last executing test programs: 6.979530564s ago: executing program 1 (id=1500): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x600202, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 4.469250971s ago: executing program 1 (id=1518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mknod(0x0, 0x200, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x182e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x9362, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) unshare(0x8000500) setns(0xffffffffffffffff, 0x0) 3.494123803s ago: executing program 2 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.218358744s ago: executing program 1 (id=1531): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mknod(0x0, 0x200, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x182e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x9362, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) 2.629571718s ago: executing program 0 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290a000000000000000300002f0000000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0) 2.586356572s ago: executing program 2 (id=1536): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000280)=@l2tp={0x2, 0xa00, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x10, 0x84, 0x2}], 0x10}}], 0x2, 0x0) 2.576052962s ago: executing program 0 (id=1537): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc}, 0x0, [0x0, 0x0, 0x800, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) 2.515989274s ago: executing program 2 (id=1538): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 2.51416698s ago: executing program 0 (id=1539): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mknod(0x0, 0x200, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_setup(0x182e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x9362, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) unshare(0x8000500) setns(0xffffffffffffffff, 0x0) 2.197135386s ago: executing program 3 (id=1540): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x92, 0x20000003, 0x8f4, 0x7, 0x4, {0x0, 0x7, 0xfff, 0x8, 0x9, 0x7}, {0x6, 0x1, 0x923, 0x1, 0x2, 0x8}, 0x3, 0x80000000, 0x1}}]}]}}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.129740562s ago: executing program 3 (id=1541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x79c, 0x3ff, 0x6, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00'}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) listen(r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000180)=0x2) 1.958891841s ago: executing program 1 (id=1542): unshare(0x20020000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) 1.958500831s ago: executing program 2 (id=1543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="54010000100001000000000000000000e000000200"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000025a9e6490000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000001c0017000000000000000000000000000000000000000000000000004800010073"], 0x154}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/29, 0xd6a3f5562bf1b036) 1.764816171s ago: executing program 3 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.319806224s ago: executing program 0 (id=1545): r0 = syz_open_dev$sg(&(0x7f0000000740), 0x1, 0x2002) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000780)) (fail_nth: 4) 1.318733059s ago: executing program 0 (id=1546): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000001e80)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) write$binfmt_misc(r0, &(0x7f0000001a00)=ANY=[], 0xbf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, {0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x900}}}, 0x0, 0x0, 0x0, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2e640, 0x0) ioctl$FIONCLEX(r4, 0x5450) write$FUSE_INIT(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000380), 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) geteuid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x20}}, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001f40)=""/4106, 0x100a}], 0x1}}], 0x1, 0x0, 0x0) 1.02908493s ago: executing program 2 (id=1547): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r1, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket(0x2, 0x5, 0x26c00000) getsockopt$bt_hci(r2, 0x84, 0xffffffffffffffff, &(0x7f0000001180)=""/4102, &(0x7f00000003c0)=0x1006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x422080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x101ff, 0x1, 0x2000, 0x2000, &(0x7f0000feb000/0x2000)=nil}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r5 = fcntl$dupfd(r0, 0x0, r3) write$sndseq(r5, 0x0, 0x0) read$snapshot(r5, 0x0, 0xffffffbf) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDCTL_SEQ_GETTIME(r5, 0x80045113, &(0x7f00000000c0)) getsockopt$inet6_int(r6, 0x29, 0x16, 0x0, &(0x7f0000000040)) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000400)="0f01c33626a3fff2670ffeb45e00000080baf80c66b8a683f28a66efbafc0cb80000ef66660f388154ef0f060f20dc66b91d03000066b80500000066ba000000000f30650f01d1f4", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff03f}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000740)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffffffffffd, 0x5, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000000000000000, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket(0x10, 0x3, 0x0) 1.028703365s ago: executing program 1 (id=1548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0x10}, 0x14) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x454600, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0xb0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xce, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x20, 0x1, 0x40, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x8240, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) mount$9p_xen(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) write$proc_mixer(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="53594e544820274d6173746572204361707475726520537769746368272030303030303030303030303030303030303030300a50484f4e45494e0a4d4f4e49544f5220274361707475726520566f6c756d65272430303030303030303030303030303030303030300a4c494e45202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a4c494e453220274c696e65272030303030303030303030303030303030303030300a4f4741494e20274d617374657220436170747572652053776974636827203030303030303030303030303030309f303030400a444947"], 0xf8) writev(r7, &(0x7f00000023c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup3(r8, r7, 0x0) 669.280776ms ago: executing program 3 (id=1549): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)=0x2) 599.642311ms ago: executing program 3 (id=1550): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 497.598123ms ago: executing program 3 (id=1551): syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000340)=0x80) kcmp(r0, r3, 0x1, r1, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) sync() 497.238709ms ago: executing program 2 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) r1 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0x3, 0x400, 0xf2e, 0x78}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000740)="ae55f835c8b180fc51c4de070c82e10fe00dd6882d30252ec44ff4cf5a73f1f8bbceab15898b4f05605d2c7f4254808d4fe2f153a88eb8a07b07b17b6a89d6705628e164a76e70c661ff487b31d883f4b68d6f0e2aa28bb65153d5eaf5794d30465602173a9159d4be56b52de73dfa31fe40b36fa78b72de9d6d1bcc0af279dce5ae71997c1d661f7e5d37c5090fac03d5005b4f34a1026bc84e03de96b5e139a1c2c7b0c2c5", 0xa6, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x24, '\x00', 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='btrfs_add_block_group\x00'}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9, 0x5}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000700000000000019078ac1efc01ac1414aa0300907803000000450c0000000000000004000000000000ac1414aa441c0003ac1e000100000000ac14140011000000acfa13aa0000000086060000000000000000000000c8a5000000000000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 349.792865ms ago: executing program 0 (id=1553): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x3c) select(0x8c, &(0x7f0000000140)={0x0, 0x1}, 0x0, &(0x7f0000000400), 0x0) mmap(&(0x7f0000f6e000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0xadb89000) munlock(&(0x7f0000cad000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) munlock(&(0x7f0000a67000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a1e000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ab0000/0x3000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r7, &(0x7f0000000200)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/205, 0xcd}], 0x4, &(0x7f00000005c0)=""/82, 0x52}, 0x40010042) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1554): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0xc008af12, &(0x7f00000001c0)) (fail_nth: 4) kernel console output (not intermixed with test programs): SA: mixer_oss: invalid OSS volume 'DIG' [ 386.684274][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 387.274374][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.276309][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.280590][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.910488][ T8448] netlink: 100 bytes leftover after parsing attributes in process `syz.3.910'. [ 388.202815][ T8434] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 388.205731][ T8434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.220495][ T8434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.225155][ T8434] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 388.243446][ T8434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.294307][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.909'. [ 388.570609][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 388.676010][ T8461] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 389.560174][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 390.142120][ T8480] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 390.293911][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 390.298629][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout [ 390.302269][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.385914][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 391.290311][ T8499] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 391.766323][ T8495] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 391.769153][ T8495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.772334][ T8495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.775226][ T8495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.678150][ T8510] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 393.680946][ T8510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.683685][ T8510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.686355][ T8510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.872374][ T8537] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 394.885467][ T8537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.903598][ T8537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.908183][ T8537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.327003][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 396.610149][ T8567] netlink: 100 bytes leftover after parsing attributes in process `syz.1.939'. [ 396.990095][ T5348] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.992894][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout [ 396.995615][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.998385][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 398.221059][ T8588] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 398.225194][ T8588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.227498][ T8588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.229850][ T8588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.612534][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 398.632179][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 399.560179][ T66] Bluetooth: hci12: command 0x0c1a tx timeout [ 399.692969][ T8629] netlink: 100 bytes leftover after parsing attributes in process `syz.3.954'. [ 400.400270][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.400311][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.405723][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.189731][ T8653] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 401.317124][ T8642] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 401.320195][ T8642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.325333][ T8642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.328981][ T8642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.785713][ T8667] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 402.344012][ T8676] netlink: 100 bytes leftover after parsing attributes in process `syz.3.968'. [ 402.670112][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 403.390298][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.390449][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.392717][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.731172][ T8687] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 403.740658][ T8687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.743627][ T8687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.746450][ T8687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.753003][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 403.762037][ T8701] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 403.762809][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'. [ 403.984527][ T8707] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 404.357557][ T8710] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 404.747063][ T8717] netlink: 100 bytes leftover after parsing attributes in process `syz.2.981'. [ 405.002112][ T8721] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 405.087501][ T66] Bluetooth: hci12: command 0x0c1a tx timeout [ 405.751624][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 405.800266][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.803026][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.805697][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.456297][ T8754] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 406.513701][ T8738] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 406.520521][ T8738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.523187][ T8738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.525776][ T8738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.601641][ T8755] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 406.764062][ T8759] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 407.058793][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 407.058810][ T39] audit: type=1400 audit(1725791077.207:400): avc: denied { map } for pid=8764 comm="syz.0.996" path="socket:[27475]" dev="sockfs" ino=27475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 407.105028][ T39] audit: type=1400 audit(1725791077.257:401): avc: denied { validate_trans } for pid=8766 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 407.438925][ T8784] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1000'. [ 407.870083][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 408.600137][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.600225][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 408.603093][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 408.705302][ T8789] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 408.707944][ T8789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.710301][ T8789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.712529][ T8789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.818451][ T8809] program syz.2.