] kernfs_rename_ns+0x5aa/0xa50 [ 298.918453][T22770] sysfs_rename_dir_ns+0x6a/0xa0 [ 298.918468][T22770] kobject_rename+0x15a/0x260 [ 298.918481][T22770] ? __pfx_kobject_rename+0x10/0x10 [ 298.918493][T22770] ? kernfs_put+0x35/0x60 [ 298.918510][T22770] device_rename+0x130/0x230 [ 298.918526][T22770] netif_change_name+0x27c/0x920 [ 298.918546][T22770] ? __pfx_netif_change_name+0x10/0x10 [ 298.918561][T22770] ? __mutex_trylock_common+0xe9/0x250 [ 298.918580][T22770] ? full_name_hash+0xbc/0x110 [ 298.918597][T22770] dev_change_name+0xb2/0x260 [ 298.918610][T22770] dev_ifsioc+0xa42/0x1f70 [ 298.918627][T22770] ? __pfx_dev_ifsioc+0x10/0x10 [ 298.918643][T22770] ? __pfx___mutex_lock+0x10/0x10 [ 298.918657][T22770] ? cap_capable+0xb3/0x250 [ 298.918669][T22770] ? bpf_lsm_capable+0x9/0x10 [ 298.918688][T22770] dev_ioctl+0x46f/0x10e0 [ 298.918705][T22770] sock_do_ioctl+0x19d/0x280 [ 298.918717][T22770] ? __pfx_sock_do_ioctl+0x10/0x10 [ 298.918733][T22770] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.918749][T22770] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 298.918767][T22770] sock_ioctl+0x227/0x6b0 [ 298.918780][T22770] ? __pfx_sock_ioctl+0x10/0x10 [ 298.918792][T22770] ? hook_file_ioctl_common+0x145/0x410 [ 298.918812][T22770] ? selinux_file_ioctl+0x180/0x270 [ 298.918825][T22770] ? selinux_file_ioctl+0xb4/0x270 [ 298.918839][T22770] ? __pfx_sock_ioctl+0x10/0x10 [ 298.918852][T22770] __x64_sys_ioctl+0x18e/0x210 [ 298.918870][T22770] do_syscall_64+0xcd/0x4c0 [ 298.918881][T22770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.918893][T22770] RIP: 0033:0x7fb52378ebe9 [ 298.918902][T22770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.918913][T22770] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.918924][T22770] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 298.918931][T22770] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000003 [ 298.918938][T22770] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 298.918944][T22770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.918950][T22770] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 298.918964][T22770] [ 298.933702][ T6054] usb 6-1: device descriptor read/64, error -71 [ 299.125252][ T6054] usb usb6-port1: attempt power cycle [ 299.143643][T17248] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 299.326367][T17248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.330404][T17248] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.333339][T17248] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.337015][T17248] usb 9-1: config 0 descriptor?? [ 299.486454][ T6054] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 299.513955][ T6054] usb 6-1: device descriptor read/8, error -71 [ 299.544277][T22765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.548077][T22765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.553754][T17248] usbhid 9-1:0.0: can't add hid device: -71 [ 299.555861][T17248] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 299.559555][T17248] usb 9-1: USB disconnect, device number 8 [ 299.784997][ T6054] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 299.813846][ T6054] usb 6-1: device descriptor read/8, error -71 [ 299.923622][ T6054] usb usb6-port1: unable to enumerate USB device [ 300.010572][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'. [ 300.013882][T17248] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 300.103758][ T40] audit: type=1400 audit(1754623833.836:939): avc: denied { append } for pid=22805 comm="syz.2.3516" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 300.114740][ T40] audit: type=1400 audit(1754623833.846:940): avc: denied { shutdown } for pid=22805 comm="syz.2.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 300.173509][T17248] usb 9-1: Using ep0 maxpacket: 32 [ 300.176767][T17248] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.180206][T17248] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 300.183041][T17248] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.187404][T17248] usb 9-1: config 0 descriptor?? [ 300.190546][T17248] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.194557][T17248] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.208257][T22818] FAULT_INJECTION: forcing a failure. [ 300.208257][T22818] name failslab, interval 1, probability 0, space 0, times 0 [ 300.213411][T22818] CPU: 0 UID: 0 PID: 22818 Comm: syz.2.3519 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 300.213435][T22818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.213447][T22818] Call Trace: [ 300.213453][T22818] [ 300.213460][T22818] dump_stack_lvl+0x16c/0x1f0 [ 300.213491][T22818] should_fail_ex+0x512/0x640 [ 300.213508][T22818] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 300.213536][T22818] should_failslab+0xc2/0x120 [ 300.213555][T22818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 300.213581][T22818] ? ethnl_tsinfo_start+0xdb/0x3a0 [ 300.213605][T22818] ? kasan_save_track+0x14/0x30 [ 300.213622][T22818] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 300.213645][T22818] ethnl_tsinfo_start+0xdb/0x3a0 [ 300.213669][T22818] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 300.213691][T22818] genl_start+0x5fc/0x980 [ 300.213713][T22818] __netlink_dump_start+0x60e/0x990 [ 300.213743][T22818] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 300.213764][T22818] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 300.213788][T22818] ? __pfx_genl_get_cmd+0x10/0x10 [ 300.213804][T22818] ? __pfx_genl_start+0x10/0x10 [ 300.213818][T22818] ? __pfx_genl_dumpit+0x10/0x10 [ 300.213835][T22818] ? __pfx_genl_done+0x10/0x10 [ 300.213854][T22818] ? __radix_tree_lookup+0x21f/0x2c0 [ 300.213882][T22818] genl_rcv_msg+0x46e/0x800 [ 300.213905][T22818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.213924][T22818] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 300.213944][T22818] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 300.213966][T22818] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 300.213998][T22818] netlink_rcv_skb+0x158/0x420 [ 300.214015][T22818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.214033][T22818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.214060][T22818] ? netlink_deliver_tap+0x1ae/0xd30 [ 300.214108][T22818] genl_rcv+0x28/0x40 [ 300.214123][T22818] netlink_unicast+0x5a7/0x870 [ 300.214144][T22818] ? __pfx_netlink_unicast+0x10/0x10 [ 300.214170][T22818] netlink_sendmsg+0x8d1/0xdd0 [ 300.214190][T22818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.214216][T22818] ____sys_sendmsg+0xa98/0xc70 [ 300.214237][T22818] ? copy_msghdr_from_user+0x10a/0x160 [ 300.214261][T22818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.214291][T22818] ___sys_sendmsg+0x134/0x1d0 [ 300.214317][T22818] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.214368][T22818] ? __mutex_unlock_slowpath+0x100/0x800 [ 300.214401][T22818] __sys_sendmsg+0x16d/0x220 [ 300.214426][T22818] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.214465][T22818] do_syscall_64+0xcd/0x4c0 [ 300.214484][T22818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.214500][T22818] RIP: 0033:0x7fb52378ebe9 [ 300.214515][T22818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.214532][T22818] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.214549][T22818] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 300.214559][T22818] RDX: 0000000004008800 RSI: 0000200000000240 RDI: 0000000000000003 [ 300.214571][T22818] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 300.214580][T22818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.214590][T22818] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 300.214613][T22818] [ 300.379943][T22820] FAULT_INJECTION: forcing a failure. [ 300.379943][T22820] name failslab, interval 1, probability 0, space 0, times 0 [ 300.383987][T22820] CPU: 2 UID: 0 PID: 22820 Comm: syz.2.3520 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 300.384002][T22820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.384009][T22820] Call Trace: [ 300.384014][T22820] [ 300.384018][T22820] dump_stack_lvl+0x16c/0x1f0 [ 300.384040][T22820] should_fail_ex+0x512/0x640 [ 300.384050][T22820] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 300.384072][T22820] should_failslab+0xc2/0x120 [ 300.384089][T22820] __kmalloc_cache_noprof+0x6a/0x3e0 [ 300.384112][T22820] ? rcu_is_watching+0x12/0xc0 [ 300.384133][T22820] ? call_usermodehelper_setup+0xaf/0x360 [ 300.384156][T22820] ? __pfx_free_modprobe_argv+0x10/0x10 [ 300.384177][T22820] call_usermodehelper_setup+0xaf/0x360 [ 300.384204][T22820] __request_module+0x3bd/0x690 [ 300.384225][T22820] ? __pfx___request_module+0x10/0x10 [ 300.384251][T22820] ? find_held_lock+0x2b/0x80 [ 300.384274][T22820] ? rtnl_link_ops_get+0x17b/0x2c0 [ 300.384308][T22820] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.384331][T22820] rtnl_newlink+0x1466/0x2000 [ 300.384356][T22820] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.384372][T22820] ? find_held_lock+0x2b/0x80 [ 300.384385][T22820] ? avc_has_perm_noaudit+0x117/0x3b0 [ 300.384404][T22820] ? avc_has_perm_noaudit+0x149/0x3b0 [ 300.384432][T22820] ? find_held_lock+0x2b/0x80 [ 300.384445][T22820] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.384461][T22820] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.384476][T22820] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 300.384487][T22820] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.384504][T22820] rtnetlink_rcv_msg+0x95e/0xe90 [ 300.384514][T22820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.384528][T22820] ? ref_tracker_free+0x37c/0x830 [ 300.384541][T22820] netlink_rcv_skb+0x158/0x420 [ 300.384551][T22820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.384567][T22820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.384582][T22820] ? netlink_deliver_tap+0x1ae/0xd30 [ 300.384601][T22820] netlink_unicast+0x5a7/0x870 [ 300.384612][T22820] ? __pfx_netlink_unicast+0x10/0x10 [ 300.384627][T22820] netlink_sendmsg+0x8d1/0xdd0 [ 300.384639][T22820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.384654][T22820] ____sys_sendmsg+0xa98/0xc70 [ 300.384667][T22820] ? copy_msghdr_from_user+0x10a/0x160 [ 300.384683][T22820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.384701][T22820] ___sys_sendmsg+0x134/0x1d0 [ 300.384718][T22820] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.384745][T22820] ? __mutex_unlock_slowpath+0x100/0x800 [ 300.384767][T22820] __sys_sendmsg+0x16d/0x220 [ 300.384783][T22820] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.384808][T22820] do_syscall_64+0xcd/0x4c0 [ 300.384819][T22820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.384830][T22820] RIP: 0033:0x7fb52378ebe9 [ 300.384840][T22820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.384850][T22820] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.384861][T22820] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 300.384868][T22820] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000003 [ 300.384874][T22820] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 300.384880][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.384887][T22820] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 300.384900][T22820] [ 300.391059][T22765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3509'. [ 300.527290][T17248] usb 9-1: USB disconnect, device number 9 [ 300.530485][T17248] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 300.578414][T22839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3522'. [ 300.659215][ T40] audit: type=1400 audit(1754623834.396:941): avc: denied { name_connect } for pid=22844 comm="syz.2.3523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 300.667764][ T40] audit: type=1400 audit(1754623834.396:942): avc: denied { accept } for pid=22844 comm="syz.2.3523" lport=59671 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 300.674889][ T40] audit: type=1400 audit(1754623834.396:943): avc: denied { getopt } for pid=22844 comm="syz.2.3523" lport=59671 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 300.742957][ T40] audit: type=1400 audit(1754623834.476:944): avc: denied { write } for pid=22764 comm="syz.4.