last executing test programs: 1.350037797s ago: executing program 3 (id=2676): socket(0x2, 0x80805, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r3], 0x54}}, 0x0) 1.349430095s ago: executing program 3 (id=2678): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 1.270572475s ago: executing program 3 (id=2680): openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.2700128s ago: executing program 1 (id=2681): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000280)={0x20000, 0x0, 0x3, 0xa, 0xffffffff, 0x5}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c100000000000224e0000", 0x58}], 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x1010, r0, 0x93496000) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.269779412s ago: executing program 1 (id=2682): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.241119951s ago: executing program 1 (id=2683): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117400000000001800"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.111036632s ago: executing program 3 (id=2684): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) (fail_nth: 1) 1.030967486s ago: executing program 3 (id=2686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f00000003c0)="66b9800000c00f326635000800000f300f30bad104b82d4cef66b9940b00000f323e1f32f3f08021730f30b8f4000f00d8670f1c82080000000f7920"}], 0xaaaad35, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xdb', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000280)=0x8) r6 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r6}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3531320000000000000000000000000000000008000000000000000000000000000000000000000000000000000000003f21000000000000000000ed74aa5e8b24288adcc9d01d012f22a4364a42710177d3f7ad"], 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x2, 0x5, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x64, 0x0, 0xf5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @remote}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101080, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', '', [], 0xa, "1f06965b41a5172216c7b1d85f0f656a299b9c051e2a9af5c26d3ebe"}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000480)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0x2c, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x5, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r8, &(0x7f0000000100), 0x6) 963.287308ms ago: executing program 2 (id=2689): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) 946.580851ms ago: executing program 2 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 919.875697ms ago: executing program 2 (id=2691): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) (fail_nth: 1) 731.048332ms ago: executing program 2 (id=2692): openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 610.755888ms ago: executing program 2 (id=2693): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x6, 0x401, 0x0, 0x2}) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0xb2b5000) (async, rerun: 32) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff1100000006000000000f0100810401a80016ea1f400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e000db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d9345b1bb7bcd1813cb2a5e8619e2762a000000000058000000000000", 0xe3}], 0x1, 0x0, 0xfffffffffffffd10, 0x7400}, 0x0) (async, rerun: 64) r2 = getpid() (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000200)) (async) syz_pidfd_open(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0, 0xfffffffffffffe18, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000300)={r6, 0x0, 0x9, 0x0, 0x0, [0x0], [0x3, 0x0, 0x7, 0x8], [0x2, 0x0, 0x100, 0x3], [0x1000000000000, 0x0, 0xa, 0x200]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r7}) (async) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r11}) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r12, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000029c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001900)=""/4096, 0x1000, 0x1, &(0x7f0000002900)=""/188, 0xbc}, &(0x7f0000002a00)=0x40) 510.859906ms ago: executing program 2 (id=2694): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 358.416455ms ago: executing program 0 (id=2697): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 358.111853ms ago: executing program 1 (id=2698): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 346.229797ms ago: executing program 0 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 346.003589ms ago: executing program 1 (id=2700): unshare(0x4000400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 260.693607ms ago: executing program 1 (id=2701): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2003}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) 260.419493ms ago: executing program 0 (id=2702): openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 189.697349ms ago: executing program 3 (id=2703): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 125.374819ms ago: executing program 0 (id=2704): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (fail_nth: 1) 657.973µs ago: executing program 0 (id=2705): socket(0x2, 0x80805, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x54}}, 0x0) 0s ago: executing program 0 (id=2706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @private=0xa010100}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14040000", @ANYRES32=r1, @ANYBLOB="dbbf400300"/14], 0x14}}, 0x800) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) ioctl$EVIOCREVOKE(r8, 0x40044591, &(0x7f0000000380)=0x1) io_uring_setup(0x4927, &(0x7f00000003c0)={0x0, 0xab9a, 0x10, 0x2, 0xbb, 0x0, r8}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000025000000d80011907800000000fffffff10000e1ce001190785fb31c3f9a6150f433"], 0x0) kernel console output (not intermixed with test programs): R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 266.206744][T12316] [ 266.377567][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 266.393072][T12329] binder_alloc: 12328: pid 12328 spamming oneway? 1 buffers allocated for a total size of 5184 [ 266.445483][T12337] FAULT_INJECTION: forcing a failure. [ 266.445483][T12337] name failslab, interval 1, probability 0, space 0, times 0 [ 266.450104][T12337] CPU: 0 UID: 0 PID: 12337 Comm: syz.0.2357 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 266.450127][T12337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.450137][T12337] Call Trace: [ 266.450143][T12337] [ 266.450150][T12337] dump_stack_lvl+0x16c/0x1f0 [ 266.450174][T12337] should_fail_ex+0x512/0x640 [ 266.450196][T12337] ? fs_reclaim_acquire+0xae/0x150 [ 266.450220][T12337] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 266.450243][T12337] should_failslab+0xc2/0x120 [ 266.450263][T12337] __kmalloc_noprof+0xd2/0x510 [ 266.450285][T12337] tomoyo_realpath_from_path+0xc2/0x6e0 [ 266.450310][T12337] ? tomoyo_profile+0x47/0x60 [ 266.450337][T12337] tomoyo_path_number_perm+0x245/0x580 [ 266.450354][T12337] ? tomoyo_path_number_perm+0x237/0x580 [ 266.450376][T12337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.450397][T12337] ? find_held_lock+0x2b/0x80 [ 266.450446][T12337] ? find_held_lock+0x2b/0x80 [ 266.450470][T12337] ? hook_file_ioctl_common+0x145/0x410 [ 266.450501][T12337] ? __fget_files+0x20e/0x3c0 [ 266.450528][T12337] security_file_ioctl+0x9b/0x240 [ 266.450551][T12337] __x64_sys_ioctl+0xb7/0x210 [ 266.450580][T12337] do_syscall_64+0xcd/0x4c0 [ 266.450602][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.450619][T12337] RIP: 0033:0x7fcf2af8e969 [ 266.450633][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.450651][T12337] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.450668][T12337] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 266.450679][T12337] RDX: 0000200000000700 RSI: 00000000c0306201 RDI: 0000000000000004 [ 266.450690][T12337] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 266.450700][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.450711][T12337] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 266.450735][T12337] [ 266.450741][T12337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.476557][ T5978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 266.477478][T12337] binder_alloc: 12336: pid 12336 spamming oneway? 1 buffers allocated for a total size of 5184 [ 266.538696][T12341] binder_alloc: 12340: pid 12340 spamming oneway? 1 buffers allocated for a total size of 5184 [ 266.571055][T12345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.622401][T12347] FAULT_INJECTION: forcing a failure. [ 266.622401][T12347] name failslab, interval 1, probability 0, space 0, times 0 [ 266.628102][T12347] CPU: 3 UID: 0 PID: 12347 Comm: syz.2.2362 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 266.628128][T12347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.628138][T12347] Call Trace: [ 266.628145][T12347] [ 266.628152][T12347] dump_stack_lvl+0x16c/0x1f0 [ 266.628176][T12347] should_fail_ex+0x512/0x640 [ 266.628197][T12347] ? fs_reclaim_acquire+0xae/0x150 [ 266.628222][T12347] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 266.628246][T12347] should_failslab+0xc2/0x120 [ 266.628265][T12347] __kmalloc_noprof+0xd2/0x510 [ 266.628288][T12347] tomoyo_realpath_from_path+0xc2/0x6e0 [ 266.628313][T12347] ? tomoyo_profile+0x47/0x60 [ 266.628340][T12347] tomoyo_path_number_perm+0x245/0x580 [ 266.628359][T12347] ? tomoyo_path_number_perm+0x237/0x580 [ 266.628381][T12347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.628402][T12347] ? find_held_lock+0x2b/0x80 [ 266.628452][T12347] ? find_held_lock+0x2b/0x80 [ 266.628477][T12347] ? hook_file_ioctl_common+0x145/0x410 [ 266.628509][T12347] ? __fget_files+0x20e/0x3c0 [ 266.628529][T12347] security_file_ioctl+0x9b/0x240 [ 266.628554][T12347] __x64_sys_ioctl+0xb7/0x210 [ 266.628584][T12347] do_syscall_64+0xcd/0x4c0 [ 266.628607][T12347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.628624][T12347] RIP: 0033:0x7f523c38e969 [ 266.628639][T12347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.628656][T12347] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.628673][T12347] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 266.628685][T12347] RDX: 0000200000000380 RSI: 000000008030ae7c RDI: 0000000000000004 [ 266.628695][T12347] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 266.628705][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.628716][T12347] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 266.628740][T12347] [ 266.628747][T12347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.646529][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 266.671077][ T40] audit: type=1400 audit(1748552103.859:575): avc: denied { getopt } for pid=12348 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 266.674943][ T5978] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.730158][ T5978] usb 6-1: config 0 has no interface number 0 [ 266.732684][ T5978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.737862][ T5978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.741864][ T5978] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.745520][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.752063][ T5978] usb 6-1: config 0 descriptor?? [ 266.760853][ T5978] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 266.807789][ T838] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 266.956689][T12318] iowarrior 6-1:0.1: Error -90 while submitting URB [ 266.960961][ T5978] usb 6-1: USB disconnect, device number 18 [ 266.968937][T12372] FAULT_INJECTION: forcing a failure. [ 266.968937][T12372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.974353][T12372] CPU: 3 UID: 0 PID: 12372 Comm: syz.3.2369 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 266.974374][T12372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.974385][T12372] Call Trace: [ 266.974391][T12372] [ 266.974398][T12372] dump_stack_lvl+0x16c/0x1f0 [ 266.974420][T12372] should_fail_ex+0x512/0x640 [ 266.974447][T12372] _copy_from_user+0x2e/0xd0 [ 266.974470][T12372] copy_msghdr_from_user+0x98/0x160 [ 266.974491][T12372] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 266.974521][T12372] ___sys_sendmsg+0xfe/0x1d0 [ 266.974543][T12372] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.974564][T12372] ? __lock_acquire+0x622/0x1c90 [ 266.974613][T12372] __sys_sendmsg+0x16d/0x220 [ 266.974633][T12372] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.974668][T12372] do_syscall_64+0xcd/0x4c0 [ 266.974692][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.974711][T12372] RIP: 0033:0x7fa13758e969 [ 266.974726][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.974746][T12372] RSP: 002b:00007fa138407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.974762][T12372] RAX: ffffffffffffffda RBX: 00007fa1377b5fa0 RCX: 00007fa13758e969 [ 266.974775][T12372] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.974786][T12372] RBP: 00007fa138407090 R08: 0000000000000000 R09: 0000000000000000 [ 266.974797][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.974808][T12372] R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 266.974830][T12372] [ 266.999421][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 267.024700][T12376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.031596][ T838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.060924][ T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.065042][ T838] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.070126][ T838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.075554][ T838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.079854][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.088253][ T838] usbtmc 5-1:16.0: bulk endpoints not found [ 267.187351][T12386] FAULT_INJECTION: forcing a failure. [ 267.187351][T12386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.192846][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.2.2375 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 267.192871][T12386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.192882][T12386] Call Trace: [ 267.192889][T12386] [ 267.192897][T12386] dump_stack_lvl+0x16c/0x1f0 [ 267.192921][T12386] should_fail_ex+0x512/0x640 [ 267.192948][T12386] _copy_from_user+0x2e/0xd0 [ 267.192973][T12386] copy_msghdr_from_user+0x98/0x160 [ 267.192994][T12386] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.193026][T12386] ___sys_sendmsg+0xfe/0x1d0 [ 267.193046][T12386] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.193063][T12386] ? __lock_acquire+0x622/0x1c90 [ 267.193115][T12386] __sys_sendmsg+0x16d/0x220 [ 267.193136][T12386] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.193171][T12386] do_syscall_64+0xcd/0x4c0 [ 267.193194][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.193212][T12386] RIP: 0033:0x7f523c38e969 [ 267.193241][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.193259][T12386] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.193277][T12386] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 267.193288][T12386] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 267.193299][T12386] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 267.193309][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.193319][T12386] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 267.193344][T12386] [ 267.537495][ T40] audit: type=1400 audit(1748552104.729:576): avc: denied { write } for pid=12398 comm="syz.1.2381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 267.700566][T12412] FAULT_INJECTION: forcing a failure. [ 267.700566][T12412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.705867][T12412] CPU: 0 UID: 0 PID: 12412 Comm: syz.1.2384 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 267.705882][T12412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.705889][T12412] Call Trace: [ 267.705894][T12412] [ 267.705898][T12412] dump_stack_lvl+0x16c/0x1f0 [ 267.705915][T12412] should_fail_ex+0x512/0x640 [ 267.705932][T12412] _copy_from_user+0x2e/0xd0 [ 267.705948][T12412] copy_msghdr_from_user+0x98/0x160 [ 267.705961][T12412] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.705976][T12412] ? __lock_acquire+0x622/0x1c90 [ 267.705991][T12412] ___sys_recvmsg+0xdb/0x1a0 [ 267.706003][T12412] ? __pfx____sys_recvmsg+0x10/0x10 [ 267.706016][T12412] ? find_held_lock+0x2b/0x80 [ 267.706041][T12412] do_recvmmsg+0x2fe/0x750 [ 267.706054][T12412] ? __pfx_do_recvmmsg+0x10/0x10 [ 267.706068][T12412] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 267.706085][T12412] ? __fget_files+0x20e/0x3c0 [ 267.706099][T12412] __x64_sys_recvmmsg+0x22a/0x280 [ 267.706112][T12412] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 267.706129][T12412] do_syscall_64+0xcd/0x4c0 [ 267.706142][T12412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.706153][T12412] RIP: 0033:0x7f43ffb8e969 [ 267.706162][T12412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.706172][T12412] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 267.706184][T12412] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 267.706194][T12412] RDX: 0000000000000001 RSI: 0000200000003180 RDI: 0000000000000004 [ 267.706203][T12412] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 267.706212][T12412] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 267.706221][T12412] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 267.706242][T12412] [ 267.736535][ T40] audit: type=1400 audit(1748552104.919:577): avc: denied { ioctl } for pid=12413 comm="syz.2.2385" path="socket:[48564]" dev="sockfs" ino=48564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.737425][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.787744][ T40] audit: type=1400 audit(1748552104.939:578): avc: denied { write } for pid=12413 comm="syz.2.