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.082529][ T8817] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 409.653328][ T8830] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1013'. [ 409.936655][ T39] audit: type=1400 audit(1725791080.087:402): avc: denied { read } for pid=8834 comm="syz.2.1015" path="socket:[26350]" dev="sockfs" ino=26350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.031385][ T66] Bluetooth: hci12: command 0x0c1a tx timeout [ 410.388410][ T39] audit: type=1400 audit(1725791080.517:403): avc: denied { open } for pid=8848 comm="syz.1.1018" path="/dev/ptyq7" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.420317][ T39] audit: type=1400 audit(1725791080.527:404): avc: denied { ioctl } for pid=8848 comm="syz.1.1018" path="/dev/ptyq7" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.580142][ T39] audit: type=1400 audit(1725791080.727:405): avc: denied { read } for pid=8848 comm="syz.1.1018" name="mouse0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 410.598842][ T39] audit: type=1400 audit(1725791080.727:406): avc: denied { open } for pid=8848 comm="syz.1.1018" path="/dev/input/mouse0" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 410.671939][ T39] audit: type=1400 audit(1725791080.727:407): avc: denied { read } for pid=8848 comm="syz.1.1018" name="event2" dev="devtmpfs" ino=870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 410.761123][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.763335][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.765409][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 410.825541][ T39] audit: type=1400 audit(1725791080.977:408): avc: denied { create } for pid=8862 comm="syz.1.1022" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 410.834171][ T8864] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 410.839455][ T8863] syz.1.1022: attempt to access beyond end of device [ 410.839455][ T8863] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 410.847422][ T39] audit: type=1400 audit(1725791080.987:409): avc: denied { mounton } for pid=8862 comm="syz.1.1022" path="/59/file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 410.856645][ T8863] SQUASHFS error: Failed to read block 0x0: -5 [ 410.858900][ T8863] unable to read squashfs_super_block [ 410.883952][ T8844] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 410.888576][ T8844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.891637][ T8844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.895684][ T8844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.896414][ T8863] nfs4: Bad value for 'source' [ 411.428334][ T8885] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1028'. [ 411.617239][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 411.800186][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 411.811731][ T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 411.814756][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.821308][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.827100][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.831459][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.836816][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.840614][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.985453][ T8890] netlink: 'syz.1.1029': attribute type 11 has an invalid length. [ 411.998804][ T8892] jfs: Unrecognized mount option "gid=" or missing value [ 412.006024][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 412.067003][ T57] usb 5-1: usb_control_msg returned -32 [ 412.069464][ T57] usbtmc 5-1:16.0: can't read capabilities [ 412.238605][ T8905] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 412.920112][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.920221][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.925218][ T5348] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.966122][ T8906] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 412.972837][ T8906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.976225][ T8906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.981918][ T8906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.272137][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 413.272152][ T39] audit: type=1400 audit(1725791083.427:412): avc: denied { setopt } for pid=8925 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.500367][ T6881] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 413.650254][ T6881] usb 8-1: device descriptor read/64, error -71 [ 413.722070][ T8938] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1043'. [ 413.920111][ T6881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 413.983219][ T25] usb 5-1: USB disconnect, device number 4 [ 414.068989][ T39] audit: type=1400 audit(1725791084.217:413): avc: denied { write } for pid=8940 comm="syz.0.1044" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 414.069835][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1044'. [ 414.070796][ T5338] Bluetooth: hci2: unexpected event for opcode 0x03e5 [ 414.080085][ T6881] usb 8-1: device descriptor read/64, error -71 [ 414.089276][ T39] audit: type=1400 audit(1725791084.237:414): avc: denied { ioctl } for pid=8943 comm="syz.2.1045" path="/dev/usbmon0" dev="devtmpfs" ino=723 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.203203][ T6881] usb usb8-port1: attempt power cycle [ 414.690112][ T6881] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 414.724334][ T6881] usb 8-1: device descriptor read/8, error -71 [ 414.927110][ T8963] No control pipe specified [ 414.998611][ T8953] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 415.000609][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.002039][ T6881] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 415.003800][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.007657][ T8953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 415.012721][ T8953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.015707][ T8953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.040869][ T6881] usb 8-1: device descriptor read/8, error -71 [ 415.170600][ T6881] usb usb8-port1: unable to enumerate USB device [ 415.235629][ T8969] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 415.285022][ T39] audit: type=1400 audit(1725791085.437:415): avc: denied { mounton } for pid=8971 comm="syz.0.1054" path="/syzcgroup/cpu/syz0/cpuset.cpus" dev="cgroup" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 415.321614][ T8975] FAULT_INJECTION: forcing a failure. [ 415.321614][ T8975] name failslab, interval 1, probability 0, space 0, times 0 [ 415.326374][ T8975] CPU: 2 UID: 0 PID: 8975 Comm: syz.0.1055 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 415.330593][ T8975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.334356][ T8975] Call Trace: [ 415.335604][ T8975] [ 415.336722][ T8975] dump_stack_lvl+0x16c/0x1f0 [ 415.338487][ T8975] should_fail_ex+0x497/0x5b0 [ 415.340136][ T8975] ? fs_reclaim_acquire+0xae/0x160 [ 415.341968][ T8975] should_failslab+0xc2/0x120 [ 415.343688][ T8975] __kmalloc_noprof+0xcb/0x400 [ 415.345402][ T8975] ? __pfx_lock_acquire+0x10/0x10 [ 415.347398][ T8975] tomoyo_realpath_from_path+0xb9/0x720 [ 415.349528][ T8975] ? tomoyo_profile+0x47/0x60 [ 415.351527][ T8975] tomoyo_path_number_perm+0x245/0x590 [ 415.353792][ T8975] ? tomoyo_path_number_perm+0x232/0x590 [ 415.356028][ T8975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.358489][ T8975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.360779][ T8975] ? __fget_files+0x256/0x400 [ 415.362756][ T8975] security_file_ioctl+0x75/0xc0 [ 415.364848][ T8975] __x64_sys_ioctl+0xbb/0x220 [ 415.366837][ T8975] do_syscall_64+0xcd/0x250 [ 415.368693][ T8975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.371213][ T8975] RIP: 0033:0x7f666657cef9 [ 415.373175][ T8975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.380749][ T8975] RSP: 002b:00007f6665fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.383787][ T8975] RAX: ffffffffffffffda RBX: 00007f6666735f80 RCX: 00007f666657cef9 [ 415.386550][ T8975] RDX: 0000000000000000 RSI: 0000000000005307 RDI: 0000000000000003 [ 415.389550][ T8975] RBP: 00007f6665fff090 R08: 0000000000000000 R09: 0000000000000000 [ 415.392946][ T8975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.396464][ T8975] R13: 0000000000000000 R14: 00007f6666735f80 R15: 00007ffda3adef98 [ 415.399748][ T8975] [ 415.402736][ T8975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.452876][ T8977] mkiss: ax0: crc mode is auto. [ 416.042460][ T8991] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1058'. [ 416.271198][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 416.958734][ T9005] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 417.070189][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.070326][ T5348] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.072659][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 417.416823][ T8999] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 417.419748][ T8999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.422609][ T8999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 417.426955][ T8999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 417.526927][ T9010] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 417.555892][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.560331][ T9010] bond0: (slave team0): Enslaving as an active interface with an up link [ 417.564577][ T9010] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 417.568464][ T9010] bond0: (slave team0): Releasing backup interface [ 417.575780][ T9010] bridge0: port 3(team0) entered blocking state [ 417.577990][ T9010] bridge0: port 3(team0) entered disabled state [ 417.580332][ T9010] team0: entered allmulticast mode [ 417.582474][ T9010] team_slave_0: entered allmulticast mode [ 417.585055][ T9010] team_slave_1: entered allmulticast mode [ 417.589198][ T9010] team0: entered promiscuous mode [ 417.592555][ T9010] team_slave_0: entered promiscuous mode [ 417.595465][ T9010] team_slave_1: entered promiscuous mode [ 417.843002][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 417.886657][ T39] audit: type=1400 audit(1725791088.037:416): avc: denied { connect } for pid=9018 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.030735][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 418.041295][ T25] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 418.048917][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.057597][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.065281][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.072009][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.079680][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.084798][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.260832][ T39] audit: type=1400 audit(1725791088.407:417): avc: denied { name_connect } for pid=9027 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 418.295314][ T9014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.308206][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.320658][ T25] usb 8-1: usb_control_msg returned -32 [ 418.323279][ T25] usbtmc 8-1:16.0: can't read capabilities [ 418.425527][ T9031] FAULT_INJECTION: forcing a failure. [ 418.425527][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 418.432296][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.3.1066 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 418.432320][ T9031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 418.432330][ T9031] Call Trace: [ 418.432337][ T9031] [ 418.432344][ T9031] dump_stack_lvl+0x16c/0x1f0 [ 418.432381][ T9031] should_fail_ex+0x497/0x5b0 [ 418.447270][ T9031] ? fs_reclaim_acquire+0xae/0x160 [ 418.449380][ T9031] should_failslab+0xc2/0x120 [ 418.451304][ T9031] kmem_cache_alloc_node_noprof+0x71/0x310 [ 418.453739][ T9031] ? __alloc_skb+0x2b1/0x380 [ 418.455786][ T9031] __alloc_skb+0x2b1/0x380 [ 418.457598][ T9031] ? __pfx___alloc_skb+0x10/0x10 [ 418.459610][ T9031] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 418.462032][ T9031] netlink_alloc_large_skb+0x69/0x130 [ 418.464043][ T9031] netlink_sendmsg+0x689/0xd70 [ 418.465821][ T9031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.467852][ T9031] ? __import_iovec+0x1fd/0x6e0 [ 418.469779][ T9031] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.471867][ T9031] ____sys_sendmsg+0xab5/0xc90 [ 418.473750][ T9031] ? copy_msghdr_from_user+0x10b/0x160 [ 418.475912][ T9031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.477969][ T9031] ? find_held_lock+0x2d/0x110 [ 418.479863][ T9031] ? __pfx___lock_acquire+0x10/0x10 [ 418.482023][ T9031] ___sys_sendmsg+0x135/0x1e0 [ 418.483906][ T9031] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.485834][ T9031] ? ksys_write+0x21c/0x260 [ 418.487615][ T9031] ? __fget_light+0x173/0x210 [ 418.489501][ T9031] __sys_sendmsg+0x117/0x1f0 [ 418.491364][ T9031] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.493430][ T9031] do_syscall_64+0xcd/0x250 [ 418.495272][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.497623][ T9031] RIP: 0033:0x7fea0d97cef9 [ 418.499387][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.506757][ T9031] RSP: 002b:00007fea0e821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.510068][ T9031] RAX: ffffffffffffffda RBX: 00007fea0db36058 RCX: 00007fea0d97cef9 [ 418.513225][ T9031] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 000000000000000b [ 418.516404][ T9031] RBP: 00007fea0e821090 R08: 0000000000000000 R09: 0000000000000000 [ 418.519691][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.522801][ T9031] R13: 0000000000000000 R14: 00007fea0db36058 R15: 00007ffe50261458 [ 418.525828][ T9031] [ 418.750274][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 419.470543][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 419.473203][ T5338] Bluetooth: hci1: command 0x0c1a tx timeout [ 419.476161][ T5338] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.585605][ T39] audit: type=1400 audit(1725791089.737:418): avc: denied { write } for pid=9041 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 419.595194][ T39] audit: type=1400 audit(1725791089.747:419): avc: denied { getopt } for pid=9041 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 419.635697][ T39] audit: type=1400 audit(1725791089.787:420): avc: denied { unmount } for pid=7820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 419.830824][ T39] audit: type=1400 audit(1725791089.977:421): avc: denied { create } for pid=9047 comm="syz.2.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.840065][ T39] audit: type=1400 audit(1725791089.987:422): avc: denied { setopt } for pid=9047 comm="syz.2.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.853451][ T39] audit: type=1400 audit(1725791089.987:423): avc: denied { write } for pid=9047 comm="syz.2.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 420.516460][ T9045] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 420.519617][ T9045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.523119][ T9045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.526255][ T9045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.625795][ T5378] usb 8-1: USB disconnect, device number 8 [ 420.645552][ T9048] syz.2.1072 (9048) used greatest stack depth: 21104 bytes left [ 420.975122][ T9072] No control pipe specified [ 421.871478][ T5338] Bluetooth: hci12: command 0x0c1a tx timeout [ 421.913672][ T9084] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 422.590125][ T5338] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.591048][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.624972][ T9084] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 422.627982][ T9084] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 422.683401][ T9086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.686467][ T9086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.689314][ T9084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.690475][ T9086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.693775][ T9084] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 422.699749][ T9084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.725323][ T9084] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 422.740343][ T9084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.742978][ T9084] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 422.745116][ T39] audit: type=1400 audit(1725791092.897:424): avc: denied { setopt } for pid=9089 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 422.759580][ T39] audit: type=1400 audit(1725791092.897:425): avc: denied { ioctl } for pid=9089 comm="syz.3.1085" path="socket:[26487]" dev="sockfs" ino=26487 ioctlcmd=0x4dfb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 422.957773][ T39] audit: type=1400 audit(1725791093.107:426): avc: denied { listen } for pid=9089 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 422.966860][ T39] audit: type=1400 audit(1725791093.117:427): avc: denied { accept } for pid=9089 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.191624][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 424.196189][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 424.200709][ T9123] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1092'. [ 424.516605][ T9129] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 424.937087][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 424.937103][ T39] audit: type=1400 audit(1725791095.087:429): avc: denied { bind } for pid=9133 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.281777][ T9139] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1099'. [ 425.542982][ T39] audit: type=1400 audit(1725791095.697:430): avc: denied { read write } for pid=9148 comm="syz.1.1101" name="uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 425.574010][ T39] audit: type=1400 audit(1725791095.707:431): avc: denied { open } for pid=9148 comm="syz.1.1101" path="/dev/uhid" dev="devtmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 426.869562][ T9170] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 426.917821][ T9172] trusted_key: encrypted_key: key trusted:syz not found [ 426.935776][ T39] audit: type=1400 audit(1725791097.087:432): avc: denied { getopt } for pid=9171 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 427.391693][ T39] audit: type=1400 audit(1725791097.547:433): avc: denied { remount } for pid=9180 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 427.613989][ T9191] ptrace attach of "/syz-executor exec"[7843] was attempted by "/syz-executor exec"[9191] [ 427.664094][ T39] audit: type=1400 audit(1725791097.817:434): avc: denied { create } for pid=9187 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 427.683465][ T39] audit: type=1400 audit(1725791097.837:435): avc: denied { bind } for pid=9187 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 428.934721][ T9212] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 430.505663][ T9254] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 432.188112][ T9297] binder: 9292:9297 ioctl 4018aee1 20000240 returned -22 [ 432.200462][ T9297] binder: 9292:9297 ioctl 8010661b 20000000 returned -22 [ 432.215143][ T9297] binder: 9292:9297 ioctl ca289435 20000540 returned -22 [ 432.228471][ T9293] binder: 9292:9293 ioctl c0306201 20000280 returned -14 [ 432.238654][ T9293] binder: 9292:9293 ioctl c0306201 20000480 returned -14 [ 432.247786][ T39] audit: type=1400 audit(1725791102.397:436): avc: denied { map } for pid=9292 comm="syz.0.1151" path="/dev/ptmx" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 432.666767][ T9308] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 432.847033][ T9307] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1156'. [ 433.093417][ T39] audit: type=1400 audit(1725791103.247:437): avc: denied { read } for pid=9321 comm="syz.1.1160" name="hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.105033][ T39] audit: type=1400 audit(1725791103.247:438): avc: denied { open } for pid=9321 comm="syz.1.1160" path="/dev/hpet" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.121308][ T39] audit: type=1400 audit(1725791103.247:439): avc: denied { ioctl } for pid=9321 comm="syz.1.1160" path="/dev/hpet" dev="devtmpfs" ino=632 