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 301.079739][T22862] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 301.428525][T22883] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3530'. [ 301.455009][T22885] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 301.523393][ T24] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 301.684576][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 301.688002][ T24] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 301.690808][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.694732][ T24] usb 6-1: config 0 descriptor?? [ 301.696938][T22872] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.107309][ T24] elan 0003:04F3:0755.000F: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 302.161088][T22903] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 302.165724][T22903] FAULT_INJECTION: forcing a failure. [ 302.165724][T22903] name failslab, interval 1, probability 0, space 0, times 0 [ 302.169667][T22903] CPU: 0 UID: 0 PID: 22903 Comm: syz.0.3534 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 302.169683][T22903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.169690][T22903] Call Trace: [ 302.169695][T22903] [ 302.169699][T22903] dump_stack_lvl+0x16c/0x1f0 [ 302.169720][T22903] should_fail_ex+0x512/0x640 [ 302.169730][T22903] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 302.169744][T22903] should_failslab+0xc2/0x120 [ 302.169758][T22903] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 302.169769][T22903] ? __alloc_skb+0x2b2/0x380 [ 302.169786][T22903] __alloc_skb+0x2b2/0x380 [ 302.169801][T22903] ? __pfx___alloc_skb+0x10/0x10 [ 302.169817][T22903] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 302.169838][T22903] netlink_alloc_large_skb+0x69/0x130 [ 302.169856][T22903] netlink_sendmsg+0x6a1/0xdd0 [ 302.169868][T22903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.169883][T22903] ____sys_sendmsg+0xa98/0xc70 [ 302.169897][T22903] ? copy_msghdr_from_user+0x10a/0x160 [ 302.169913][T22903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.169931][T22903] ___sys_sendmsg+0x134/0x1d0 [ 302.169948][T22903] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.169976][T22903] ? __mutex_unlock_slowpath+0x100/0x800 [ 302.169997][T22903] __sys_sendmsg+0x16d/0x220 [ 302.170014][T22903] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.170035][T22903] ? fput+0x9b/0xd0 [ 302.170066][T22903] do_syscall_64+0xcd/0x4c0 [ 302.170080][T22903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.170091][T22903] RIP: 0033:0x7f3a1538ebe9 [ 302.170100][T22903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.170112][T22903] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.170122][T22903] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 302.170129][T22903] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 302.170136][T22903] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.170142][T22903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.170148][T22903] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 302.170162][T22903] [ 302.268582][T22905] ptrace attach of "/syz-executor exec"[12442] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸ [ 302.347711][ T40] audit: type=1400 audit(1754623836.086:945): avc: denied { write } for pid=22913 comm="syz.0.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.541800][T22926] FAULT_INJECTION: forcing a failure. [ 302.541800][T22926] name failslab, interval 1, probability 0, space 0, times 0 [ 302.547598][T22926] CPU: 3 UID: 0 PID: 22926 Comm: syz.4.3540 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 302.547615][T22926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.547622][T22926] Call Trace: [ 302.547626][T22926] [ 302.547630][T22926] dump_stack_lvl+0x16c/0x1f0 [ 302.547652][T22926] should_fail_ex+0x512/0x640 [ 302.547663][T22926] ? __kmalloc_node_noprof+0xc5/0x500 [ 302.547677][T22926] should_failslab+0xc2/0x120 [ 302.547690][T22926] __kmalloc_node_noprof+0xd8/0x500 [ 302.547700][T22926] ? crypto_alg_lookup+0x113/0x1e0 [ 302.547718][T22926] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 302.547736][T22926] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 302.547749][T22926] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 302.547767][T22926] crypto_create_tfm_node+0x85/0x350 [ 302.547783][T22926] ? __sys_sendmsg+0x16d/0x220 [ 302.547800][T22926] crypto_alloc_tfm_node+0x102/0x260 [ 302.547813][T22926] esp_init_authenc.constprop.0+0x1dd/0xb90 [ 302.547834][T22926] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 302.547858][T22926] ? find_held_lock+0x2b/0x80 [ 302.547874][T22926] esp6_init_state+0x406/0x520 [ 302.547885][T22926] __xfrm_init_state+0x6fb/0x1c10 [ 302.547909][T22926] xfrm_init_state+0x18/0xa0 [ 302.547926][T22926] pfkey_add+0x24f4/0x2ec0 [ 302.547946][T22926] ? __pfx_pfkey_add+0x10/0x10 [ 302.547962][T22926] ? kfree_skbmem+0x1a4/0x1f0 [ 302.547975][T22926] ? sk_skb_reason_drop+0x136/0x1a0 [ 302.547986][T22926] ? pfkey_broadcast+0x2af/0x460 [ 302.547997][T22926] ? __pfx_pfkey_add+0x10/0x10 [ 302.548013][T22926] pfkey_process+0x6dc/0x840 [ 302.548027][T22926] ? __pfx_pfkey_process+0x10/0x10 [ 302.548042][T22926] ? __mutex_lock+0x1c4/0x10b0 [ 302.548085][T22926] pfkey_sendmsg+0x435/0x850 [ 302.548105][T22926] ____sys_sendmsg+0xa98/0xc70 [ 302.548125][T22926] ? copy_msghdr_from_user+0x10a/0x160 [ 302.548150][T22926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.548180][T22926] ___sys_sendmsg+0x134/0x1d0 [ 302.548197][T22926] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.548226][T22926] ? __mutex_unlock_slowpath+0x100/0x800 [ 302.548247][T22926] __sys_sendmsg+0x16d/0x220 [ 302.548263][T22926] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.548288][T22926] do_syscall_64+0xcd/0x4c0 [ 302.548299][T22926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.548311][T22926] RIP: 0033:0x7f8df018ebe9 [ 302.548320][T22926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.548331][T22926] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.548342][T22926] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 302.548350][T22926] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 302.548356][T22926] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 302.548363][T22926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.548369][T22926] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 302.548383][T22926] [ 302.745435][T22927] block nbd4: shutting down sockets [ 302.868048][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 302.868060][ T40] audit: type=1400 audit(1754623836.606:947): avc: denied { ioctl } for pid=22934 comm="syz.4.3544" path="socket:[63651]" dev="sockfs" ino=63651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.874741][T22935] overlayfs: missing 'lowerdir' [ 302.995402][T22944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3547'. [ 302.998273][T22944] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3547'. [ 303.153502][ T5971] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 303.196945][T22950] FAULT_INJECTION: forcing a failure. [ 303.196945][T22950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.201061][T22950] CPU: 2 UID: 0 PID: 22950 Comm: syz.0.3549 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 303.201076][T22950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.201084][T22950] Call Trace: [ 303.201088][T22950] [ 303.201093][T22950] dump_stack_lvl+0x16c/0x1f0 [ 303.201114][T22950] should_fail_ex+0x512/0x640 [ 303.201127][T22950] _copy_to_user+0x32/0xd0 [ 303.201141][T22950] simple_read_from_buffer+0xcb/0x170 [ 303.201154][T22950] proc_fail_nth_read+0x197/0x240 [ 303.201168][T22950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.201181][T22950] ? rw_verify_area+0xcf/0x6c0 [ 303.201197][T22950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.201210][T22950] vfs_read+0x1e1/0xc60 [ 303.201223][T22950] ? __pfx___mutex_lock+0x10/0x10 [ 303.201233][T22950] ? __pfx_vfs_read+0x10/0x10 [ 303.201248][T22950] ? __fget_files+0x20e/0x3c0 [ 303.201264][T22950] ksys_read+0x12a/0x250 [ 303.201275][T22950] ? __pfx_ksys_read+0x10/0x10 [ 303.201290][T22950] do_syscall_64+0xcd/0x4c0 [ 303.201301][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.201313][T22950] RIP: 0033:0x7f3a1538d5fc [ 303.201322][T22950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 303.201332][T22950] RSP: 002b:00007f3a135f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.201342][T22950] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538d5fc [ 303.201349][T22950] RDX: 000000000000000f RSI: 00007f3a135f60a0 RDI: 0000000000000004 [ 303.201356][T22950] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.201362][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.201368][T22950] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 303.201381][T22950] [ 303.317132][T22963] pimreg: entered allmulticast mode [ 303.336714][T22963] dns_resolver: Unsupported server list version (0) [ 303.340778][T22963] binder: 22962:22963 ioctl c0306201 200000000640 returned -22 [ 303.344383][T22963] binder: 22962:22963 ioctl 9000aecf 200000bdd000 returned -22 [ 303.393369][ T24] usb 6-1: reset full-speed USB device number 37 using dummy_hcd [ 303.419754][T22968] FAULT_INJECTION: forcing a failure. [ 303.419754][T22968] name failslab, interval 1, probability 0, space 0, times 0 [ 303.423840][T22968] CPU: 2 UID: 0 PID: 22968 Comm: syz.0.3555 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 303.423856][T22968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 303.423862][T22968] Call Trace: [ 303.423867][T22968] [ 303.423872][T22968] dump_stack_lvl+0x16c/0x1f0 [ 303.423905][T22968] should_fail_ex+0x512/0x640 [ 303.423917][T22968] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 303.423930][T22968] should_failslab+0xc2/0x120 [ 303.423942][T22968] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 303.423953][T22968] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 303.423969][T22968] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 303.423989][T22968] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 303.424015][T22968] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 303.424047][T22968] mmu_topup_memory_caches+0x25/0x170 [ 303.424067][T22968] kvm_mmu_load+0xd6/0x23c0 [ 303.424084][T22968] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 303.424103][T22968] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 303.424122][T22968] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 303.424145][T22968] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 303.424165][T22968] ? __pfx_kvm_mmu_load+0x10/0x10 [ 303.424182][T22968] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 