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.808825][T12417] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.106632][ T5948] Bluetooth: hci4: command tx timeout [ 268.391388][ T40] audit: type=1804 audit(1748552105.579:579): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2391" name="/newroot/67/file0" dev="tmpfs" ino=383 res=1 errno=0 [ 268.581750][T12446] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 268.687058][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 268.784672][ T40] audit: type=1400 audit(1748552105.969:580): avc: denied { setattr } for pid=12453 comm="syz.2.2400" path="socket:[45854]" dev="sockfs" ino=45854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.915773][T12461] FAULT_INJECTION: forcing a failure. [ 268.915773][T12461] name failslab, interval 1, probability 0, space 0, times 0 [ 268.919640][T12461] CPU: 2 UID: 0 PID: 12461 Comm: syz.2.2403 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 268.919654][T12461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 268.919661][T12461] Call Trace: [ 268.919666][T12461] [ 268.919671][T12461] dump_stack_lvl+0x16c/0x1f0 [ 268.919687][T12461] should_fail_ex+0x512/0x640 [ 268.919701][T12461] ? fs_reclaim_acquire+0xae/0x150 [ 268.919717][T12461] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.919731][T12461] should_failslab+0xc2/0x120 [ 268.919743][T12461] __kmalloc_noprof+0xd2/0x510 [ 268.919756][T12461] tomoyo_realpath_from_path+0xc2/0x6e0 [ 268.919771][T12461] ? tomoyo_profile+0x47/0x60 [ 268.919788][T12461] tomoyo_path_number_perm+0x245/0x580 [ 268.919800][T12461] ? tomoyo_path_number_perm+0x237/0x580 [ 268.919812][T12461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.919825][T12461] ? find_held_lock+0x2b/0x80 [ 268.919854][T12461] ? find_held_lock+0x2b/0x80 [ 268.919870][T12461] ? hook_file_ioctl_common+0x145/0x410 [ 268.919890][T12461] ? __fget_files+0x20e/0x3c0 [ 268.919902][T12461] security_file_ioctl+0x9b/0x240 [ 268.919917][T12461] __x64_sys_ioctl+0xb7/0x210 [ 268.919933][T12461] do_syscall_64+0xcd/0x4c0 [ 268.919946][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.919957][T12461] RIP: 0033:0x7f523c38e969 [ 268.919966][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.919976][T12461] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.919987][T12461] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 268.919994][T12461] RDX: 0000200000000000 RSI: 0000000000008949 RDI: 0000000000000004 [ 268.920000][T12461] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 268.920006][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.920012][T12461] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 268.920026][T12461] [ 268.920030][T12461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.097125][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 269.130005][ T40] audit: type=1400 audit(1748552106.319:581): avc: denied { read } for pid=12463 comm="syz.2.2404" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.138495][ T40] audit: type=1400 audit(1748552106.319:582): avc: denied { open } for pid=12463 comm="syz.2.2404" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.149620][ T40] audit: type=1400 audit(1748552106.339:583): avc: denied { read write } for pid=12463 comm="syz.2.2404" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 269.315760][T12465] __nla_validate_parse: 11 callbacks suppressed [ 269.315777][T12465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2404'. [ 269.581363][ T838] usb 5-1: USB disconnect, device number 21 [ 270.640998][T12475] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2408'. [ 270.688362][T12481] FAULT_INJECTION: forcing a failure. [ 270.688362][T12481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.692874][T12481] CPU: 3 UID: 0 PID: 12481 Comm: syz.3.2411 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 270.692900][T12481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.692910][T12481] Call Trace: [ 270.692930][T12481] [ 270.692939][T12481] dump_stack_lvl+0x16c/0x1f0 [ 270.692964][T12481] should_fail_ex+0x512/0x640 [ 270.692992][T12481] _copy_to_user+0x32/0xd0 [ 270.693017][T12481] simple_read_from_buffer+0xcb/0x170 [ 270.693045][T12481] proc_fail_nth_read+0x197/0x270 [ 270.693074][T12481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.693100][T12481] ? rw_verify_area+0xcf/0x680 [ 270.693122][T12481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.693148][T12481] vfs_read+0x1e4/0xc60 [ 270.693175][T12481] ? __pfx___mutex_lock+0x10/0x10 [ 270.693193][T12481] ? __pfx_vfs_read+0x10/0x10 [ 270.693226][T12481] ? __fget_files+0x20e/0x3c0 [ 270.693252][T12481] ksys_read+0x12a/0x250 [ 270.693277][T12481] ? __pfx_ksys_read+0x10/0x10 [ 270.693322][T12481] do_syscall_64+0xcd/0x4c0 [ 270.693342][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.693364][T12481] RIP: 0033:0x7fa13758d37c [ 270.693378][T12481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.693393][T12481] RSP: 002b:00007fa138407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.693410][T12481] RAX: ffffffffffffffda RBX: 00007fa1377b5fa0 RCX: 00007fa13758d37c [ 270.693421][T12481] RDX: 000000000000000f RSI: 00007fa1384070a0 RDI: 0000000000000007 [ 270.693432][T12481] RBP: 00007fa138407090 R08: 0000000000000000 R09: fffffffffffffd25 [ 270.693442][T12481] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 270.693452][T12481] R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 270.693475][T12481] [ 271.076891][ T5948] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 271.079674][ T5948] Bluetooth: hci0: Injecting HCI hardware error event [ 271.082045][T12488] Cannot find add_set index 3 as target [ 271.082888][ T5948] Bluetooth: hci0: hardware error 0x00 [ 271.436667][ T2306] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 271.587402][ T2306] usb 7-1: Using ep0 maxpacket: 8 [ 271.590431][ T2306] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.593239][ T2306] usb 7-1: config 0 has no interface number 0 [ 271.595658][ T2306] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.599286][ T2306] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.602637][ T2306] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.605490][ T2306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.609878][ T2306] usb 7-1: config 0 descriptor?? [ 271.615217][ T2306] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 271.813681][T12493] iowarrior 7-1:0.1: Error -90 while submitting URB [ 271.816305][ T2306] usb 7-1: USB disconnect, device number 14 [ 271.963895][T12502] fuse: Unknown parameter 'grou00000000000000000000' [ 272.045245][T12507] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2421'. [ 272.349442][T12518] FAULT_INJECTION: forcing a failure. [ 272.349442][T12518] name failslab, interval 1, probability 0, space 0, times 0 [ 272.354651][T12518] CPU: 0 UID: 0 PID: 12518 Comm: syz.2.2426 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 272.354675][T12518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.354687][T12518] Call Trace: [ 272.354693][T12518] [ 272.354701][T12518] dump_stack_lvl+0x16c/0x1f0 [ 272.354725][T12518] should_fail_ex+0x512/0x640 [ 272.354747][T12518] ? fs_reclaim_acquire+0xae/0x150 [ 272.354772][T12518] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.354794][T12518] should_failslab+0xc2/0x120 [ 272.354813][T12518] __kmalloc_noprof+0xd2/0x510 [ 272.354836][T12518] tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.354861][T12518] ? tomoyo_profile+0x47/0x60 [ 272.354889][T12518] tomoyo_path_number_perm+0x245/0x580 [ 272.354908][T12518] ? tomoyo_path_number_perm+0x237/0x580 [ 272.354929][T12518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.354950][T12518] ? find_held_lock+0x2b/0x80 [ 272.355001][T12518] ? find_held_lock+0x2b/0x80 [ 272.355027][T12518] ? hook_file_ioctl_common+0x145/0x410 [ 272.355058][T12518] ? __fget_files+0x20e/0x3c0 [ 272.355079][T12518] security_file_ioctl+0x9b/0x240 [ 272.355103][T12518] __x64_sys_ioctl+0xb7/0x210 [ 272.355129][T12518] do_syscall_64+0xcd/0x4c0 [ 272.355152][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.355169][T12518] RIP: 0033:0x7f523c38e969 [ 272.355183][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.355200][T12518] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.355217][T12518] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 272.355228][T12518] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000003 [ 272.355238][T12518] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 272.355248][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.355258][T12518] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 272.355282][T12518] [ 272.355290][T12518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.415972][T12522] fuse: Unknown parameter '0x0000000000000003' [ 272.455388][T12527] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2429'. [ 272.460651][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 272.460665][ T40] audit: type=1400 audit(1748552109.649:586): avc: denied { listen } for pid=12524 comm="syz.2.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.507287][T12530] FAULT_INJECTION: forcing a failure. [ 272.507287][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 272.511730][T12530] CPU: 3 UID: 0 PID: 12530 Comm: syz.1.2430 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 272.511745][T12530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.511752][T12530] Call Trace: [ 272.511756][T12530] [ 272.511760][T12530] dump_stack_lvl+0x16c/0x1f0 [ 272.511776][T12530] should_fail_ex+0x512/0x640 [ 272.511790][T12530] ? fs_reclaim_acquire+0xae/0x150 [ 272.511806][T12530] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.511821][T12530] should_failslab+0xc2/0x120 [ 272.511833][T12530] __kmalloc_noprof+0xd2/0x510 [ 272.511846][T12530] tomoyo_realpath_from_path+0xc2/0x6e0 [ 272.511862][T12530] ? tomoyo_profile+0x47/0x60 [ 272.511879][T12530] tomoyo_path_number_perm+0x245/0x580 [ 272.511890][T12530] ? tomoyo_path_number_perm+0x237/0x580 [ 272.511903][T12530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.511916][T12530] ? find_held_lock+0x2b/0x80 [ 272.511945][T12530] ? find_held_lock+0x2b/0x80 [ 272.511962][T12530] ? hook_file_ioctl_common+0x145/0x410 [ 272.511981][T12530] ? __fget_files+0x20e/0x3c0 [ 272.511994][T12530] security_file_ioctl+0x9b/0x240 [ 272.512009][T12530] __x64_sys_ioctl+0xb7/0x210 [ 272.512047][T12530] do_syscall_64+0xcd/0x4c0 [ 272.512069][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.512083][T12530] RIP: 0033:0x7f43ffb8e969 [ 272.512092][T12530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.512102][T12530] RSP: 002b:00007f4400a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.512113][T12530] RAX: ffffffffffffffda RBX: 00007f43ffdb6080 RCX: 00007f43ffb8e969 [ 272.512120][T12530] RDX: 0000200000000040 RSI: 0000000080045017 RDI: 0000000000000003 [ 272.512127][T12530] RBP: 00007f4400a18090 R08: 0000000000000000 R09: 0000000000000000 [ 272.512133][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.512139][T12530] R13: 0000000000000000 R14: 00007f43ffdb6080 R15: 00007ffd3942d158 [ 272.512153][T12530] [ 272.512157][T12530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.129425][T12543] overlayfs: failed to get inode (-116) [ 273.131562][T12543] overlayfs: failed to get inode (-116) [ 273.146543][ T5948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 273.226821][ T5978] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 273.266060][T12548] FAULT_INJECTION: forcing a failure. [ 273.266060][T12548] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 273.270832][T12548] CPU: 2 UID: 0 PID: 12548 Comm: syz.2.2438 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 273.270850][T12548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.270861][T12548] Call Trace: [ 273.270889][T12548] [ 273.270895][T12548] dump_stack_lvl+0x16c/0x1f0 [ 273.270933][T12548] should_fail_ex+0x512/0x640 [ 273.270954][T12548] should_fail_alloc_page+0xe7/0x130 [ 273.270968][T12548] prepare_alloc_pages+0x3c2/0x610 [ 273.270986][T12548] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 273.270997][T12548] ? process_measurement+0x4a6/0x23e0 [ 273.271010][T12548] ? down_write+0x14d/0x200 [ 273.271025][T12548] ? up_write+0x1b2/0x520 [ 273.271043][T12548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.271055][T12548] ? __lock_acquire+0x622/0x1c90 [ 273.271071][T12548] ? __lock_acquire+0x622/0x1c90 [ 273.271085][T12548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.271103][T12548] ? policy_nodemask+0xea/0x4e0 [ 273.271116][T12548] alloc_pages_mpol+0x1fb/0x550 [ 273.271128][T12548] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.271139][T12548] ? bpf_ksym_find+0x127/0x1c0 [ 273.271153][T12548] alloc_pages_noprof+0x131/0x390 [ 273.271164][T12548] pte_alloc_one+0x19/0x380 [ 273.271180][T12548] __do_fault+0x320/0x490 [ 273.271191][T12548] ? __pfx_filemap_map_pages+0x10/0x10 [ 273.271202][T12548] __handle_mm_fault+0x33b8/0x5450 [ 273.271222][T12548] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.271238][T12548] ? mtree_load+0x309/0xa40 [ 273.271259][T12548] handle_mm_fault+0x3fe/0xad0 [ 273.271277][T12548] __get_user_pages+0x570/0x3bb0 [ 273.271295][T12548] ? get_pid_task+0x106/0x250 [ 273.271310][T12548] ? __pfx___get_user_pages+0x10/0x10 [ 273.271334][T12548] faultin_page_range+0x249/0x980 [ 273.271352][T12548] madvise_do_behavior+0x233/0x3b0 [ 273.271366][T12548] ? __pfx_madvise_do_behavior+0x10/0x10 [ 273.271383][T12548] ? fput+0x70/0xf0 [ 273.271397][T12548] do_madvise+0x10b/0x170 [ 273.271411][T12548] __x64_sys_madvise+0xa9/0x110 [ 273.271423][T12548] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.271435][T12548] do_syscall_64+0xcd/0x4c0 [ 273.271448][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.271459][T12548] RIP: 0033:0x7f523c38e969 [ 273.271468][T12548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.271479][T12548] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 273.271489][T12548] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 273.271496][T12548] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 273.271526][T12548] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 273.271547][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.271554][T12548] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 273.271567][T12548] [ 273.385903][T12550] fuse: Unknown parameter '0x0000000000000003' [ 273.439413][ T40] audit: type=1400 audit(1748552110.629:587): avc: denied { bind } for pid=12551 comm="syz.2.