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 433.302967][ T64] Bluetooth: (null): Invalid header checksum [ 433.305363][ T64] Bluetooth: (null): Invalid header checksum [ 433.411618][ T64] Bluetooth: (null): Invalid header checksum [ 433.547145][ T64] Bluetooth: (null): Invalid header checksum [ 433.805096][ T39] audit: type=1400 audit(1725791103.957:440): avc: denied { append } for pid=9340 comm="syz.1.1166" name="iommu" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.898853][ T39] audit: type=1326 audit(1725791104.047:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.2.1165" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de797cef9 code=0x0 [ 435.147222][ T9372] FAULT_INJECTION: forcing a failure. [ 435.147222][ T9372] name failslab, interval 1, probability 0, space 0, times 0 [ 435.152749][ T9372] CPU: 2 UID: 0 PID: 9372 Comm: syz.2.1175 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 435.156481][ T9372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 435.160450][ T9372] Call Trace: [ 435.161680][ T9372] [ 435.162684][ T9372] dump_stack_lvl+0x16c/0x1f0 [ 435.164482][ T9372] should_fail_ex+0x497/0x5b0 [ 435.166501][ T9372] should_failslab+0xc2/0x120 [ 435.168123][ T9372] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 435.169912][ T9372] ? skb_clone+0x190/0x3f0 [ 435.171445][ T9372] skb_clone+0x190/0x3f0 [ 435.173196][ T9372] netlink_deliver_tap+0xab3/0xd90 [ 435.175472][ T9372] netlink_unicast+0x6b4/0x7f0 [ 435.177512][ T9372] ? __pfx_netlink_unicast+0x10/0x10 [ 435.179547][ T9372] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 435.181738][ T9372] netlink_ack+0x6a8/0xb90 [ 435.183619][ T9372] netlink_rcv_skb+0x348/0x440 [ 435.185460][ T9372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.187464][ T9372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.189707][ T9372] ? netlink_deliver_tap+0x1ae/0xd90 [ 435.191778][ T9372] netlink_unicast+0x53c/0x7f0 [ 435.193461][ T9372] ? __pfx_netlink_unicast+0x10/0x10 [ 435.195671][ T9372] netlink_sendmsg+0x8b8/0xd70 [ 435.197654][ T9372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.199754][ T9372] ? __import_iovec+0x1fd/0x6e0 [ 435.201489][ T9372] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 435.203520][ T9372] ____sys_sendmsg+0xab5/0xc90 [ 435.205217][ T9372] ? copy_msghdr_from_user+0x10b/0x160 [ 435.207283][ T9372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.209138][ T9372] ? find_held_lock+0x2d/0x110 [ 435.210988][ T9372] ? __pfx___lock_acquire+0x10/0x10 [ 435.213115][ T9372] ___sys_sendmsg+0x135/0x1e0 [ 435.215028][ T9372] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.217366][ T9372] ? ksys_write+0x21c/0x260 [ 435.219332][ T9372] ? __fget_light+0x173/0x210 [ 435.221401][ T9372] __sys_sendmsg+0x117/0x1f0 [ 435.223149][ T9372] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.225452][ T9372] do_syscall_64+0xcd/0x250 [ 435.227501][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.230090][ T9372] RIP: 0033:0x7f1de797cef9 [ 435.231708][ T9372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.239657][ T9372] RSP: 002b:00007f1de86fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.243341][ T9372] RAX: ffffffffffffffda RBX: 00007f1de7b35f80 RCX: 00007f1de797cef9 [ 435.246861][ T9372] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 435.250026][ T9372] RBP: 00007f1de86fe090 R08: 0000000000000000 R09: 0000000000000000 [ 435.252675][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.255581][ T9372] R13: 0000000000000000 R14: 00007f1de7b35f80 R15: 00007ffdf47abf48 [ 435.258852][ T9372] [ 435.528777][ T9382] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 435.932565][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 436.771556][ T39] audit: type=1400 audit(1725791106.927:442): avc: denied { unmount } for pid=9418 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 436.782010][ T9419] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1189'. [ 436.952690][ T9429] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 437.198059][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1192'. [ 437.553811][ T9447] FAULT_INJECTION: forcing a failure. [ 437.553811][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 437.559868][ T9447] CPU: 2 UID: 0 PID: 9447 Comm: syz.1.1198 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 437.563567][ T9447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 437.567174][ T9447] Call Trace: [ 437.568322][ T9447] [ 437.569338][ T9447] dump_stack_lvl+0x16c/0x1f0 [ 437.570958][ T9447] should_fail_ex+0x497/0x5b0 [ 437.572556][ T9447] ? fs_reclaim_acquire+0xae/0x160 [ 437.574255][ T9447] should_failslab+0xc2/0x120 [ 437.576113][ T9447] __kmalloc_cache_noprof+0x6b/0x300 [ 437.578371][ T9447] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 437.581110][ T9447] ? kasan_save_track+0x14/0x30 [ 437.583202][ T9447] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 437.586439][ T9447] snd_mixer_oss_get_recsrc1_sw+0x105/0x1d0 [ 437.588862][ T9447] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 437.591582][ T9447] snd_mixer_oss_ioctl1+0x187e/0x1cf0 [ 437.593837][ T9447] ? __pfx_lock_release+0x10/0x10 [ 437.596038][ T9447] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 437.598809][ T9447] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 437.601248][ T9447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.603783][ T9447] ? do_vfs_ioctl+0x515/0x1ad0 [ 437.605895][ T9447] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 437.608095][ T9447] snd_mixer_oss_ioctl_card+0x103/0x180 [ 437.610577][ T9447] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 437.613211][ T9447] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 437.616225][ T9447] snd_pcm_oss_ioctl+0x1379/0x3790 [ 437.618459][ T9447] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 437.620865][ T9447] ? selinux_file_ioctl+0x180/0x270 [ 437.623095][ T9447] ? selinux_file_ioctl+0xb4/0x270 [ 437.625319][ T9447] ? bpf_lsm_file_ioctl+0x9/0x10 [ 437.627461][ T9447] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 437.629854][ T9447] __x64_sys_ioctl+0x193/0x220 [ 437.631971][ T9447] do_syscall_64+0xcd/0x250 [ 437.633633][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.635934][ T9447] RIP: 0033:0x7f780bb7cef9 [ 437.637876][ T9447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.646159][ T9447] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.649749][ T9447] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 437.652609][ T9447] RDX: 00000000200000c0 RSI: 0000000080044dff RDI: 0000000000000003 [ 437.656036][ T9447] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 437.659442][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.662832][ T9447] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 437.666239][ T9447] [ 437.669699][ T39] audit: type=1400 audit(1725791107.817:443): avc: denied { create } for pid=9442 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 437.677685][ T39] audit: type=1400 audit(1725791107.817:444): avc: denied { write } for pid=9442 comm="syz.3.1196" path="socket:[29107]" dev="sockfs" ino=29107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 437.715610][ T9450] netlink: 'syz.1.1199': attribute type 21 has an invalid length. [ 437.719031][ T9450] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1199'. [ 437.854180][ T9458] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 438.413429][ T39] audit: type=1400 audit(1725791108.567:445): avc: denied { setopt } for pid=9472 comm="syz.3.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.555576][ T9478] FAULT_INJECTION: forcing a failure. [ 438.555576][ T9478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.560952][ T9478] CPU: 2 UID: 0 PID: 9478 Comm: syz.1.1209 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 438.564900][ T9478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 438.568946][ T9478] Call Trace: [ 438.570425][ T9478] [ 438.571522][ T9478] dump_stack_lvl+0x16c/0x1f0 [ 438.573117][ T9478] should_fail_ex+0x497/0x5b0 [ 438.574745][ T9478] _copy_to_user+0x30/0xc0 [ 438.576416][ T9478] simple_read_from_buffer+0xd0/0x160 [ 438.578238][ T9478] proc_fail_nth_read+0x19e/0x280 [ 438.580091][ T9478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.582739][ T9478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.584920][ T9478] vfs_read+0x1d4/0xbd0 [ 438.586602][ T9478] ? __fdget_pos+0xeb/0x180 [ 438.588132][ T9478] ? __pfx_vfs_read+0x10/0x10 [ 438.589712][ T9478] ? __pfx___mutex_lock+0x10/0x10 [ 438.591414][ T9478] ? __fget_files+0x256/0x400 [ 438.593001][ T9478] ksys_read+0x12f/0x260 [ 438.594469][ T9478] ? __pfx_ksys_read+0x10/0x10 [ 438.596420][ T9478] do_syscall_64+0xcd/0x250 [ 438.598451][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.601054][ T9478] RIP: 0033:0x7f780bb7b93c [ 438.603026][ T9478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 438.611367][ T9478] RSP: 002b:00007f780c9da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.615007][ T9478] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7b93c [ 438.618481][ T9478] RDX: 000000000000000f RSI: 00007f780c9da0a0 RDI: 0000000000000004 [ 438.621958][ T9478] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 438.625416][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.628805][ T9478] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 438.632283][ T9478] [ 438.991174][ T39] audit: type=1400 audit(1725791109.147:446): avc: denied { accept } for pid=9481 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.551172][ T9496] FAULT_INJECTION: forcing a failure. [ 439.551172][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 439.562439][ T9496] CPU: 2 UID: 0 PID: 9496 Comm: syz.0.1215 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 439.566461][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.571226][ T9496] Call Trace: [ 439.572721][ T9496] [ 439.574047][ T9496] dump_stack_lvl+0x16c/0x1f0 [ 439.576169][ T9496] should_fail_ex+0x497/0x5b0 [ 439.578292][ T9496] ? fs_reclaim_acquire+0xae/0x160 [ 439.580569][ T9496] should_failslab+0xc2/0x120 [ 439.582681][ T9496] kmem_cache_alloc_node_noprof+0x71/0x310 [ 439.584928][ T9496] ? __alloc_skb+0x2b1/0x380 [ 439.586958][ T9496] __alloc_skb+0x2b1/0x380 [ 439.588927][ T9496] ? __pfx___alloc_skb+0x10/0x10 [ 439.591113][ T9496] ? genl_rcv_msg+0x4b0/0x800 [ 439.593207][ T9496] ? genl_rcv_msg+0x4bd/0x800 [ 439.595311][ T9496] netlink_ack+0x164/0xb90 [ 439.597317][ T9496] netlink_rcv_skb+0x348/0x440 [ 439.599410][ T9496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.601615][ T9496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.603930][ T9496] ? down_read+0xc9/0x330 [ 439.605862][ T9496] ? __pfx_down_read+0x10/0x10 [ 439.607973][ T9496] ? netlink_deliver_tap+0x1ae/0xd90 [ 439.610303][ T9496] genl_rcv+0x28/0x40 [ 439.611949][ T9496] netlink_unicast+0x53c/0x7f0 [ 439.613762][ T9496] ? __pfx_netlink_unicast+0x10/0x10 [ 439.616136][ T9496] netlink_sendmsg+0x8b8/0xd70 [ 439.618274][ T9496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.620424][ T9496] ? __import_iovec+0x1fd/0x6e0 [ 439.622613][ T9496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 439.624950][ T9496] ____sys_sendmsg+0xab5/0xc90 [ 439.627086][ T9496] ? copy_msghdr_from_user+0x10b/0x160 [ 439.629492][ T9496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.631849][ T9496] ? find_held_lock+0x2d/0x110 [ 439.633979][ T9496] ? __pfx___lock_acquire+0x10/0x10 [ 439.636348][ T9496] ___sys_sendmsg+0x135/0x1e0 [ 439.638469][ T9496] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.640787][ T9496] ? ksys_write+0x21c/0x260 [ 439.642812][ T9496] ? __fget_light+0x173/0x210 [ 439.644944][ T9496] __sys_sendmsg+0x117/0x1f0 [ 439.647006][ T9496] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.649332][ T9496] do_syscall_64+0xcd/0x250 [ 439.651378][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.653905][ T9496] RIP: 0033:0x7f666657cef9 [ 439.655858][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.664327][ T9496] RSP: 002b:00007f6665fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.668002][ T9496] RAX: ffffffffffffffda RBX: 00007f6666735f80 RCX: 00007f666657cef9 [ 439.671431][ T9496] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 439.674899][ T9496] RBP: 00007f6665fff090 R08: 0000000000000000 R09: 0000000000000000 [ 439.678419][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.681836][ T9496] R13: 0000000000000000 R14: 00007f6666735f80 R15: 00007ffda3adef98 [ 439.685160][ T9496] [ 439.995644][ T39] audit: type=1400 audit(1725791110.147:447): avc: denied { getopt } for pid=9502 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.407534][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 440.413709][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 440.688048][ T9534] FAULT_INJECTION: forcing a failure. [ 440.688048][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.692732][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.3.1226 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 440.696442][ T9534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.700147][ T9534] Call Trace: [ 440.701300][ T9534] [ 440.702326][ T9534] dump_stack_lvl+0x16c/0x1f0 [ 440.703985][ T9534] should_fail_ex+0x497/0x5b0 [ 440.705634][ T9534] _copy_to_user+0x30/0xc0 [ 440.707217][ T9534] simple_read_from_buffer+0xd0/0x160 [ 440.709061][ T9534] proc_fail_nth_read+0x19e/0x280 [ 440.711184][ T9534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.713326][ T9534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.715275][ T9534] vfs_read+0x1d4/0xbd0 [ 440.716832][ T9534] ? __fdget_pos+0xeb/0x180 [ 440.718424][ T9534] ? __pfx_vfs_read+0x10/0x10 [ 440.720055][ T9534] ? __pfx___mutex_lock+0x10/0x10 [ 440.721788][ T9534] ? __fget_files+0x256/0x400 [ 440.723459][ T9534] ksys_read+0x12f/0x260 [ 440.725044][ T9534] ? __pfx_ksys_read+0x10/0x10 [ 440.726726][ T9534] do_syscall_64+0xcd/0x250 [ 440.728329][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.730358][ T9534] RIP: 0033:0x7fea0d97b93c [ 440.731937][ T9534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 440.738698][ T9534] RSP: 002b:00007fea0e842030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 440.741501][ T9534] RAX: ffffffffffffffda RBX: 00007fea0db35f80 RCX: 00007fea0d97b93c [ 440.744251][ T9534] RDX: 000000000000000f RSI: 00007fea0e8420a0 RDI: 0000000000000004 [ 440.747629][ T9534] RBP: 00007fea0e842090 R08: 0000000000000000 R09: 0000000000000000 [ 440.751124][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.754578][ T9534] R13: 0000000000000000 R14: 00007fea0db35f80 R15: 00007ffe50261458 [ 440.758016][ T9534] [ 441.186344][ T9540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29873 sclass=netlink_route_socket pid=9540 comm=syz.3.1228 [ 441.782828][ T9555] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 442.287712][ T39] audit: type=1400 audit(1725791112.437:448): avc: denied { create } for pid=9562 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 442.308928][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 442.310139][ T39] audit: type=1400 audit(1725791112.457:449): avc: denied { write } for pid=9562 comm="syz.2.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 442.315083][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 442.320082][ T5402] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 442.329332][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.333208][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.511584][ T5402] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.515528][ T5402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 442.520526][ T5402] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.530101][ T5402] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.535685][ T5402] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.539645][ T5402] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.548775][ T5402] usb 8-1: config 0 descriptor?? [ 442.562749][ T9557] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.187924][ T5402] usbhid 8-1:0.0: can't add hid device: -71 [ 443.190758][ T5402] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 443.197094][ T5402] usb 8-1: USB disconnect, device number 9 [ 443.677790][ T9584] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 443.804288][ T39] audit: type=1400 audit(1725791113.937:450): avc: denied { shutdown } for pid=9585 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 443.911835][ T9588] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 443.915312][ T9588] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1241'. [ 444.058215][ T9592] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 444.066554][ T9586] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 444.169613][ T9596] FAULT_INJECTION: forcing a failure. [ 444.169613][ T9596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.179972][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.0.1244 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 444.185170][ T9596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.189982][ T9596] Call Trace: [ 444.191536][ T9596] [ 444.192865][ T9596] dump_stack_lvl+0x16c/0x1f0 [ 444.194989][ T9596] should_fail_ex+0x497/0x5b0 [ 444.197153][ T9596] _copy_to_user+0x30/0xc0 [ 444.199203][ T9596] simple_read_from_buffer+0xd0/0x160 [ 444.201655][ T9596] proc_fail_nth_read+0x19e/0x280 [ 444.203929][ T9596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.206457][ T9596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.208943][ T9596] vfs_read+0x1d4/0xbd0 [ 444.210805][ T9596] ? __fdget_pos+0xeb/0x180 [ 444.212873][ T9596] ? __pfx_vfs_read+0x10/0x10 [ 444.215038][ T9596] ? __pfx___mutex_lock+0x10/0x10 [ 444.217155][ T9596] ? __fget_files+0x256/0x400 [ 444.219329][ T9596] ksys_read+0x12f/0x260 [ 444.221233][ T9596] ? __pfx_ksys_read+0x10/0x10 [ 444.223389][ T9596] do_syscall_64+0xcd/0x250 [ 444.225414][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.228046][ T9596] RIP: 0033:0x7f666657b93c [ 444.230067][ T9596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 