303.424208][T22968] ? kvm_check_and_inject_events+0x71c/0x1310 [ 303.424237][T22968] vcpu_run+0x358c/0x5580 [ 303.424267][T22968] ? __lock_acquire+0xb97/0x1ce0 [ 303.424300][T22968] ? __pfx_vcpu_run+0x10/0x10 [ 303.424327][T22968] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 303.424348][T22968] ? __local_bh_enable_ip+0xa4/0x120 [ 303.424375][T22968] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 303.424399][T22968] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 303.424432][T22968] kvm_vcpu_ioctl+0x5eb/0x1690 [ 303.424457][T22968] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 303.424480][T22968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 303.424498][T22968] ? do_vfs_ioctl+0x128/0x14f0 [ 303.424515][T22968] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.424532][T22968] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 303.424552][T22968] ? hook_file_ioctl_common+0x145/0x410 [ 303.424579][T22968] ? selinux_file_ioctl+0x180/0x270 [ 303.424598][T22968] ? selinux_file_ioctl+0xb4/0x270 [ 303.424620][T22968] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 303.424643][T22968] __x64_sys_ioctl+0x18e/0x210 [ 303.424670][T22968] do_syscall_64+0xcd/0x4c0 [ 303.424689][T22968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.424707][T22968] RIP: 0033:0x7f3a1538ebe9 [ 303.424721][T22968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.424737][T22968] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.424754][T22968] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 303.424766][T22968] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 303.424776][T22968] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.424787][T22968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.424797][T22968] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 303.424819][T22968] [ 303.666648][T22994] IPv6: Can't replace route, no match found [ 303.708174][ T5971] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 303.749434][ T40] audit: type=1400 audit(1754623837.486:948): avc: denied { read write } for pid=23002 comm="syz.0.3567" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 303.758923][ T40] audit: type=1400 audit(1754623837.486:949): avc: denied { open } for pid=23002 comm="syz.0.3567" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 303.766591][ T40] audit: type=1400 audit(1754623837.506:950): avc: denied { audit_control } for pid=22999 comm="syz.4.3566" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 303.773221][ T40] audit: type=1400 audit(1754623837.506:951): avc: denied { mount } for pid=22999 comm="syz.4.3566" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 303.794542][ T40] audit: type=1400 audit(1754623837.536:952): avc: denied { unmount } for pid=19456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 303.818878][T23009] |ƒ7Fß²: renamed from dummy0 (while UP) [ 303.876084][T23018] overlayfs: missing 'workdir' [ 303.921125][T23015] kvm: pic: non byte read [ 304.343480][ T61] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 304.379267][T23053] program syz.0.3579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.459051][ T40] audit: type=1400 audit(1754623838.196:953): avc: denied { lock } for pid=23058 comm="syz.4.3582" path="socket:[61825]" dev="sockfs" ino=61825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 304.484164][ T61] usb 7-1: device descriptor read/64, error -71 [ 304.670774][T23079] use of bytesused == 0 is deprecated and will be removed in the future, [ 304.673617][T23079] use the actual size instead. [ 304.728844][T23083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.733368][ T61] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 304.735882][ T1475] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 304.825550][ T6036] usb 6-1: USB disconnect, device number 37 [ 304.863392][ T61] usb 7-1: device descriptor read/64, error -71 [ 304.885669][ T1475] usb 5-1: not running at top speed; connect to a high speed hub [ 304.888870][ T1475] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 304.892235][ T1475] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 304.897167][ T1475] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.899992][ T1475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.902460][ T1475] usb 5-1: Product: syz [ 304.903937][ T1475] usb 5-1: SerialNumber: syz [ 304.907120][T23063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.984307][ T61] usb usb7-port1: attempt power cycle [ 305.112849][ T1475] cdc_ncm 5-1:1.0: bind() failure [ 305.117969][ T1475] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 305.120125][ T1475] cdc_ncm 5-1:1.1: bind() failure [ 305.124301][ T1475] usb 5-1: USB disconnect, device number 46 [ 305.333410][ T61] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 305.353991][ T61] usb 7-1: device descriptor read/8, error -71 [ 305.553494][ T1475] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 305.593593][ T61] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 305.613729][ T61] usb 7-1: device descriptor read/8, error -71 [ 305.705551][ T1475] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.709612][ T1475] usb 5-1: config 1 interface 0 has no altsetting 0 [ 305.713403][ T1475] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 305.716211][ T1475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.718676][ T1475] usb 5-1: Product: à š [ 305.720070][ T1475] usb 5-1: Manufacturer: ဠ[ 305.721536][ T1475] usb 5-1: SerialNumber: 剢송쾡㫀⣘ᡚƊ硸⽄鵫ǫ쇀韜➅ꇎ욞궭뮪쩀匉ì¬ê žìŽ¡ê’‡ç–€é•¿ë¼è™ºä®³í„´ç¹œã¨Žê˜í™·ìˆ²â¥”짊□ì£ì³ä¥¾à§¼é»æ–™â‘§éŠâ¹¨ç£â¶µâ•¦à®µâ°¶ë³‚颷봩垧魖쟇氢螳쾗鎲ç›áŸ”鸂ê•ë¡ì챢ὖ㛶䇮⼻è¡î¦Œë™¹ê¤”㹫ឌ쎲í‹å®œæŒ»á„¦î‡ç¾Œ [ 305.730409][ T61] usb usb7-port1: unable to enumerate USB device [ 305.869012][ T40] audit: type=1400 audit(1754623839.606:954): avc: denied { read } for pid=23124 comm="syz.4.3592" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 305.876854][ T40] audit: type=1400 audit(1754623839.606:955): avc: denied { open } for pid=23124 comm="syz.4.3592" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 305.897431][T23127] FAULT_INJECTION: forcing a failure. [ 305.897431][T23127] name failslab, interval 1, probability 0, space 0, times 0 [ 305.901634][T23127] CPU: 2 UID: 0 PID: 23127 Comm: syz.4.3593 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 305.901650][T23127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.901657][T23127] Call Trace: [ 305.901662][T23127] [ 305.901667][T23127] dump_stack_lvl+0x16c/0x1f0 [ 305.901688][T23127] should_fail_ex+0x512/0x640 [ 305.901698][T23127] ? fs_reclaim_acquire+0xae/0x150 [ 305.901714][T23127] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.901729][T23127] should_failslab+0xc2/0x120 [ 305.901754][T23127] __kmalloc_noprof+0xd2/0x510 [ 305.901770][T23127] tomoyo_realpath_from_path+0xc2/0x6e0 [ 305.901787][T23127] ? tomoyo_profile+0x47/0x60 [ 305.901804][T23127] tomoyo_path_number_perm+0x245/0x580 [ 305.901816][T23127] ? tomoyo_path_number_perm+0x237/0x580 [ 305.901829][T23127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.901842][T23127] ? find_held_lock+0x2b/0x80 [ 305.901868][T23127] ? find_held_lock+0x2b/0x80 [ 305.901881][T23127] ? hook_file_ioctl_common+0x145/0x410 [ 305.901900][T23127] ? __fget_files+0x20e/0x3c0 [ 305.901915][T23127] security_file_ioctl+0x9b/0x240 [ 305.901930][T23127] __x64_sys_ioctl+0xb7/0x210 [ 305.901948][T23127] do_syscall_64+0xcd/0x4c0 [ 305.901959][T23127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.901970][T23127] RIP: 0033:0x7f8df018ebe9 [ 305.901980][T23127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.901991][T23127] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.902001][T23127] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 305.902008][T23127] RDX: 00002000000000c0 RSI: 0000000040305652 RDI: 0000000000000003 [ 305.902015][T23127] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 305.902040][T23127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.902046][T23127] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 305.902061][T23127] [ 305.902099][T23127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.943632][T23063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.980542][ T1475] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 305.985606][ T1475] usb 5-1: USB disconnect, device number 47 [ 305.988643][ T1475] usblp0: removed [ 306.087498][T23149] vivid-000: ================= START STATUS ================= [ 306.090601][T23149] vivid-000: Test Pattern: 75% Colorbar [ 306.092660][T23149] vivid-000: Fill Percentage of Frame: 100 [ 306.094631][T23149] vivid-000: Horizontal Movement: Move Left Fast [ 306.096628][T23149] vivid-000: Vertical Movement: No Movement [ 306.098745][T23149] vivid-000: OSD Text Mode: All [ 306.100865][T23149] vivid-000: Show Border: false [ 306.102421][T23149] vivid-000: Show Square: false [ 306.104048][T23149] vivid-000: Sensor Flipped Horizontally: false [ 306.106037][T23149] vivid-000: Sensor Flipped Vertically: false [ 306.107951][T23149] vivid-000: Insert SAV Code in Image: false [ 306.109837][T23149] vivid-000: Insert EAV Code in Image: false [ 306.111752][T23149] vivid-000: Insert Video Guard Band: false [ 306.113755][T23149] vivid-000: Reduced Framerate: false [ 306.115477][T23149] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 306.117719][T23149] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 306.120165][T23149] vivid-000: Enable Capture Cropping: true grabbed [ 306.122222][T23149] vivid-000: Enable Capture Composing: true grabbed [ 306.124345][T23149] vivid-000: Enable Capture Scaler: true grabbed [ 306.126367][T23149] vivid-000: Timestamp Source: End of Frame [ 306.128221][T23149] vivid-000: Colorspace: sRGB [ 306.129709][T23149] vivid-000: Transfer Function: Default [ 306.131499][T23149] vivid-000: Y'CbCr Encoding: Default [ 306.133192][T23149] vivid-000: HSV Encoding: Hue 0-179 [ 306.134909][T23149] vivid-000: Quantization: Default [ 306.136553][T23149] vivid-000: Apply Alpha To Red Only: false [ 306.138511][T23149] vivid-000: Standard Aspect Ratio: 4x3 [ 306.140324][T23149] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 306.142801][T23149] vivid-000: DV Timings: 640x480p59 inactive [ 306.145350][T23149] vivid-000: DV Timings Aspect Ratio: 4x3 [ 306.147202][T23149] vivid-000: Maximum EDID Blocks: 18 [ 306.148863][T23149] vivid-000: Limited RGB Range (16-235): false [ 306.150793][T23149] vivid-000: Rx RGB Quantization Range: Automatic [ 306.152804][T23149] vivid-000: Power Present: 0x00000001 [ 306.154662][T23149] tpg source WxH: 320x180 (Y'CbCr) [ 306.156295][T23149] tpg field: 1 [ 306.157382][T23149] tpg crop: (0,0)/320x180 [ 306.158747][T23149] tpg compose: (0,0)/320x180 [ 306.160196][T23149] tpg colorspace: 5 [ 306.161405][T23149] tpg transfer function: 6/6 [ 306.162859][T23149] tpg Y'CbCr encoding: 7/7 [ 306.164363][T23149] tpg quantization: 0/2 [ 306.165697][T23149] tpg RGB range: 0/2 [ 306.166946][T23149] vivid-000: ================== END STATUS ================== [ 306.243376][T17248] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 306.373401][T17248] usb 7-1: device descriptor read/64, error -71 [ 306.433577][ T1475] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 306.553331][T23160] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 306.607071][ T1475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 306.610510][ T1475] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 