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.440876][T12552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2440'. [ 273.456592][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 273.461189][ T5978] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.463484][ T5978] usb 6-1: config 0 has no interface number 0 [ 273.465278][ T5978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.468762][ T5978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.471718][ T5978] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 273.474342][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.478395][ T5978] usb 6-1: config 0 descriptor?? [ 273.485061][ T5978] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 273.685432][T12541] iowarrior 6-1:0.1: Error -90 while submitting URB [ 273.691258][ T2306] usb 6-1: USB disconnect, device number 19 [ 274.190255][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'. [ 274.282219][ T40] audit: type=1400 audit(1748552111.469:588): avc: denied { bind } for pid=12571 comm="syz.3.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 274.321417][T12574] fuse: Unknown parameter '0x0000000000000003' [ 274.402689][T12584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2452'. [ 274.556629][T12596] fuse: Unknown parameter '0x0000000000000003' [ 274.588756][T12599] netlink: 'syz.1.2459': attribute type 11 has an invalid length. [ 274.591370][T12599] netlink: 'syz.1.2459': attribute type 11 has an invalid length. [ 274.593790][T12599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2459'. [ 274.614887][T12599] netlink: 'syz.1.2459': attribute type 15 has an invalid length. [ 274.677237][ T60] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 274.768917][T12602] FAULT_INJECTION: forcing a failure. [ 274.768917][T12602] name failslab, interval 1, probability 0, space 0, times 0 [ 274.772715][T12602] CPU: 1 UID: 0 PID: 12602 Comm: syz.1.2460 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 274.772730][T12602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.772737][T12602] Call Trace: [ 274.772741][T12602] [ 274.772746][T12602] dump_stack_lvl+0x16c/0x1f0 [ 274.772763][T12602] should_fail_ex+0x512/0x640 [ 274.772776][T12602] ? fs_reclaim_acquire+0xae/0x150 [ 274.772793][T12602] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 274.772807][T12602] should_failslab+0xc2/0x120 [ 274.772819][T12602] __kmalloc_noprof+0xd2/0x510 [ 274.772832][T12602] tomoyo_realpath_from_path+0xc2/0x6e0 [ 274.772848][T12602] ? tomoyo_profile+0x47/0x60 [ 274.772865][T12602] tomoyo_path_number_perm+0x245/0x580 [ 274.772876][T12602] ? tomoyo_path_number_perm+0x237/0x580 [ 274.772889][T12602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.772902][T12602] ? find_held_lock+0x2b/0x80 [ 274.772931][T12602] ? find_held_lock+0x2b/0x80 [ 274.772947][T12602] ? hook_file_ioctl_common+0x145/0x410 [ 274.772966][T12602] ? __fget_files+0x20e/0x3c0 [ 274.772979][T12602] security_file_ioctl+0x9b/0x240 [ 274.772995][T12602] __x64_sys_ioctl+0xb7/0x210 [ 274.773011][T12602] do_syscall_64+0xcd/0x4c0 [ 274.773024][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.773035][T12602] RIP: 0033:0x7f43ffb8e969 [ 274.773044][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.773055][T12602] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.773065][T12602] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 274.773072][T12602] RDX: 0000200000000080 RSI: 00000000c01c64ad RDI: 0000000000000003 [ 274.773078][T12602] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 274.773084][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.773090][T12602] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 274.773104][T12602] [ 274.773108][T12602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.846610][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 274.850792][ T60] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.854151][ T60] usb 7-1: config 0 has no interface number 0 [ 274.856836][ T60] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.861420][ T60] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.865337][ T60] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.869156][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.875975][ T60] usb 7-1: config 0 descriptor?? [ 274.883543][ T60] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 274.888808][ T40] audit: type=1400 audit(1748552112.079:589): avc: denied { unmount } for pid=12091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 274.908639][T12606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2462'. [ 275.080546][T12588] iowarrior 7-1:0.1: Error -90 while submitting URB [ 275.084938][ T60] usb 7-1: USB disconnect, device number 15 [ 275.754378][T12617] fuse: Unknown parameter 'fd0x0000000000000003' [ 275.782505][ T40] audit: type=1400 audit(1748552112.969:590): avc: denied { read } for pid=12618 comm="syz.2.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.897862][ T40] audit: type=1400 audit(1748552113.089:591): avc: denied { read } for pid=12625 comm="syz.1.2470" path="socket:[50265]" dev="sockfs" ino=50265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.076598][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 276.226555][ T34] usb 7-1: device descriptor read/64, error -71 [ 276.476579][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 276.606557][ T34] usb 7-1: device descriptor read/64, error -71 [ 276.716939][ T34] usb usb7-port1: attempt power cycle [ 276.756619][T12629] fuse: Unknown parameter 'group_id00000000000000000000' [ 276.782628][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 277.067785][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 277.087013][ T34] usb 7-1: device descriptor read/8, error -71 [ 277.336575][ T34] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 277.357326][ T34] usb 7-1: device descriptor read/8, error -71 [ 277.402432][T12642] fuse: Unknown parameter 'fd0x0000000000000003' [ 277.470832][ T34] usb usb7-port1: unable to enumerate USB device [ 277.675611][T12651] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2479'. [ 277.929995][T12654] fuse: Bad value for 'fd' [ 278.387831][T12649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.390371][T12649] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 278.395506][T12649] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 278.533373][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2481'. [ 278.808283][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 279.009915][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 279.040987][T12677] fuse: Unknown parameter 'group_id00000000000000000000' [ 279.083644][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 279.176557][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 279.181442][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 279.185107][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.188560][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 279.191679][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 279.195507][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.200533][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.204397][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.217594][ T10] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 279.626599][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.783707][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 279.949701][T12695] FAULT_INJECTION: forcing a failure. [ 279.949701][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.953885][T12695] CPU: 2 UID: 0 PID: 12695 Comm: syz.3.2495 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 279.953901][T12695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.953908][T12695] Call Trace: [ 279.953912][T12695] [ 279.953916][T12695] dump_stack_lvl+0x16c/0x1f0 [ 279.953933][T12695] should_fail_ex+0x512/0x640 [ 279.953949][T12695] _copy_from_user+0x2e/0xd0 [ 279.953964][T12695] move_addr_to_kernel+0x65/0x170 [ 279.953982][T12695] __sys_bind+0x11b/0x260 [ 279.953998][T12695] ? __pfx___sys_bind+0x10/0x10 [ 279.954013][T12695] ? __fget_files+0x20e/0x3c0 [ 279.954028][T12695] ? __pfx_ksys_write+0x10/0x10 [ 279.954047][T12695] __x64_sys_bind+0x72/0xb0 [ 279.954062][T12695] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.954074][T12695] do_syscall_64+0xcd/0x4c0 [ 279.954087][T12695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.954098][T12695] RIP: 0033:0x7fa13758e969 [ 279.954107][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.954118][T12695] RSP: 002b:00007fa138407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 279.954128][T12695] RAX: ffffffffffffffda RBX: 00007fa1377b5fa0 RCX: 00007fa13758e969 [ 279.954135][T12695] RDX: 000000000000006e RSI: 00002000000001c0 RDI: 0000000000000003 [ 279.954141][T12695] RBP: 00007fa138407090 R08: 0000000000000000 R09: 0000000000000000 [ 279.954147][T12695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.954153][T12695] R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 279.954166][T12695] [ 280.584624][T12702] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2498'. [ 280.805109][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 281.049666][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 281.186542][ T34] usb 6-1: device descriptor read/64, error -71 [ 281.428383][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 281.568640][ T34] usb 6-1: device descriptor read/64, error -71 [ 281.658812][ T2306] usb 5-1: USB disconnect, device number 22 [ 281.677267][ T34] usb usb6-port1: attempt power cycle [ 281.683307][T12724] fuse: Bad value for 'user_id' [ 281.684979][T12724] fuse: Bad value for 'user_id' [ 281.709733][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.711440][T12726] FAULT_INJECTION: forcing a failure. [ 281.711440][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 281.716028][T12726] CPU: 0 UID: 0 PID: 12726 Comm: syz.0.2507 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 281.716043][T12726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.716050][T12726] Call Trace: [ 281.716054][T12726] [ 281.716059][T12726] dump_stack_lvl+0x16c/0x1f0 [ 281.716076][T12726] should_fail_ex+0x512/0x640 [ 281.716090][T12726] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 281.716110][T12726] should_failslab+0xc2/0x120 [ 281.716122][T12726] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 281.716139][T12726] ? __alloc_skb+0x2b2/0x380 [ 281.716152][T12726] __alloc_skb+0x2b2/0x380 [ 281.716163][T12726] ? __pfx___alloc_skb+0x10/0x10 [ 281.716173][T12726] ? find_held_lock+0x2b/0x80 [ 281.716194][T12726] alloc_skb_with_frags+0xe0/0x860 [ 281.716211][T12726] sock_alloc_send_pskb+0x7fb/0x990 [ 281.716221][T12726] ? avc_has_perm+0x11a/0x1c0 [ 281.716243][T12726] ? __pfx_avc_has_perm+0x10/0x10 [ 281.716261][T12726] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 281.716270][T12726] ? avc_has_perm_noaudit+0x149/0x3b0 [ 281.716288][T12726] ? sock_has_perm+0x259/0x2f0 [ 281.716299][T12726] ? __pfx_sock_has_perm+0x10/0x10 [ 281.716311][T12726] hci_sock_sendmsg+0x1c7/0x25f0 [ 281.716327][T12726] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 281.716343][T12726] sock_write_iter+0x4fc/0x5b0 [ 281.716359][T12726] ? __pfx_sock_write_iter+0x10/0x10 [ 281.716378][T12726] ? bpf_lsm_file_permission+0x9/0x10 [ 281.716392][T12726] ? security_file_permission+0x71/0x210 [ 281.716407][T12726] ? rw_verify_area+0xcf/0x680 [ 281.716434][T12726] vfs_write+0x6c7/0x1150 [ 281.716451][T12726] ? __pfx_sock_write_iter+0x10/0x10 [ 281.716467][T12726] ? __pfx_vfs_write+0x10/0x10 [ 281.716482][T12726] ? find_held_lock+0x2b/0x80 [ 281.716507][T12726] ksys_write+0x1f8/0x250 [ 281.716523][T12726] ? __pfx_ksys_write+0x10/0x10 [ 281.716543][T12726] do_syscall_64+0xcd/0x4c0 [ 281.716556][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.716568][T12726] RIP: 0033:0x7fcf2af8e969 [ 281.716577][T12726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.716587][T12726] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.716598][T12726] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 281.716604][T12726] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000004 [ 281.716611][T12726] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 281.716617][T12726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.716623][T12726] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 281.716637][T12726] [ 281.760563][T12728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2508'. [ 281.910721][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 281.980775][T12742] Bluetooth: MGMT ver 1.23 [ 281.993390][ T40] audit: type=1400 audit(1748552119.179:592): avc: denied { write } for pid=12731 comm="syz.0.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.027732][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 282.032505][T12748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.047481][ T34] usb 6-1: device descriptor read/8, error -71 [ 282.286600][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 282.307196][ T34] usb 6-1: device descriptor read/8, error -71 [ 282.417790][ T34] usb usb6-port1: unable to enumerate USB device [ 282.771839][T12750] fuse: Bad value for 'user_id' [ 282.773941][T12750] fuse: Bad value for 'user_id' [ 282.805531][ T40] audit: type=1400 audit(1748552119.989:593): avc: denied { setopt } for pid=12751 comm="syz.2.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 282.808448][T12752] syz.2.2517: attempt to access beyond end of device [ 282.808448][T12752] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 282.816742][T12752] qnx6: unable to read the first superblock [ 282.819531][T12752] syz.2.2517: attempt to access beyond end of device [ 282.819531][T12752] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 282.823836][T12752] qnx6: unable to read the first superblock [ 282.825741][T12752] qnx6: unable to read the first superblock [ 282.911728][T12754] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.916252][T12754] FAULT_INJECTION: forcing a failure. [ 282.916252][T12754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.921911][T12754] CPU: 0 UID: 0 PID: 12754 Comm: syz.0.2518 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 282.921934][T12754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.921960][T12754] Call Trace: [ 282.921968][T12754] [ 282.921975][T12754] dump_stack_lvl+0x16c/0x1f0 [ 282.921999][T12754] should_fail_ex+0x512/0x640 [ 282.922024][T12754] _copy_from_user+0x2e/0xd0 [ 282.922048][T12754] copy_msghdr_from_user+0x98/0x160 [ 282.922067][T12754] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 282.922098][T12754] ___sys_sendmsg+0xfe/0x1d0 [ 282.922118][T12754] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.922135][T12754] ? __lock_acquire+0x622/0x1c90 [ 282.922186][T12754] __sys_sendmsg+0x16d/0x220 [ 282.922206][T12754] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.922240][T12754] ? fput+0x70/0xf0 [ 282.922263][T12754] do_syscall_64+0xcd/0x4c0 [ 282.922285][T12754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.922303][T12754] RIP: 0033:0x7fcf2af8e969 [ 282.922318][T12754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.922335][T12754] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.922352][T12754] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 282.922364][T12754] RDX: 0000000034004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 282.922375][T12754] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 282.922385][T12754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.922394][T12754] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 282.922417][T12754] [ 283.032647][ T40] audit: type=1400 audit(1748552120.219:594): avc: denied { create } for pid=12755 comm="syz.0.