444.238512][ T9596] RSP: 002b:00007f6665fff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.241824][ T9596] RAX: ffffffffffffffda RBX: 00007f6666735f80 RCX: 00007f666657b93c [ 444.245269][ T9596] RDX: 000000000000000f RSI: 00007f6665fff0a0 RDI: 0000000000000003 [ 444.248710][ T9596] RBP: 00007f6665fff090 R08: 0000000000000000 R09: 0000000000000000 [ 444.252248][ T9596] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 444.255958][ T9596] R13: 0000000000000001 R14: 00007f6666735f80 R15: 00007ffda3adef98 [ 444.259452][ T9596] [ 444.319346][ T9599] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1245'. [ 444.332328][ T9599] FAULT_INJECTION: forcing a failure. [ 444.332328][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.338864][ T9599] CPU: 3 UID: 0 PID: 9599 Comm: syz.3.1245 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 444.343314][ T9599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.347874][ T9599] Call Trace: [ 444.349331][ T9599] [ 444.350391][ T9599] dump_stack_lvl+0x16c/0x1f0 [ 444.352204][ T9599] should_fail_ex+0x497/0x5b0 [ 444.354226][ T9599] _copy_from_user+0x30/0xf0 [ 444.356161][ T9599] copy_msghdr_from_user+0x99/0x160 [ 444.358420][ T9599] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 444.360895][ T9599] ? find_held_lock+0x2d/0x110 [ 444.362928][ T9599] ? __pfx___lock_acquire+0x10/0x10 [ 444.365164][ T9599] ___sys_sendmsg+0xff/0x1e0 [ 444.367068][ T9599] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.369353][ T9599] ? ksys_write+0x21c/0x260 [ 444.371159][ T9599] ? __fget_light+0x173/0x210 [ 444.373052][ T9599] __sys_sendmsg+0x117/0x1f0 [ 444.375096][ T9599] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.377198][ T9599] do_syscall_64+0xcd/0x250 [ 444.378896][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.381667][ T9599] RIP: 0033:0x7fea0d97cef9 [ 444.383535][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.390410][ T9599] RSP: 002b:00007fea0e842038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.393637][ T9599] RAX: ffffffffffffffda RBX: 00007fea0db35f80 RCX: 00007fea0d97cef9 [ 444.396953][ T9599] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 444.400111][ T9599] RBP: 00007fea0e842090 R08: 0000000000000000 R09: 0000000000000000 [ 444.403126][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.406099][ T9599] R13: 0000000000000000 R14: 00007fea0db35f80 R15: 00007ffe50261458 [ 444.409415][ T9599] [ 444.418635][ T39] audit: type=1400 audit(1725791114.567:451): avc: denied { setopt } for pid=9605 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 444.467959][ T39] audit: type=1400 audit(1725791114.617:452): avc: denied { ioctl } for pid=9605 comm="syz.0.1248" path="socket:[30467]" dev="sockfs" ino=30467 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 444.835454][ T9616] dccp_invalid_packet: P.Data Offset(224) too large [ 444.869648][ T9618] FAULT_INJECTION: forcing a failure. [ 444.869648][ T9618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.875674][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.2.1253 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 444.880340][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.885046][ T9618] Call Trace: [ 444.886556][ T9618] [ 444.887893][ T9618] dump_stack_lvl+0x16c/0x1f0 [ 444.889967][ T9618] should_fail_ex+0x497/0x5b0 [ 444.892071][ T9618] _copy_to_user+0x30/0xc0 [ 444.894058][ T9618] simple_read_from_buffer+0xd0/0x160 [ 444.896460][ T9618] proc_fail_nth_read+0x19e/0x280 [ 444.898721][ T9618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.901153][ T9618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.903594][ T9618] vfs_read+0x1d4/0xbd0 [ 444.905428][ T9618] ? __fdget_pos+0xeb/0x180 [ 444.907469][ T9618] ? __pfx_vfs_read+0x10/0x10 [ 444.909597][ T9618] ? __pfx___mutex_lock+0x10/0x10 [ 444.911861][ T9618] ? __fget_files+0x256/0x400 [ 444.913941][ T9618] ksys_read+0x12f/0x260 [ 444.915880][ T9618] ? __pfx_ksys_read+0x10/0x10 [ 444.918011][ T9618] do_syscall_64+0xcd/0x250 [ 444.920043][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.922659][ T9618] RIP: 0033:0x7f1de797b93c [ 444.924644][ T9618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 444.933037][ T9618] RSP: 002b:00007f1de86fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.936745][ T9618] RAX: ffffffffffffffda RBX: 00007f1de7b35f80 RCX: 00007f1de797b93c [ 444.940235][ T9618] RDX: 000000000000000f RSI: 00007f1de86fe0a0 RDI: 0000000000000003 [ 444.943716][ T9618] RBP: 00007f1de86fe090 R08: 0000000000000000 R09: 0000000000000000 [ 444.947199][ T9618] R10: 000000000000029a R11: 0000000000000246 R12: 0000000000000001 [ 444.950714][ T9618] R13: 0000000000000001 R14: 00007f1de7b35f80 R15: 00007ffdf47abf48 [ 444.954181][ T9618] [ 444.961623][ T9620] process 'syz.3.1251' launched './file2' with NULL argv: empty string added [ 444.990992][ T39] audit: type=1400 audit(1725791115.117:453): avc: denied { execute_no_trans } for pid=9613 comm="syz.3.1251" path="/110/file2" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 445.018910][ T9625] FAULT_INJECTION: forcing a failure. [ 445.018910][ T9625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.024036][ T9625] CPU: 2 UID: 0 PID: 9625 Comm: syz.1.1254 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 445.028298][ T9625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.032385][ T9625] Call Trace: [ 445.033606][ T9625] [ 445.034674][ T9625] dump_stack_lvl+0x16c/0x1f0 [ 445.036688][ T9625] should_fail_ex+0x497/0x5b0 [ 445.038592][ T9625] _copy_to_user+0x30/0xc0 [ 445.040139][ T9625] simple_read_from_buffer+0xd0/0x160 [ 445.042376][ T9625] proc_fail_nth_read+0x19e/0x280 [ 445.044525][ T9625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.046850][ T9625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.049232][ T9625] vfs_read+0x1d4/0xbd0 [ 445.051060][ T9625] ? __fdget_pos+0xeb/0x180 [ 445.052884][ T9625] ? __pfx_vfs_read+0x10/0x10 [ 445.054563][ T9625] ? __pfx___mutex_lock+0x10/0x10 [ 445.056755][ T9625] ? __fget_files+0x256/0x400 [ 445.058829][ T9625] ksys_read+0x12f/0x260 [ 445.060500][ T9625] ? __pfx_ksys_read+0x10/0x10 [ 445.062135][ T9625] do_syscall_64+0xcd/0x250 [ 445.064064][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.066629][ T9625] RIP: 0033:0x7f780bb7b93c [ 445.068310][ T9625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 445.076054][ T9625] RSP: 002b:00007f780c9da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.079270][ T9625] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7b93c [ 445.082110][ T9625] RDX: 000000000000000f RSI: 00007f780c9da0a0 RDI: 0000000000000003 [ 445.085437][ T9625] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 445.088686][ T9625] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 445.092069][ T9625] R13: 0000000000000001 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 445.095103][ T9625] [ 445.099363][ T9630] FAULT_INJECTION: forcing a failure. [ 445.099363][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.105299][ T9630] CPU: 0 UID: 0 PID: 9630 Comm: syz.2.1256 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 445.109992][ T9630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.114681][ T9630] Call Trace: [ 445.116141][ T9630] [ 445.117169][ T9630] dump_stack_lvl+0x16c/0x1f0 [ 445.118879][ T9630] should_fail_ex+0x497/0x5b0 [ 445.120662][ T9630] _copy_from_iter+0x2a1/0x1150 [ 445.122283][ T9630] ? __alloc_skb+0x1fe/0x380 [ 445.123861][ T9630] ? __pfx__copy_from_iter+0x10/0x10 [ 445.125658][ T9630] ? __virt_addr_valid+0x5e/0x590 [ 445.127403][ T9630] ? __phys_addr_symbol+0x30/0x80 [ 445.129393][ T9630] ? __check_object_size+0x497/0x720 [ 445.131572][ T9630] netlink_sendmsg+0x813/0xd70 [ 445.133526][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.135343][ T9630] ? __import_iovec+0x1fd/0x6e0 [ 445.135655][ T39] audit: type=1400 audit(1725791115.257:454): avc: denied { create } for pid=9631 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 445.137399][ T9630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.147370][ T9630] ____sys_sendmsg+0xab5/0xc90 [ 445.149055][ T9630] ? copy_msghdr_from_user+0x10b/0x160 [ 445.150895][ T9630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.152668][ T9630] ? find_held_lock+0x2d/0x110 [ 445.154273][ T9630] ? __pfx___lock_acquire+0x10/0x10 [ 445.156434][ T9630] ___sys_sendmsg+0x135/0x1e0 [ 445.158280][ T9630] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.160413][ T9630] ? ksys_write+0x21c/0x260 [ 445.162242][ T9630] ? __fget_light+0x173/0x210 [ 445.164057][ T9630] __sys_sendmsg+0x117/0x1f0 [ 445.165816][ T9630] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.167802][ T9630] do_syscall_64+0xcd/0x250 [ 445.169553][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.171808][ T9630] RIP: 0033:0x7f1de797cef9 [ 445.173491][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.180707][ T9630] RSP: 002b:00007f1de86fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.183867][ T9630] RAX: ffffffffffffffda RBX: 00007f1de7b35f80 RCX: 00007f1de797cef9 [ 445.186893][ T9630] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 445.189786][ T9630] RBP: 00007f1de86fe090 R08: 0000000000000000 R09: 0000000000000000 [ 445.192771][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.195760][ T9630] R13: 0000000000000000 R14: 00007f1de7b35f80 R15: 00007ffdf47abf48 [ 445.198778][ T9630] [ 445.245529][ T39] audit: type=1400 audit(1725791115.397:455): avc: denied { watch watch_reads } for pid=9634 comm="syz.2.1258" path="/128" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 445.255422][ T39] audit: type=1400 audit(1725791115.407:456): avc: denied { watch_mount } for pid=9634 comm="syz.2.1258" path="/128" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 445.259715][ T9635] dvmrp0: entered allmulticast mode [ 445.299930][ T9639] FAULT_INJECTION: forcing a failure. [ 445.299930][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.305792][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.1.1260 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 445.310541][ T9639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.315132][ T9639] Call Trace: [ 445.316630][ T9639] [ 445.317938][ T9639] dump_stack_lvl+0x16c/0x1f0 [ 445.319987][ T9639] should_fail_ex+0x497/0x5b0 [ 445.321838][ T9639] _copy_from_iter+0x2a1/0x1150 [ 445.323973][ T9639] ? __alloc_skb+0x1fe/0x380 [ 445.325882][ T9639] ? __pfx__copy_from_iter+0x10/0x10 [ 445.327719][ T9639] ? __virt_addr_valid+0x5e/0x590 [ 445.329716][ T9639] ? __phys_addr_symbol+0x30/0x80 [ 445.331890][ T9639] ? __check_object_size+0x497/0x720 [ 445.334169][ T9639] netlink_sendmsg+0x813/0xd70 [ 445.336288][ T9639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.338563][ T9639] ? __import_iovec+0x1fd/0x6e0 [ 445.340648][ T9639] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.342889][ T9639] ____sys_sendmsg+0xab5/0xc90 [ 445.345070][ T9639] ? copy_msghdr_from_user+0x10b/0x160 [ 445.347408][ T9639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.349723][ T9639] ? find_held_lock+0x2d/0x110 [ 445.349747][ T9639] ? __pfx___lock_acquire+0x10/0x10 [ 445.349775][ T9639] ___sys_sendmsg+0x135/0x1e0 [ 445.349802][ T9639] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.358847][ T9639] ? ksys_write+0x21c/0x260 [ 445.360834][ T9639] ? __fget_light+0x173/0x210 [ 445.362870][ T9639] __sys_sendmsg+0x117/0x1f0 [ 445.364859][ T9639] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.367096][ T9639] do_syscall_64+0xcd/0x250 [ 445.369054][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.371579][ T9639] RIP: 0033:0x7f780bb7cef9 [ 445.373449][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.381609][ T9639] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.385153][ T9639] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 445.388528][ T9639] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 445.391958][ T9639] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 445.395303][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.398658][ T9639] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 445.401963][ T9639] [ 445.514058][ T39] audit: type=1400 audit(1725791115.667:457): avc: denied { ioctl } for pid=9645 comm="syz.0.1263" path="socket:[30494]" dev="sockfs" ino=30494 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 445.527648][ T39] audit: type=1400 audit(1725791115.667:458): avc: denied { write } for pid=9645 comm="syz.0.1263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 445.585358][ T5402] IPVS: starting estimator thread 0... [ 445.590168][ T9658] FAULT_INJECTION: forcing a failure. [ 445.590168][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 445.595894][ T9658] CPU: 2 UID: 0 PID: 9658 Comm: syz.1.1265 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 445.600466][ T9658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.605452][ T9658] Call Trace: [ 445.606954][ T9658] [ 445.608273][ T9658] dump_stack_lvl+0x16c/0x1f0 [ 445.610399][ T9658] should_fail_ex+0x497/0x5b0 [ 445.612485][ T9658] should_failslab+0xc2/0x120 [ 445.614504][ T9658] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 445.616892][ T9658] ? skb_clone+0x190/0x3f0 [ 445.618897][ T9658] skb_clone+0x190/0x3f0 [ 445.620813][ T9658] netlink_deliver_tap+0xab3/0xd90 [ 445.623064][ T9658] netlink_unicast+0x5e1/0x7f0 [ 445.625172][ T9658] ? __pfx_netlink_unicast+0x10/0x10 [ 445.627494][ T9658] netlink_sendmsg+0x8b8/0xd70 [ 445.629609][ T9658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.632083][ T9658] ? __import_iovec+0x1fd/0x6e0 [ 445.634241][ T9658] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 445.636581][ T9658] ____sys_sendmsg+0xab5/0xc90 [ 445.638473][ T9658] ? copy_msghdr_from_user+0x10b/0x160 [ 445.640576][ T9658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.642803][ T9658] ? find_held_lock+0x2d/0x110 [ 445.644904][ T9658] ? __pfx___lock_acquire+0x10/0x10 [ 445.647196][ T9658] ___sys_sendmsg+0x135/0x1e0 [ 445.649235][ T9658] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.651540][ T9658] ? ksys_write+0x21c/0x260 [ 445.653567][ T9658] ? __fget_light+0x173/0x210 [ 445.655693][ T9658] __sys_sendmsg+0x117/0x1f0 [ 445.657745][ T9658] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.660000][ T9658] do_syscall_64+0xcd/0x250 [ 445.661998][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.664572][ T9658] RIP: 0033:0x7f780bb7cef9 [ 445.666552][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.674876][ T9658] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.678507][ T9658] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 445.681989][ T9658] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 445.685423][ T9658] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 445.688870][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.692337][ T9658] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 445.695751][ T9658] [ 445.713301][ T1381] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.715393][ T9658] tipc: Started in network mode [ 445.716153][ T1381] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.718356][ T9658] tipc: Node identity ac1414aa, cluster identity 4711 [ 445.729272][ T9658] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.732892][ T9658] tipc: Enabled bearer , priority 10 [ 445.770206][ T9659] IPVS: using max 19 ests per chain, 45600 per kthread [ 445.862958][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.994624][ T9679] FAULT_INJECTION: forcing a failure. [ 445.994624][ T9679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.000537][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.004414][ T9679] CPU: 2 UID: 0 PID: 9679 Comm: syz.1.1270 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 446.009037][ T9679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.013675][ T9679] Call Trace: [ 446.015160][ T9679] [ 446.016493][ T9679] dump_stack_lvl+0x16c/0x1f0 [ 446.018585][ T9679] should_fail_ex+0x497/0x5b0 [ 446.020715][ T9679] _copy_from_iter+0x2a1/0x1150 [ 446.022908][ T9679] ? __alloc_skb+0x1fe/0x380 [ 446.024960][ T9679] ? __pfx__copy_from_iter+0x10/0x10 [ 446.027291][ T9679] ? __virt_addr_valid+0x5e/0x590 [ 446.029498][ T9679] ? __phys_addr_symbol+0x30/0x80 [ 446.031706][ T9679] ? __check_object_size+0x497/0x720 [ 446.034027][ T9679] netlink_sendmsg+0x813/0xd70 [ 446.036202][ T9679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.038519][ T9679] ? __import_iovec+0x1fd/0x6e0 [ 446.040678][ T9679] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.043007][ T9679] ____sys_sendmsg+0xab5/0xc90 [ 446.045131][ T9679] ? copy_msghdr_from_user+0x10b/0x160 [ 446.047569][ T9679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.049887][ T9679] ? find_held_lock+0x2d/0x110 [ 446.052033][ T9679] ? __pfx___lock_acquire+0x10/0x10 [ 446.054294][ T9679] ___sys_sendmsg+0x135/0x1e0 [ 446.056404][ T9679] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.058729][ T9679] ? ksys_write+0x21c/0x260 [ 446.060743][ T9679] ? __fget_light+0x173/0x210 [ 446.062835][ T9679] __sys_sendmsg+0x117/0x1f0 [ 446.064889][ T9679] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.067183][ T9679] do_syscall_64+0xcd/0x250 [ 446.069223][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.071835][ T9679] RIP: 0033:0x7f780bb7cef9 [ 446.073815][ T9679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.082194][ T9679] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.085834][ T9679] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 446.089286][ T9679] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 446.092745][ T9679] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 446.096110][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.099523][ T9679] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 446.103001][ T9679] [ 446.140142][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.280160][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.420163][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.546191][ T39] audit: type=1400 audit(1725791116.697:459): avc: denied { setopt } for pid=9683 