306.613353][T17248] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 306.613360][ T1475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.614470][ T1475] usb 9-1: config 0 descriptor?? [ 306.620261][T23153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.745326][T17248] usb 7-1: device descriptor read/64, error -71 [ 306.853533][T17248] usb usb7-port1: attempt power cycle [ 306.873359][T18873] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 307.023411][T18873] usb 5-1: Using ep0 maxpacket: 8 [ 307.027341][T18873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.028113][ T1475] elan 0003:04F3:0755.0010: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 307.030819][T18873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.030835][T18873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.030848][T18873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.044739][T18873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.047676][T18873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.123902][ T61] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 307.258352][T18873] usb 5-1: GET_CAPABILITIES returned 0 [ 307.260563][T18873] usbtmc 5-1:16.0: can't read capabilities [ 307.263549][ T61] usb 6-1: device descriptor read/64, error -71 [ 307.463013][ T1475] usb 5-1: USB disconnect, device number 48 [ 307.503463][ T61] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 307.632031][ T1475] usb 9-1: USB disconnect, device number 10 [ 307.634172][ T61] usb 6-1: device descriptor read/64, error -71 [ 307.743858][ T61] usb usb6-port1: attempt power cycle [ 307.987135][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 308.083682][ T61] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 308.104245][ T61] usb 6-1: device descriptor read/8, error -71 [ 308.333345][ T1475] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 308.342939][T23258] FAULT_INJECTION: forcing a failure. [ 308.342939][T23258] name failslab, interval 1, probability 0, space 0, times 0 [ 308.348985][T23258] CPU: 2 UID: 0 PID: 23258 Comm: syz.4.3614 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 308.349003][T23258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 308.349010][T23258] Call Trace: [ 308.349014][T23258] [ 308.349019][T23258] dump_stack_lvl+0x16c/0x1f0 [ 308.349041][T23258] should_fail_ex+0x512/0x640 [ 308.349055][T23258] should_failslab+0xc2/0x120 [ 308.349068][T23258] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 308.349081][T23258] ? skb_clone+0x190/0x3f0 [ 308.349100][T23258] skb_clone+0x190/0x3f0 [ 308.349116][T23258] netlink_deliver_tap+0xabd/0xd30 [ 308.349136][T23258] netlink_unicast+0x71f/0x870 [ 308.349148][T23258] ? __pfx_netlink_unicast+0x10/0x10 [ 308.349157][T23258] ? __pfx_fib_nl_newrule+0x10/0x10 [ 308.349180][T23258] netlink_ack+0x696/0xb80 [ 308.349194][T23258] netlink_rcv_skb+0x332/0x420 [ 308.349204][T23258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.349216][T23258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.349231][T23258] ? netlink_deliver_tap+0x1ae/0xd30 [ 308.349250][T23258] netlink_unicast+0x5a7/0x870 [ 308.349262][T23258] ? __pfx_netlink_unicast+0x10/0x10 [ 308.349272][T23258] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 308.349298][T23258] netlink_sendmsg+0x8d1/0xdd0 [ 308.349310][T23258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.349325][T23258] ____sys_sendmsg+0xa98/0xc70 [ 308.349338][T23258] ? copy_msghdr_from_user+0x10a/0x160 [ 308.349354][T23258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.349373][T23258] ___sys_sendmsg+0x134/0x1d0 [ 308.349390][T23258] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.349417][T23258] ? __mutex_unlock_slowpath+0x100/0x800 [ 308.349440][T23258] __sys_sendmsg+0x16d/0x220 [ 308.349456][T23258] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.349481][T23258] do_syscall_64+0xcd/0x4c0 [ 308.349492][T23258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.349504][T23258] RIP: 0033:0x7f8df018ebe9 [ 308.349513][T23258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.349524][T23258] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.349534][T23258] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 308.349541][T23258] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 308.349547][T23258] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 308.349553][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.349560][T23258] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 308.349573][T23258] [ 308.445774][ T61] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 308.467527][T23260] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3616'. [ 308.476892][ T61] usb 6-1: device descriptor read/8, error -71 [ 308.533460][ T1475] usb 7-1: Using ep0 maxpacket: 32 [ 308.536458][ T1475] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 308.539174][ T1475] usb 7-1: config 0 has no interface number 0 [ 308.542477][ T1475] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 308.545530][ T1475] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 308.548044][ T1475] usb 7-1: Product: syz [ 308.549474][ T1475] usb 7-1: Manufacturer: syz [ 308.552279][ T1475] usb 7-1: config 0 descriptor?? [ 308.583463][ T61] usb usb6-port1: unable to enumerate USB device [ 308.757832][ T6054] usb 7-1: USB disconnect, device number 41 [ 309.065611][T23279] loop9: detected capacity change from 0 to 8 [ 309.070284][T23279] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 309.072012][T23279] loop9: partition table partially beyond EOD, truncated [ 309.074565][T23279] loop9: p1 size 81768186 extends beyond EOD, truncated [ 309.195015][T23291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3620'. [ 309.195742][ T40] audit: type=1400 audit(1754623842.936:956): avc: denied { read } for pid=23290 comm="syz.4.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 309.331248][T23308] vlan0: entered promiscuous mode [ 309.332997][T23308] vlan0: entered allmulticast mode [ 309.335803][T23308] hsr_slave_1: entered allmulticast mode [ 309.341663][ T40] audit: type=1400 audit(1754623843.076:957): avc: denied { ioctl } for pid=23311 comm="syz.0.3628" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 309.342867][T23312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 309.351356][T23312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.355799][T23312] vhci_hcd vhci_hcd.0: Device attached [ 309.357727][T23317] usbip_core: unknown command [ 309.359246][T23317] vhci_hcd: unknown pdu 0 [ 309.360611][T23317] usbip_core: unknown command [ 309.362234][ T7115] vhci_hcd: stop threads [ 309.366102][ T7115] vhci_hcd: release socket [ 309.367776][ T7115] vhci_hcd: disconnect device [ 309.515004][ T61] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 309.664937][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 309.668370][ T61] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 309.671224][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.675015][ T61] usb 9-1: config 0 descriptor?? [ 309.677424][T23300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 309.917301][T23348] FAULT_INJECTION: forcing a failure. [ 309.917301][T23348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.921290][T23348] CPU: 2 UID: 0 PID: 23348 Comm: syz.1.3636 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 309.921306][T23348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.921313][T23348] Call Trace: [ 309.921318][T23348] [ 309.921323][T23348] dump_stack_lvl+0x16c/0x1f0 [ 309.921344][T23348] should_fail_ex+0x512/0x640 [ 309.921357][T23348] _copy_to_user+0x32/0xd0 [ 309.921383][T23348] simple_read_from_buffer+0xcb/0x170 [ 309.921398][T23348] proc_fail_nth_read+0x197/0x240 [ 309.921412][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.921425][T23348] ? rw_verify_area+0xcf/0x6c0 [ 309.921442][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.921454][T23348] vfs_read+0x1e1/0xc60 [ 309.921467][T23348] ? __pfx___mutex_lock+0x10/0x10 [ 309.921478][T23348] ? __pfx_vfs_read+0x10/0x10 [ 309.921492][T23348] ? __fget_files+0x20e/0x3c0 [ 309.921509][T23348] ksys_read+0x12a/0x250 [ 309.921520][T23348] ? __pfx_ksys_read+0x10/0x10 [ 309.921531][T23348] ? fput+0x9b/0xd0 [ 309.921547][T23348] do_syscall_64+0xcd/0x4c0 [ 309.921559][T23348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.921570][T23348] RIP: 0033:0x7f065a78d5fc [ 309.921580][T23348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.921590][T23348] RSP: 002b:00007f065b65e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.921601][T23348] RAX: ffffffffffffffda RBX: 00007f065a9b5fa0 RCX: 00007f065a78d5fc [ 309.921608][T23348] RDX: 000000000000000f RSI: 00007f065b65e0a0 RDI: 0000000000000004 [ 309.921614][T23348] RBP: 00007f065b65e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.921620][T23348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.921626][T23348] R13: 00007f065a9b6038 R14: 00007f065a9b5fa0 R15: 00007fff589eb448 [ 309.921640][T23348] [ 309.943384][ T6054] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 310.008950][T23353] syz.1.3638: attempt to access beyond end of device [ 310.008950][T23353] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 310.013150][T23353] (syz.1.3638,23353,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 310.015665][T23353] (syz.1.3638,23353,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 310.017978][T23353] (syz.1.3638,23353,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 310.020720][T23353] (syz.1.3638,23353,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 310.086232][ T61] elan 0003:04F3:0755.0011: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 310.108797][T23365] binder: 23364:23365 unknown command 0 [ 310.110654][T23365] binder: 23364:23365 ioctl c0306201 200000000080 returned -22 [ 310.114310][T23365] binder: 23364:23365 ioctl 400448c9 2000000001c0 returned -22 [ 310.125872][T23365] ntfs3(sr0): Primary boot signature is not NTFS. [ 310.128777][T23365] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 310.148151][T23369] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3643'. [ 310.153389][ T6054] usb 7-1: Using ep0 maxpacket: 32 [ 310.159420][ T6054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.162915][ T6054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.172528][ T6054] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 310.176794][T23365] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 310.179880][ T6054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.184368][ T6054] usb 7-1: config 0 descriptor?? [ 310.190041][ T40] audit: type=1400 audit(1754623843.926:958): avc: denied { transfer } for pid=23364 comm="syz.1.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 310.285145][T17248] usb 9-1: USB disconnect, device number 11 [ 310.319292][ T40] audit: type=1400 audit(1754623844.056:959): avc: denied { create } for pid=23395 comm="syz.1.