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.040639][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 283.153426][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 283.180682][T12761] could not allocate digest TFM handle xcbc(compress_null-generic) [ 283.211647][T12772] FAULT_INJECTION: forcing a failure. [ 283.211647][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 283.216341][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.2.2523 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 283.216357][T12772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.216364][T12772] Call Trace: [ 283.216369][T12772] [ 283.216374][T12772] dump_stack_lvl+0x16c/0x1f0 [ 283.216390][T12772] should_fail_ex+0x512/0x640 [ 283.216404][T12772] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 283.216435][T12772] should_failslab+0xc2/0x120 [ 283.216448][T12772] __kmalloc_cache_noprof+0x6a/0x3e0 [ 283.216468][T12772] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 283.216487][T12772] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 283.216504][T12772] ? __pfx___might_resched+0x10/0x10 [ 283.216517][T12772] ? rcu_is_watching+0x12/0xc0 [ 283.216527][T12772] ? trace_contention_end+0xdd/0x130 [ 283.216542][T12772] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 283.216558][T12772] ? snd_pcm_oss_read+0x379/0x760 [ 283.216579][T12772] ? get_pid_task+0xfc/0x250 [ 283.216594][T12772] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 283.216611][T12772] snd_pcm_oss_read+0x39b/0x760 [ 283.216626][T12772] ? security_file_permission+0x71/0x210 [ 283.216643][T12772] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 283.216658][T12772] vfs_read+0x1e4/0xc60 [ 283.216677][T12772] ? __pfx_vfs_read+0x10/0x10 [ 283.216692][T12772] ? find_held_lock+0x2b/0x80 [ 283.216709][T12772] ? __fget_files+0x204/0x3c0 [ 283.216721][T12772] ? __fget_files+0x20e/0x3c0 [ 283.216734][T12772] ksys_read+0x12a/0x250 [ 283.216750][T12772] ? __pfx_ksys_read+0x10/0x10 [ 283.216770][T12772] do_syscall_64+0xcd/0x4c0 [ 283.216783][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.216794][T12772] RIP: 0033:0x7f523c38e969 [ 283.216804][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.216814][T12772] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.216824][T12772] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 283.216830][T12772] RDX: 0000000000001038 RSI: 00002000000002c0 RDI: 0000000000000004 [ 283.216837][T12772] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 283.216843][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.216849][T12772] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 283.216863][T12772] [ 283.374350][T12779] fuse: Bad value for 'fd' [ 283.426771][ T40] audit: type=1400 audit(1748552120.619:595): avc: denied { create } for pid=12780 comm="syz.2.2527" name="#2c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.433500][ T40] audit: type=1400 audit(1748552120.619:596): avc: denied { link } for pid=12780 comm="syz.2.2527" name="#2c" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.441807][ T40] audit: type=1400 audit(1748552120.619:597): avc: denied { rename } for pid=12780 comm="syz.2.2527" name="#2d" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.630392][T12786] FAULT_INJECTION: forcing a failure. [ 283.630392][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 283.634675][T12786] CPU: 1 UID: 0 PID: 12786 Comm: syz.2.2529 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 283.634691][T12786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.634697][T12786] Call Trace: [ 283.634701][T12786] [ 283.634706][T12786] dump_stack_lvl+0x16c/0x1f0 [ 283.634722][T12786] should_fail_ex+0x512/0x640 [ 283.634736][T12786] ? fs_reclaim_acquire+0xae/0x150 [ 283.634752][T12786] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 283.634766][T12786] should_failslab+0xc2/0x120 [ 283.634778][T12786] __kmalloc_noprof+0xd2/0x510 [ 283.634791][T12786] tomoyo_realpath_from_path+0xc2/0x6e0 [ 283.634807][T12786] ? tomoyo_profile+0x47/0x60 [ 283.634824][T12786] tomoyo_path_number_perm+0x245/0x580 [ 283.634834][T12786] ? tomoyo_path_number_perm+0x237/0x580 [ 283.634847][T12786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.634860][T12786] ? find_held_lock+0x2b/0x80 [ 283.634889][T12786] ? find_held_lock+0x2b/0x80 [ 283.634905][T12786] ? hook_file_ioctl_common+0x145/0x410 [ 283.634924][T12786] ? __fget_files+0x20e/0x3c0 [ 283.634936][T12786] security_file_ioctl+0x9b/0x240 [ 283.634951][T12786] __x64_sys_ioctl+0xb7/0x210 [ 283.634966][T12786] do_syscall_64+0xcd/0x4c0 [ 283.634980][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.634991][T12786] RIP: 0033:0x7f523c38e969 [ 283.635000][T12786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.635011][T12786] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.635021][T12786] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 283.635028][T12786] RDX: 0000200000002400 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 283.635034][T12786] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 283.635040][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.635046][T12786] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 283.635059][T12786] [ 283.635257][T12786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.786697][ T5948] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.884722][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 283.888298][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 283.951336][T12801] fuse: Bad value for 'fd' [ 283.984192][T12803] FAULT_INJECTION: forcing a failure. [ 283.984192][T12803] name failslab, interval 1, probability 0, space 0, times 0 [ 283.988640][T12803] CPU: 3 UID: 0 PID: 12803 Comm: syz.1.2536 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 283.988655][T12803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 283.988662][T12803] Call Trace: [ 283.988667][T12803] [ 283.988671][T12803] dump_stack_lvl+0x16c/0x1f0 [ 283.988688][T12803] should_fail_ex+0x512/0x640 [ 283.988703][T12803] ? __kvmalloc_node_noprof+0x122/0x620 [ 283.988722][T12803] should_failslab+0xc2/0x120 [ 283.988733][T12803] __kvmalloc_node_noprof+0x135/0x620 [ 283.988750][T12803] ? __pfx___mutex_lock+0x10/0x10 [ 283.988762][T12803] ? traverse.part.0.constprop.0+0x392/0x640 [ 283.988782][T12803] ? traverse.part.0.constprop.0+0x392/0x640 [ 283.988797][T12803] traverse.part.0.constprop.0+0x392/0x640 [ 283.988814][T12803] ? _kstrtoull+0x145/0x200 [ 283.988824][T12803] ? __pfx__kstrtoull+0x10/0x10 [ 283.988836][T12803] seq_read_iter+0x932/0x12c0 [ 283.988858][T12803] seq_read+0x39e/0x4e0 [ 283.988874][T12803] ? __pfx_seq_read+0x10/0x10 [ 283.988892][T12803] ? get_pid_task+0xfc/0x250 [ 283.988908][T12803] ? avc_policy_seqno+0x9/0x20 [ 283.988927][T12803] ? __pfx_seq_read+0x10/0x10 [ 283.988942][T12803] proc_reg_read+0x23d/0x330 [ 283.988955][T12803] ? __pfx_proc_reg_read+0x10/0x10 [ 283.988969][T12803] vfs_read+0x1e4/0xc60 [ 283.988988][T12803] ? __pfx_vfs_read+0x10/0x10 [ 283.989003][T12803] ? find_held_lock+0x2b/0x80 [ 283.989020][T12803] ? __fget_files+0x204/0x3c0 [ 283.989032][T12803] ? __fget_files+0x20e/0x3c0 [ 283.989040][T12803] ? __fget_files+0x1a0/0x3c0 [ 283.989053][T12803] __x64_sys_pread64+0x1eb/0x250 [ 283.989070][T12803] ? __pfx___x64_sys_pread64+0x10/0x10 [ 283.989092][T12803] do_syscall_64+0xcd/0x4c0 [ 283.989105][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.989117][T12803] RIP: 0033:0x7f43ffb8e969 [ 283.989126][T12803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.989137][T12803] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 283.989147][T12803] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 283.989154][T12803] RDX: 0000000000000094 RSI: 0000200000004c80 RDI: 0000000000000003 [ 283.989166][T12803] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 283.989172][T12803] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 283.989178][T12803] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 283.989192][T12803] [ 284.084484][ C3] vkms_vblank_simulate: vblank timer overrun [ 284.188113][T12821] FAULT_INJECTION: forcing a failure. [ 284.188113][T12821] name failslab, interval 1, probability 0, space 0, times 0 [ 284.192139][T12821] CPU: 2 UID: 0 PID: 12821 Comm: syz.1.2542 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 284.192155][T12821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 284.192161][T12821] Call Trace: [ 284.192165][T12821] [ 284.192170][T12821] dump_stack_lvl+0x16c/0x1f0 [ 284.192186][T12821] should_fail_ex+0x512/0x640 [ 284.192200][T12821] ? fs_reclaim_acquire+0xae/0x150 [ 284.192216][T12821] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.192231][T12821] should_failslab+0xc2/0x120 [ 284.192243][T12821] __kmalloc_noprof+0xd2/0x510 [ 284.192256][T12821] tomoyo_realpath_from_path+0xc2/0x6e0 [ 284.192272][T12821] ? tomoyo_profile+0x47/0x60 [ 284.192289][T12821] tomoyo_path_number_perm+0x245/0x580 [ 284.192300][T12821] ? tomoyo_path_number_perm+0x237/0x580 [ 284.192313][T12821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.192326][T12821] ? find_held_lock+0x2b/0x80 [ 284.192355][T12821] ? find_held_lock+0x2b/0x80 [ 284.192371][T12821] ? hook_file_ioctl_common+0x145/0x410 [ 284.192391][T12821] ? __fget_files+0x20e/0x3c0 [ 284.192404][T12821] security_file_ioctl+0x9b/0x240 [ 284.192420][T12821] __x64_sys_ioctl+0xb7/0x210 [ 284.192435][T12821] do_syscall_64+0xcd/0x4c0 [ 284.192449][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.192460][T12821] RIP: 0033:0x7f43ffb8e969 [ 284.192469][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.192480][T12821] RSP: 002b:00007f4400a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.192490][T12821] RAX: ffffffffffffffda RBX: 00007f43ffdb6080 RCX: 00007f43ffb8e969 [ 284.192497][T12821] RDX: 0000000000000000 RSI: 0000000040047454 RDI: 0000000000000008 [ 284.192503][T12821] RBP: 00007f4400a18090 R08: 0000000000000000 R09: 0000000000000000 [ 284.192510][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.192516][T12821] R13: 0000000000000000 R14: 00007f43ffdb6080 R15: 00007ffd3942d158 [ 284.192530][T12821] [ 284.192535][T12821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.193533][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 284.300358][T12823] fuse: Bad value for 'fd' [ 285.188758][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 285.221490][T12850] FAULT_INJECTION: forcing a failure. [ 285.221490][T12850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.224038][T12851] fuse: Bad value for 'fd' [ 285.229641][T12850] CPU: 3 UID: 0 PID: 12850 Comm: syz.0.2553 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 285.229664][T12850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.229675][T12850] Call Trace: [ 285.229682][T12850] [ 285.229689][T12850] dump_stack_lvl+0x16c/0x1f0 [ 285.229712][T12850] should_fail_ex+0x512/0x640 [ 285.229738][T12850] _copy_from_user+0x2e/0xd0 [ 285.229763][T12850] parse_command+0xa0/0x270 [ 285.229789][T12850] ? __pfx_parse_command+0x10/0x10 [ 285.229822][T12850] bm_entry_write+0x77/0x420 [ 285.229850][T12850] ? __pfx_bm_entry_write+0x10/0x10 [ 285.229876][T12850] vfs_write+0x29d/0x1150 [ 285.229907][T12850] ? __pfx_vfs_write+0x10/0x10 [ 285.229929][T12850] ? find_held_lock+0x2b/0x80 [ 285.229956][T12850] ? __fget_files+0x204/0x3c0 [ 285.229976][T12850] ? __fget_files+0x20e/0x3c0 [ 285.229990][T12850] ? __fget_files+0x1a0/0x3c0 [ 285.230013][T12850] __x64_sys_pwrite64+0x1eb/0x250 [ 285.230041][T12850] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 285.230075][T12850] do_syscall_64+0xcd/0x4c0 [ 285.230097][T12850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.230120][T12850] RIP: 0033:0x7fcf2af8e969 [ 285.230135][T12850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.230151][T12850] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 285.230168][T12850] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 285.230179][T12850] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 285.230189][T12850] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 285.230200][T12850] R10: 0000000000000d8e R11: 0000000000000246 R12: 0000000000000001 [ 285.230210][T12850] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 285.230233][T12850] [ 285.339251][T12858] usb usb8: usbfs: process 12858 (syz.3.2556) did not claim interface 0 before use [ 285.343292][T12857] usb usb8: usbfs: process 12857 (syz.3.2556) did not claim interface 0 before use [ 285.648418][ T40] audit: type=1400 audit(1748552122.839:598): avc: denied { append } for pid=12867 comm="syz.3.2561" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 285.834575][T12871] FAULT_INJECTION: forcing a failure. [ 285.834575][T12871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.838592][T12871] CPU: 3 UID: 0 PID: 12871 Comm: syz.2.2562 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 285.838606][T12871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 285.838613][T12871] Call Trace: [ 285.838618][T12871] [ 285.838622][T12871] dump_stack_lvl+0x16c/0x1f0 [ 285.838638][T12871] should_fail_ex+0x512/0x640 [ 285.838655][T12871] _copy_from_user+0x2e/0xd0 [ 285.838670][T12871] __x64_sys_cachestat+0x18a/0x5f0 [ 285.838686][T12871] ? __pfx___x64_sys_cachestat+0x10/0x10 [ 285.838707][T12871] do_syscall_64+0xcd/0x4c0 [ 285.838720][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.838732][T12871] RIP: 0033:0x7f523c38e969 [ 285.838740][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.838751][T12871] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 285.838761][T12871] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 285.838768][T12871] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 285.838775][T12871] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 285.838781][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.838788][T12871] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 285.838801][T12871] [ 285.896156][ C3] vkms_vblank_simulate: vblank timer overrun [ 285.953855][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 286.286882][T12899] FAULT_INJECTION: forcing a failure. [ 286.286882][T12899] name failslab, interval 1, probability 0, space 0, times 0 [ 286.291158][T12899] CPU: 1 UID: 0 PID: 12899 Comm: syz.0.2572 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 286.291189][T12899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.291199][T12899] Call Trace: [ 286.291205][T12899] [ 286.291212][T12899] dump_stack_lvl+0x16c/0x1f0 [ 286.291238][T12899] should_fail_ex+0x512/0x640 [ 286.291257][T12899] ? fs_reclaim_acquire+0xae/0x150 [ 286.291273][T12899] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 286.291288][T12899] should_failslab+0xc2/0x120 [ 286.291300][T12899] __kmalloc_noprof+0xd2/0x510 [ 286.291313][T12899] tomoyo_realpath_from_path+0xc2/0x6e0 [ 286.291328][T12899] ? tomoyo_profile+0x47/0x60 [ 286.291345][T12899] tomoyo_path_number_perm+0x245/0x580 [ 286.291357][T12899] ? tomoyo_path_number_perm+0x237/0x580 [ 286.291370][T12899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.291382][T12899] ? find_held_lock+0x2b/0x80 [ 286.291411][T12899] ? find_held_lock+0x2b/0x80 [ 286.291427][T12899] ? hook_file_ioctl_common+0x145/0x410 [ 286.291447][T12899] ? __fget_files+0x20e/0x3c0 [ 286.291459][T12899] security_file_ioctl+0x9b/0x240 [ 286.291474][T12899] __x64_sys_ioctl+0xb7/0x210 [ 286.291490][T12899] do_syscall_64+0xcd/0x4c0 [ 286.291503][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.291514][T12899] RIP: 0033:0x7fcf2af8e969 [ 286.291523][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.291533][T12899] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.291544][T12899] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 286.291550][T12899] RDX: 0000000000000000 RSI: 0000000000005523 RDI: 0000000000000005 [ 286.291556][T12899] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 286.291563][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.291569][T12899] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 286.291582][T12899] [ 286.291587][T12899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.377765][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 286.485402][ T40] audit: type=1400 audit(1748552123.669:599): avc: denied { lock } for pid=12909 comm="syz.3.2576" path="socket:[50712]" dev="sockfs" ino=50712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 286.555011][T12917] FAULT_INJECTION: forcing a failure. [ 286.555011][T12917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.559121][T12917] CPU: 