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.560156][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.700172][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.842517][ T5402] tipc: Node number set to 2886997162 [ 446.880102][ T6882] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 446.980349][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.075299][ T6882] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 447.079264][ T6882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.082729][ T6882] usb 7-1: Product: syz [ 447.084534][ T6882] usb 7-1: Manufacturer: syz [ 447.086587][ T6882] usb 7-1: SerialNumber: syz [ 447.090607][ T6882] usb 7-1: config 0 descriptor?? [ 447.252324][ T9705] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 447.302125][ T5378] usb 7-1: USB disconnect, device number 3 [ 448.003166][ T9711] syz.3.1281 (9711): drop_caches: 2 [ 448.009495][ T9711] syz.3.1281 (9711): drop_caches: 2 [ 448.168470][ T9719] binder: 9715:9719 ioctl 3ba0 20000200 returned -22 [ 448.670353][ T5348] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 448.945732][ T9734] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 449.026799][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 449.026814][ T39] audit: type=1326 audit(1725791119.177:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.2.1288" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de797cef9 code=0x0 [ 449.116562][ T9740] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 449.285446][ T9751] FAULT_INJECTION: forcing a failure. [ 449.285446][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.310080][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.0.1291 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 449.314782][ T9751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.319074][ T9751] Call Trace: [ 449.320572][ T9751] [ 449.321891][ T9751] dump_stack_lvl+0x16c/0x1f0 [ 449.323976][ T9751] should_fail_ex+0x497/0x5b0 [ 449.326056][ T9751] _copy_to_user+0x30/0xc0 [ 449.328053][ T9751] drm_ioctl+0x604/0xc00 [ 449.329915][ T9751] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 449.332522][ T9751] ? __pfx_drm_ioctl+0x10/0x10 [ 449.334634][ T9751] ? selinux_file_ioctl+0xb4/0x270 [ 449.336871][ T9751] ? bpf_lsm_file_ioctl+0x9/0x10 [ 449.339098][ T9751] ? __pfx_drm_ioctl+0x10/0x10 [ 449.340920][ T9751] __x64_sys_ioctl+0x193/0x220 [ 449.342585][ T9751] do_syscall_64+0xcd/0x250 [ 449.344134][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.346455][ T9751] RIP: 0033:0x7f666657cef9 [ 449.348387][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.355078][ T9751] RSP: 002b:00007f6665fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.358670][ T9751] RAX: ffffffffffffffda RBX: 00007f6666735f80 RCX: 00007f666657cef9 [ 449.362090][ T9751] RDX: 0000000020000540 RSI: 00000000c03864bc RDI: 0000000000000003 [ 449.364985][ T9751] RBP: 00007f6665fff090 R08: 0000000000000000 R09: 0000000000000000 [ 449.368378][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.371829][ T9751] R13: 0000000000000000 R14: 00007f6666735f80 R15: 00007ffda3adef98 [ 449.375251][ T9751] [ 449.550933][ T9753] syz.0.1293 uses obsolete (PF_INET,SOCK_PACKET) [ 449.870197][ C2] net_ratelimit: 3 callbacks suppressed [ 449.870214][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.947953][ T9769] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 449.982113][ T39] audit: type=1400 audit(1725791120.137:463): avc: denied { create } for pid=9767 comm="syz.1.1298" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 449.991863][ T9770] o2cb: This node has not been configured. [ 449.994866][ T9770] o2cb: Cluster check failed. Fix errors before retrying. [ 449.997562][ T9770] (syz.1.1298,9770,1):user_dlm_register:674 ERROR: status = -22 [ 450.004488][ T9770] (syz.1.1298,9770,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "control" [ 450.516819][ T39] audit: type=1400 audit(1725791120.667:464): avc: denied { getopt } for pid=9772 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 450.526512][ T39] audit: type=1400 audit(1725791120.677:465): avc: denied { write } for pid=9772 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 450.920305][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.981712][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 451.530148][ T39] audit: type=1400 audit(1725791121.667:466): avc: denied { append } for pid=9795 comm="syz.3.1307" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.539061][ T39] audit: type=1400 audit(1725791121.667:467): avc: denied { map } for pid=9795 comm="syz.3.1307" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.550674][ T39] audit: type=1400 audit(1725791121.677:468): avc: denied { execute } for pid=9795 comm="syz.3.1307" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 451.681819][ T9805] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 451.843208][ T9809] fuse: Unknown parameter 'hMëÇ ªìë‘žøS§ÂÂß»™™ ³„]ÞÒ1&6:Ì©â' [ 451.950254][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.968400][ T39] audit: type=1326 audit(1725791122.117:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9811 comm="syz.1.1312" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f780bb7cef9 code=0x0 [ 452.290148][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.436336][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 452.481300][ T39] audit: type=1400 audit(1725791122.637:470): avc: denied { write } for pid=9827 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 452.492579][ T39] audit: type=1400 audit(1725791122.637:471): avc: denied { read } for pid=9827 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 452.493588][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 452.507441][ T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.514544][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.520768][ T57] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 452.524949][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.531211][ T57] usb 6-1: config 0 descriptor?? [ 452.537547][ T57] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 453.000168][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.030307][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.346713][ T9851] fuse: Bad value for 'fd' [ 454.721694][ T9862] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 454.760221][ T5378] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 454.834010][ T57] usb 6-1: USB disconnect, device number 3 [ 454.991315][ T5378] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 454.996253][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 455.001228][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.006403][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 455.011864][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 455.017992][ T5378] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 455.022698][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 455.027232][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.031610][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 455.036527][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 455.046050][ T5378] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 455.053354][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 455.057797][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 455.062270][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 455.068342][ T5378] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 455.080265][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.094855][ T5378] usb 7-1: string descriptor 0 read error: -22 [ 455.101032][ T5378] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 455.106111][ T5378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.226715][ T5378] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 455.962987][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 456.110407][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.554883][ T9891] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 456.882615][ T9893] FAULT_INJECTION: forcing a failure. [ 456.882615][ T9893] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 456.888062][ T9893] CPU: 2 UID: 0 PID: 9893 Comm: syz.1.1336 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 456.892668][ T9893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.896877][ T9893] Call Trace: [ 456.898377][ T9893] [ 456.899697][ T9893] dump_stack_lvl+0x16c/0x1f0 [ 456.901693][ T9893] should_fail_ex+0x497/0x5b0 [ 456.903541][ T9893] ? fs_reclaim_acquire+0xae/0x160 [ 456.905455][ T9893] should_fail_alloc_page+0xe7/0x130 [ 456.907264][ T9893] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 456.909534][ T9893] __alloc_pages_noprof+0x194/0x2460 [ 456.911454][ T9893] ? __pfx_mark_lock+0x10/0x10 [ 456.913508][ T9893] ? hlock_class+0x4e/0x130 [ 456.915599][ T9893] ? mark_lock+0xb5/0xc60 [ 456.917301][ T9893] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 456.919387][ T9893] ? __pfx_mark_lock+0x10/0x10 [ 456.921210][ T9893] ? __pfx_mark_lock+0x10/0x10 [ 456.922878][ T9893] ? __lock_acquire+0xbdd/0x3cb0 [ 456.924567][ T9893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.926615][ T9893] ? policy_nodemask+0xea/0x4e0 [ 456.928365][ T9893] alloc_pages_mpol_noprof+0x275/0x610 [ 456.930248][ T9893] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 456.932288][ T9893] ? find_held_lock+0x2d/0x110 [ 456.933924][ T9893] folio_alloc_mpol_noprof+0x36/0xd0 [ 456.935727][ T9893] shmem_alloc_folio+0x135/0x160 [ 456.937416][ T9893] shmem_alloc_and_add_folio+0x19c/0xce0 [ 456.939388][ T9893] ? filemap_get_entry+0x1b2/0x3c0 [ 456.941136][ T9893] ? __pfx_filemap_get_entry+0x10/0x10 [ 456.943001][ T9893] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 456.945079][ T9893] ? shmem_allowable_huge_orders+0x2c9/0x340 [ 456.947126][ T9893] shmem_get_folio_gfp+0xa62/0x15e0 [ 456.948953][ T9893] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 456.951114][ T9893] ? filemap_map_pages+0xeb6/0x1440 [ 456.953042][ T9893] shmem_fault+0x205/0xaf0 [ 456.954616][ T9893] ? __pfx_shmem_fault+0x10/0x10 [ 456.956450][ T9893] ? __handle_mm_fault+0x3ce7/0x5660 [ 456.958592][ T9893] ? __pfx_lock_release+0x10/0x10 [ 456.960278][ T9893] __do_fault+0x10a/0x490 [ 456.961770][ T9893] __handle_mm_fault+0x3da0/0x5660 [ 456.963538][ T9893] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.965377][ T9893] ? follow_page_pte+0x3dc/0x1cf0 [ 456.967133][ T9893] handle_mm_fault+0x498/0xa60 [ 456.968832][ T9893] __get_user_pages+0x475/0x15c0 [ 456.970842][ T9893] ? __pfx___get_user_pages+0x10/0x10 [ 456.972892][ T9893] populate_vma_page_range+0x27f/0x3a0 [ 456.974758][ T9893] ? __pfx_populate_vma_page_range+0x10/0x10 [ 456.976797][ T9893] ? __pfx_find_vma_intersection+0x10/0x10 [ 456.978804][ T9893] ? vm_mmap_pgoff+0x25b/0x360 [ 456.980534][ T9893] __mm_populate+0x1d6/0x380 [ 456.982161][ T9893] ? __pfx___mm_populate+0x10/0x10 [ 456.984012][ T9893] ? up_write+0x1b2/0x520 [ 456.985609][ T9893] vm_mmap_pgoff+0x293/0x360 [ 456.987413][ T9893] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 456.989151][ T9893] ksys_mmap_pgoff+0x7d/0x5d0 [ 456.990775][ T9893] ? __pfx_ksys_write+0x10/0x10 [ 456.992433][ T9893] __x64_sys_mmap+0x125/0x190 [ 456.994036][ T9893] do_syscall_64+0xcd/0x250 [ 456.995612][ T9893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.997708][ T9893] RIP: 0033:0x7f780bb7cef9 [ 456.999278][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.005938][ T9893] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 457.008875][ T9893] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 457.011546][ T9893] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 457.014151][ T9893] RBP: 00007f780c9da090 R08: 0000000000000005 R09: 0000000000000000 [ 457.016780][ T9893] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 457.019701][ T9893] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 457.022568][ T9893] [ 457.023666][ C2] vkms_vblank_simulate: vblank timer overrun [ 457.150328][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.560848][ T6882] usb 7-1: USB disconnect, device number 4 [ 457.802608][ T9911] FAULT_INJECTION: forcing a failure. [ 457.802608][ T9911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.807411][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.1.1341 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 457.811814][ T9911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 457.816309][ T9911] Call Trace: [ 457.817451][ T9911] [ 457.818629][ T9911] dump_stack_lvl+0x16c/0x1f0 [ 457.820224][ T9911] should_fail_ex+0x497/0x5b0 [ 457.821839][ T9911] _copy_to_user+0x30/0xc0 [ 457.823373][ T9911] simple_read_from_buffer+0xd0/0x160 [ 457.825227][ T9911] proc_fail_nth_read+0x19e/0x280 [ 457.827384][ T9911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.829698][ T9911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.832123][ T9911] vfs_read+0x1d4/0xbd0 [ 457.833874][ T9911] ? __fdget_pos+0xeb/0x180 [ 457.835804][ T9911] ? __pfx_vfs_read+0x10/0x10 [ 457.837755][ T9911] ? __pfx___mutex_lock+0x10/0x10 [ 457.839883][ T9911] ? __fget_files+0x256/0x400 [ 457.841904][ T9911] ksys_read+0x12f/0x260 [ 457.843627][ T9911] ? __pfx_ksys_read+0x10/0x10 [ 457.845419][ T9911] do_syscall_64+0xcd/0x250 [ 457.847045][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.849083][ T9911] RIP: 0033:0x7f780bb7b93c [ 457.850667][ T9911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 457.857399][ T9911] RSP: 002b:00007f780c9da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.860624][ T9911] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7b93c [ 457.863969][ T9911] RDX: 000000000000000f RSI: 00007f780c9da0a0 RDI: 0000000000000003 [ 457.867092][ T9911] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 457.870334][ T9911] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 457.873598][ T9911] R13: 0000000000000001 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 457.876832][ T9911] [ 458.190115][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.815134][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 458.823709][ T9936] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 459.230340][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.301244][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 459.301260][ T39] audit: type=1400 audit(1725791129.447:474): avc: denied { setopt } for pid=9954 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.314102][ T39] audit: type=1400 audit(1725791129.457:475): avc: denied { ioctl } for pid=9954 comm="syz.3.1355" path="socket:[31514]" dev="sockfs" ino=31514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 459.325211][ T39] audit: type=1400 audit(1725791129.467:476): avc: denied { ioctl } for pid=9954 comm="syz.3.1355" path="socket:[32880]" dev="sockfs" ino=32880 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.336025][ T39] audit: type=1400 audit(1725791129.467:477): avc: denied { ioctl } for pid=9954 comm="syz.3.1355" path="ipc:[4026535717]" dev="nsfs" ino=4026535717 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 459.630281][ T5378] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 459.683951][ T9970] vivid-002: ================= START STATUS ================= [ 459.688104][ T9970] vivid-002: Radio HW Seek Mode: Bounded [ 459.692090][ T9970] vivid-002: Radio Programmable HW Seek: false [ 459.694905][ T9970] vivid-002: RDS Rx I/O Mode: Block I/O [ 459.697278][ T9970] vivid-002: Generate RBDS Instead of RDS: false [ 459.700371][ T9970] vivid-002: RDS Reception: true [ 459.703423][ T9970] vivid-002: RDS Program Type: 0 inactive [ 459.705976][ T9970] vivid-002: RDS PS Name: inactive [ 459.708336][ T9970] vivid-002: RDS Radio Text: inactive [ 459.711308][ T9970] vivid-002: RDS Traffic Announcement: false inactive [ 459.714326][ T9970] vivid-002: RDS Traffic Program: false inactive [ 459.717094][ T9970] vivid-002: RDS Music: false inactive [ 459.719505][ T9970] vivid-002: ================== END STATUS ================== [ 459.816685][ T5378] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 459.820742][ T5378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.824343][ T5378] usb 7-1: Product: syz [ 459.826166][ T5378] usb 7-1: Manufacturer: syz [ 459.828204][ T5378] usb 7-1: SerialNumber: syz [ 459.834842][ T5378] usb 7-1: config 0 descriptor?? [ 459.974391][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1361'. [ 459.978214][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 460.049872][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1361'. [ 460.055168][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 460.059036][ T9976] FAULT_INJECTION: forcing a failure. [ 460.059036][ T9976] name failslab, interval 1, probability 0, space 0, times 0 [ 460.067452][ T9976] CPU: 3 UID: 0 PID: 9976 Comm: syz.0.1361 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 460.072001][ T9976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.076543][ T9976] Call Trace: [ 460.077989][ T9976] [ 460.079278][ T9976] dump_stack_lvl+0x16c/0x1f0 [ 460.081231][ T9976] should_fail_ex+0x497/0x5b0 [ 460.083256][ T9976] should_failslab+0xc2/0x120 [ 460.085270][ T9976] __kmalloc_cache_noprof+0x6b/0x300 [ 460.087523][ T9976] ? __hw_addr_add_ex+0x3c8/0x7c0 [ 460.089665][ T9976] ? __pfx_lock_release+0x10/0x10 [ 460.091826][ T9976] __hw_addr_add_ex+0x3c8/0x7c0 [ 460.093905][ T9976] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 460.096221][ T9976] ? __mutex_unlock_slowpath+0x164/0x650 [ 460.098631][ T9976] dev_addr_init+0x162/0x250 [ 460.100508][ T9976] ? __pfx_dev_addr_init+0x10/0x10 [ 460.102708][ T9976] alloc_netdev_mqs+0x3c9/0x13d0 [ 460.104834][ T9976] ? __pfx_macvlan_setup+0x10/0x10 [ 460.107005][ T9976] rtnl_create_link+0xc10/0xfa0 [ 460.109058][ T9976] __rtnl_newlink+0x10ae/0x1920 [ 460.111191][ T9976] ? __pfx___rtnl_newlink+0x10/0x10 [ 460.113447][ T9976] rtnl_newlink+0x67/0xa0 [ 460.115335][ T9976] ? __pfx_rtnl_newlink+0x10/0x10 [ 460.117501][ T9976] rtnetlink_rcv_msg+0x3c7/0xea0 [ 460.119532][ T9976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.121834][ T9976] netlink_rcv_skb+0x16b/0x440 [ 460.123899][ T9976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.126232][ T9976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.128658][ T9976] ? netlink_deliver_tap+0x1ae/0xd90 [ 460.130951][ T9976] netlink_unicast+0x53c/0x7f0 [ 460.133013][ T9976] ? __pfx_netlink_unicast+0x10/0x10 [ 460.135308][ T9976] netlink_sendmsg+0x8b8/0xd70 [ 460.137366][ T9976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.139645][ T9976] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 460.141897][ T9976] sock_sendmsg+0x3cb/0x470 [ 460.143845][ T9976] ? pipe_lock+0x64/0x80 [ 460.145631][ T9976] ? __pfx_sock_sendmsg+0x10/0x10 [ 460.147789][ T9976] ? __pfx_lock_release+0x10/0x10 [ 460.149791][ T9976] splice_to_socket+0xab2/0x1040 [ 460.151720][ T9976] ? __pfx_splice_to_socket+0x10/0x10 [ 460.153541][ T9976] ? mark_lock+0xb5/0xc60 [ 460.155035][ T9976] ? inode_has_perm+0x16f/0x1d0 [ 460.156712][ T9976] ? bpf_lsm_file_permission+0x9/0x10 [ 460.158718][ T9976] ? security_file_permission+0x98/0xc0 [ 460.160503][ T9976] ? __pfx_splice_to_socket+0x10/0x10 [ 460.162564][ T9976] do_splice+0x148c/0x1f90 [ 460.164325][ T9976] ? find_held_lock+0x2d/0x110 [ 460.166169][ T9976] ? __pfx_do_splice+0x10/0x10 [ 460.168050][ T9976] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 460.169946][ T9976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.172118][ T9976] __do_splice+0x327/0x360 [ 460.173740][ T9976] ? __pfx___do_splice+0x10/0x10 [ 460.175708][ T9976] __x64_sys_splice+0x1d2/0x260 [ 460.177527][ T9976] do_syscall_64+0xcd/0x250 [ 460.179110][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.181262][ T9976] RIP: 0033:0x7f666657cef9 [ 460.182806][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.189390][ T9976] RSP: 002b:00007f6665fde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 460.192548][ T9976] RAX: ffffffffffffffda RBX: 00007f6666736058 RCX: 00007f666657cef9 [ 460.195433][ T9976] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 460.198468][ T9976] RBP: 00007f6665fde090 R08: 000000000004ffe6 R09: 0000000000000000 [ 460.201597][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.204472][ T9976] R13: 0000000000000001 R14: 00007f6666736058 R15: 00007ffda3adef98 [ 460.207751][ T9976] [ 460.214893][ T6882] usb 7-1: USB disconnect, device number 5 [ 460.280225][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.558734][ T9979] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 460.771287][ T9984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1364'. [ 460.792752][ T9984] Êü: entered promiscuous mode [ 460.816625][ T9988] FAULT_INJECTION: forcing a failure. [ 460.816625][ T9988] name failslab, interval 1, probability 0, space 0, times 0 [ 460.821926][ T9988] CPU: 2 UID: 0 PID: 9988 Comm: syz.3.1365 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 460.826363][ T9988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.830935][ T9988] Call Trace: [ 460.832137][ T9988] [ 460.833210][ T9988] dump_stack_lvl+0x16c/0x1f0 [ 460.835226][ T9988] should_fail_ex+0x497/0x5b0 [ 460.837290][ T9988] ? fs_reclaim_acquire+0xae/0x160 [ 460.839516][ T9988] should_failslab+0xc2/0x120 [ 460.841356][ T9988] __kmalloc_noprof+0xcb/0x400 [ 460.843009][ T9988] ? copy_splice_read+0x896/0xb80 [ 460.844725][ T9988] copy_splice_read+0x1a8/0xb80 [ 460.846419][ T9988] ? __pfx_copy_splice_read+0x10/0x10 [ 460.848729][ T9988] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 460.851229][ T9988] do_splice_read+0x2cf/0x380 [ 460.852834][ T9988] splice_direct_to_actor+0x2a4/0xa40 [ 460.854678][ T9988] ? __pfx_direct_splice_actor+0x10/0x10 [ 460.857054][ T9988] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 460.859595][ T9988] ? __pfx_file_has_perm+0x10/0x10 [ 460.861786][ T9988] do_splice_direct+0x17e/0x250 [ 460.863895][ T9988] ? __pfx_do_splice_direct+0x10/0x10 [ 460.866217][ T9988] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 460.868767][ T9988] ? bpf_lsm_file_permission+0x9/0x10 [ 460.871082][ T9988] ? security_file_permission+0x98/0xc0 [ 460.873071][ T9988] do_sendfile+0xb1e/0xe50 [ 460.874625][ T9988] ? __pfx_do_sendfile+0x10/0x10 [ 460.876503][ T9988] __x64_sys_sendfile64+0x1da/0x220 [ 460.878515][ T9988] ? ksys_write+0x1ab/0x260 [ 460.880053][ T9988] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 460.882200][ T9988] do_syscall_64+0xcd/0x250 [ 460.883756][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.885927][ T9988] RIP: 0033:0x7fea0d97cef9 [ 460.887881][ T9988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.896008][ T9988] RSP: 002b:00007fea0e842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 460.899563][ T9988] RAX: ffffffffffffffda RBX: 00007fea0db35f80 RCX: 00007fea0d97cef9 [ 460.902945][ T9988] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 460.906309][ T9988] RBP: 00007fea0e842090 R08: 0000000000000000 R09: 0000000000000000 [ 460.909642][ T9988] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 460.913001][ T9988] R13: 0000000000000000 R14: 00007fea0db35f80 R15: 00007ffe50261458 [ 460.916419][ T9988] [ 461.205753][ T57] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 461.227750][ T57] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 461.282582][T10011] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 461.293259][T10011] CIFS mount error: No usable UNC path provided in device string! [ 461.293259][T10011] [ 461.297908][T10011] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 461.311000][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.942338][ T39] audit: type=1400 audit(1725791132.097:478): avc: denied { recv } for pid=5301 comm="syz-executor" saddr=127.0.0.1 src=38794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 461.992108][ T39] audit: type=1400 audit(1725791132.147:479): avc: denied { recv } for pid=0 comm="swapper/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=38794 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 462.093644][T10023] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 462.191979][ T39] audit: type=1400 audit(1725791132.347:480): avc: denied { module_load } for pid=10026 comm="syz.2.1376" path=2F6D656D66643AFB2261268F65118CD634F9787023202864656C6574656429 dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 462.360388][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.378374][ T39] audit: type=1400 audit(1725791132.527:481): avc: denied { ioctl } for pid=10033 comm="syz.2.1377" path="socket:[29671]" dev="sockfs" ino=29671 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 463.392064][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.762846][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'. [ 463.833375][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'. [ 463.837210][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 463.894757][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'. [ 463.898759][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 464.388201][ T39] audit: type=1400 audit(1725791134.537:482): avc: denied { audit_write } for pid=10071 comm="syz.3.1388" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 464.438546][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.470308][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.472818][T10112] SELinux: security_context_str_to_sid (sysadm+) failed with errno=-22 [ 466.476931][ T39] audit: type=1400 audit(1725791136.627:483): avc: denied { mounton } for pid=10111 comm="syz.3.1397" path="/153/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 466.510304][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.511318][ T39] audit: type=1400 audit(1725791136.667:484): avc: denied { setopt } for pid=10113 comm="syz.1.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.741456][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 466.800613][ T58] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 466.871901][T10122] xt_ecn: cannot match TCP bits for non-tcp packets [ 466.920221][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 466.933998][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.940120][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.943646][ T56] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.956356][ T56] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 466.961011][ T56] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 466.964839][ T56] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.978565][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.982883][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.986814][ T56] usb 8-1: Product: syz [ 466.992891][ T56] usb 8-1: Manufacturer: syz [ 466.994967][ T56] usb 8-1: SerialNumber: syz [ 466.997192][ T58] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 467.001879][ T58] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 467.007773][ T58] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.012269][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.022722][T10114] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 467.025909][T10114] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 467.031867][ T58] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.240454][ T39] audit: type=1400 audit(1725791137.397:485): avc: denied { read write } for pid=10113 comm="syz.1.1398" dev="sockfs" ino=33874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.296216][ T58] usb 6-1: USB disconnect, device number 4 [ 467.550389][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.616924][ T56] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 467.623597][ T56] cdc_ncm 8-1:1.0: bind() failure [ 467.629827][ T56] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 467.632566][ T56] cdc_ncm 8-1:1.1: bind() failure [ 467.637824][ T56] usb 8-1: USB disconnect, device number 10 [ 468.590175][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.630474][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.392729][T10163] syz.0.1413 (10163): drop_caches: 2 [ 470.396666][T10163] syz.0.1413 (10163): drop_caches: 2 [ 470.553185][T10157] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 470.670426][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.777961][T10169] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 471.394463][T10181] trusted_key: syz.0.1417 sent an empty control message without MSG_MORE. [ 471.406404][ T39] audit: type=1400 audit(1725791141.557:486): avc: denied { listen } for pid=10180 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 471.415566][ T39] audit: type=1400 audit(1725791141.557:487): avc: denied { accept } for pid=10180 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 471.530200][T10185] fuse: Bad value for 'fd' [ 471.710238][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.160309][T10191] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 472.238644][T10192] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 472.760183][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.790262][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.840200][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.998083][T10223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29873 sclass=netlink_route_socket pid=10223 comm=syz.0.1429 [ 475.870267][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.971994][ T39] audit: type=1400 audit(1725791146.127:488): avc: denied { block_suspend } for pid=10235 comm="syz.1.1433" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.454811][ T39] audit: type=1400 audit(1725791146.587:489): avc: denied { egress } for pid=34 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 476.473481][ T39] audit: type=1400 audit(1725791146.587:490): avc: denied { sendto } for pid=34 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 476.910281][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.910946][T10261] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 477.961579][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.383808][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 478.963276][ T39] audit: type=1400 audit(1725791149.117:491): avc: denied { mount } for pid=10281 comm="syz.3.1446" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 478.967874][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 478.991059][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.341789][T10298] FAULT_INJECTION: forcing a failure. [ 479.341789][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 479.348660][T10298] CPU: 2 UID: 0 PID: 10298 Comm: syz.2.1451 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 479.353137][T10298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 479.357540][T10298] Call Trace: [ 479.358979][T10298] [ 479.360215][T10298] dump_stack_lvl+0x16c/0x1f0 [ 479.362129][T10298] should_fail_ex+0x497/0x5b0 [ 479.363985][T10298] ? fs_reclaim_acquire+0xae/0x160 [ 479.366053][T10298] should_failslab+0xc2/0x120 [ 479.367973][T10298] __kmalloc_node_noprof+0xd1/0x430 [ 479.370062][T10298] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 479.372033][T10298] __kvmalloc_node_noprof+0x9d/0x1a0 [ 479.373944][T10298] seq_read_iter+0x830/0x12c0 [ 479.375694][T10298] ? inode_security+0x101/0x130 [ 479.377442][T10298] ? selinux_file_permission+0x125/0x590 [ 479.379658][T10298] proc_reg_read_iter+0x223/0x310 [ 479.381701][T10298] vfs_read+0x869/0xbd0 [ 479.383466][T10298] ? __pfx_vfs_read+0x10/0x10 [ 479.385396][T10298] ? __mutex_unlock_slowpath+0x164/0x650 [ 479.387723][T10298] __x64_sys_pread64+0x1fe/0x260 [ 479.389732][T10298] ? __pfx___x64_sys_pread64+0x10/0x10 [ 479.391987][T10298] do_syscall_64+0xcd/0x250 [ 479.393913][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.396370][T10298] RIP: 0033:0x7f1de797cef9 [ 479.398093][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.404897][T10298] RSP: 002b:00007f1de86dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 479.408209][T10298] RAX: ffffffffffffffda RBX: 00007f1de7b36058 RCX: 00007f1de797cef9 [ 479.411528][T10298] RDX: 00000000000000c8 RSI: 00000000200001c0 RDI: 0000000000000006 [ 479.414770][T10298] RBP: 00007f1de86dd090 R08: 0000000000000000 R09: 0000000000000000 [ 479.417954][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.421125][T10298] R13: 0000000000000000 R14: 00007f1de7b36058 R15: 00007ffdf47abf48 [ 479.424370][T10298] [ 480.040713][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.910987][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 481.070227][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.090092][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 481.111168][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.115221][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.141176][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.145154][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.160370][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 481.164599][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.269002][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 481.389401][ T25] usb 8-1: GET_CAPABILITIES returned 0 [ 481.392643][ T25] usbtmc 8-1:16.0: can't read capabilities [ 481.466790][T10329] usb usb5: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 481.471266][T10329] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.001330][ T39] audit: type=1400 audit(1725791152.157:492): avc: denied { name_bind } for pid=10340 comm="syz.1.1462" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 482.110195][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.177216][ T39] audit: type=1400 audit(1725791152.327:493): avc: denied { listen } for pid=10347 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 483.150257][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.201269][T10367] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 483.678497][T10372] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 483.707366][ T39] audit: type=1400 audit(1725791153.857:494): avc: denied { recv } for pid=10363 comm="syz.1.1469" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 483.768715][T10374] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 483.784375][ T58] usb 8-1: USB disconnect, device number 11 [ 483.893950][T10374] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1472'. [ 484.095319][T10393] FAULT_INJECTION: forcing a failure. [ 484.095319][T10393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.101153][T10393] CPU: 0 UID: 0 PID: 10393 Comm: syz.1.1479 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 484.106013][T10393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.106742][ T39] audit: type=1400 audit(1725791154.247:495): avc: denied { connect } for pid=10391 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 484.110865][T10393] Call Trace: [ 484.110878][T10393] [ 484.110886][T10393] dump_stack_lvl+0x16c/0x1f0 [ 484.110912][T10393] should_fail_ex+0x497/0x5b0 [ 484.110936][T10393] _copy_from_user+0x30/0xf0 [ 484.110958][T10393] move_addr_to_kernel+0x68/0x160 [ 484.110981][T10393] __sys_connect+0xbd/0x170 [ 484.111002][T10393] ? __pfx___sys_connect+0x10/0x10 [ 484.111029][T10393] ? __pfx_ksys_write+0x10/0x10 [ 484.111052][T10393] __x64_sys_connect+0x72/0xb0 [ 484.111071][T10393] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.111092][T10393] do_syscall_64+0xcd/0x250 [ 484.111117][T10393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.111135][T10393] RIP: 0033:0x7f780bb7cef9 [ 484.147493][T10393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.155923][T10393] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 484.159583][T10393] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 484.162891][T10393] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 484.166309][T10393] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 484.169731][T10393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.173196][T10393] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 484.176685][T10393] [ 484.190255][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.622139][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 485.230246][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.340200][ T6881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 