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 310.370314][T23398] netlink: 'syz.0.3647': attribute type 27 has an invalid length. [ 310.375321][ T40] audit: type=1400 audit(1754623844.116:960): avc: denied { write } for pid=23395 comm="syz.1.3646" path="socket:[61054]" dev="sockfs" ino=61054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 310.421078][T23398] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.423703][T23398] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.443668][T23398] tipc: Resetting bearer [ 310.526908][T23398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.538786][T23398] batadv_slave_1: left promiscuous mode [ 310.564033][T23398] vlan0: left promiscuous mode [ 310.592988][ T6054] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 310.629615][T23398] vlan2: left allmulticast mode [ 310.632091][T23398] bond0: left allmulticast mode [ 310.633858][T23398] bond_slave_0: left allmulticast mode [ 310.635621][T23398] bond_slave_1: left allmulticast mode [ 310.637331][T23398] bond3: left allmulticast mode [ 310.644471][T23400] FAULT_INJECTION: forcing a failure. [ 310.644471][T23400] name failslab, interval 1, probability 0, space 0, times 0 [ 310.648296][T23400] CPU: 0 UID: 0 PID: 23400 Comm: syz.0.3647 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 310.648313][T23400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.648320][T23400] Call Trace: [ 310.648324][T23400] [ 310.648328][T23400] dump_stack_lvl+0x16c/0x1f0 [ 310.648350][T23400] should_fail_ex+0x512/0x640 [ 310.648361][T23400] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 310.648375][T23400] should_failslab+0xc2/0x120 [ 310.648388][T23400] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 310.648399][T23400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.648411][T23400] ? __alloc_skb+0x2b2/0x380 [ 310.648429][T23400] __alloc_skb+0x2b2/0x380 [ 310.648445][T23400] ? __pfx___alloc_skb+0x10/0x10 [ 310.648461][T23400] ? igmp_group_added+0x1db/0x980 [ 310.648480][T23400] inet_ifmcaddr_notify+0xc7/0x1c0 [ 310.648497][T23400] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 310.648516][T23400] ? __local_bh_enable_ip+0xa4/0x120 [ 310.648533][T23400] ____ip_mc_inc_group+0x802/0x10f0 [ 310.648551][T23400] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 310.648567][T23400] ? __pfx___inet_insert_ifa+0x10/0x10 [ 310.648582][T23400] ip_mc_up+0x154/0x3b0 [ 310.648592][T23400] inetdev_event+0xafb/0x18a0 [ 310.648605][T23400] ? ib_netdevice_event+0xfc/0x330 [ 310.648617][T23400] ? __pfx_inetdev_event+0x10/0x10 [ 310.648628][T23400] ? wext_netdev_notifier_call+0xe/0x20 [ 310.648644][T23400] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 310.648662][T23400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.648676][T23400] notifier_call_chain+0xbc/0x410 [ 310.648692][T23400] ? __pfx_inetdev_event+0x10/0x10 [ 310.648706][T23400] call_netdevice_notifiers_info+0xbe/0x140 [ 310.648720][T23400] __dev_notify_flags+0x12c/0x2e0 [ 310.648736][T23400] ? __pfx___dev_notify_flags+0x10/0x10 [ 310.648754][T23400] ? __pfx___dev_change_flags+0x10/0x10 [ 310.648769][T23400] ? validate_linkmsg+0x57c/0xb60 [ 310.648785][T23400] ? find_held_lock+0x2b/0x80 [ 310.648801][T23400] netif_change_flags+0x108/0x160 [ 310.648819][T23400] do_setlink.constprop.0+0xb53/0x4380 [ 310.648837][T23400] ? __schedule+0x11a3/0x5de0 [ 310.648854][T23400] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 310.648874][T23400] ? __lock_acquire+0xb97/0x1ce0 [ 310.648892][T23400] ? __pfx___schedule+0x10/0x10 [ 310.648909][T23400] ? do_raw_spin_lock+0x12c/0x2b0 [ 310.648925][T23400] ? mark_held_locks+0x49/0x80 [ 310.648940][T23400] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 310.648956][T23400] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.648972][T23400] ? __mutex_lock+0x1c4/0x10b0 [ 310.648982][T23400] ? rtnl_newlink+0x600/0x2000 [ 310.649002][T23400] ? __pfx___mutex_lock+0x10/0x10 [ 310.649011][T23400] ? cap_capable+0xb3/0x250 [ 310.649031][T23400] rtnl_newlink+0x18e0/0x2000 [ 310.649052][T23400] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.649068][T23400] ? find_held_lock+0x2b/0x80 [ 310.649081][T23400] ? avc_has_perm_noaudit+0x117/0x3b0 [ 310.649100][T23400] ? avc_has_perm_noaudit+0x149/0x3b0 [ 310.649120][T23400] ? __lock_acquire+0x62e/0x1ce0 [ 310.649144][T23400] ? find_held_lock+0x2b/0x80 [ 310.649156][T23400] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.649172][T23400] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.649191][T23400] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 310.649202][T23400] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.649219][T23400] rtnetlink_rcv_msg+0x95e/0xe90 [ 310.649230][T23400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.649243][T23400] ? ref_tracker_free+0x37c/0x830 [ 310.649256][T23400] netlink_rcv_skb+0x158/0x420 [ 310.649267][T23400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.649277][T23400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.649292][T23400] ? netlink_deliver_tap+0x1ae/0xd30 [ 310.649311][T23400] netlink_unicast+0x5a7/0x870 [ 310.649323][T23400] ? __pfx_netlink_unicast+0x10/0x10 [ 310.649333][T23400] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 310.649354][T23400] netlink_sendmsg+0x8d1/0xdd0 [ 310.649366][T23400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.649381][T23400] ____sys_sendmsg+0xa98/0xc70 [ 310.649394][T23400] ? copy_msghdr_from_user+0x10a/0x160 [ 310.649410][T23400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.649428][T23400] ___sys_sendmsg+0x134/0x1d0 [ 310.649446][T23400] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.649474][T23400] ? __mutex_unlock_slowpath+0x100/0x800 [ 310.649495][T23400] __sys_sendmsg+0x16d/0x220 [ 310.649511][T23400] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.649536][T23400] do_syscall_64+0xcd/0x4c0 [ 310.649547][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.649558][T23400] RIP: 0033:0x7f3a1538ebe9 [ 310.649568][T23400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.649578][T23400] RSP: 002b:00007f3a135d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.649589][T23400] RAX: ffffffffffffffda RBX: 00007f3a155b6090 RCX: 00007f3a1538ebe9 [ 310.649596][T23400] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 310.649602][T23400] RBP: 00007f3a135d5090 R08: 0000000000000000 R09: 0000000000000000 [ 310.649609][T23400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.649615][T23400] R13: 00007f3a155b6128 R14: 00007f3a155b6090 R15: 00007ffe2ac381e8 [ 310.649628][T23400] [ 310.829825][T23400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.832937][T23400] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.835898][T23400] tipc: Resetting bearer [ 310.839276][T23400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.845308][ T7151] tipc: Resetting bearer [ 310.847109][ T7157] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.849794][ T7157] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.852617][ T7157] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.855404][ T7157] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.858674][ T7157] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.862261][ T7157] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.865753][ T7157] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.869069][ T7157] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.087728][T23434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23434 comm=syz.0.3652 [ 311.101515][T23434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.105004][T23434] bond0: (slave bond4): Enslaving as an active interface with an up link [ 311.134582][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3653'. [ 311.208069][T23477] SELinux: syz.1.3657 (23477) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 311.213172][T23479] netlink: 'syz.0.3658': attribute type 27 has an invalid length. [ 311.254870][T23479] tipc: Resetting bearer [ 311.275059][ T40] audit: type=1400 audit(1754623845.016:961): avc: denied { read } for pid=23476 comm="syz.1.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.282646][T23479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.285792][T23479] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.288006][T23479] tipc: Resetting bearer [ 311.291620][T23479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.329269][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 311.673828][ T1475] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 311.813468][ T61] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 311.833370][ T1475] usb 5-1: Using ep0 maxpacket: 16 [ 311.836844][ T1475] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 311.839454][ T1475] usb 5-1: config 0 has no interface number 0 [ 311.842875][ T1475] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 311.845870][ T1475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.848418][ T1475] usb 5-1: Product: syz [ 311.849763][ T1475] usb 5-1: Manufacturer: syz [ 311.851276][ T1475] usb 5-1: SerialNumber: syz [ 311.854585][ T1475] usb 5-1: config 0 descriptor?? [ 311.857813][ T1475] hub 5-1:0.132: bad descriptor, ignoring hub [ 311.859813][ T1475] hub 5-1:0.132: probe with driver hub failed with error -5 [ 311.863817][ T1475] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input25 [ 311.956451][ T8916] usb 7-1: reset high-speed USB device number 42 using dummy_hcd [ 311.977617][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 311.982276][ T61] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 311.986125][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.991438][ T61] usb 9-1: config 0 descriptor?? [ 311.995292][T23515] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 312.173541][ T34] usb 5-1: USB disconnect, device number 49 [ 312.404203][ T61] usbhid 9-1:0.0: can't add hid device: -71 [ 312.406207][ T61] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 312.409662][ T61] usb 9-1: USB disconnect, device number 12 [ 312.712153][T23564] comedi comedi0: Minor -2147450880 is invalid! [ 312.722114][T23556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3670'. [ 312.841549][T23573] openvswitch: netlink: IP tunnel dst address not specified [ 312.918537][T23579] input: syz1 as /devices/virtual/input/input26 [ 312.961768][ T40] audit: type=1400 audit(1754623846.696:962): avc: denied { map } for pid=23584 comm="syz.0.3677" path="pipe:[37361]" dev="pipefs" ino=37361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 312.973316][ T40] audit: type=1400 audit(1754623846.696:963): avc: denied { append } for pid=23586 comm="syz.2.3678" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.980642][ T40] audit: type=1400 audit(1754623846.696:964): avc: denied { watch watch_reads } for pid=23586 comm="syz.2.3678" path="pipe:[64290]" dev="pipefs" ino=64290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 313.027662][T23592] binder_alloc: 23591: pid 23591 spamming oneway? 