1 UID: 0 PID: 12917 Comm: syz.0.2578 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 286.559136][T12917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 286.559144][T12917] Call Trace: [ 286.559148][T12917] [ 286.559153][T12917] dump_stack_lvl+0x16c/0x1f0 [ 286.559183][T12917] should_fail_ex+0x512/0x640 [ 286.559204][T12917] _copy_from_user+0x2e/0xd0 [ 286.559219][T12917] copy_msghdr_from_user+0x98/0x160 [ 286.559232][T12917] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.559250][T12917] ___sys_sendmsg+0xfe/0x1d0 [ 286.559263][T12917] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.559273][T12917] ? __lock_acquire+0x622/0x1c90 [ 286.559302][T12917] __sys_sendmsg+0x16d/0x220 [ 286.559314][T12917] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.559331][T12917] ? fput+0x70/0xf0 [ 286.559346][T12917] do_syscall_64+0xcd/0x4c0 [ 286.559364][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.559376][T12917] RIP: 0033:0x7fcf2af8e969 [ 286.559385][T12917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.559395][T12917] RSP: 002b:00007fcf2be59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.559406][T12917] RAX: ffffffffffffffda RBX: 00007fcf2b1b5fa0 RCX: 00007fcf2af8e969 [ 286.559412][T12917] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 286.559418][T12917] RBP: 00007fcf2be59090 R08: 0000000000000000 R09: 0000000000000000 [ 286.559425][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.559431][T12917] R13: 0000000000000000 R14: 00007fcf2b1b5fa0 R15: 00007fff281aed08 [ 286.559444][T12917] [ 286.762636][ T40] audit: type=1400 audit(1748552123.949:600): avc: denied { module_request } for pid=12925 comm="syz.0.2582" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 286.801427][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 286.841469][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2583'. [ 286.991843][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.005209][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.008455][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.011825][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.016913][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.070553][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2586'. [ 287.181074][T12932] chnl_net:caif_netlink_parms(): no params data found [ 287.243287][T12951] FAULT_INJECTION: forcing a failure. [ 287.243287][T12951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.249502][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.2.2588 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 287.249526][T12951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.249537][T12951] Call Trace: [ 287.249543][T12951] [ 287.249550][T12951] dump_stack_lvl+0x16c/0x1f0 [ 287.249575][T12951] should_fail_ex+0x512/0x640 [ 287.249602][T12951] _copy_from_user+0x2e/0xd0 [ 287.249626][T12951] copy_msghdr_from_user+0x98/0x160 [ 287.249646][T12951] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 287.249676][T12951] ___sys_sendmsg+0xfe/0x1d0 [ 287.249696][T12951] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.249713][T12951] ? __lock_acquire+0x622/0x1c90 [ 287.249764][T12951] __sys_sendmsg+0x16d/0x220 [ 287.249783][T12951] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.249818][T12951] do_syscall_64+0xcd/0x4c0 [ 287.249840][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.249858][T12951] RIP: 0033:0x7f523c38e969 [ 287.249872][T12951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.249888][T12951] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.249905][T12951] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 287.249917][T12951] RDX: 0000000020004040 RSI: 0000200000000180 RDI: 0000000000000003 [ 287.249927][T12951] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 287.249937][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.249964][T12951] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 287.249989][T12951] [ 287.253098][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.312365][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.314997][T12932] bridge_slave_0: entered allmulticast mode [ 287.320655][T12932] bridge_slave_0: entered promiscuous mode [ 287.323982][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.326171][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.328967][T12932] bridge_slave_1: entered allmulticast mode [ 287.331734][T12932] bridge_slave_1: entered promiscuous mode [ 287.381011][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.385743][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.399615][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 287.425051][T12932] team0: Port device team_slave_0 added [ 287.429280][T12932] team0: Port device team_slave_1 added [ 287.454550][ T40] audit: type=1400 audit(1748552124.639:601): avc: denied { create } for pid=12961 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.460393][ T40] audit: type=1400 audit(1748552124.639:602): avc: denied { getopt } for pid=12961 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.468731][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.470873][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.478563][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.482572][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.484794][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.495183][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.539862][T12932] hsr_slave_0: entered promiscuous mode [ 287.542264][T12932] hsr_slave_1: entered promiscuous mode [ 287.544454][T12932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.547064][T12932] Cannot create hsr debugfs directory [ 287.652740][T12932] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.712836][T12932] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.770424][T12932] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.843059][T12932] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.892557][T12977] FAULT_INJECTION: forcing a failure. [ 287.892557][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 287.897019][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.3.2597 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 287.897034][T12977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.897041][T12977] Call Trace: [ 287.897051][T12977] [ 287.897055][T12977] dump_stack_lvl+0x16c/0x1f0 [ 287.897095][T12977] should_fail_ex+0x512/0x640 [ 287.897116][T12977] ? fs_reclaim_acquire+0xae/0x150 [ 287.897132][T12977] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 287.897147][T12977] should_failslab+0xc2/0x120 [ 287.897160][T12977] __kmalloc_noprof+0xd2/0x510 [ 287.897176][T12977] tomoyo_realpath_from_path+0xc2/0x6e0 [ 287.897192][T12977] ? tomoyo_profile+0x47/0x60 [ 287.897209][T12977] tomoyo_path_number_perm+0x245/0x580 [ 287.897220][T12977] ? tomoyo_path_number_perm+0x237/0x580 [ 287.897233][T12977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.897246][T12977] ? find_held_lock+0x2b/0x80 [ 287.897275][T12977] ? find_held_lock+0x2b/0x80 [ 287.897291][T12977] ? hook_file_ioctl_common+0x145/0x410 [ 287.897311][T12977] ? __fget_files+0x20e/0x3c0 [ 287.897323][T12977] security_file_ioctl+0x9b/0x240 [ 287.897338][T12977] __x64_sys_ioctl+0xb7/0x210 [ 287.897353][T12977] do_syscall_64+0xcd/0x4c0 [ 287.897367][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.897378][T12977] RIP: 0033:0x7fa13758e969 [ 287.897388][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.897398][T12977] RSP: 002b:00007fa138407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.897409][T12977] RAX: ffffffffffffffda RBX: 00007fa1377b5fa0 RCX: 00007fa13758e969 [ 287.897416][T12977] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 287.897422][T12977] RBP: 00007fa138407090 R08: 0000000000000000 R09: 0000000000000000 [ 287.897428][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.897434][T12977] R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 287.897448][T12977] [ 287.897463][T12977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 288.029976][T12932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.034970][T12932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.040927][T12932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.044950][T12932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 288.060561][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.062879][T12932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.065197][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.067401][T12932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.099774][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.115330][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.121546][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.139653][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.147551][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.149825][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.156786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.158951][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.316167][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.342099][T12932] veth0_vlan: entered promiscuous mode [ 288.349327][T12932] veth1_vlan: entered promiscuous mode [ 288.362962][T12932] veth0_macvtap: entered promiscuous mode [ 288.368712][T12932] veth1_macvtap: entered promiscuous mode [ 288.377352][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.383294][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.388380][T12932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.391047][T12932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.393672][T12932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.396341][T12932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.433388][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.435836][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.454171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.456711][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.493055][ T40] audit: type=1400 audit(1748552125.679:603): avc: denied { bind } for pid=12991 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.493614][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'. [ 288.499245][ T40] audit: type=1400 audit(1748552125.679:604): avc: denied { setopt } for pid=12991 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.547262][T12995] xt_nfacct: accounting object `syz1' does not exists [ 288.576482][ T40] audit: type=1400 audit(1748552125.759:605): avc: denied { read } for pid=12991 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.631347][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 288.996544][ T29] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 289.066660][ T5948] Bluetooth: hci1: command tx timeout [ 289.160272][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.165831][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.174833][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.184991][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.358819][ T40] audit: type=1400 audit(1748552126.549:606): avc: denied { ioctl } for pid=13021 comm="syz.3.2611" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 289.409636][ T29] usb 7-1: usb_control_msg returned -32 [ 289.411431][ T29] usbtmc 7-1:16.0: can't read capabilities [ 289.419780][T13026] FAULT_INJECTION: forcing a failure. [ 289.419780][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 289.423741][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.3.2613 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 289.423756][T13026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.423764][T13026] Call Trace: [ 289.423768][T13026] [ 289.423773][T13026] dump_stack_lvl+0x16c/0x1f0 [ 289.423788][T13026] should_fail_ex+0x512/0x640 [ 289.423802][T13026] ? __kvmalloc_node_noprof+0x122/0x620 [ 289.423822][T13026] should_failslab+0xc2/0x120 [ 289.423834][T13026] __kvmalloc_node_noprof+0x135/0x620 [ 289.423851][T13026] ? _parse_integer_limit+0x17f/0x1d0 [ 289.423861][T13026] ? seq_read_iter+0x826/0x12c0 [ 289.423900][T13026] ? seq_read_iter+0x826/0x12c0 [ 289.423916][T13026] seq_read_iter+0x826/0x12c0 [ 289.423934][T13026] ? find_held_lock+0x2b/0x80 [ 289.423954][T13026] kernfs_fop_read_iter+0x40f/0x5a0 [ 289.423970][T13026] ? register_lock_class+0x41/0x4c0 [ 289.423985][T13026] do_iter_readv_writev+0x63a/0x820 [ 289.424001][T13026] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 289.424016][T13026] ? __import_iovec+0x1dd/0x650 [ 289.424029][T13026] ? avc_policy_seqno+0x9/0x20 [ 289.424049][T13026] ? rw_verify_area+0xcf/0x680 [ 289.424065][T13026] vfs_readv+0x4cb/0x8b0 [ 289.424079][T13026] ? __pfx___might_resched+0x10/0x10 [ 289.424092][T13026] ? rcu_is_watching+0x12/0xc0 [ 289.424102][T13026] ? __pfx_vfs_readv+0x10/0x10 [ 289.424116][T13026] ? __mutex_lock+0x1ca/0xb90 [ 289.424132][T13026] ? __pfx___mutex_lock+0x10/0x10 [ 289.424148][T13026] ? __fget_files+0x20e/0x3c0 [ 289.424162][T13026] ? __fget_files+0x1a0/0x3c0 [ 289.424175][T13026] ? do_readv+0x132/0x340 [ 289.424189][T13026] do_readv+0x132/0x340 [ 289.424203][T13026] ? __pfx_do_readv+0x10/0x10 [ 289.424222][T13026] do_syscall_64+0xcd/0x4c0 [ 289.424235][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.424247][T13026] RIP: 0033:0x7fa13758e969 [ 289.424256][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.424266][T13026] RSP: 002b:00007fa138407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 289.424276][T13026] RAX: ffffffffffffffda RBX: 00007fa1377b5fa0 RCX: 00007fa13758e969 [ 289.424283][T13026] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 289.424290][T13026] RBP: 00007fa138407090 R08: 0000000000000000 R09: 0000000000000000 [ 289.424296][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.424302][T13026] R13: 0000000000000000 R14: 00007fa1377b5fa0 R15: 00007ffe104b3508 [ 289.424316][T13026] [ 289.503065][ T34] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 289.552129][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2614'. [ 289.657771][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.660981][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.665040][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.668137][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.714745][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.718657][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.722186][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.726172][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.730473][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.837760][T13036] chnl_net:caif_netlink_parms(): no params data found [ 289.875697][ T34] usb 6-1: usb_control_msg returned -32 [ 289.877612][ T34] usbtmc 6-1:16.0: can't read capabilities [ 289.911570][T13036] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.913965][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.916289][T13036] bridge_slave_0: entered allmulticast mode [ 289.919061][T13036] bridge_slave_0: entered promiscuous mode [ 289.923259][T13036] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.926524][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.929605][T13036] bridge_slave_1: entered allmulticast mode [ 289.933552][T13036] bridge_slave_1: entered promiscuous mode [ 289.972931][ T60] usb 7-1: USB disconnect, device number 20 [ 289.978005][T13036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.983359][T13036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.025225][T13036] team0: Port device team_slave_0 added [ 290.029604][T13036] team0: Port device team_slave_1 added [ 290.063368][T13036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.065771][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.074356][T13036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.078711][T13036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.081215][T13036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.092890][T13036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.133411][T13036] hsr_slave_0: entered promiscuous mode [ 290.135786][T13036] hsr_slave_1: entered promiscuous mode [ 