485.541956][ T6881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.547852][ T6881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 485.555371][ T6881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 485.560624][ T6881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.566805][ T6881] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.572695][ T6881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.584567][ T6881] usb 5-1: config 0 descriptor?? [ 485.587899][T10410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 485.732252][ T39] audit: type=1400 audit(1725791155.887:496): avc: denied { view } for pid=10420 comm="syz.3.1489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 486.017164][ T6881] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 486.032576][ T6881] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 486.063610][ T6881] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 486.258776][T10410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 486.261678][T10410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.270217][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.274840][T10410] vhci_hcd vhci_hcd.0: Device attached [ 486.293107][T10442] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1494'. [ 486.298973][T10442] caif0 speed is unknown, defaulting to 1000 [ 486.307861][T10442] caif0 speed is unknown, defaulting to 1000 [ 486.329184][T10442] caif0 speed is unknown, defaulting to 1000 [ 486.382944][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.550134][ T6881] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 486.693645][T10442] infiniband syz0: set down [ 486.695642][ T6882] caif0 speed is unknown, defaulting to 1000 [ 486.698152][T10442] infiniband syz0: added caif0 [ 486.727597][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.792916][T10442] RDS/IB: syz0: added [ 486.795020][T10442] smc: adding ib device syz0 with port count 1 [ 486.797869][T10442] smc: ib device syz0 port 1 has pnetid [ 486.800940][ T6882] caif0 speed is unknown, defaulting to 1000 [ 486.808365][T10442] caif0 speed is unknown, defaulting to 1000 [ 487.103141][T10439] vhci_hcd: connection reset by peer [ 487.107559][ T1106] vhci_hcd: stop threads [ 487.109457][ T1106] vhci_hcd: release socket [ 487.111742][ T1106] vhci_hcd: disconnect device [ 487.123382][ T57] usb 5-1: USB disconnect, device number 5 [ 487.310244][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.422744][T10442] caif0 speed is unknown, defaulting to 1000 [ 487.596021][T10442] caif0 speed is unknown, defaulting to 1000 [ 488.011821][T10442] caif0 speed is unknown, defaulting to 1000 [ 488.360278][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.555699][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 488.622480][ T39] audit: type=1400 audit(1725791158.777:497): avc: denied { shutdown } for pid=10467 comm="syz.1.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 488.631625][ T39] audit: type=1400 audit(1725791158.777:498): avc: denied { read } for pid=10467 comm="syz.1.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.402165][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.473246][T10472] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 489.505592][T10477] overlay: filesystem on ./bus not supported as upperdir [ 489.587470][ T39] audit: type=1804 audit(1725791159.737:499): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1502" name="/newroot/179/bus/bus" dev="overlay" ino=994 res=1 errno=0 [ 489.859457][T10481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 489.865620][T10482] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 490.362223][T10501] FAULT_INJECTION: forcing a failure. [ 490.362223][T10501] name failslab, interval 1, probability 0, space 0, times 0 [ 490.368066][T10501] CPU: 1 UID: 0 PID: 10501 Comm: syz.2.1511 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 490.372785][T10501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 490.378475][T10501] Call Trace: [ 490.379847][T10501] [ 490.381038][T10501] dump_stack_lvl+0x16c/0x1f0 [ 490.383217][T10501] should_fail_ex+0x497/0x5b0 [ 490.385527][T10501] ? fs_reclaim_acquire+0xae/0x160 [ 490.387976][T10501] should_failslab+0xc2/0x120 [ 490.390126][T10501] __kmalloc_cache_noprof+0x6b/0x300 [ 490.392324][T10501] ? nf_tables_newflowtable+0x617/0x2260 [ 490.395355][T10501] nf_tables_newflowtable+0x617/0x2260 [ 490.397796][T10501] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 490.400436][T10501] ? __pfx___nla_validate_parse+0x10/0x10 [ 490.402896][T10501] ? net_generic+0xea/0x2a0 [ 490.404860][T10501] ? __pfx_lock_release+0x10/0x10 [ 490.407350][T10501] ? __nla_parse+0x40/0x60 [ 490.409429][T10501] nfnetlink_rcv_batch+0x1a3d/0x2500 [ 490.411843][T10501] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 490.414908][T10501] ? find_held_lock+0x2d/0x110 [ 490.417145][T10501] ? avc_has_perm_noaudit+0x119/0x3a0 [ 490.419676][T10501] ? avc_has_perm_noaudit+0x143/0x3a0 [ 490.422240][T10501] ? bpf_lsm_capable+0x9/0x10 [ 490.424391][T10501] ? __nla_parse+0x40/0x60 [ 490.426405][T10501] nfnetlink_rcv+0x3c3/0x430 [ 490.428546][T10501] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 490.430248][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.430971][T10501] netlink_unicast+0x53c/0x7f0 [ 490.436636][T10501] ? __pfx_netlink_unicast+0x10/0x10 [ 490.439018][T10501] netlink_sendmsg+0x8b8/0xd70 [ 490.441260][T10501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.443925][T10501] ? __import_iovec+0x1fd/0x6e0 [ 490.446207][T10501] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.449089][T10501] ____sys_sendmsg+0xab5/0xc90 [ 490.451292][T10501] ? copy_msghdr_from_user+0x10b/0x160 [ 490.453740][T10501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.456218][T10501] ? find_held_lock+0x2d/0x110 [ 490.458461][T10501] ? __pfx___lock_acquire+0x10/0x10 [ 490.461196][T10501] ___sys_sendmsg+0x135/0x1e0 [ 490.463361][T10501] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.465732][T10501] ? ksys_write+0x21c/0x260 [ 490.467839][T10501] ? __fget_light+0x173/0x210 [ 490.470031][T10501] __sys_sendmsg+0x117/0x1f0 [ 490.472046][T10501] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.474315][T10501] do_syscall_64+0xcd/0x250 [ 490.476445][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.478884][T10501] RIP: 0033:0x7f1de797cef9 [ 490.480820][T10501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.488652][T10501] RSP: 002b:00007f1de86fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.492182][T10501] RAX: ffffffffffffffda RBX: 00007f1de7b35f80 RCX: 00007f1de797cef9 [ 490.495548][T10501] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 490.498896][T10501] RBP: 00007f1de86fe090 R08: 0000000000000000 R09: 0000000000000000 [ 490.502093][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.505325][T10501] R13: 0000000000000000 R14: 00007f1de7b35f80 R15: 00007ffdf47abf48 [ 490.508568][T10501] [ 490.632932][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 491.155370][T10515] openvswitch: netlink: Key type 298 is out of range max 32 [ 491.323455][T10525] fuse: Bad value for 'group_id' [ 491.325608][T10525] fuse: Bad value for 'group_id' [ 491.328782][ T39] audit: type=1400 audit(1725791161.477:500): avc: denied { create } for pid=10524 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 491.378998][ T39] audit: type=1400 audit(1725791161.527:501): avc: denied { shutdown } for pid=10526 comm="syz.3.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 491.391608][ T39] audit: type=1400 audit(1725791161.537:502): avc: denied { read } for pid=10526 comm="syz.3.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 491.470249][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.730531][ T6881] vhci_hcd: vhci_device speed not set [ 491.889432][ T39] audit: type=1400 audit(1725791162.037:503): avc: denied { execute } for pid=10539 comm="syz.3.1527" path="/blkio.bfq.group_wait_time" dev="ramfs" ino=32720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 491.965937][T10544] FAULT_INJECTION: forcing a failure. [ 491.965937][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.972743][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.1528 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 491.977354][T10544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 491.982154][T10544] Call Trace: [ 491.983710][T10544] [ 491.985096][T10544] dump_stack_lvl+0x16c/0x1f0 [ 491.987033][T10544] should_fail_ex+0x497/0x5b0 [ 491.988868][T10544] _copy_to_user+0x30/0xc0 [ 491.990885][T10544] simple_read_from_buffer+0xd0/0x160 [ 491.993244][T10544] proc_fail_nth_read+0x19e/0x280 [ 491.995390][T10544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.997528][T10544] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.999963][T10544] vfs_read+0x1d4/0xbd0 [ 492.002717][T10544] ? __fdget_pos+0xeb/0x180 [ 492.004959][T10544] ? __pfx_vfs_read+0x10/0x10 [ 492.007091][T10544] ? __pfx___mutex_lock+0x10/0x10 [ 492.009217][T10544] ? __fget_files+0x256/0x400 [ 492.011163][T10544] ksys_read+0x12f/0x260 [ 492.012892][T10544] ? __pfx_ksys_read+0x10/0x10 [ 492.014992][T10544] do_syscall_64+0xcd/0x250 [ 492.016931][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.019496][T10544] RIP: 0033:0x7f1de797b93c [ 492.021487][T10544] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 492.029888][T10544] RSP: 002b:00007f1de86fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.034184][T10544] RAX: ffffffffffffffda RBX: 00007f1de7b35f80 RCX: 00007f1de797b93c [ 492.037423][T10544] RDX: 000000000000000f RSI: 00007f1de86fe0a0 RDI: 0000000000000005 [ 492.041126][T10544] RBP: 00007f1de86fe090 R08: 0000000000000000 R09: 0000000000000000 [ 492.044527][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.047636][T10544] R13: 0000000000000000 R14: 00007f1de7b35f80 R15: 00007ffdf47abf48 [ 492.050641][T10544] [ 492.520322][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.550449][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.614133][ T39] audit: type=1326 audit(1725791163.767:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.1.1542" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780bb7cef9 code=0x0 [ 493.890475][T10586] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1543'. [ 494.258079][T10590] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 494.263874][T10590] audit: out of memory in audit_log_start [ 494.590476][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.755871][T10602] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 494.769048][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 495.640423][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.668541][T10620] FAULT_INJECTION: forcing a failure. [ 495.668541][T10620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.668636][T10620] [ 495.668640][T10620] ====================================================== [ 495.668646][T10620] WARNING: possible circular locking dependency detected [ 495.668652][T10620] 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 Not tainted [ 495.668661][T10620] ------------------------------------------------------ [ 495.668666][T10620] syz.1.1554/10620 is trying to acquire lock: [ 495.668674][T10620] ffffffff8dda8018 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x12/0x70 [ 495.668722][T10620] [ 495.668722][T10620] but task is already holding lock: [ 495.668726][T10620] ffff88806a83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 495.668767][T10620] [ 495.668767][T10620] which lock already depends on the new lock. [ 495.668767][T10620] [ 495.668771][T10620] [ 495.668771][T10620] the existing dependency chain (in reverse order) is: [ 495.668776][T10620] [ 495.668776][T10620] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 495.668795][T10620] _raw_spin_lock_nested+0x31/0x40 [ 495.668814][T10620] raw_spin_rq_lock_nested+0x29/0x130 [ 495.668837][T10620] task_fork_fair+0x73/0x250 [ 495.668856][T10620] sched_cgroup_fork+0x3cf/0x510 [ 495.668874][T10620] copy_process+0x43a1/0x8de0 [ 495.668893][T10620] kernel_clone+0xfd/0x960 [ 495.668910][T10620] user_mode_thread+0xb4/0xf0 [ 495.668928][T10620] rest_init+0x23/0x2b0 [ 495.668943][T10620] start_kernel+0x3df/0x4c0 [ 495.668967][T10620] x86_64_start_reservations+0x18/0x30 [ 495.668990][T10620] x86_64_start_kernel+0xb2/0xc0 [ 495.669012][T10620] common_startup_64+0x13e/0x148 [ 495.669029][T10620] [ 495.669029][T10620] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 495.669048][T10620] _raw_spin_lock_irqsave+0x3a/0x60 [ 495.669066][T10620] try_to_wake_up+0x9a/0x13e0 [ 495.669089][T10620] up+0x79/0xb0 [ 495.669109][T10620] console_unlock+0x23e/0x290 [ 495.669125][T10620] vga_remove_vgacon+0x90/0xd0 [ 495.669145][T10620] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 495.669164][T10620] virtio_gpu_probe+0x408/0x4e0 [ 495.669188][T10620] virtio_dev_probe+0x586/0x8a0 [ 495.669204][T10620] really_probe+0x23e/0xa90 [ 495.669223][T10620] __driver_probe_device+0x1de/0x440 [ 495.669242][T10620] driver_probe_device+0x4c/0x1b0 [ 495.669262][T10620] __driver_attach+0x283/0x580 [ 495.669281][T10620] bus_for_each_dev+0x13c/0x1d0 [ 495.669297][T10620] bus_add_driver+0x2e9/0x690 [ 495.669314][T10620] driver_register+0x15c/0x4b0 [ 495.669335][T10620] do_one_initcall+0x128/0x700 [ 495.669357][T10620] kernel_init_freeable+0x69d/0xca0 [ 495.669386][T10620] kernel_init+0x1c/0x2b0 [ 495.669400][T10620] ret_from_fork+0x45/0x80 [ 495.669423][T10620] ret_from_fork_asm+0x1a/0x30 [ 495.669444][T10620] [ 495.669444][T10620] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 495.669461][T10620] __lock_acquire+0x24ed/0x3cb0 [ 495.669483][T10620] lock_acquire+0x1b1/0x560 [ 495.669504][T10620] _raw_spin_lock_irqsave+0x3a/0x60 [ 495.669522][T10620] down_trylock+0x12/0x70 [ 495.669543][T10620] __down_trylock_console_sem+0x40/0x140 [ 495.669567][T10620] vprintk_emit+0x3d3/0x600 [ 495.669582][T10620] vprintk+0x7f/0xa0 [ 495.669599][T10620] _printk+0xc8/0x100 [ 495.669620][T10620] should_fail_ex+0x46c/0x5b0 [ 495.669639][T10620] strncpy_from_user+0x38/0x320 [ 495.669656][T10620] strncpy_from_user_nofault+0x7f/0x180 [ 495.669674][T10620] bpf_probe_read_compat_str+0xf1/0x170 [ 495.669692][T10620] bpf_prog_e42f6260c1b72fb3+0x3d/0x3f [ 495.669704][T10620] bpf_trace_run4+0x245/0x5a0 [ 495.669723][T10620] __bpf_trace_sched_switch+0x13e/0x190 [ 495.669737][T10620] __traceiter_sched_switch+0x6c/0xc0 [ 495.669759][T10620] __schedule+0x17cf/0x5490 [ 495.669777][T10620] preempt_schedule_irq+0x51/0x90 [ 495.669818][T10620] irqentry_exit+0x36/0x90 [ 495.669839][T10620] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.669857][T10620] bad_range+0xcd/0x440 [ 495.669876][T10620] get_page_from_freelist+0x1331/0x2e50 [ 495.669891][T10620] __alloc_pages_noprof+0x22b/0x2460 [ 495.669905][T10620] alloc_pages_mpol_noprof+0x275/0x610 [ 495.669922][T10620] pte_alloc_one+0x20/0x370 [ 495.669935][T10620] __handle_mm_fault+0x3be6/0x5660 [ 495.669951][T10620] handle_mm_fault+0x498/0xa60 [ 495.669980][T10620] do_user_addr_fault+0x7a3/0x13f0 [ 495.670004][T10620] exc_page_fault+0x5c/0xc0 [ 495.670023][T10620] asm_exc_page_fault+0x26/0x30 [ 495.670036][T10620] __get_user_4+0x11/0x20 [ 495.670058][T10620] vhost_vring_ioctl+0xc8/0x1390 [ 495.670082][T10620] vhost_vsock_dev_ioctl+0x8c4/0xb50 [ 495.670105][T10620] __x64_sys_ioctl+0x193/0x220 [ 495.670127][T10620] do_syscall_64+0xcd/0x250 [ 495.670149][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.670164][T10620] [ 495.670164][T10620] other info that might help us debug this: [ 495.670164][T10620] [ 495.670168][T10620] Chain exists of: [ 495.670168][T10620] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 495.670168][T10620] [ 495.670191][T10620] Possible unsafe locking scenario: [ 495.670191][T10620] [ 495.670195][T10620] CPU0 CPU1 [ 495.670198][T10620] ---- ---- [ 495.670202][T10620] lock(&rq->__lock); [ 495.670211][T10620] lock(&p->pi_lock); [ 495.670220][T10620] lock(&rq->__lock); [ 495.670230][T10620] lock((console_sem).lock); [ 495.670239][T10620] [ 495.670239][T10620] *** DEADLOCK *** [ 495.670239][T10620] [ 495.670242][T10620] 4 locks held by syz.1.1554/10620: [ 495.670252][T10620] #0: ffff88804a990070 (&dev->mutex#4){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x3a2/0xb50 [ 495.670298][T10620] #1: ffff888032af3a98 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x35/0x6a0 [ 495.670342][T10620] #2: ffff88806a83edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 495.670390][T10620] #3: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 495.670429][T10620] [ 495.670429][T10620] stack backtrace: [ 495.670434][T10620] CPU: 2 UID: 0 PID: 10620 Comm: syz.1.1554 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 495.670453][T10620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.670464][T10620] Call Trace: [ 495.670469][T10620] [ 495.670476][T10620] dump_stack_lvl+0x116/0x1f0 [ 495.670495][T10620] check_noncircular+0x31a/0x400 [ 495.670520][T10620] ? __pfx_check_noncircular+0x10/0x10 [ 495.670542][T10620] ? __pfx__prb_read_valid+0x10/0x10 [ 495.670562][T10620] ? __pfx_format_decode+0x10/0x10 [ 495.670586][T10620] ? lockdep_lock+0xc6/0x200 [ 495.670606][T10620] ? __pfx_lockdep_lock+0x10/0x10 [ 495.670624][T10620] ? vsnprintf+0x3cd/0x1880 [ 495.670640][T10620] __lock_acquire+0x24ed/0x3cb0 [ 495.670669][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 495.670695][T10620] ? vprintk_store+0x22a/0xb70 [ 495.670713][T10620] lock_acquire+0x1b1/0x560 [ 495.670737][T10620] ? down_trylock+0x12/0x70 [ 495.670763][T10620] ? __pfx_lock_acquire+0x10/0x10 [ 495.670785][T10620] ? hlock_class+0x4e/0x130 [ 495.670802][T10620] ? mark_lock+0xb5/0xc60 [ 495.670823][T10620] ? __read_once_word_nocheck+0x9/0x20 [ 495.670840][T10620] ? __pfx_mark_lock+0x10/0x10 [ 495.670864][T10620] ? vprintk+0x7f/0xa0 [ 495.670882][T10620] _raw_spin_lock_irqsave+0x3a/0x60 [ 495.670902][T10620] ? down_trylock+0x12/0x70 [ 495.670926][T10620] down_trylock+0x12/0x70 [ 495.670951][T10620] __down_trylock_console_sem+0x40/0x140 [ 495.670977][T10620] vprintk_emit+0x3d3/0x600 [ 