1 buffers allocated for a total size of 4096 [ 313.084234][T23596] geneve2: entered promiscuous mode [ 313.085951][T23596] geneve2: entered allmulticast mode [ 313.431064][T23602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3681'. [ 313.434949][ T6031] usb 7-1: USB disconnect, device number 42 [ 313.623532][T23629] netlink: 'syz.2.3685': attribute type 32 has an invalid length. [ 313.814839][T23638] netlink: 'syz.0.3689': attribute type 27 has an invalid length. [ 313.918907][T23638] tipc: Resetting bearer [ 313.942556][T23640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.947689][T23640] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.950093][T23640] tipc: Resetting bearer [ 313.953765][T23640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.188456][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 314.286481][T23661] FAULT_INJECTION: forcing a failure. [ 314.286481][T23661] name failslab, interval 1, probability 0, space 0, times 0 [ 314.290736][T23661] CPU: 0 UID: 0 PID: 23661 Comm: syz.4.3696 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 314.290752][T23661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.290759][T23661] Call Trace: [ 314.290764][T23661] [ 314.290769][T23661] dump_stack_lvl+0x16c/0x1f0 [ 314.290789][T23661] should_fail_ex+0x512/0x640 [ 314.290800][T23661] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 314.290818][T23661] should_failslab+0xc2/0x120 [ 314.290831][T23661] __kmalloc_cache_noprof+0x6a/0x3e0 [ 314.290847][T23661] ? find_held_lock+0x2b/0x80 [ 314.290861][T23661] ? snd_seq_port_connect+0x61/0x580 [ 314.290875][T23661] snd_seq_port_connect+0x61/0x580 [ 314.290885][T23661] ? _raw_read_unlock+0x28/0x50 [ 314.290900][T23661] ? check_subscription_permission.isra.0+0xf5/0x240 [ 314.290914][T23661] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 314.290928][T23661] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 314.290946][T23661] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 314.290959][T23661] snd_seq_oss_midi_open+0x564/0x660 [ 314.290974][T23661] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 314.291005][T23661] snd_seq_oss_process_event+0xb57/0x2550 [ 314.291017][T23661] ? __might_fault+0x13b/0x190 [ 314.291029][T23661] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 314.291046][T23661] snd_seq_oss_write+0x22e/0x7d0 [ 314.291062][T23661] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 314.291079][T23661] ? bpf_lsm_file_permission+0x9/0x10 [ 314.291094][T23661] ? __pfx_odev_write+0x10/0x10 [ 314.291105][T23661] odev_write+0x51/0xa0 [ 314.291115][T23661] vfs_write+0x2a0/0x1150 [ 314.291130][T23661] ? __pfx_vfs_write+0x10/0x10 [ 314.291140][T23661] ? find_held_lock+0x2b/0x80 [ 314.291153][T23661] ? __fget_files+0x204/0x3c0 [ 314.291167][T23661] ? __fget_files+0x20e/0x3c0 [ 314.291183][T23661] ksys_write+0x12a/0x250 [ 314.291193][T23661] ? __pfx_ksys_write+0x10/0x10 [ 314.291208][T23661] do_syscall_64+0xcd/0x4c0 [ 314.291220][T23661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.291231][T23661] RIP: 0033:0x7f8df018ebe9 [ 314.291241][T23661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.291251][T23661] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.291262][T23661] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 314.291269][T23661] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000003 [ 314.291275][T23661] RBP: 00007f8df0f49090 R08: 0000000000000000 R09: 0000000000000000 [ 314.291282][T23661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.291288][T23661] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 314.291302][T23661] [ 314.401095][T23663] netlink: 940 bytes leftover after parsing attributes in process `syz.4.3697'. [ 314.404907][T23663] openvswitch: netlink: Flow key attr not present in new flow. [ 314.425203][T23663] 9pnet: Could not find request transport: vi [ 314.428093][ T40] audit: type=1400 audit(1754623848.166:965): avc: denied { setopt } for pid=23662 comm="syz.4.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.582131][T23666] netlink: 'syz.2.3698': attribute type 21 has an invalid length. [ 314.585592][T23666] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3698'. [ 314.957570][ T40] audit: type=1400 audit(1754623848.696:966): avc: denied { connect } for pid=23688 comm="syz.0.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.958096][ T10] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 315.006284][ T40] audit: type=1400 audit(1754623848.746:967): avc: denied { shutdown } for pid=23694 comm="syz.0.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.016082][T23695] No control pipe specified [ 315.096284][T23699] FAULT_INJECTION: forcing a failure. [ 315.096284][T23699] name failslab, interval 1, probability 0, space 0, times 0 [ 315.101139][T23699] CPU: 0 UID: 0 PID: 23699 Comm: syz.0.3708 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 315.101155][T23699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.101167][T23699] Call Trace: [ 315.101171][T23699] [ 315.101176][T23699] dump_stack_lvl+0x16c/0x1f0 [ 315.101197][T23699] should_fail_ex+0x512/0x640 [ 315.101207][T23699] ? fs_reclaim_acquire+0xae/0x150 [ 315.101223][T23699] ? tomoyo_encode2+0x100/0x3e0 [ 315.101237][T23699] should_failslab+0xc2/0x120 [ 315.101251][T23699] __kmalloc_noprof+0xd2/0x510 [ 315.101265][T23699] tomoyo_encode2+0x100/0x3e0 [ 315.101281][T23699] tomoyo_encode+0x29/0x50 [ 315.101294][T23699] tomoyo_realpath_from_path+0x18f/0x6e0 [ 315.101310][T23699] ? tomoyo_profile+0x47/0x60 [ 315.101327][T23699] tomoyo_path_perm+0x274/0x460 [ 315.101337][T23699] ? tomoyo_path_perm+0x260/0x460 [ 315.101350][T23699] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 315.101361][T23699] ? try_to_unlazy+0x2a9/0x660 [ 315.101385][T23699] ? __d_lookup+0x25c/0x4a0 [ 315.101406][T23699] tomoyo_path_rmdir+0x91/0xe0 [ 315.101421][T23699] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 315.101438][T23699] ? lookup_dcache+0x66/0x170 [ 315.101455][T23699] security_path_rmdir+0x145/0x2b0 [ 315.101468][T23699] do_rmdir+0x27b/0x3c0 [ 315.101481][T23699] ? __pfx_do_rmdir+0x10/0x10 [ 315.101493][T23699] ? strncpy_from_user+0x203/0x2e0 [ 315.101511][T23699] ? getname_flags.part.0+0x1c5/0x550 [ 315.101526][T23699] ? __pfx_ksys_write+0x10/0x10 [ 315.101539][T23699] __x64_sys_unlinkat+0xef/0x130 [ 315.101553][T23699] do_syscall_64+0xcd/0x4c0 [ 315.101564][T23699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.101575][T23699] RIP: 0033:0x7f3a1538ebe9 [ 315.101585][T23699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.101595][T23699] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 315.101605][T23699] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 315.101612][T23699] RDX: 0000000000000200 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 315.101619][T23699] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.101625][T23699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.101631][T23699] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 315.101645][T23699] [ 315.101655][T23699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.179879][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 315.183330][ T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 315.186138][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.190885][ T10] usb 7-1: config 0 descriptor?? [ 315.192942][T23680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.202287][T23703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3709'. [ 315.205348][T23703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3709'. [ 315.234321][T23707] vcan0: entered allmulticast mode [ 315.236695][T23707] vcan0: left allmulticast mode [ 315.252378][T23707] block device autoloading is deprecated and will be removed. [ 315.256483][T23707] syz.0.3710: attempt to access beyond end of device [ 315.256483][T23707] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 315.563384][T18872] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 315.602300][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 315.604820][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 315.609754][ T10] usb 7-1: USB disconnect, device number 43 [ 315.703397][T18872] usb 5-1: device descriptor read/64, error -71 [ 315.943391][T18872] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 316.073486][T18872] usb 5-1: device descriptor read/64, error -71 [ 316.136515][T23725] FAULT_INJECTION: forcing a failure. [ 316.136515][T23725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.140587][T23725] CPU: 3 UID: 0 PID: 23725 Comm: syz.2.3713 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 316.140604][T23725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.140611][T23725] Call Trace: [ 316.140615][T23725] [ 316.140621][T23725] dump_stack_lvl+0x16c/0x1f0 [ 316.140642][T23725] should_fail_ex+0x512/0x640 [ 316.140655][T23725] strncpy_from_user+0x3b/0x2e0 [ 316.140673][T23725] getname_flags.part.0+0x2d1/0x550 [ 316.140691][T23725] getname_flags+0x93/0xf0 [ 316.140702][T23725] do_sys_openat2+0xb8/0x1d0 [ 316.140717][T23725] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.140733][T23725] ? __fget_files+0x20e/0x3c0 [ 316.140749][T23725] __x64_sys_creat+0xcc/0x120 [ 316.140764][T23725] ? __pfx___x64_sys_creat+0x10/0x10 [ 316.140779][T23725] ? __pfx_ksys_write+0x10/0x10 [ 316.140793][T23725] ? rcu_is_watching+0x12/0xc0 [ 316.140806][T23725] ? do_syscall_64+0x91/0x4c0 [ 316.140817][T23725] do_syscall_64+0xcd/0x4c0 [ 316.140827][T23725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.140839][T23725] RIP: 0033:0x7fb52378ebe9 [ 316.140849][T23725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.140860][T23725] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 316.140870][T23725] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 316.140877][T23725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000004c0 [ 316.140883][T23725] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 316.140890][T23725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.140896][T23725] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 316.140909][T23725] [ 316.204014][T18872] usb usb5-port1: attempt power cycle [ 316.265236][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'. [ 316.268108][T23731] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 316.270604][T23731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.347783][T23740] FAULT_INJECTION: forcing a failure. [ 316.347783][T23740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.351874][T23740] CPU: 2 UID: 0 PID: 23740 Comm: syz.2.3718 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 316.351890][T23740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.351897][T23740] Call Trace: [ 316.351902][T23740] [ 316.351907][T23740] dump_stack_lvl+0x16c/0x1f0 [ 316.351927][T23740] should_fail_ex+0x512/0x640 [ 316.351940][T23740] _copy_from_user+0x2e/0xd0 [ 316.351954][T23740] video_usercopy+0xedd/0x1720 [ 316.351972][T23740] ? __pfx___video_do_ioctl+0x10/0x10 [ 316.351988][T23740] ? selinux_kernel_read_file+0xc0/0x130 [ 316.352002][T23740] ? __pfx_video_usercopy+0x10/0x10 [ 316.352027][T23740] v4l2_ioctl+0x1bd/0x250 [ 316.352043][T23740] ? __pfx_v4l2_ioctl+0x10/0x10 [ 316.352058][T23740] __x64_sys_ioctl+0x18e/0x210 [ 316.352077][T23740] do_syscall_64+0xcd/0x4c0 [ 316.352089][T23740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.352100][T23740] RIP: 0033:0x7fb52378ebe9 [ 316.352110][T23740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.352125][T23740] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.352136][T23740] RAX: ffffffffffffffda RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 316.352142][T23740] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 316.352149][T23740] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 316.352155][T23740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.352162][T23740] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 316.352175][T23740] [ 316.480421][ T40] audit: type=1400 audit(1754623850.216:968): avc: denied { read } for pid=23747 comm="syz.2.3722" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 316.489882][ T40] audit: type=1400 audit(1754623850.216:969): avc: denied { open } for pid=23747 comm="syz.2.3722" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 316.547130][ T40] audit: type=1400 audit(1754623850.286:970): avc: denied { write } for pid=23756 comm="syz.2.