290.138349][T13036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.141200][T13036] Cannot create hsr debugfs directory [ 290.229630][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 290.254119][T13036] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.321748][T13036] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.372787][T13036] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.452044][T13036] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.503744][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 290.507567][T13053] bond0: option use_carrier: invalid value (20) [ 290.548101][T13036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.554498][T13036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.563366][T13036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.567709][T13036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.607164][T13036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.617784][T13036] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.623343][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.625574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.633758][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.636017][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.757074][T13036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.782077][T13036] veth0_vlan: entered promiscuous mode [ 290.788435][T13036] veth1_vlan: entered promiscuous mode [ 290.803042][T13036] veth0_macvtap: entered promiscuous mode [ 290.807086][T13036] veth1_macvtap: entered promiscuous mode [ 290.815467][T13036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.824104][T13036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.829029][T13036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.831958][T13036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.834643][T13036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.838584][T13036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.876283][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.880290][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.896039][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.899713][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.156783][ T5948] Bluetooth: hci1: command tx timeout [ 291.407577][T13073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2626'. [ 291.445778][T13078] FAULT_INJECTION: forcing a failure. [ 291.445778][T13078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 291.450530][T13078] CPU: 2 UID: 0 PID: 13078 Comm: syz.2.2628 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 291.450544][T13078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.450551][T13078] Call Trace: [ 291.450555][T13078] [ 291.450560][T13078] dump_stack_lvl+0x16c/0x1f0 [ 291.450575][T13078] should_fail_ex+0x512/0x640 [ 291.450592][T13078] should_fail_alloc_page+0xe7/0x130 [ 291.450605][T13078] prepare_alloc_pages+0x3c2/0x610 [ 291.450620][T13078] ? __lock_acquire+0xb8a/0x1c90 [ 291.450635][T13078] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 291.450651][T13078] ? __pfx___might_resched+0x10/0x10 [ 291.450664][T13078] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.450674][T13078] ? find_held_lock+0x2b/0x80 [ 291.450691][T13078] ? process_measurement+0x4a6/0x23e0 [ 291.450705][T13078] ? down_write+0x14d/0x200 [ 291.450723][T13078] ? process_measurement+0x1e6/0x23e0 [ 291.450737][T13078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.450754][T13078] ? policy_nodemask+0xea/0x4e0 [ 291.450767][T13078] alloc_pages_mpol+0x1fb/0x550 [ 291.450779][T13078] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.450794][T13078] folio_alloc_mpol_noprof+0x36/0x2f0 [ 291.450809][T13078] vma_alloc_folio_noprof+0xed/0x1e0 [ 291.450822][T13078] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 291.450835][T13078] ? find_held_lock+0x2b/0x80 [ 291.450851][T13078] ? __handle_mm_fault+0x1092/0x5450 [ 291.450870][T13078] __handle_mm_fault+0x2fac/0x5450 [ 291.450889][T13078] ? __pfx___handle_mm_fault+0x10/0x10 [ 291.450913][T13078] ? find_vma+0xbf/0x140 [ 291.450926][T13078] ? __pfx_find_vma+0x10/0x10 [ 291.450940][T13078] handle_mm_fault+0x3fe/0xad0 [ 291.450958][T13078] do_user_addr_fault+0x7a6/0x1370 [ 291.450973][T13078] ? rcu_is_watching+0x12/0xc0 [ 291.450985][T13078] exc_page_fault+0x5c/0xb0 [ 291.450996][T13078] asm_exc_page_fault+0x26/0x30 [ 291.451007][T13078] RIP: 0010:filldir64+0x1d3/0x600 [ 291.451022][T13078] Code: 63 da 81 ff 48 89 ee 4c 89 ff e8 08 d5 81 ff 48 83 7c 24 28 00 0f 85 3f 02 00 00 e8 47 da 81 ff 0f 01 cb 0f ae e8 48 8b 04 24 <49> 89 47 08 e8 34 da 81 ff 4c 8b 7c 24 30 48 8b 44 24 08 49 89 07 [ 291.451033][T13078] RSP: 0018:ffffc9000da1fcb0 EFLAGS: 00050293 [ 291.451042][T13078] RAX: 0000000000000000 RBX: ffffc9000da1fe80 RCX: ffffffff8239ce18 [ 291.451048][T13078] RDX: ffff888028ad0000 RSI: ffffffff8239ce29 RDI: 0000000000000006 [ 291.451054][T13078] RBP: 00002000000032d8 R08: 0000000000000006 R09: 00002000000032c0 [ 291.451061][T13078] R10: 00002000000032d8 R11: 0000000000000001 R12: 0000000000000018 [ 291.451067][T13078] R13: ffffffff8ba2a780 R14: ffffc9000da1fea4 R15: 00002000000032c0 [ 291.451077][T13078] ? filldir64+0x1b8/0x600 [ 291.451091][T13078] ? filldir64+0x1c9/0x600 [ 291.451111][T13078] ? __pfx_filldir64+0x10/0x10 [ 291.451130][T13078] proc_readdir_de+0x1d1/0x690 [ 291.451148][T13078] proc_readdir+0xf7/0x140 [ 291.451163][T13078] proc_root_readdir+0x5e/0xd0 [ 291.451178][T13078] iterate_dir+0x296/0xb40 [ 291.451195][T13078] __x64_sys_getdents64+0x13c/0x2c0 [ 291.451212][T13078] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 291.451227][T13078] ? fput+0x70/0xf0 [ 291.451238][T13078] ? __pfx_filldir64+0x10/0x10 [ 291.451254][T13078] ? fput+0x70/0xf0 [ 291.451268][T13078] do_syscall_64+0xcd/0x4c0 [ 291.451281][T13078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.451291][T13078] RIP: 0033:0x7f523c38e969 [ 291.451299][T13078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.451309][T13078] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 291.451318][T13078] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 291.451325][T13078] RDX: 0000000000000032 RSI: 00002000000032c0 RDI: 0000000000000005 [ 291.451331][T13078] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 291.451337][T13078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.451343][T13078] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 291.451357][T13078] [ 291.594410][ T40] audit: type=1400 audit(1748552128.779:607): avc: denied { getattr } for pid=13079 comm="syz.0.2629" name="/" dev="9p" ino=35913863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 291.701635][T13088] FAULT_INJECTION: forcing a failure. [ 291.701635][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.705527][T13088] CPU: 1 UID: 0 PID: 13088 Comm: syz.2.2632 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 291.705542][T13088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.705549][T13088] Call Trace: [ 291.705553][T13088] [ 291.705557][T13088] dump_stack_lvl+0x16c/0x1f0 [ 291.705574][T13088] should_fail_ex+0x512/0x640 [ 291.705590][T13088] _copy_from_user+0x2e/0xd0 [ 291.705606][T13088] copy_msghdr_from_user+0x98/0x160 [ 291.705619][T13088] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 291.705636][T13088] ___sys_sendmsg+0xfe/0x1d0 [ 291.705649][T13088] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.705659][T13088] ? __lock_acquire+0x622/0x1c90 [ 291.705688][T13088] __sys_sendmsg+0x16d/0x220 [ 291.705700][T13088] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.705720][T13088] do_syscall_64+0xcd/0x4c0 [ 291.705733][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.705745][T13088] RIP: 0033:0x7f523c38e969 [ 291.705753][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.705764][T13088] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.705774][T13088] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 291.705781][T13088] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 291.705787][T13088] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 291.705793][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.705799][T13088] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 291.705812][T13088] [ 291.786616][ T5948] Bluetooth: hci2: command tx timeout [ 291.855134][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 291.914933][T13094] (syz.2.2634,13094,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 291.919519][T13094] (syz.2.2634,13094,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 291.977532][T13101] fuse: Bad value for 'fd' [ 291.977534][ T40] audit: type=1400 audit(1748552129.169:608): avc: denied { mounton } for pid=13093 comm="syz.2.2634" path="/139/file0" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 291.979922][T13101] tmpfs: Bad value for 'mpol' [ 292.000058][ T40] audit: type=1400 audit(1748552129.189:609): avc: denied { write } for pid=13093 comm="syz.2.2634" name="file0" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.012732][ T40] audit: type=1400 audit(1748552129.189:610): avc: denied { open } for pid=13093 comm="syz.2.2634" path="/139/file0" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.033832][ T5936] udevd[5936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 292.049015][T13106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2636'. [ 292.249986][ T9] usb 6-1: USB disconnect, device number 24 [ 292.328872][T13116] FAULT_INJECTION: forcing a failure. [ 292.328872][T13116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.332908][T13116] CPU: 3 UID: 0 PID: 13116 Comm: syz.1.2641 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 292.332923][T13116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.332930][T13116] Call Trace: [ 292.332935][T13116] [ 292.332939][T13116] dump_stack_lvl+0x16c/0x1f0 [ 292.332956][T13116] should_fail_ex+0x512/0x640 [ 292.332972][T13116] _copy_from_user+0x2e/0xd0 [ 292.332988][T13116] userio_char_write+0xbf/0x4c0 [ 292.333003][T13116] ? __pfx_userio_char_write+0x10/0x10 [ 292.333017][T13116] ? __cgroup_bpf_run_filter_sysctl+0xa10/0xd00 [ 292.333029][T13116] ? security_file_permission+0x71/0x210 [ 292.333045][T13116] ? rw_verify_area+0xcf/0x680 [ 292.333060][T13116] ? __pfx_userio_char_write+0x10/0x10 [ 292.333073][T13116] vfs_write+0x29d/0x1150 [ 292.333093][T13116] ? __pfx_vfs_write+0x10/0x10 [ 292.333108][T13116] ? find_held_lock+0x2b/0x80 [ 292.333125][T13116] ? __fget_files+0x204/0x3c0 [ 292.333137][T13116] ? __fget_files+0x20e/0x3c0 [ 292.333150][T13116] ksys_write+0x12a/0x250 [ 292.333166][T13116] ? __pfx_ksys_write+0x10/0x10 [ 292.333186][T13116] do_syscall_64+0xcd/0x4c0 [ 292.333199][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.333211][T13116] RIP: 0033:0x7f43ffb8e969 [ 292.333220][T13116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.333231][T13116] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 292.333241][T13116] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 292.333248][T13116] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 292.333254][T13116] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 292.333260][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.333267][T13116] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 292.333279][T13116] [ 292.794357][ T61] bridge_slave_1: left allmulticast mode [ 292.796522][ T61] bridge_slave_1: left promiscuous mode [ 292.799619][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.804716][ T61] bridge_slave_0: left allmulticast mode [ 292.807039][ T61] bridge_slave_0: left promiscuous mode [ 292.808949][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.912833][T13118] netlink: 'syz.0.2642': attribute type 2 has an invalid length. [ 292.918610][T13118] misc userio: The device must be registered before sending interrupts [ 293.037568][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.041795][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.045374][ T61] bond0 (unregistering): Released all slaves [ 293.196532][ T60] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 293.236721][ T5948] Bluetooth: hci1: command tx timeout [ 293.315619][ T61] hsr_slave_0: left promiscuous mode [ 293.323767][ T61] hsr_slave_1: left promiscuous mode [ 293.326634][ T60] usb 5-1: device descriptor read/64, error -71 [ 293.327043][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.331726][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.335531][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.340279][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.385714][ T61] veth1_macvtap: left promiscuous mode [ 293.389173][ T61] veth0_macvtap: left promiscuous mode [ 293.391723][ T61] veth1_vlan: left promiscuous mode [ 293.394164][ T61] veth0_vlan: left promiscuous mode [ 293.586522][ T60] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.719315][ T60] usb 5-1: device descriptor read/64, error -71 [ 293.838761][ T60] usb usb5-port1: attempt power cycle [ 293.867200][ T5948] Bluetooth: hci2: command tx timeout [ 293.998435][ T61] team0 (unregistering): Port device team_slave_1 removed [ 294.007678][T13132] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2647'. [ 294.045430][ T61] team0 (unregistering): Port device team_slave_0 removed [ 294.196592][ T60] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 294.216989][ T60] usb 5-1: device descriptor read/8, error -71 [ 294.469011][ T60] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 294.489295][ T60] usb 5-1: device descriptor read/8, error -71 [ 294.574901][ T40] audit: type=1400 audit(1748552131.759:611): avc: denied { create } for pid=13135 comm="syz.3.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 294.576359][T13135] delete_channel: no stack [ 294.583868][ T40] audit: type=1400 audit(1748552131.759:612): avc: denied { setopt } for pid=13135 comm="syz.3.