495.670996][T10620] vprintk+0x7f/0xa0 [ 495.671016][T10620] _printk+0xc8/0x100 [ 495.671038][T10620] ? __pfx__printk+0x10/0x10 [ 495.671060][T10620] ? ___ratelimit+0x24c/0x580 [ 495.671075][T10620] ? __pfx_mark_lock+0x10/0x10 [ 495.671100][T10620] ? __pfx____ratelimit+0x10/0x10 [ 495.671119][T10620] should_fail_ex+0x46c/0x5b0 [ 495.671140][T10620] strncpy_from_user+0x38/0x320 [ 495.671161][T10620] strncpy_from_user_nofault+0x7f/0x180 [ 495.671181][T10620] bpf_probe_read_compat_str+0xf1/0x170 [ 495.671204][T10620] bpf_prog_e42f6260c1b72fb3+0x3d/0x3f [ 495.671218][T10620] bpf_trace_run4+0x245/0x5a0 [ 495.671240][T10620] ? __pfx_bpf_trace_run4+0x10/0x10 [ 495.671264][T10620] ? __pfx_lock_release+0x10/0x10 [ 495.671291][T10620] __bpf_trace_sched_switch+0x13e/0x190 [ 495.671307][T10620] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 495.671324][T10620] ? psi_group_change+0x621/0xde0 [ 495.671352][T10620] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 495.671385][T10620] __traceiter_sched_switch+0x6c/0xc0 [ 495.671413][T10620] __schedule+0x17cf/0x5490 [ 495.671435][T10620] ? lockdep_unlock+0x11a/0x290 [ 495.671455][T10620] ? __pfx_mark_lock+0x10/0x10 [ 495.671482][T10620] ? __pfx___schedule+0x10/0x10 [ 495.671501][T10620] ? mark_lock+0xb5/0xc60 [ 495.671523][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 495.671549][T10620] ? mark_held_locks+0x9f/0xe0 [ 495.671574][T10620] preempt_schedule_irq+0x51/0x90 [ 495.671596][T10620] irqentry_exit+0x36/0x90 [ 495.671616][T10620] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.671634][T10620] RIP: 0010:bad_range+0xcd/0x440 [ 495.671657][T10620] Code: 89 ef e8 e6 7d 8c ff 48 8b 74 24 70 4c 89 ef e8 59 6e 8c ff 9c 5a 49 bb 00 00 00 00 00 fc ff df 80 e6 02 58 0f 85 2e 02 00 00 <41> 0f b6 16 41 38 d7 7c 08 84 d2 0f 85 57 02 00 00 8b 93 c8 00 00 [ 495.671672][T10620] RSP: 0018:ffffc90023a274a8 EFLAGS: 00000246 [ 495.671685][T10620] RAX: 000000000000035f RBX: ffff88807ffd7740 RCX: ffffffff81de4171 [ 495.671696][T10620] RDX: 0000000000000006 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0fb40 [ 495.671707][T10620] RBP: 0000000000024867 R08: 0000000000000001 R09: fffffbfff2d248e7 [ 495.671717][T10620] R10: ffffffff9692473f R11: dffffc0000000000 R12: ffffea00009219c0 [ 495.671727][T10620] R13: ffff88807ffd7810 R14: ffffed100fffaf01 R15: 0000000000000003 [ 495.671741][T10620] ? get_page_from_freelist+0x1331/0x2e50 [ 495.671760][T10620] ? get_page_from_freelist+0x1331/0x2e50 [ 495.671779][T10620] get_page_from_freelist+0x1331/0x2e50 [ 495.671801][T10620] ? __pfx___might_resched+0x10/0x10 [ 495.671819][T10620] ? __pfx_get_page_from_freelist+0x10/0x10 [ 495.671837][T10620] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 495.671860][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 495.671885][T10620] __alloc_pages_noprof+0x22b/0x2460 [ 495.671905][T10620] ? find_held_lock+0x2d/0x110 [ 495.671924][T10620] ? hlock_class+0x4e/0x130 [ 495.671941][T10620] ? mark_lock+0xb5/0xc60 [ 495.671962][T10620] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 495.671980][T10620] ? hlock_class+0x4e/0x130 [ 495.671998][T10620] ? __lock_acquire+0xbdd/0x3cb0 [ 495.672022][T10620] ? __kernel_text_address+0xd/0x40 [ 495.672045][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 495.672064][T10620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.672081][T10620] ? policy_nodemask+0xea/0x4e0 [ 495.672098][T10620] alloc_pages_mpol_noprof+0x275/0x610 [ 495.672118][T10620] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 495.672138][T10620] ? __thp_vma_allowable_orders+0x31f/0xc60 [ 495.672160][T10620] pte_alloc_one+0x20/0x370 [ 495.672176][T10620] __handle_mm_fault+0x3be6/0x5660 [ 495.672198][T10620] ? __pfx_mt_find+0x10/0x10 [ 495.672216][T10620] ? __pfx___handle_mm_fault+0x10/0x10 [ 495.672238][T10620] ? find_vma+0xc0/0x140 [ 495.672261][T10620] ? __pfx_find_vma+0x10/0x10 [ 495.672285][T10620] handle_mm_fault+0x498/0xa60 [ 495.672303][T10620] ? __pkru_allows_pkey+0x21/0xb0 [ 495.672326][T10620] do_user_addr_fault+0x7a3/0x13f0 [ 495.672354][T10620] exc_page_fault+0x5c/0xc0 [ 495.672384][T10620] asm_exc_page_fault+0x26/0x30 [ 495.672400][T10620] RIP: 0010:__get_user_4+0x11/0x20 [ 495.672423][T10620] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 495.672439][T10620] RSP: 0018:ffffc90023a27ca8 EFLAGS: 00050206 [ 495.672452][T10620] RAX: 00000000200001c0 RBX: 00000000c008af12 RCX: ffffc90023a27c10 [ 495.672462][T10620] RDX: 0000000000000000 RSI: ffffffff887db1a0 RDI: ffffffff8bb0fb40 [ 495.672473][T10620] RBP: ffff88804a990000 R08: 0000000000000000 R09: fffffbfff202898b [ 495.672483][T10620] R10: ffffffff90144c5f R11: 0000000000000000 R12: 00000000c008af12 [ 495.672493][T10620] R13: 1ffff92004744f99 R14: dffffc0000000000 R15: 00000000200001c0 [ 495.672508][T10620] ? vhost_vring_ioctl+0xc0/0x1390 [ 495.672536][T10620] vhost_vring_ioctl+0xc8/0x1390 [ 495.672561][T10620] ? do_vfs_ioctl+0x515/0x1ad0 [ 495.672585][T10620] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 495.672611][T10620] ? vhost_dev_ioctl+0x131/0xdb0 [ 495.672635][T10620] ? __pfx___mutex_lock+0x10/0x10 [ 495.672659][T10620] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 495.672684][T10620] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 495.672710][T10620] vhost_vsock_dev_ioctl+0x8c4/0xb50 [ 495.672735][T10620] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 495.672760][T10620] ? selinux_file_ioctl+0x180/0x270 [ 495.672781][T10620] ? bpf_lsm_file_ioctl+0x9/0x10 [ 495.672805][T10620] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 495.672830][T10620] __x64_sys_ioctl+0x193/0x220 [ 495.672855][T10620] do_syscall_64+0xcd/0x250 [ 495.672881][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.672898][T10620] RIP: 0033:0x7f780bb7cef9 [ 495.672911][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.672926][T10620] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.672941][T10620] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 495.672951][T10620] RDX: 00000000200001c0 RSI: 00000000c008af12 RDI: 0000000000000003 [ 495.672962][T10620] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 495.672972][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.672982][T10620] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 495.672999][T10620] [ 496.282017][T10620] CPU: 2 UID: 0 PID: 10620 Comm: syz.1.1554 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 496.286192][T10620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 496.290704][T10620] Call Trace: [ 496.292162][T10620] [ 496.293454][T10620] dump_stack_lvl+0x116/0x1f0 [ 496.295372][T10620] should_fail_ex+0x497/0x5b0 [ 496.297189][T10620] strncpy_from_user+0x38/0x320 [ 496.299298][T10620] strncpy_from_user_nofault+0x7f/0x180 [ 496.301301][T10620] bpf_probe_read_compat_str+0xf1/0x170 [ 496.303304][T10620] bpf_prog_e42f6260c1b72fb3+0x3d/0x3f [ 496.305125][T10620] bpf_trace_run4+0x245/0x5a0 [ 496.306559][T10620] ? __pfx_bpf_trace_run4+0x10/0x10 [ 496.308214][T10620] ? __pfx_lock_release+0x10/0x10 [ 496.309765][T10620] __bpf_trace_sched_switch+0x13e/0x190 [ 496.312053][T10620] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 496.314714][T10620] ? psi_group_change+0x621/0xde0 [ 496.317007][T10620] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 496.320093][T10620] __traceiter_sched_switch+0x6c/0xc0 [ 496.322474][T10620] __schedule+0x17cf/0x5490 [ 496.324413][T10620] ? lockdep_unlock+0x11a/0x290 [ 496.326558][T10620] ? __pfx_mark_lock+0x10/0x10 [ 496.328744][T10620] ? __pfx___schedule+0x10/0x10 [ 496.331015][T10620] ? mark_lock+0xb5/0xc60 [ 496.332862][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 496.335334][T10620] ? mark_held_locks+0x9f/0xe0 [ 496.337727][T10620] preempt_schedule_irq+0x51/0x90 [ 496.340312][T10620] irqentry_exit+0x36/0x90 [ 496.342591][T10620] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 496.345429][T10620] RIP: 0010:bad_range+0xcd/0x440 [ 496.347511][T10620] Code: 89 ef e8 e6 7d 8c ff 48 8b 74 24 70 4c 89 ef e8 59 6e 8c ff 9c 5a 49 bb 00 00 00 00 00 fc ff df 80 e6 02 58 0f 85 2e 02 00 00 <41> 0f b6 16 41 38 d7 7c 08 84 d2 0f 85 57 02 00 00 8b 93 c8 00 00 [ 496.355726][T10620] RSP: 0018:ffffc90023a274a8 EFLAGS: 00000246 [ 496.358315][T10620] RAX: 000000000000035f RBX: ffff88807ffd7740 RCX: ffffffff81de4171 [ 496.361578][T10620] RDX: 0000000000000006 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0fb40 [ 496.365153][T10620] RBP: 0000000000024867 R08: 0000000000000001 R09: fffffbfff2d248e7 [ 496.368723][T10620] R10: ffffffff9692473f R11: dffffc0000000000 R12: ffffea00009219c0 [ 496.372181][T10620] R13: ffff88807ffd7810 R14: ffffed100fffaf01 R15: 0000000000000003 [ 496.376150][T10620] ? get_page_from_freelist+0x1331/0x2e50 [ 496.379377][T10620] ? get_page_from_freelist+0x1331/0x2e50 [ 496.382320][T10620] get_page_from_freelist+0x1331/0x2e50 [ 496.384691][T10620] ? __pfx___might_resched+0x10/0x10 [ 496.386876][T10620] ? __pfx_get_page_from_freelist+0x10/0x10 [ 496.389245][T10620] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 496.391803][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 496.393900][T10620] __alloc_pages_noprof+0x22b/0x2460 [ 496.396050][T10620] ? find_held_lock+0x2d/0x110 [ 496.397978][T10620] ? hlock_class+0x4e/0x130 [ 496.399999][T10620] ? mark_lock+0xb5/0xc60 [ 496.401736][T10620] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 496.404913][T10620] ? hlock_class+0x4e/0x130 [ 496.406788][T10620] ? __lock_acquire+0xbdd/0x3cb0 [ 496.408683][T10620] ? __kernel_text_address+0xd/0x40 [ 496.410775][T10620] ? __pfx___lock_acquire+0x10/0x10 [ 496.412848][T10620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.415262][T10620] ? policy_nodemask+0xea/0x4e0 [ 496.417226][T10620] alloc_pages_mpol_noprof+0x275/0x610 [ 496.419411][T10620] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 496.421823][T10620] ? __thp_vma_allowable_orders+0x31f/0xc60 [ 496.424438][T10620] pte_alloc_one+0x20/0x370 [ 496.426231][T10620] __handle_mm_fault+0x3be6/0x5660 [ 496.428255][T10620] ? __pfx_mt_find+0x10/0x10 [ 496.430124][T10620] ? __pfx___handle_mm_fault+0x10/0x10 [ 496.432284][T10620] ? find_vma+0xc0/0x140 [ 496.433992][T10620] ? __pfx_find_vma+0x10/0x10 [ 496.435948][T10620] handle_mm_fault+0x498/0xa60 [ 496.437906][T10620] ? __pkru_allows_pkey+0x21/0xb0 [ 496.439878][T10620] do_user_addr_fault+0x7a3/0x13f0 [ 496.441720][T10620] exc_page_fault+0x5c/0xc0 [ 496.443370][T10620] asm_exc_page_fault+0x26/0x30 [ 496.445311][T10620] RIP: 0010:__get_user_4+0x11/0x20 [ 496.447344][T10620] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 496.454909][T10620] RSP: 0018:ffffc90023a27ca8 EFLAGS: 00050206 [ 496.457258][T10620] RAX: 00000000200001c0 RBX: 00000000c008af12 RCX: ffffc90023a27c10 [ 496.460481][T10620] RDX: 0000000000000000 RSI: ffffffff887db1a0 RDI: ffffffff8bb0fb40 [ 496.463907][T10620] RBP: ffff88804a990000 R08: 0000000000000000 R09: fffffbfff202898b [ 496.467131][T10620] R10: ffffffff90144c5f R11: 0000000000000000 R12: 00000000c008af12 [ 496.470354][T10620] R13: 1ffff92004744f99 R14: dffffc0000000000 R15: 00000000200001c0 [ 496.473515][T10620] ? vhost_vring_ioctl+0xc0/0x1390 [ 496.475635][T10620] vhost_vring_ioctl+0xc8/0x1390 [ 496.477620][T10620] ? do_vfs_ioctl+0x515/0x1ad0 [ 496.479535][T10620] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 496.481634][T10620] ? vhost_dev_ioctl+0x131/0xdb0 [ 496.483560][T10620] ? __pfx___mutex_lock+0x10/0x10 [ 496.485607][T10620] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 496.487774][T10620] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 496.490780][T10620] vhost_vsock_dev_ioctl+0x8c4/0xb50 [ 496.493055][T10620] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 496.495730][T10620] ? selinux_file_ioctl+0x180/0x270 [ 496.498130][T10620] ? bpf_lsm_file_ioctl+0x9/0x10 [ 496.500534][T10620] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 496.503066][T10620] __x64_sys_ioctl+0x193/0x220 [ 496.505085][T10620] do_syscall_64+0xcd/0x250 [ 496.506962][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.509884][T10620] RIP: 0033:0x7f780bb7cef9 [ 496.511884][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.519238][T10620] RSP: 002b:00007f780c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.522244][T10620] RAX: ffffffffffffffda RBX: 00007f780bd35f80 RCX: 00007f780bb7cef9 [ 496.525102][T10620] RDX: 00000000200001c0 RSI: 00000000c008af12 RDI: 0000000000000003 [ 496.528465][T10620] RBP: 00007f780c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 496.531740][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.535006][T10620] R13: 0000000000000000 R14: 00007f780bd35f80 R15: 00007ffdf25706d8 [ 496.538300][T10620] [ 496.670211][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.710231][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.750236][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.790191][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.830258][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.870297][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.910542][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.950254][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.990192][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 10:26:06 Registers: info registers vcpu 0 CPU#0 RAX=00000000009fcba4 RBX=0000000000000000 RCX=ffffffff8b16fad9 RDX=ffffed100d4c6fda RSI=ffffffff8bb0fac0 RDI=ffffffff8163bbbc RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed100d4c6fd9 R10=ffff88806a637ecb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff90144c58 R15=0000000000000000 RIP=ffffffff8b170ecf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002a7de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac80a1c 000055557ac80a10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac7b4a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac81335 000055557ac81150 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ac89be4 000055557ac89be0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90030e8004068003 06800408a0030280 08000890030c8004 088003000e4efa00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030398100006d003 1d800406c0030286 100006b003118004 06a00301ee100006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301a4100008d003 17800408c0030810 0008b003039a1000 06f00321800406e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040c012afa08 8088818410000880 040100000e080606 0133ba00080008e0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080004 80e210000010000b 9b8080100000040c 012afa0010000100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c08060880a410 0002100004808080 100000040c012afa 0880888184100008 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040100000e0806 060133ba00080008 e00301a4100008d0 0317800408c00308 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100008b003039a10 0006f00321800406 e0030398100006d0 031d800406c00302 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffed100d507db8 RBX=ffffed100d507db9 RCX=ffffffff8b19c2d4 RDX=ffffed100d507db9 RSI=0000000000000004 RDI=ffff88806a83edc0 RBP=ffffed100d507db8 RSP=ffffc900008afcf8 R8 =0000000000000000 R9 =ffffed100d507db8 R10=ffff88806a83edc3 R11=ffffffff815f6b30 R12=ffffed100d507db8 R13=0000000000000000 R14=ffff88806a73fc80 R15=0000000000000001 RIP=ffffffff81ea8ac5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fea0e8216c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020336030 CR3=000000002a7de000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a093 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9efe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9efe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9efe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9efe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9eff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0d9effe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0daff488 00007fea0daff480 00007fea0daff478 00007fea0daff450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0e66d100 00007fea0daff440 00007fea0daff458 00007fea0daff4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea0daff498 00007fea0daff490 00007fea0daff488 00007fea0daff480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85030a45 RDI=ffffffff9a5b4f60 RBP=ffffffff9a5b4f20 RSP=ffffc90023a26af8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e31312e36 R12=0000000000000000 R13=000000000000002e R14=ffffffff850309e0 R15=0000000000000000 RIP=ffffffff85030a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f780c9da6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200001c0 CR3=000000005413a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780c9da060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbefe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbefe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbefe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbefe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbeff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f780bbeffe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73697664616d2065 74616c75706f7000 757a253d657a6973 2070253d72747000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 564c534144480540 51444950554a5500 505f0018405f4c56 0555001857515500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010003 RBX=0000000000000003 RCX=ffffffff813c44fe RDX=ffff8880284aa440 RSI=ffffffff813c451b RDI=0000000000000000 RBP=ffff88806a83edc0 RSP=ffffc90000908b30 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=ffff88806a93fd00 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a93fc80 R15=ffffed100d507db8 RIP=ffffffff813c451c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf47ac2e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79efe6a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79efe77 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79efe71 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79efe85 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79eff0b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1de79effe9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000