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 316.563478][T18872] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 316.584130][T18872] usb 5-1: device descriptor read/8, error -71 [ 316.754137][ T9] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 316.789128][T23768] i2c i2c-1: Invalid block write size 34 [ 316.843376][T18872] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 316.863777][T18872] usb 5-1: device descriptor read/8, error -71 [ 316.915050][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.918695][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 316.922164][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 316.925022][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.928781][ T9] usb 6-1: config 0 descriptor?? [ 316.930874][T23752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.984112][T18872] usb usb5-port1: unable to enumerate USB device [ 317.098728][T23779] netlink: 'syz.2.3730': attribute type 39 has an invalid length. [ 317.769024][T23799] FAULT_INJECTION: forcing a failure. [ 317.769024][T23799] name failslab, interval 1, probability 0, space 0, times 0 [ 317.773368][T23799] CPU: 3 UID: 0 PID: 23799 Comm: syz.4.3734 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 317.773384][T23799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.773391][T23799] Call Trace: [ 317.773396][T23799] [ 317.773400][T23799] dump_stack_lvl+0x16c/0x1f0 [ 317.773421][T23799] should_fail_ex+0x512/0x640 [ 317.773431][T23799] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 317.773445][T23799] should_failslab+0xc2/0x120 [ 317.773458][T23799] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 317.773470][T23799] ? vm_area_dup+0x27/0x8d0 [ 317.773489][T23799] vm_area_dup+0x27/0x8d0 [ 317.773506][T23799] __split_vma+0x18e/0x1070 [ 317.773518][T23799] ? __pfx___split_vma+0x10/0x10 [ 317.773528][T23799] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 317.773552][T23799] vms_gather_munmap_vmas+0x3b1/0x1340 [ 317.773565][T23799] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 317.773577][T23799] ? mas_walk+0x6f5/0x980 [ 317.773596][T23799] __mmap_region+0x436/0x27b0 [ 317.773609][T23799] ? __pfx___mmap_region+0x10/0x10 [ 317.773624][T23799] ? __lock_acquire+0x62e/0x1ce0 [ 317.773642][T23799] ? is_bpf_text_address+0x94/0x1a0 [ 317.773658][T23799] ? kernel_text_address+0x8d/0x100 [ 317.773675][T23799] ? find_held_lock+0x2b/0x80 [ 317.773688][T23799] ? process_measurement+0x1e6/0x23e0 [ 317.773721][T23799] ? __lock_acquire+0xb97/0x1ce0 [ 317.773741][T23799] mmap_region+0x1ab/0x3f0 [ 317.773765][T23799] ? __get_unmapped_area+0x267/0x440 [ 317.773781][T23799] do_mmap+0xa3e/0x1210 [ 317.773797][T23799] ? __pfx_do_mmap+0x10/0x10 [ 317.773811][T23799] ? __pfx_down_write_killable+0x10/0x10 [ 317.773827][T23799] vm_mmap_pgoff+0x29e/0x470 [ 317.773844][T23799] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.773860][T23799] ? __fget_files+0x20e/0x3c0 [ 317.773875][T23799] ksys_mmap_pgoff+0x32c/0x5c0 [ 317.773889][T23799] ? __pfx_ksys_write+0x10/0x10 [ 317.773902][T23799] __x64_sys_mmap+0x125/0x190 [ 317.773936][T23799] do_syscall_64+0xcd/0x4c0 [ 317.773953][T23799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.773968][T23799] RIP: 0033:0x7f8df018ebe9 [ 317.773982][T23799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.773993][T23799] RSP: 002b:00007f8df0f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 317.774004][T23799] RAX: ffffffffffffffda RBX: 00007f8df03b5fa0 RCX: 00007f8df018ebe9 [ 317.774010][T23799] RDX: 0000000001000005 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 317.774017][T23799] RBP: 00007f8df0f49090 R08: 0000000000000003 R09: 000000008cbab000 [ 317.774023][T23799] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 317.774029][T23799] R13: 00007f8df03b6038 R14: 00007f8df03b5fa0 R15: 00007ffdb7aebb68 [ 317.774043][T23799] [ 318.012603][T23788] FAULT_INJECTION: forcing a failure. [ 318.012603][T23788] name fail_futex, interval 1, probability 0, space 0, times 1 [ 318.016886][T23788] CPU: 3 UID: 0 PID: 23788 Comm: syz.2.3731 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 318.016903][T23788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 318.016910][T23788] Call Trace: [ 318.016915][T23788] [ 318.016919][T23788] dump_stack_lvl+0x16c/0x1f0 [ 318.016940][T23788] should_fail_ex+0x512/0x640 [ 318.016952][T23788] get_futex_key+0x1d0/0x1560 [ 318.016971][T23788] ? __pfx_get_futex_key+0x10/0x10 [ 318.016987][T23788] ? __mutex_trylock_common+0xe9/0x250 [ 318.017008][T23788] futex_wake+0xea/0x530 [ 318.017022][T23788] ? __pfx_futex_wake+0x10/0x10 [ 318.017039][T23788] do_futex+0x1e3/0x350 [ 318.017056][T23788] ? __pfx_do_futex+0x10/0x10 [ 318.017072][T23788] ? __might_fault+0xe3/0x190 [ 318.017086][T23788] mm_release+0x24e/0x300 [ 318.017100][T23788] do_exit+0x68e/0x2bf0 [ 318.017115][T23788] ? __pfx___might_resched+0x10/0x10 [ 318.017132][T23788] ? __pfx_do_exit+0x10/0x10 [ 318.017147][T23788] ? do_raw_spin_lock+0x12c/0x2b0 [ 318.017159][T23788] ? find_held_lock+0x2b/0x80 [ 318.017174][T23788] do_group_exit+0xd3/0x2a0 [ 318.017191][T23788] get_signal+0x2673/0x26d0 [ 318.017216][T23788] ? __pfx_get_signal+0x10/0x10 [ 318.017229][T23788] ? find_held_lock+0x2b/0x80 [ 318.017243][T23788] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 318.017258][T23788] arch_do_signal_or_restart+0x8f/0x7d0 [ 318.017274][T23788] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.017287][T23788] ? __x64_sys_io_submit+0x26b/0x350 [ 318.017309][T23788] exit_to_user_mode_loop+0x84/0x110 [ 318.017322][T23788] do_syscall_64+0x3f6/0x4c0 [ 318.017333][T23788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.017344][T23788] RIP: 0033:0x7fb52378ebe9 [ 318.017354][T23788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.017365][T23788] RSP: 002b:00007fb5245bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 318.017375][T23788] RAX: 0000000000000001 RBX: 00007fb5239b5fa0 RCX: 00007fb52378ebe9 [ 318.017382][T23788] RDX: 0000200000000800 RSI: 0000000000000001 RDI: 00007fb52459b000 [ 318.017388][T23788] RBP: 00007fb5245bc090 R08: 0000000000000000 R09: 0000000000000000 [ 318.017395][T23788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.017400][T23788] R13: 00007fb5239b6038 R14: 00007fb5239b5fa0 R15: 00007ffccf6c4458 [ 318.017413][T23788] [ 318.333341][ T61] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 318.485274][ T61] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.488004][ T61] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.491150][ T61] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.494056][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 318.497374][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 318.502088][ T61] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.504954][ T61] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.507443][ T61] usb 9-1: Product: syz [ 318.508755][ T61] usb 9-1: Manufacturer: syz [ 318.512719][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 318.514465][ T61] cdc_wdm 9-1:1.0: skipping garbage [ 318.517801][ T61] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 318.519677][ T61] cdc_wdm 9-1:1.0: Unknown control protocol [ 318.709117][T23838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3743'. [ 318.815006][ T40] audit: type=1326 audit(1754623852.556:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23804 comm="syz.4.3737" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8df018ebe9 code=0x0 [ 318.877601][T17248] usb 9-1: USB disconnect, device number 13 [ 318.908469][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'. [ 318.913229][ T40] audit: type=1400 audit(1754623852.646:972): avc: denied { write } for pid=23857 comm="syz.0.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.009233][T23869] FAULT_INJECTION: forcing a failure. [ 319.009233][T23869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.013598][T23869] CPU: 0 UID: 0 PID: 23869 Comm: syz.0.3750 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 319.013613][T23869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.013621][T23869] Call Trace: [ 319.013625][T23869] [ 319.013629][T23869] dump_stack_lvl+0x16c/0x1f0 [ 319.013653][T23869] should_fail_ex+0x512/0x640 [ 319.013666][T23869] _copy_from_iter+0x29f/0x16f0 [ 319.013692][T23869] ? __alloc_skb+0x200/0x380 [ 319.013708][T23869] ? __pfx__copy_from_iter+0x10/0x10 [ 319.013722][T23869] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 319.013743][T23869] netlink_sendmsg+0x829/0xdd0 [ 319.013756][T23869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.013772][T23869] ____sys_sendmsg+0xa98/0xc70 [ 319.013785][T23869] ? copy_msghdr_from_user+0x10a/0x160 [ 319.013801][T23869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.013815][T23869] ? __pfx__kstrtoull+0x10/0x10 [ 319.013833][T23869] ___sys_sendmsg+0x134/0x1d0 [ 319.013850][T23869] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.013873][T23869] ? find_held_lock+0x2b/0x80 [ 319.013897][T23869] __sys_sendmmsg+0x200/0x420 [ 319.013932][T23869] ? __pfx___sys_sendmmsg+0x10/0x10 [ 319.013953][T23869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.013976][T23869] ? fput+0x9b/0xd0 [ 319.013992][T23869] ? ksys_write+0x1ac/0x250 [ 319.014003][T23869] ? __pfx_ksys_write+0x10/0x10 [ 319.014016][T23869] __x64_sys_sendmmsg+0x9c/0x100 [ 319.014032][T23869] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.014048][T23869] do_syscall_64+0xcd/0x4c0 [ 319.014059][T23869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.014071][T23869] RIP: 0033:0x7f3a1538ebe9 [ 319.014080][T23869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.014091][T23869] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.014102][T23869] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 319.014108][T23869] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 319.014115][T23869] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.014121][T23869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.014127][T23869] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 319.014141][T23869] [ 319.048583][T23871] input: syz1 as /devices/virtual/input/input27 [ 319.100598][T23871] FAULT_INJECTION: forcing a failure. [ 319.100598][T23871] name failslab, interval 1, probability 0, space 0, times 0 [ 319.104899][T23871] CPU: 2 UID: 0 PID: 23871 Comm: syz.0.3751 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 319.104932][T23871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.104939][T23871] Call Trace: [ 319.104944][T23871] [ 319.104948][T23871] dump_stack_lvl+0x16c/0x1f0 [ 319.104971][T23871] should_fail_ex+0x512/0x640 [ 319.104981][T23871] ? __kmalloc_noprof+0xbf/0x510 [ 319.104994][T23871] ? kobject_get_path+0xd2/0x2a0 [ 319.105003][T23871] should_failslab+0xc2/0x120 [ 319.105016][T23871] __kmalloc_noprof+0xd2/0x510 [ 319.105026][T23871] ? kasan_quarantine_put+0x10a/0x240 [ 319.105036][T23871] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.105055][T23871] kobject_get_path+0xd2/0x2a0 [ 319.105065][T23871] ? input_devices_seq_show+0x719/0x1130 [ 319.105082][T23871] input_devices_seq_show+0x8d/0x1130 [ 319.105096][T23871] ? __pfx_input_devices_seq_show+0x10/0x10 [ 319.105108][T23871] ? trace_kmalloc+0x2b/0xd0 [ 319.105125][T23871] ? seq_list_start+0x9a/0xc0 [ 319.105147][T23871] seq_read_iter+0xb1b/0x12c0 [ 319.105165][T23871] seq_read+0x39e/0x4e0 [ 319.105175][T23871] ? __pfx_seq_read+0x10/0x10 [ 319.105192][T23871] ? avc_policy_seqno+0x9/0x20 [ 319.105211][T23871] ? __pfx_seq_read+0x10/0x10 [ 319.105221][T23871] proc_reg_read+0x240/0x330 [ 319.105237][T23871] ? __pfx_proc_reg_read+0x10/0x10 [ 319.105253][T23871] vfs_read+0x1e1/0xc60 [ 319.105272][T23871] ? __pfx___mutex_lock+0x10/0x10 [ 319.105286][T23871] ? __pfx_vfs_read+0x10/0x10 [ 319.105306][T23871] ? __fget_files+0x20e/0x3c0 [ 319.105329][T23871] ksys_read+0x12a/0x250 [ 319.105344][T23871] ? __pfx_ksys_read+0x10/0x10 [ 319.105355][T23871] ? fput+0x9b/0xd0 [ 319.105371][T23871] do_syscall_64+0xcd/0x4c0 [ 319.105383][T23871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.105395][T23871] RIP: 0033:0x7f3a1538ebe9 [ 319.105404][T23871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.105415][T23871] RSP: 002b:00007f3a135f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.105427][T23871] RAX: ffffffffffffffda RBX: 00007f3a155b5fa0 RCX: 00007f3a1538ebe9 [ 319.105433][T23871] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 319.105440][T23871] RBP: 00007f3a135f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.105446][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.105452][T23871] R13: 00007f3a155b6038 R14: 00007f3a155b5fa0 R15: 00007ffe2ac381e8 [ 319.105466][T23871] [ 319.191936][ C2] vkms_vblank_simulate: vblank timer overrun [ 319.210124][T23880] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3752'. [ 319.218076][T23880] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3752'. [ 319.220897][T23880] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3752'. [ 319.315709][T23884] random: crng reseeded on system resumption [ 319.471856][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 319.473972][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 319.478834][ T9] usb 6-1: USB disconnect, device number 42 [ 319.515279][T23902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3758'. [ 319.623424][ T40] audit: type=1400 audit(1754623853.356:973): avc: denied { mounton } for pid=23911 comm="syz.4.3760" path="/file0" dev="ramfs" ino=64812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 319.637066][ T61] ------------[ cut here ]------------ [ 319.640555][ T61] refcount_t: underflow; use-after-free. [ 319.640783][ T40] audit: type=1400 audit(1754623853.376:974): avc: denied { ioctl } for pid=23922 comm="syz.2.3761" path="socket:[66681]" dev="sockfs" ino=66681 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.650227][ T61] WARNING: CPU: 2 PID: 61 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 319.653165][ T61] Modules linked in: [ 319.655226][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/2:1 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 319.660534][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.664123][ T61] Workqueue: md_misc mddev_delayed_delete [ 319.666181][ T61] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 319.668296][ T61] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 319.674947][ T61] RSP: 0018:ffffc90000aefc10 EFLAGS: 00010286 [ 319.676907][ T61] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 319.679419][ T61] RDX: ffff8880220d8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 319.681955][ T61] RBP: ffff8880267c6130 R08: 0000000000000001 R09: 0000000000000000 [ 319.684616][ T61] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880267c6134 [ 319.686937][T23923] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 319.687128][ T61] R13: dffffc0000000000 R14: ffff8880267c6130 R15: ffffc90000aefd10 [ 319.687157][ T61] FS: 0000000000000000(0000) GS:ffff8880d68c4000(0000) knlGS:0000000000000000 [ 319.690253][T23923] netlink: 'syz.2.3761': attribute type 10 has an invalid length. [ 319.692307][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.692318][ T61] CR2: 000000110c2fc14a CR3: 000000000e380000 CR4: 0000000000352ef0 [ 319.692327][ T61] Call Trace: [ 319.692331][ T61] [ 319.704395][ T61] kobject_put+0x230/0x5a0 [ 319.705845][ T61] process_one_work+0x9cc/0x1b70 [ 319.705921][T23923] bond0: (slave ): Enslaving as an active interface with an up link [ 319.707452][ T61] ? __pfx_process_one_work+0x10/0x10 [ 319.711869][ T61] ? assign_work+0x1a0/0x250 [ 319.713468][ T61] worker_thread+0x6c8/0xf10 [ 319.714989][ T61] ? __pfx_worker_thread+0x10/0x10 [ 319.716705][ T61] kthread+0x3c5/0x780 [ 319.718022][ T61] ? __pfx_kthread+0x10/0x10 [ 319.719500][ T61] ? rcu_is_watching+0x12/0xc0 [ 319.721019][ T61] ? __pfx_kthread+0x10/0x10 [ 319.722513][ T61] ret_from_fork+0x5d4/0x6f0 [ 319.724030][ T61] ? __pfx_kthread+0x10/0x10 [ 319.725511][ T61] ret_from_fork_asm+0x1a/0x30 [ 319.727072][ T61] [ 319.728080][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.730392][ T61] CPU: 2 UID: 0 PID: 61 Comm: kworker/2:1 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 319.734007][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.737394][ T61] Workqueue: md_misc mddev_delayed_delete [ 319.739220][ T61] Call Trace: [ 319.740306][ T61] [ 319.741271][ T61] dump_stack_lvl+0x3d/0x1f0 [ 319.742769][ T61] vpanic+0x6e8/0x7a0 [ 319.744064][ T61] ? __pfx_vpanic+0x10/0x10 [ 319.745529][ T61] ? refcount_warn_saturate+0x14a/0x210 [ 319.747281][ T61] panic+0xca/0xd0 [ 319.748491][ T61] ? __pfx_panic+0x10/0x10 [ 319.749924][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 319.751564][ T61] check_panic_on_warn+0xab/0xb0 [ 319.753131][ T61] __warn+0xf6/0x3c0 [ 319.754397][ T61] ? preempt_schedule_notrace+0x62/0xe0 [ 319.756148][ T61] ? refcount_warn_saturate+0x14a/0x210 [ 319.757907][ T61] report_bug+0x3c3/0x580 [ 319.759309][ T61] ? refcount_warn_saturate+0x14a/0x210 [ 319.761131][ T61] handle_bug+0x184/0x210 [ 319.762542][ T61] exc_invalid_op+0x17/0x50 [ 319.764005][ T61] asm_exc_invalid_op+0x1a/0x20 [ 319.765601][ T61] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 319.767629][ T61] Code: ff 89 de e8 a8 f0 d8 fc 84 db 0f 85 66 ff ff ff e8 bb f5 d8 fc c6 05 3c c2 b0 0b 01 90 48 c7 c7 00 80 15 8c e8 47 94 97 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 f5 d8 fc 0f b6 1d 17 c2 b0 0b 31 [ 319.774121][ T61] RSP: 0018:ffffc90000aefc10 EFLAGS: 00010286 [ 319.776172][ T61] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 319.778700][ T61] RDX: ffff8880220d8000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 319.781209][ T61] RBP: ffff8880267c6130 R08: 0000000000000001 R09: 0000000000000000 [ 319.783734][ T61] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880267c6134 [ 319.786259][ T61] R13: dffffc0000000000 R14: ffff8880267c6130 R15: ffffc90000aefd10 [ 319.788767][ T61] ? __warn_printk+0x198/0x350 [ 319.790321][ T61] ? __warn_printk+0x1a5/0x350 [ 319.791872][ T61] kobject_put+0x230/0x5a0 [ 319.793302][ T61] process_one_work+0x9cc/0x1b70 [ 319.794905][ T61] ? __pfx_process_one_work+0x10/0x10 [ 319.796639][ T61] ? assign_work+0x1a0/0x250 [ 319.798122][ T61] worker_thread+0x6c8/0xf10 [ 319.799605][ T61] ? __pfx_worker_thread+0x10/0x10 [ 319.801229][ T61] kthread+0x3c5/0x780 [ 319.802545][ T61] ? __pfx_kthread+0x10/0x10 [ 319.804026][ T61] ? rcu_is_watching+0x12/0xc0 [ 319.805593][ T61] ? __pfx_kthread+0x10/0x10 [ 319.807082][ T61] ret_from_fork+0x5d4/0x6f0 [ 319.808615][ T61] ? __pfx_kthread+0x10/0x10 [ 319.810252][ T61] ret_from_fork_asm+0x1a/0x30 [ 319.811843][ T61] [ 319.813377][ T61] Kernel Offset: disabled [ 319.814790][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:30:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000010000 RCX=ffffffff89b8af19 RDX=ffff88802353c880 RSI=ffffffff89b8af27 RDI=0000000000000004 RBP=dffffc0000000000 RSP=ffffc9000686f958 R8 =0000000000000004 R9 =000000000000cc4e R10=0000000000010000 R11=0000000000000000 R12=ffffc9000686fa38 R13=000000000000cc4e R14=ffff88810a466268 R15=0000000000000001 RIP=ffffffff81bb9361 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b47e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2ac386f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2ac386f6 00007ffe2ac386fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a15412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a155874a8 00007f3a155874a0 00007f3a15587498 00007f3a15587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a160ed100 00007f3a15587460 00007f3a15580004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a155874b8 00007f3a155874b0 00007f3a155874a8 00007f3a155874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a5332a8 RCX=ffffc90026f20001 RDX=0000000000000000 RSI=ffffffff8c161080 RDI=ffffffff8df5ce68 RBP=0000000000000001 RSP=ffffc90026f1e9d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000005 R11=00000000000121b2 R12=ffffffff816ae8a4 R13=ffffc90026f1eaa8 R14=ffffc90026f1edf8 R15=ffffc90026f1eadc RIP=ffffffff81a0b3b0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3a135f66c0 ffffffff 00c00000 GS =0000 ffff8880d67c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efffea02000 CR3=000000002b47e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555671f5490 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555672186bb 0000555567216f90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556720fa5e 000055556720f400 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000080049ea0075 6d6d6f692f766564 2f01ffffffffffff ffffe90802800338 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 09ca0008000e8003 0008000180808080 8080808082100004 1000061670e20100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff041880030e 80040fffffffffff ff043a0800020800 0100001608060a01 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002e5c080280 0302800421800321 800418a003188008 001890030fffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000e00000000 0206145e00000048 48f8a11b9fcc7237 a72ab6e688810010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100018800401 0000100806060168 d200080018e00300 100018d0030fffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0418c003 02100018b0035c10 0021900394120000 80020000000f000a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e000000000206 145e0000004848f8 a11b9fcc7237a72a b6e6888100100000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002e5c0802800302 8004218003218004 18a0031880080018 90030fffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856366d5 RDI=ffffffff9b106160 RBP=ffffffff9b106120 RSP=ffffc90000aef580 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b106120 R15=ffffffff85636670 RIP=ffffffff856366ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2fc14a CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000014 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb7aec076 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb7aec076 00007ffdb7aec07c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8df0212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161610004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0061616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c1160 RCX=ffffc90027920001 RDX=0000000000000000 RSI=ffffffff8df41e57 RDI=ffffffff8c161100 RBP=0000000000000001 RSP=ffffc9002791f2d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=00000000000121e6 R12=ffffffff816ae8a4 R13=0000000000000202 R14=ffff888037452440 R15=ffffc9002791f3cc RIP=ffffffff8b95a4e0 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc8ced79eb8 CR3=000000005bc0e000 CR4=00352ef0 DR0=0000000000008009 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 00000000000000e8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000b68 000000000002c498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000