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 294.612945][ T60] usb usb5-port1: unable to enumerate USB device [ 295.174227][ T61] bond0 (unregistering): Released all slaves [ 295.251998][ T61] tipc: Disabling bearer [ 295.259163][ T61] tipc: Left network mode [ 295.306650][ T5948] Bluetooth: hci1: command tx timeout [ 295.420200][ T61] hsr_slave_0: left promiscuous mode [ 295.422889][ T61] hsr_slave_1: left promiscuous mode [ 295.441225][ T61] veth1_macvtap: left promiscuous mode [ 295.443611][ T61] veth0_macvtap: left promiscuous mode [ 295.445479][ T61] veth1_vlan: left promiscuous mode [ 295.569952][T13145] Bluetooth: hci3: Frame reassembly failed (-84) [ 295.617438][ T61] team0 (unregistering): Port device vlan0 removed [ 295.948466][ T5941] Bluetooth: hci2: command tx timeout [ 296.006574][T13147] Bluetooth: hci5: Frame reassembly failed (-84) [ 296.014055][ T75] Bluetooth: hci5: Frame reassembly failed (-84) [ 296.337721][T13149] fuse: Invalid rootmode [ 296.372379][T13153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13153 comm=syz.1.2657 [ 296.576526][ T29] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 296.726591][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 296.730075][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 296.733563][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.737310][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.741637][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.745908][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.748888][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.960684][ T29] usb 7-1: usb_control_msg returned -32 [ 296.962560][ T29] usbtmc 7-1:16.0: can't read capabilities [ 296.967101][ T29] usb 7-1: USB disconnect, device number 21 [ 297.334513][ T40] audit: type=1400 audit(1748552134.519:613): avc: denied { associate } for pid=13159 comm="syz.1.2660" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 297.351961][T13160] FAULT_INJECTION: forcing a failure. [ 297.351961][T13160] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.358421][T13160] CPU: 2 UID: 0 PID: 13160 Comm: syz.1.2660 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 297.358438][T13160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.358445][T13160] Call Trace: [ 297.358449][T13160] [ 297.358454][T13160] dump_stack_lvl+0x16c/0x1f0 [ 297.358471][T13160] should_fail_ex+0x512/0x640 [ 297.358487][T13160] should_fail_alloc_page+0xe7/0x130 [ 297.358501][T13160] prepare_alloc_pages+0x3c2/0x610 [ 297.358518][T13160] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 297.358536][T13160] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.358548][T13160] ? find_held_lock+0x2b/0x80 [ 297.358572][T13160] ? __lock_acquire+0x622/0x1c90 [ 297.358584][T13160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.358601][T13160] ? policy_nodemask+0xea/0x4e0 [ 297.358614][T13160] alloc_pages_mpol+0x1fb/0x550 [ 297.358626][T13160] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.358638][T13160] ? filemap_get_entry+0x1a7/0x3b0 [ 297.358653][T13160] folio_alloc_noprof+0x20/0x2d0 [ 297.358666][T13160] filemap_alloc_folio_noprof+0x3a1/0x470 [ 297.358682][T13160] ? __lock_acquire+0xb8a/0x1c90 [ 297.358695][T13160] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 297.358712][T13160] ? fault_in_readable+0x174/0x200 [ 297.358726][T13160] __filemap_get_folio+0x5e9/0xc10 [ 297.358742][T13160] netfs_perform_write+0x47c/0x20f0 [ 297.358769][T13160] ? __pfx_netfs_perform_write+0x10/0x10 [ 297.358785][T13160] ? strcmp+0x3e/0xb0 [ 297.358815][T13160] ? inode_needs_update_time.part.0+0x191/0x270 [ 297.358832][T13160] netfs_file_write_iter+0x495/0x570 [ 297.358851][T13160] v9fs_file_write_iter+0x9b/0x100 [ 297.358864][T13160] vfs_write+0x6c7/0x1150 [ 297.358880][T13160] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 297.358892][T13160] ? __pfx___mutex_lock+0x10/0x10 [ 297.358904][T13160] ? __pfx_vfs_write+0x10/0x10 [ 297.358929][T13160] ksys_write+0x12a/0x250 [ 297.358946][T13160] ? __pfx_ksys_write+0x10/0x10 [ 297.358966][T13160] do_syscall_64+0xcd/0x4c0 [ 297.358979][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.358991][T13160] RIP: 0033:0x7f43ffb8e969 [ 297.359000][T13160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.359011][T13160] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.359021][T13160] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 297.359028][T13160] RDX: 00000000000000a0 RSI: 0000200000000500 RDI: 0000000000000003 [ 297.359034][T13160] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 297.359040][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.359047][T13160] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 297.359060][T13160] [ 297.626671][ T5947] Bluetooth: hci3: command 0x1003 tx timeout [ 297.629135][ T5948] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 297.726733][ T53] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 297.734870][ T40] audit: type=1400 audit(1748552134.919:614): avc: denied { read } for pid=13165 comm="syz.3.2663" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 297.744231][ T40] audit: type=1400 audit(1748552134.919:615): avc: denied { open } for pid=13165 comm="syz.3.2663" path="/9/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 297.876535][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 297.880746][ T53] usb 7-1: config index 0 descriptor too short (expected 260, got 27) [ 297.883559][ T53] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 297.887530][ T53] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 297.890454][ T53] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.893258][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.917307][T13177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13177 comm=syz.3.2667 [ 297.940449][T13179] fuse: Invalid rootmode [ 297.986069][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 298.026667][ T5947] Bluetooth: hci2: command tx timeout [ 298.026673][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 298.028538][T13186] FAULT_INJECTION: forcing a failure. [ 298.028538][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 298.028563][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz.1.2670 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 298.028577][T13186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.028583][T13186] Call Trace: [ 298.028587][T13186] [ 298.028592][T13186] dump_stack_lvl+0x16c/0x1f0 [ 298.028607][T13186] should_fail_ex+0x512/0x640 [ 298.028621][T13186] ? fs_reclaim_acquire+0xae/0x150 [ 298.028637][T13186] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 298.028651][T13186] should_failslab+0xc2/0x120 [ 298.028663][T13186] __kmalloc_noprof+0xd2/0x510 [ 298.028676][T13186] tomoyo_realpath_from_path+0xc2/0x6e0 [ 298.028691][T13186] ? tomoyo_profile+0x47/0x60 [ 298.028708][T13186] tomoyo_path_number_perm+0x245/0x580 [ 298.028719][T13186] ? tomoyo_path_number_perm+0x237/0x580 [ 298.028732][T13186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.028745][T13186] ? find_held_lock+0x2b/0x80 [ 298.028774][T13186] ? find_held_lock+0x2b/0x80 [ 298.028790][T13186] ? hook_file_ioctl_common+0x145/0x410 [ 298.028809][T13186] ? __fget_files+0x20e/0x3c0 [ 298.028822][T13186] security_file_ioctl+0x9b/0x240 [ 298.028836][T13186] __x64_sys_ioctl+0xb7/0x210 [ 298.028852][T13186] do_syscall_64+0xcd/0x4c0 [ 298.028865][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.028876][T13186] RIP: 0033:0x7f43ffb8e969 [ 298.028885][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.028896][T13186] RSP: 002b:00007f4400a39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.028906][T13186] RAX: ffffffffffffffda RBX: 00007f43ffdb5fa0 RCX: 00007f43ffb8e969 [ 298.028913][T13186] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 298.028919][T13186] RBP: 00007f4400a39090 R08: 0000000000000000 R09: 0000000000000000 [ 298.028925][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.028931][T13186] R13: 0000000000000000 R14: 00007f43ffdb5fa0 R15: 00007ffd3942d158 [ 298.028944][T13186] [ 298.028989][T13186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.030800][ T5941] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.111582][ T53] usb 7-1: string descriptor 0 read error: -71 [ 298.129801][ T53] usb 7-1: USB disconnect, device number 22 [ 298.270333][T13199] FAULT_INJECTION: forcing a failure. [ 298.270333][T13199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.275143][T13199] CPU: 0 UID: 0 PID: 13199 Comm: syz.3.2675 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 298.275159][T13199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.275165][T13199] Call Trace: [ 298.275170][T13199] [ 298.275175][T13199] dump_stack_lvl+0x16c/0x1f0 [ 298.275192][T13199] should_fail_ex+0x512/0x640 [ 298.275208][T13199] _copy_from_user+0x2e/0xd0 [ 298.275224][T13199] copy_msghdr_from_user+0x98/0x160 [ 298.275237][T13199] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 298.275255][T13199] ___sys_sendmsg+0xfe/0x1d0 [ 298.275267][T13199] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.275278][T13199] ? __lock_acquire+0x622/0x1c90 [ 298.275307][T13199] __sys_sendmsg+0x16d/0x220 [ 298.275319][T13199] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.275339][T13199] do_syscall_64+0xcd/0x4c0 [ 298.275353][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.275364][T13199] RIP: 0033:0x7f0e5358e969 [ 298.275373][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.275383][T13199] RSP: 002b:00007f0e54482038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.275394][T13199] RAX: ffffffffffffffda RBX: 00007f0e537b5fa0 RCX: 00007f0e5358e969 [ 298.275401][T13199] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 298.275407][T13199] RBP: 00007f0e54482090 R08: 0000000000000000 R09: 0000000000000000 [ 298.275413][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.275419][T13199] R13: 0000000000000000 R14: 00007f0e537b5fa0 R15: 00007ffd6941bf48 [ 298.275432][T13199] [ 298.326676][ T60] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 298.358788][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13203 comm=syz.3.2676 [ 298.394096][T13209] fuse: Invalid rootmode [ 298.394964][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 298.427867][ T40] audit: type=1400 audit(1748552135.619:616): avc: denied { map } for pid=13211 comm="syz.1.2681" path="socket:[54433]" dev="sockfs" ino=54433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.471435][T13217] netlink: 'syz.1.2682': attribute type 5 has an invalid length. [ 298.516529][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 298.519579][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 298.523033][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 298.526132][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.530215][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.534266][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.537241][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.591153][T13222] netlink: 'syz.3.2684': attribute type 5 has an invalid length. [ 298.594725][T13222] FAULT_INJECTION: forcing a failure. [ 298.594725][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 298.598878][T13222] CPU: 2 UID: 0 PID: 13222 Comm: syz.3.2684 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 298.598893][T13222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.598900][T13222] Call Trace: [ 298.598904][T13222] [ 298.598908][T13222] dump_stack_lvl+0x16c/0x1f0 [ 298.598936][T13222] should_fail_ex+0x512/0x640 [ 298.598950][T13222] ? fs_reclaim_acquire+0xae/0x150 [ 298.598966][T13222] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 298.598981][T13222] should_failslab+0xc2/0x120 [ 298.598993][T13222] __kmalloc_noprof+0xd2/0x510 [ 298.599006][T13222] tomoyo_realpath_from_path+0xc2/0x6e0 [ 298.599021][T13222] ? tomoyo_profile+0x47/0x60 [ 298.599038][T13222] tomoyo_path_number_perm+0x245/0x580 [ 298.599048][T13222] ? tomoyo_path_number_perm+0x237/0x580 [ 298.599061][T13222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.599078][T13222] ? find_held_lock+0x2b/0x80 [ 298.599107][T13222] ? find_held_lock+0x2b/0x80 [ 298.599123][T13222] ? hook_file_ioctl_common+0x145/0x410 [ 298.599142][T13222] ? __fget_files+0x20e/0x3c0 [ 298.599154][T13222] security_file_ioctl+0x9b/0x240 [ 298.599169][T13222] __x64_sys_ioctl+0xb7/0x210 [ 298.599184][T13222] do_syscall_64+0xcd/0x4c0 [ 298.599198][T13222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.599209][T13222] RIP: 0033:0x7f0e5358e969 [ 298.599218][T13222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.599228][T13222] RSP: 002b:00007f0e54482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.599238][T13222] RAX: ffffffffffffffda RBX: 00007f0e537b5fa0 RCX: 00007f0e5358e969 [ 298.599245][T13222] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000004 [ 298.599251][T13222] RBP: 00007f0e54482090 R08: 0000000000000000 R09: 0000000000000000 [ 298.599257][T13222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.599263][T13222] R13: 0000000000000000 R14: 00007f0e537b5fa0 R15: 00007ffd6941bf48 [ 298.599277][T13222] [ 298.599314][T13222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.652200][T13224] netlink: 'syz.2.2685': attribute type 5 has an invalid length. [ 298.701034][T13228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13228 comm=syz.2.2687 [ 298.731537][T13231] fuse: Bad value for 'rootmode' [ 298.745307][ T60] usb 5-1: usb_control_msg returned -32 [ 298.751296][ T60] usbtmc 5-1:16.0: can't read capabilities [ 298.760534][ T60] usb 5-1: USB disconnect, device number 27 [ 298.797145][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2690'. [ 298.828671][T13238] FAULT_INJECTION: forcing a failure. [ 298.828671][T13238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.833038][T13238] CPU: 0 UID: 0 PID: 13238 Comm: syz.2.2691 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 298.833054][T13238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.833061][T13238] Call Trace: [ 298.833065][T13238] [ 298.833070][T13238] dump_stack_lvl+0x16c/0x1f0 [ 298.833086][T13238] should_fail_ex+0x512/0x640 [ 298.833102][T13238] should_fail_alloc_page+0xe7/0x130 [ 298.833115][T13238] prepare_alloc_pages+0x3c2/0x610 [ 298.833133][T13238] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 298.833144][T13238] ? is_bpf_text_address+0x8a/0x1a0 [ 298.833162][T13238] ? bpf_ksym_find+0x127/0x1c0 [ 298.833173][T13238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.833185][T13238] ? is_bpf_text_address+0x94/0x1a0 [ 298.833201][T13238] ? kernel_text_address+0x8d/0x100 [ 298.833217][T13238] ? __kernel_text_address+0xd/0x40 [ 298.833234][T13238] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.833245][T13238] ? arch_stack_walk+0xa6/0x100 [ 298.833265][T13238] ? _parse_integer_limit+0x17f/0x1d0 [ 298.833278][T13238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.833295][T13238] ? policy_nodemask+0xea/0x4e0 [ 298.833308][T13238] alloc_pages_mpol+0x1fb/0x550 [ 298.833320][T13238] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.833331][T13238] ? __lock_acquire+0x622/0x1c90 [ 298.833347][T13238] alloc_pages_noprof+0x131/0x390 [ 298.833358][T13238] get_free_pages_noprof+0x10/0xb0 [ 298.833371][T13238] vcs_write+0x11a/0xdb0 [ 298.833384][T13238] ? find_held_lock+0x2b/0x80 [ 298.833401][T13238] ? get_pid_task+0xfc/0x250 [ 298.833416][T13238] ? __pfx_vcs_write+0x10/0x10 [ 298.833428][T13238] ? bpf_lsm_file_permission+0x9/0x10 [ 298.833442][T13238] ? security_file_permission+0x71/0x210 [ 298.833457][T13238] ? rw_verify_area+0xcf/0x680 [ 298.833472][T13238] ? __pfx_vcs_write+0x10/0x10 [ 298.833482][T13238] vfs_write+0x29d/0x1150 [ 298.833501][T13238] ? __pfx_vfs_write+0x10/0x10 [ 298.833516][T13238] ? find_held_lock+0x2b/0x80 [ 298.833532][T13238] ? __fget_files+0x204/0x3c0 [ 298.833544][T13238] ? __fget_files+0x20e/0x3c0 [ 298.833557][T13238] ksys_write+0x12a/0x250 [ 298.833573][T13238] ? __pfx_ksys_write+0x10/0x10 [ 298.833592][T13238] do_syscall_64+0xcd/0x4c0 [ 298.833605][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.833616][T13238] RIP: 0033:0x7f523c38e969 [ 298.833626][T13238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.833636][T13238] RSP: 002b:00007f523d154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.833646][T13238] RAX: ffffffffffffffda RBX: 00007f523c5b5fa0 RCX: 00007f523c38e969 [ 298.833657][T13238] RDX: 0000000000001006 RSI: 0000200000000d00 RDI: 0000000000000003 [ 298.833666][T13238] RBP: 00007f523d154090 R08: 0000000000000000 R09: 0000000000000000 [ 298.833675][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.833685][T13238] R13: 0000000000000000 R14: 00007f523c5b5fa0 R15: 00007ffe83a38ec8 [ 298.833708][T13238] [ 299.325701][T13252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13252 comm=syz.0.2696 [ 299.372884][T13256] fuse: Bad value for 'rootmode' [ 299.418844][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2699'. [ 299.448088][ T53] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 299.587217][T13271] FAULT_INJECTION: forcing a failure. [ 299.587217][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 299.592563][T13271] CPU: 0 UID: 0 PID: 13271 Comm: syz.0.2704 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 299.592588][T13271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.592598][T13271] Call Trace: [ 299.592605][T13271] [ 299.592613][T13271] dump_stack_lvl+0x16c/0x1f0 [ 299.592638][T13271] should_fail_ex+0x512/0x640 [ 299.592660][T13271] ? fs_reclaim_acquire+0xae/0x150 [ 299.592686][T13271] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 299.592708][T13271] should_failslab+0xc2/0x120 [ 299.592727][T13271] __kmalloc_noprof+0xd2/0x510 [ 299.592751][T13271] tomoyo_realpath_from_path+0xc2/0x6e0 [ 299.592778][T13271] ? tomoyo_profile+0x47/0x60 [ 299.592806][T13271] tomoyo_path_number_perm+0x245/0x580 [ 299.592825][T13271] ? tomoyo_path_number_perm+0x237/0x580 [ 299.592848][T13271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.592869][T13271] ? find_held_lock+0x2b/0x80 [ 299.592920][T13271] ? find_held_lock+0x2b/0x80 [ 299.592959][T13271] ? hook_file_ioctl_common+0x145/0x410 [ 299.592993][T13271] ? __fget_files+0x20e/0x3c0 [ 299.593016][T13271] security_file_ioctl+0x9b/0x240 [ 299.593041][T13271] __x64_sys_ioctl+0xb7/0x210 [ 299.593067][T13271] do_syscall_64+0xcd/0x4c0 [ 299.593088][T13271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.593107][T13271] RIP: 0033:0x7fd5b418e969 [ 299.593122][T13271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.593140][T13271] RSP: 002b:00007fd5b4f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.593158][T13271] RAX: ffffffffffffffda RBX: 00007fd5b43b5fa0 RCX: 00007fd5b418e969 [ 299.593169][T13271] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 299.593180][T13271] RBP: 00007fd5b4f17090 R08: 0000000000000000 R09: 0000000000000000 [ 299.593190][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.593201][T13271] R13: 0000000000000000 R14: 00007fd5b43b5fa0 R15: 00007ffc8903dd88 [ 299.593226][T13271] [ 299.593268][T13271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.712687][T13273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13273 comm=syz.0.2705 [ 299.796205][T13275] [ 299.797279][T13275] ====================================================== [ 299.800039][T13275] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 299.802843][T13275] 6.15.0-syzkaller-08297-ge0797d3b91de #0 Not tainted fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.807060][T13275] ------------------------------------------------------ [ 299.809947][T13275] syz.0.2706/13275 is trying to acquire lock: [ 299.811930][T13275] ffffffff90399f78 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x1a/0x290 [ 299.815123][T13275] [ 299.815123][T13275] but task is already holding lock: [ 299.817572][T13275] ffff88802a0d8e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 299.821014][T13275] [ 299.821014][T13275] which lock already depends on the new lock. [ 299.821014][T13275] [ 299.824428][T13275] [ 299.824428][T13275] the existing dependency chain (in reverse order) is: [ 299.827136][T13275] [ 299.827136][T13275] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 299.829642][T13275] _raw_spin_lock_bh+0x33/0x40 [ 299.831298][T13275] nr_rt_device_down+0x18e/0x810 [ 299.832973][T13275] nr_device_event+0x126/0x170 [ 299.834811][T13275] notifier_call_chain+0xb9/0x410 [ 299.836563][T13275] call_netdevice_notifiers_info+0xbe/0x140 [ 299.838557][T13275] __dev_notify_flags+0x1f7/0x2e0 [ 299.840270][T13275] netif_change_flags+0x108/0x160 [ 299.841962][T13275] dev_change_flags+0xba/0x250 [ 299.843666][T13275] dev_ifsioc+0x1498/0x1f70 [ 299.845280][T13275] dev_ioctl+0x223/0x10e0 [ 299.846799][T13275] sock_do_ioctl+0x19d/0x280 [ 299.848409][T13275] sock_ioctl+0x227/0x6b0 [ 299.849927][T13275] __x64_sys_ioctl+0x18b/0x210 [ 299.851545][T13275] do_syscall_64+0xcd/0x4c0 [ 299.853120][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.855154][T13275] [ 299.855154][T13275] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 299.857583][T13275] _raw_spin_lock_bh+0x33/0x40 [ 299.859223][T13275] nr_rt_device_down+0xd3/0x810 [ 299.860916][T13275] nr_device_event+0x126/0x170 [ 299.862559][T13275] notifier_call_chain+0xb9/0x410 [ 299.864549][T13275] call_netdevice_notifiers_info+0xbe/0x140 [ 299.866762][T13275] __dev_notify_flags+0x1f7/0x2e0 [ 299.868542][T13275] netif_change_flags+0x108/0x160 [ 299.870681][T13275] dev_change_flags+0xba/0x250 [ 299.872925][T13275] dev_ifsioc+0x1498/0x1f70 [ 299.875014][T13275] dev_ioctl+0x223/0x10e0 [ 299.877053][T13275] sock_do_ioctl+0x19d/0x280 [ 299.879181][T13275] sock_ioctl+0x227/0x6b0 [ 299.881281][T13275] __x64_sys_ioctl+0x18b/0x210 [ 299.883484][T13275] do_syscall_64+0xcd/0x4c0 [ 299.885165][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.887249][T13275] [ 299.887249][T13275] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 299.889731][T13275] __lock_acquire+0x126f/0x1c90 [ 299.891474][T13275] lock_acquire+0x179/0x350 [ 299.893094][T13275] _raw_spin_lock_bh+0x33/0x40 [ 299.894854][T13275] nr_remove_neigh+0x1a/0x290 [ 299.896563][T13275] nr_add_node+0x2408/0x2c00 [ 299.898209][T13275] nr_rt_ioctl+0x11b7/0x29b0 [ 299.899859][T13275] nr_ioctl+0x19a/0x2e0 [ 299.901418][T13275] sock_do_ioctl+0x118/0x280 [ 299.903059][T13275] sock_ioctl+0x227/0x6b0 [ 299.904825][T13275] __x64_sys_ioctl+0x18b/0x210 [ 299.906525][T13275] do_syscall_64+0xcd/0x4c0 [ 299.908189][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.910238][T13275] [ 299.910238][T13275] other info that might help us debug this: [ 299.910238][T13275] [ 299.913488][T13275] Chain exists of: [ 299.913488][T13275] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 299.913488][T13275] [ 299.918497][T13275] Possible unsafe locking scenario: [ 299.918497][T13275] [ 299.920931][T13275] CPU0 CPU1 [ 299.922646][T13275] ---- ---- [ 299.924643][T13275] lock(&nr_node->node_lock); [ 299.926174][T13275] lock(nr_node_list_lock); [ 299.928502][T13275] lock(&nr_node->node_lock); [ 299.930830][T13275] lock(nr_neigh_list_lock); [ 299.932399][T13275] [ 299.932399][T13275] *** DEADLOCK *** [ 299.932399][T13275] [ 299.935394][T13275] 1 lock held by syz.0.2706/13275: [ 299.937149][T13275] #0: ffff88802a0d8e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 299.940244][T13275] [ 299.940244][T13275] stack backtrace: [ 299.942122][T13275] CPU: 0 UID: 0 PID: 13275 Comm: syz.0.2706 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 299.942137][T13275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 299.942145][T13275] Call Trace: [ 299.942150][T13275] [ 299.942155][T13275] dump_stack_lvl+0x116/0x1f0 [ 299.942174][T13275] print_circular_bug+0x275/0x350 [ 299.942196][T13275] check_noncircular+0x14c/0x170 [ 299.942221][T13275] __lock_acquire+0x126f/0x1c90 [ 299.942247][T13275] lock_acquire+0x179/0x350 [ 299.942273][T13275] ? nr_remove_neigh+0x1a/0x290 [ 299.942289][T13275] ? do_raw_spin_lock+0x12c/0x2b0 [ 299.942307][T13275] _raw_spin_lock_bh+0x33/0x40 [ 299.942325][T13275] ? nr_remove_neigh+0x1a/0x290 [ 299.942336][T13275] nr_remove_neigh+0x1a/0x290 [ 299.942348][T13275] nr_add_node+0x2408/0x2c00 [ 299.942362][T13275] nr_rt_ioctl+0x11b7/0x29b0 [ 299.942375][T13275] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 299.942391][T13275] ? bpf_lsm_capable+0x9/0x10 [ 299.942407][T13275] ? security_capable+0x7e/0x260 [ 299.942418][T13275] nr_ioctl+0x19a/0x2e0 [ 299.942434][T13275] sock_do_ioctl+0x118/0x280 [ 299.942449][T13275] ? __pfx_sock_do_ioctl+0x10/0x10 [ 299.942465][T13275] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 299.942480][T13275] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 299.942494][T13275] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 299.942510][T13275] sock_ioctl+0x227/0x6b0 [ 299.942525][T13275] ? __pfx_sock_ioctl+0x10/0x10 [ 299.942539][T13275] ? hook_file_ioctl_common+0x145/0x410 [ 299.942557][T13275] ? selinux_file_ioctl+0x180/0x270 [ 299.942570][T13275] ? selinux_file_ioctl+0xb4/0x270 [ 299.942584][T13275] ? __pfx_sock_ioctl+0x10/0x10 [ 299.942599][T13275] __x64_sys_ioctl+0x18b/0x210 [ 299.942614][T13275] do_syscall_64+0xcd/0x4c0 [ 299.942627][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.942639][T13275] RIP: 0033:0x7fd5b418e969 [ 299.942648][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.942659][T13275] RSP: 002b:00007fd5b4f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.942669][T13275] RAX: ffffffffffffffda RBX: 00007fd5b43b5fa0 RCX: 00007fd5b418e969 [ 299.942676][T13275] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000006 [ 299.942682][T13275] RBP: 00007fd5b4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 299.942689][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.942696][T13275] R13: 0000000000000000 R14: 00007fd5b43b5fa0 R15: 00007ffc8903dd88 [ 299.942705][T13275] [ 300.198309][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 300.206724][ T53] usb 7-1: device descriptor read/all, error -71 [ 300.271718][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.340343][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.479237][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.549742][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.637924][ T1144] bridge_slave_1: left allmulticast mode [ 300.639734][ T1144] bridge_slave_1: left promiscuous mode [ 300.641581][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.644485][ T1144] bridge_slave_0: left allmulticast mode [ 300.646256][ T1144] bridge_slave_0: left promiscuous mode [ 300.648203][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.813261][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.816985][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.820351][ T1144] bond0 (unregistering): Released all slaves [ 300.937628][ T1144] IPVS: stopping master sync thread 12446 ... [ 301.072520][ T1144] hsr_slave_0: left promiscuous mode [ 301.075372][ T1144] hsr_slave_1: left promiscuous mode [ 301.078074][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.081218][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.084783][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.088711][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.093175][ T1144] veth1_macvtap: left promiscuous mode [ 301.094933][ T1144] veth0_macvtap: left promiscuous mode [ 301.097382][ T1144] veth1_vlan: left promiscuous mode [ 301.099035][ T1144] veth0_vlan: left promiscuous mode [ 301.248646][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 301.280877][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 301.818306][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.880344][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.940003][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.020380][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.086937][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.159743][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.201106][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.271237][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.363187][ T1144] bridge_slave_1: left allmulticast mode [ 302.365446][ T1144] bridge_slave_1: left promiscuous mode [ 302.368401][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.371998][ T1144] bridge_slave_0: left allmulticast mode [ 302.374301][ T1144] bridge_slave_0: left promiscuous mode [ 302.376133][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.379647][ T1144] bridge_slave_1: left allmulticast mode [ 302.381421][ T1144] bridge_slave_1: left promiscuous mode [ 302.383224][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.386016][ T1144] bridge_slave_0: left allmulticast mode [ 302.390642][ T1144] bridge_slave_0: left promiscuous mode [ 302.392460][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.501009][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.504486][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.507961][ T1144] bond0 (unregistering): Released all slaves [ 302.633956][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.638367][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.641664][ T1144] bond0 (unregistering): Released all slaves [ 303.073151][ T1144] hsr_slave_0: left promiscuous mode [ 303.075480][ T1144] hsr_slave_1: left promiscuous mode [ 303.082235][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.084900][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.088103][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.090767][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.095703][ T1144] hsr_slave_0: left promiscuous mode [ 303.098172][ T1144] hsr_slave_1: left promiscuous mode [ 303.100437][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.103064][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.106056][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.108995][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.116585][ T1144] veth1_macvtap: left promiscuous mode [ 303.118583][ T1144] veth0_macvtap: left promiscuous mode [ 303.120649][ T1144] veth1_vlan: left promiscuous mode [ 303.122617][ T1144] veth0_vlan: left promiscuous mode [ 303.124994][ T1144] veth1_macvtap: left promiscuous mode [ 303.128166][ T1144] veth0_macvtap: left promiscuous mode [ 303.130209][ T1144] veth1_vlan: left promiscuous mode [ 303.132139][ T1144] veth0_vlan: left promiscuous mode [ 303.342898][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 303.374752][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 303.707703][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 303.743851][ T1144] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 20:55:37 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582e05 RDI=ffffffff9ae6b6a0 RBP=ffffffff9ae6b660 RSP=ffffc90006317328 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e35312e36 R12=0000000000000000 R13=000000000000007a R14=ffffffff9ae6b660 R15=ffffffff85582da0 RIP=ffffffff85582e2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd5b4f176c0 ffffffff 00c00000 GS =0000 ffff8880d6970000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd5b4f16f98 CR3=000000004cd6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e800c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffc0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4383488 00007fd5b4383480 00007fd5b4383478 00007fd5b4383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4eed100 00007fd5b4383440 00007fd5b4383458 00007fd5b43834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5b4383498 00007fd5b4383490 00007fd5b4383488 00007fd5b4383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000008000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000008 RSI=00000000000000fb RDI=0000000000000008 RBP=0000000000000004 RSP=ffffc90003fbf500 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000007c70 R12=0000000000000008 R13=0000000000000003 R14=ffff88806a53cfd0 R15=ffff88806a53cfc0 RIP=ffffffff81693e48 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f857dce7d60 CR3=0000000025d2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e800c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f857d1836a3 00007f857d1836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf48e00d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577b3a0e2 0000555577b39f80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577b48255 0000555577b45c60 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff040580030809a0 060509800404a4e6 0800010000040806 06013ac20000315f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005800401 0000020806060167 b400080005e00300 100005d003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05c00302100005b0 0301a81000039003 0100000608060a80 030a800403800303 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800405a003000800 0590030fffffffff ffff040580030809 a0060509800404a4 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e608000100000408 0606013ac2000031 5f6576616c735f65 676469726201ffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000330a84 RBX=0000000000000002 RCX=ffffffff8b7bb449 RDX=ffffed100d4c663e RSI=ffffffff8bf52e00 RDI=ffffffff8191b6d1 RBP=ffffed1003b56910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000000001 R12=0000000000000002 R13=ffff88801dab4880 R14=ffffffff90878750 R15=0000000000000000 RIP=ffffffff8b7b9faf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f91cff8 CR3=000000003810c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffd83488 00007f43ffd83480 00007f43ffd83478 00007f43ffd83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44008ed100 00007f43ffd83440 00007f43ffd80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffd83498 00007f43ffd83490 00007f43ffd83488 00007f43ffd83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000031dd5c RBX=0000000000000003 RCX=ffffffff8b7bb449 RDX=ffffed100d4e663e RSI=ffffffff8bf52e00 RDI=ffffffff8191b6d1 RBP=ffffed1003b59000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e663d R10=ffff88806a7331eb R11=ffff88806a63cb60 R12=0000000000000003 R13=ffff88801dac8000 R14=ffffffff90878750 R15=0000000000000000 RIP=ffffffff8b7b9faf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000399d CR3=000000003810c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffd83488 00007f43ffd83480 00007f43ffd83478 00007f43ffd83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f44008ed100 00007f43ffd83440 00007f43ffd83458 00007f43ffd834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43ffd83498 00007f43ffd83490 00007f43ffd83488 00007f43ffd83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000